afterdawn.com > keskustelu > yleistä keskustelua tietokoneista > virukset ja haittaohjelmat - hijackthis -logit > tietokone takkuilee
Keskustelualueet
Keskustelualueet
Tietokone takkuilee
vemmuu
Newbie
31. joulukuuta 2008 @ 11:40
Linkki tähän viestiin
Eilen tuli epähuomiossa klikattua jotain linkkiä ja yhtäkkiä koneen muisti loppui täysin ja koko homma jumittui. Sain kuoletettua internet selaimen, mutta kaikki muisti oli edelleen käytössä ja kone alkoi takkuilemaan. Yritin scannata koneen, mutta mitään ei löytynyt. Mutta todennäköisesti olen saanut jonkun pöpön. Laitetaas tämä HJT-logi jos siitä olisi apua.
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:37:20, on 31.12.2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Adobe\Adobe Version Cue CS2
\bin\VersionCueCS2.exe
C:\PROGRA~1\TRENDM~1\INTERN~3\PcCtlCom.exe
C:\Program Files\Dantz\Retrospect\retrorun.exe
C:\WINDOWS\system32\Tablet.exe
C:\PROGRA~1\TRENDM~1\INTERN~3\Tmntsrv.exe
C:\PROGRA~1\TRENDM~1\INTERN~3\TmPfw.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Launch Manager\LaunchAp.exe
C:\Program Files\Launch Manager\PowerKey.exe
C:\Program Files\Launch Manager\HotkeyApp.exe
C:\Program Files\Launch Manager\CtrlVol.exe
C:\Program Files\Launch Manager\OSD.exe
c:\WINDOWS\System32\wltrysvc.exe
C:\Program Files\Launch Manager\Wbutton.exe
c:\WINDOWS\System32\bcmwltry.exe
C:\Sysinfo\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\ltmoh\Ltmoh.exe
C:\WINDOWS\Logi_MwX.Exe
C:\PROGRA~1\Dantz\RETROS~1\ComboButton.exe
C:\Program Files\MemDefrag\mdefrag.exe
C:\Program Files\Adobe\Adobe Version
Cue\ControlPanel\VersionCueTray.exe
C:\Program Files\Adobe\Adobe Version Cue CS2
\ControlPanel\VersionCueCS2Tray.exe
C:\Program Files\Adobe\Adobe Version Cue CS2
\data\database\bin\mysqld-nt.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Adobe\Adobe Acrobat 7.0\Distillr\Acrotray.exe
C:\PROGRA~1\TRENDM~1\INTERN~3\pccguide.exe
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\Google\Google Talk\googletalk.exe
C:\Program Files\Trend Micro\Internet Security 2007
\TMAS_OE\TMAS_OEMon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\WINDOWS\system32\WTablet\TabUserW.exe
C:\Program Files\Timetracker\Timetracker.exe
C:\Program Files\OpenOffice.org 2.3\program\soffice.exe
C:\Program Files\OpenOffice.org 2.3\program\soffice.BIN
C:\Program Files\Common Files\Logitech\KHAL\KHALMNPR.EXE
C:\PROGRA~1\TRENDM~1\INTERN~3\PcScnSrv.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Java\jre1.6.0_07\bin\jucheck.exe
C:\PROGRA~1\TRENDM~1\INTERN~3\tmproxy.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =
http://g.msn.co.uk/0SEENGB/SAOS01?FORM=TOOLBR
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page
= http://g.msn.co.uk/0SEENGB/SAOS01?FORM=TOOLBR
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://laajakaista.elisa.net/
R1 - HKLM\Software\Microsoft\Internet
Explorer\Main,Default_Page_URL =
http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet
Explorer\Main,Default_Search_URL =
http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page
= http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,
(Default) = http://g.msn.co.uk/0SEENGB/SAOS01?FORM=TOOLBR
R0 - HKCU\Software\Microsoft\Internet
Explorer\Toolbar,LinksFolderName = Linkit
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-
7695ECA05670} - C:\Program Files\Yahoo!
\Companion\Installs\cpn\ycomp5_5_7_0.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-
B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Adobe Acrobat
7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-
D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-
BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-
8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft
Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-
E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Adobe
Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-
ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live
Toolbar\msntb.dll
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-
8377850BF205} - C:\Program Files\Free Download
Manager\iefdmcks.dll
O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-
0090271D4F88} - C:\Program Files\Yahoo!
\Companion\Installs\cpn\ycomp5_5_7_0.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-
ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live
Toolbar\msntb.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-
0819E2EAAC93} - C:\Program Files\Adobe\Adobe Acrobat 7.0
\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [LaunchApp] LaunApp
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI
Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program
Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program
Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [LaunchAp] C:\Program Files\Launch
Manager\LaunchAp.exe
O4 - HKLM\..\Run: [PowerKey] "C:\Program Files\Launch
Manager\PowerKey.exe"
O4 - HKLM\..\Run: [LManager] C:\Program Files\Launch
Manager\HotkeyApp.exe
O4 - HKLM\..\Run: [CtrlVol] C:\Program Files\Launch
Manager\CtrlVol.exe
O4 - HKLM\..\Run: [LMgrOSD] C:\Program Files\Launch
Manager\OSD.exe
O4 - HKLM\..\Run: [Wbutton] "C:\Program Files\Launch
Manager\Wbutton.exe"
O4 - HKLM\..\Run: [RemoteControl]
C:\Sysinfo\CyberLink\PowerDVD\PDVDServ.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program
Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [LtMoh] C:\Program Files\ltmoh\Ltmoh.exe
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [MaxtorCombo] "C:\PROGRA~1
\Dantz\RETROS~1\ComboButton.exe"
O4 - HKLM\..\Run: [MemDefrag] C:\Program
Files\MemDefrag\mdefrag.exe
O4 - HKLM\..\Run: [AdobeVersionCue] C:\Program
Files\Adobe\Adobe Version Cue\ControlPanel\VersionCueTray.exe
O4 - HKLM\..\Run: [Adobe Version Cue CS2] "C:\Program
Files\Adobe\Adobe Version Cue CS2
\ControlPanel\VersionCueCS2Tray.exe"
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer]
KHALMNPR.EXE
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows
Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program
Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Program
Files\Adobe\Adobe Acrobat 7.0\Distillr\Acrotray.exe"
O4 - HKLM\..\Run: [pccguide.exe] C:\PROGRA~1\TRENDM~1
\INTERN~3\pccguide.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program
Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [googletalk] C:\Program Files\Google\Google
Talk\googletalk.exe /autostart
O4 - HKCU\..\Run: [OE] "C:\Program Files\Trend Micro\Internet
Security 2007\TMAS_OE\TMAS_OEMon.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32
\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE]
C:\WINDOWS\System32\CTFMON.EXE (User 'Paikallinen palve')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE]
C:\WINDOWS\System32\CTFMON.EXE (User 'Verkkopalve')
O4 - HKUS\S-1-5-21-624385167-323550270-4267732069-1007
\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe (User
'postgres')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE]
C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE]
C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: OpenOffice.org 2.3.lnk = C:\Program
Files\OpenOffice.org 2.3\program\quickstart.exe
O4 - Startup: timetracker.lnk = C:\Program
Files\Timetracker\Timetracker.exe
O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ?
O4 - Global Startup: Adobe Gamma.lnk = C:\Program Files\Common
Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program
Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program
Files\Logitech\SetPoint\SetPoint.exe
O4 - Global Startup: Logo Calibration Loader.lnk = C:\Program
Files\GretagMacbeth\i1\Eye-One Match 3
\CalibrationLoader\CalibrationLoader.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program
Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: TabUserW.exe.lnk = C:\WINDOWS\system32
\WTablet\TabUserW.exe
O8 - Extra context menu item: &Windows Live Search -
res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Convert link target to Adobe PDF -
res://C:\Program Files\Adobe\Adobe Acrobat 7.0
\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF -
res://C:\Program Files\Adobe\Adobe Acrobat 7.0
\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF -
res://C:\Program Files\Adobe\Adobe Acrobat 7.0
\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF
- res://C:\Program Files\Adobe\Adobe Acrobat 7.0
\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF -
res://C:\Program Files\Adobe\Adobe Acrobat 7.0
\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF -
res://C:\Program Files\Adobe\Adobe Acrobat 7.0
\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF -
res://C:\Program Files\Adobe\Adobe Acrobat 7.0
\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF -
res://C:\Program Files\Adobe\Adobe Acrobat 7.0
\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Download all with Free Download
Manager - file://C:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Download selected with Free
Download Manager - file://C:\Program Files\Free Download
Manager\dlselected.htm
O8 - Extra context menu item: Download with Free Download
Manager - file://C:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: Open in new background tab -
res://C:\Program Files\Windows Live Toolbar\Components\en-
gb\msntabres.dll.mui/229?dbdfaf8faf8145bab3aa32cfd2af3ee6
O8 - Extra context menu item: Open in new foreground tab -
res://C:\Program Files\Windows Live Toolbar\Components\en-
gb\msntabres.dll.mui/230?dbdfaf8faf8145bab3aa32cfd2af3ee6
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-
00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-
11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07
\bin\ssv.dll
O9 - Extra button: Absolute Poker - {13C1DBF6-7535-495c-91F6-
8C13714ED485} - C:\Documents and Settings\nikander\Käynnistä-
valikko\Ohjelmat\Absolute Poker\Absolute Poker.lnk (file missing)
O9 - Extra 'Tools' menuitem: Absolute Poker - {13C1DBF6-7535-
495c-91F6-8C13714ED485} - C:\Documents and
Settings\nikander\Käynnistä-valikko\Ohjelmat\Absolute
Poker\Absolute Poker.lnk (file missing)
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-
661B03F6A1EF} - C:\Program
Files\PokerStars\PokerStarsUpdate.exe (file missing)
O9 - Extra button: Titan Poker - {49783ED4-258D-4f9f-BE11-
137C18D3E543} - C:\Pokerihuone\Titan Poker\casino.exe (file
missing)
O9 - Extra 'Tools' menuitem: Titan Poker - {49783ED4-258D-4f9f-
BE11-137C18D3E543} - C:\Pokerihuone\Titan Poker\casino.exe (file
missing)
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-
0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner
v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} -
C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Crazy Poker - {8A8A3162-B5FA-4c54-A862-
4E62CBE8A255} - C:\Program Files\crazyvegasMPP\MPPoker.exe
(file missing)
O9 - Extra button: CDPoker - {A68FC757-51CF-4f3c-B13A-
BFB8CA69BB99} - C:\Pokerihuone\CD Poker\CDPoker\casino.exe
(file missing)
O9 - Extra 'Tools' menuitem: CDPoker - {A68FC757-51CF-4f3c-B13A
-BFB8CA69BB99} - C:\Pokerihuone\CD Poker\CDPoker\casino.exe
(file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-
f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-
d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network
Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-
00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-
F110-11d2-BB9E-00C04F795683} - C:\Program
Files\Messenger\msmsgs.exe
O9 - Extra button: LuckyHog - c0ab3998-3b1a-4a1a-ae2e-
c47629848306 - C:\Documents and Settings\nikander\Käynnistä-
valikko\Ohjelmat\LuckyHog\LuckyHog.lnk (file missing) (HKCU)
O9 - Extra button: BetOnBet - {00000000-0000-0000-0000-
000000000000} - C:\MicroGaming\Poker\BetOnBetMPP\MPPoker.exe
(file missing) (HKCU)
O16 - DPF: {5CE72DD0-4695-4D18-A4D3-3367ACD37578} (F-
Secure Health Check 1.0) - http://support.f-
secure.com/enu/home/onlineservices/fshc/fscax.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499}
(BDSCANONLINE Control) -
http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} (F-Secure
Online Scanner 3.3) - http://support.f-secure.com/ols/fscax.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000}
(Shockwave Flash Object) -
http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swf
lash.cab
O16 - DPF: {D8089245-3211-40F6-819B-9E5E92CD61A2}
(FlashXControl Object) -
https://signin3.valueactive.com/Register/Branding/olr3313/OCX/v10
18/flashax.cab
O16 - DPF: {F7EDBBEA-1AD2-4EBF-AA07-D453CC29EE65} (Flash
Casino Helper Object) -
https://bellerock.microgaming.com/freeplay/FlashAX2.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{92C411E2-AC04-4EE7-
82C9-7CF11D2FEE7B}: NameServer = 192.168.0.254
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program
Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Adobe Version Cue CS2 - Adobe Systems Incorporated
- C:\Program Files\Adobe\Adobe Version Cue CS2
\bin\VersionCueCS2.exe
O23 - Service: AdobeVersionCue - Adobe Sytems - C:\Program
Files\Adobe\Adobe Version Cue\service\VersionCue.exe
O23 - Service: Ati HotKey Poller - Unknown owner -
C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision
Corporation - C:\Program Files\Common
Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Trend Micro Central Control Component (PcCtlCom) -
Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~3
\PcCtlCom.exe
O23 - Service: Trend Micro Protection Against Spyware (PcScnSrv) -
Trend Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~3
\PcScnSrv.exe
O23 - Service: PostgreSQL Database Server 8.3 (pgsql-8.3) -
PostgreSQL Global Development Group - C:\Program
Files\PostgreSQL\8.3\bin\pg_ctl.exe
O23 - Service: Retrospect Launcher (RetroLauncher) - Dantz
Development Corporation - C:\Program
Files\Dantz\Retrospect\retrorun.exe
O23 - Service: Sandra Data Service (SandraDataSrv) - SiSoftware -
C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005.SR1
\RpcDataSrv.exe
O23 - Service: Sandra Service (SandraTheSrv) - SiSoftware -
C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005.SR1
\RpcSandraSrv.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation -
C:\Program Files\Common Files\Symantec Shared\Security
Center\SymWSC.exe
O23 - Service: TabletService - Wacom Technology, Corp. -
C:\WINDOWS\system32\Tablet.exe
O23 - Service: Trend Micro Real-time Service (Tmntsrv) - Trend
Micro Inc. - C:\PROGRA~1\TRENDM~1\INTERN~3\Tmntsrv.exe
O23 - Service: Trend Micro Personal Firewall (TmPfw) - Trend Micro
Inc. - C:\PROGRA~1\TRENDM~1\INTERN~3\TmPfw.exe
O23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro
Inc. - C:\PROGRA~1\TRENDM~1\INTERN~3\tmproxy.exe
O23 - Service: WLTRYSVC - Unknown owner -
c:\WINDOWS\System32\wltrysvc.exe
--
End of file - 16587 bytes
Kiitos jo etukäteen. Jään odottamaan apuanne.
vemmuu
Newbie
31. joulukuuta 2008 @ 12:14
Linkki tähän viestiin
Lisätiedoksi F-Securen Blacklight Rootkit juttu ei löytänyt mitään. Mutta joku tätä konetta vaivaa ja ois hienoa tietää mikä.
vemmuu
Newbie
31. joulukuuta 2008 @ 21:58
Linkki tähän viestiin
Nyt kone toimii taas ihan normaalisti. Mutta voinko olla varma että kyseessä oli väärä hälyytys?
afterdawn.com > keskustelu > yleistä keskustelua tietokoneista > virukset ja haittaohjelmat - hijackthis -logit > tietokone takkuilee