|
|
|
Keskustelualueet
Keskustelualueet
|
|
|
Vuosipuhdistusta vailla...
|
|
|
J1N
Newbie
|
8. lokakuuta 2009 @ 19:17 |
Linkki tähän viestiin
|
Tossa olis teille oi viisaat listaa:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:14:45, on 8.10.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16876)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
C:\Program Files\F-Secure\Common\FSMA32.EXE
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\F-Secure\Common\FSMB32.EXE
C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
C:\Program Files\F-Secure\Common\FCH32.EXE
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Program Files\F-Secure\BackWeb\7681197\Program\F-Secure Automatic Update.exe
C:\Program Files\F-Secure\Common\FAMEH32.EXE
C:\Program Files\F-Secure\Anti-Virus\fsqh.exe
C:\Program Files\F-Secure\Anti-Virus\fsrw.exe
C:\Program Files\VDOTool\TBPanel.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\F-Secure\Common\FSM32.EXE
C:\Program Files\F-Secure\Common\FNRB32.EXE
C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
C:\Program Files\F-Secure\Common\FIH32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
L:\Asennus\MagicDisc\MagicDisc.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
C:\Program Files\F-Secure\FSGUI\fsguidll.exe
C:\PROGRA~1\F-Secure\ANTI-S~1\fsaw.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
R3 - URLSearchHook: Winamp Search Class - {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll
O2 - BHO: Adobe PDF Reader -linkkiavustaja - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Winamp Toolbar Loader - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Windows Liven kirjautumisapuohjelma - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll
O4 - HKLM\..\Run: [Gainward] C:\Program Files\VDOTool\TBPanel.exe /A
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [EPSON Stylus DX4000 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBEE.EXE /FU "C:\WINDOWS\TEMP\E_S12F.tmp" /EF "HKLM"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe /install
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Paikallinen palve')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Verkkopalve')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: MagicDisc.lnk = L:\Asennus\MagicDisc\MagicDisc.exe
O4 - Global Startup: F-Secure Automatic Update.lnk = C:\Program Files\F-Secure\BackWeb\7681197\program\F-Secure Automatic Update.exe
O8 - Extra context menu item: &Block this popup - C:\Program Files\F-Secure\Anti-Spyware\blockpopups.htm
O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\googletoolbar.dll/cmsearch.html
O8 - Extra context menu item: &Winamp Search - C:\Documents and Settings\All Users\Application Data\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
O8 - Extra context menu item: Backward &Links - res://C:\Program Files\Google\googletoolbar.dll/cmbacklinks.html
O8 - Extra context menu item: Cac&hed Snapshot of Page - res://C:\Program Files\Google\googletoolbar.dll/cmcache.html
O8 - Extra context menu item: Si&milar Pages - res://C:\Program Files\Google\googletoolbar.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://C:\Program Files\Google\googletoolbar.dll/cmtrans.html
O9 - Extra button: IE Shield - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure\Anti-Spyware\ieshield.dll
O9 - Extra 'Tools' menuitem: IE Shield... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure\Anti-Spyware\ieshield.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Mes...nt.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/sh...ash/swflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: F-Secure Automatic Update (BackWeb Plug-in - 7681197) - F-Secure Automatic Update - C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corp. - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
--
End of file - 10156 bytes
|
AfterDawn Addict
|
8. lokakuuta 2009 @ 19:31 |
Linkki tähän viestiin
|
Ei paha !!!
Selaimen ToolBaareja on huomattavan paljon.
----------------------------
Mene Windowsin ControlPaneliin (Ohjauspaneli) ja sieltä Lisää / Poista sovellus
Vistassa Ohjelmat ja toiminnot
Etsi ja poista ohjelma jonka nimessä on:
Ei päivityksiä yli vuoteen.
AVG Anti-Spyware 7.5
-----------------------------------------------------------------------
Lataus ja siivous ohjeet: TÄÄLLÄ
----------------------------------------------------------
Lataa levyn eheytys: DiskDefrag Työpöydälle ja käynnistä install.
Käynnistä työpöydältä AusLogics Disk Defrag ohjelma. Valitse C:\ jos se on
käyttöjärjestelmä asennus asema. ==> NEXT
----------------------------------------------------------------
Lataa Atribunen ATF Cleaner
Tupla-klikkaa ATF-Cleaner.exe käynnistääksesi ohjelman. Main:n alla valitse: Select All
Klikkaa Empty Selected valintaa.
Jos käytät FireFoxia selaimenasi Klikkaa Firefox yläpuolelta ja valitse: Select All
Klikkaa Empty Selected valintaa.
HUOMIO: Jos haluaisit pitää tallennetut salasanasi, klikkaa No kun se sitä kysyy.
Jos käytät Operaa selaimenasi Klikkaa Opera yläpuolelta ja valitse: Select All
Klikkaa Empty Selected valintaa taas.
HUOMIO: Jos haluaisit pitää tallennetut salasanasi, klikkaa No kun se sitä kysyy.
Klikkaa Exit päävalikosta sulkeaksesi ohjelman.
----------------------------------------------
Skannaa koneesi Kaspersky Online Skannerilla
* Lue läpi vaatimukset ja yksityisyyssäännökset ja klikkaa Accept.
* Skannerin ja virustietokannan lataus alkaa. Sinulta kysytään sallitko Kasperskyltä tulevan ohjelman asentamisen. Klikkaa Aja/Run.
* Kun lataus on valmis, klikkaa Settings.
* Varmistu, että seuraavat kohdat on valittu. Jos ne eivät ole, valitse ne ja klikkaa Save: Spyware, Adware, Dialers, and other potentially dangerous programs
Archives
Mail databases
* Klikkaa Oma Tietokone, My Computer Scan-kohdan alapuolelta.
* Kun tarkistus on valmis, tulokset näytetään. Klikkaa View Scan Report.
* Näet listan saastuneista kohteista. Klikkaa Save Report As....
* Tallenna tiedosto työpöydällesi. Muuta Tiedostotyyppi/Files of type muotoon Tekstitiedosto/Text file(.txt) ennen kuin klikkaat Save.
* Kopioi ja liitä tiedoston sisältö seuraavaan vastaukseesi
* uuden HijackThis-lokin kera
---------------------------------------------------------------------------------------------
Poista ne rivit jotka ovat vielä jäljellä:
Sammuta selain ja muut ohjelmat Fixin ajaksi. (ei virustorjuntaa)
Käynnistä HijackThis:ja Scan ja ruksaa seuraavat punaisella listatut tiedostot
(HJT sammuttaa ohjelman ei poista)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [nwiz] C:\Program Files\NVIDIA Corporation\nView\nwiz.exe /install
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
sekä sammuta ne.(fix Chekked) napista.
Tyhjennä roskakori ja käynnistä koneesi uudelleen.
Poista kansio/t, jos löytyy:
C:\Program Files\Grisoft\
Postita tänne seuraavat lokit:
* Tuore HijackThis loki (Otetaan viimeisenä ennen postitusta)
* Kaperskyn raportti jos se löyti jotain.
*
* Auttoiko ???
*
(:)
|
|
J1N
Newbie
|
10. lokakuuta 2009 @ 16:39 |
Linkki tähän viestiin
|
Kaspersky jämähtää joka kerta alle 20%...
Mutta tossa uusi lista:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:35:23, on 10.10.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16876)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
C:\Program Files\F-Secure\Common\FSMA32.EXE
C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\F-Secure\Common\FSMB32.EXE
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\F-Secure\Common\FCH32.EXE
C:\Program Files\F-Secure\Common\FAMEH32.EXE
C:\Program Files\F-Secure\Anti-Virus\fsqh.exe
C:\Program Files\F-Secure\Anti-Virus\fsrw.exe
C:\Program Files\F-Secure\Common\FNRB32.EXE
C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
C:\Program Files\F-Secure\Common\FIH32.EXE
C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\VDOTool\TBPanel.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\D-Tools\daemon.exe
C:\Program Files\F-Secure\Common\FSM32.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\F-Secure\BackWeb\7681197\program\F-Secure Automatic Update.exe
C:\PROGRA~1\F-Secure\ANTI-S~1\fsaw.exe
C:\Program Files\F-Secure\FSGUI\fsguidll.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
R3 - URLSearchHook: Winamp Search Class - {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll
O2 - BHO: Adobe PDF Reader -linkkiavustaja - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Winamp Toolbar Loader - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Windows Liven kirjautumisapuohjelma - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb.dll
O4 - HKLM\..\Run: [Gainward] C:\Program Files\VDOTool\TBPanel.exe /A
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [EPSON Stylus DX4000 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBEE.EXE /FU "C:\WINDOWS\TEMP\E_S12F.tmp" /EF "HKLM"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Paikallinen palve')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Verkkopalve')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: MagicDisc.lnk = L:\Asennus\MagicDisc\MagicDisc.exe
O4 - Global Startup: F-Secure Automatic Update.lnk = C:\Program Files\F-Secure\BackWeb\7681197\program\F-Secure Automatic Update.exe
O8 - Extra context menu item: &Block this popup - C:\Program Files\F-Secure\Anti-Spyware\blockpopups.htm
O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\googletoolbar.dll/cmsearch.html
O8 - Extra context menu item: &Winamp Search - C:\Documents and Settings\All Users\Application Data\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
O8 - Extra context menu item: Backward &Links - res://C:\Program Files\Google\googletoolbar.dll/cmbacklinks.html
O8 - Extra context menu item: Cac&hed Snapshot of Page - res://C:\Program Files\Google\googletoolbar.dll/cmcache.html
O8 - Extra context menu item: Si&milar Pages - res://C:\Program Files\Google\googletoolbar.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://C:\Program Files\Google\googletoolbar.dll/cmtrans.html
O9 - Extra button: IE Shield - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure\Anti-Spyware\ieshield.dll
O9 - Extra 'Tools' menuitem: IE Shield... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure\Anti-Spyware\ieshield.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Mes...nt.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/sh...ash/swflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: F-Secure Automatic Update (BackWeb Plug-in - 7681197) - F-Secure Automatic Update - C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corp. - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
--
End of file - 9704 bytes
|
AfterDawn Addict
|
10. lokakuuta 2009 @ 18:15 |
Linkki tähän viestiin
|
Vaihdetaan ohjelmaa !!!
Tarkista koneesi F-Securen online skannerilla
* Rastita I have read and accepted the license term ja paina install.
* Jos käytät firefoxia, sinua pyydetään asentamaan F-securen lisäosa. Asenna se ja valitse
"Käynnistä selain uudelleen" kun lisäosa on asennettu.
* Jos käytät Internet Exploreria, sinua pyydetään asentamaan Active X komponentti, asenna se.
* Paina Start. Sivusto lataa hetken ja F-secure Online Scanner -ikkuna aukeaa.
* Valitse My scan ja paina sen alla Show option.
* Valitse Select file types for scanning -kohtaan "all file types" ja rastita myös sen alla oleva "Scan inside compressed files (zip, rar, lzh, ...)" ja paina Ok.
* Paina Start. Ohjelma lataa tarvittavat tiedostot ja aloittaa skannauksen. Skannauksessa voi kestää jonkin aikaa.
* Kun skannaus valmis, varmista että Clean the files -kohdan merkki on kohdassa: "Automatically (recommended)" ja paina "Next".
* Kun puhdistus on suoritettu paina "Full report...". Raportti aukeaa selaimeesi. Mene raportti sivulle ja paina Ctrl ja A maalataksesi koko sivuston tekstin ja paina Ctrl ja C kopioidaksesi maalatun tekstin.
* Liitä F-securen skannaus raportti seuraavaan viestiisi painamalla Ctrl ja V vastaus kenttään.
.
(:)
|
|
J1N
Newbie
|
13. lokakuuta 2009 @ 19:30 |
Linkki tähän viestiin
|
|
No nyt homma toimi...
Scanning Report
Tuesday, October 13, 2009 17:42:43 - 19:28:33
Computer name: YOUR-A27AFDD83E
Scanning type: Scan system for malware, spyware and rootkits
Target: C:\ L:\
4 malware found
Gen:Trojan.Heur.deW@IXWl0Ak (spyware)
* System (Disinfected)
Trojan.Generic.1418789 (spyware)
* System (Disinfected)
Gen:Trojan.Heur.GM (spyware)
* System (Disinfected)
Gen:Trojan.Heur.deW@IXWl0Ak (virus)
* C:\Documents and Settings\Fujitsu\Työpöytä\Aquitania 1.23[PCgame][h33t][mrtek2k]\THETA.nfo.exe (Not cleaned)
Statistics
Scanned:
* Files: 187141
* System: 3465
* Not scanned: 134
Actions:
* Disinfected: 3
* Renamed: 0
* Deleted: 0
* Not cleaned: 1
* Submitted: 0
Files not scanned:
* C:\PAGEFILE.SYS
* C:\WINDOWS\WINSXS\X86_MICROSOFT.VC90.DEBUGMFC_1FC8B3B9A1E18E3B_9.0.30729.1_X-WW_C94A3A24\MFC90D.DLL
* C:\WINDOWS\WINSXS\X86_MICROSOFT.VC90.DEBUGMFC_1FC8B3B9A1E18E3B_9.0.30729.1_X-WW_C94A3A24\MFC90UD.DLL
* C:\WINDOWS\TEMP\PERFLIB_PERFDATA_6F0.DAT
* C:\WINDOWS\SYSTEM32\MRT.EXE
* C:\WINDOWS\SYSTEM32\CONFIG\DEFAULT
* C:\WINDOWS\SYSTEM32\CONFIG\DEFAULT.LOG
* C:\WINDOWS\SYSTEM32\CONFIG\SAM
* C:\WINDOWS\SYSTEM32\CONFIG\SAM.LOG
* C:\WINDOWS\SYSTEM32\CONFIG\SECURITY
* C:\WINDOWS\SYSTEM32\CONFIG\SECURITY.LOG
* C:\WINDOWS\SYSTEM32\CONFIG\SOFTWARE.LOG
* C:\WINDOWS\SYSTEM32\CONFIG\SOFTWARE
* C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM
* C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM.LOG
* C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V2.0.50727\SHFUSION.DLL
* C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\prcp.nlp
* C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V2.0.50727\SOS.DLL
* C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V2.0.50727\SYSTEM.CONFIGURATION.DLL
* C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V2.0.50727\SYSTEM.DATA.DLL
* C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V2.0.50727\SYSTEM.DATA.ORACLECLIENT.DLL
* C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V2.0.50727\SYSTEM.DATA.SQLXML.DLL
* C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V2.0.50727\SYSTEM.DEPLOYMENT.DLL
* C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V2.0.50727\SYSTEM.DESIGN.DLL
* C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V2.0.50727\SYSTEM.DIRECTORYSERVICES.DLL
* C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V2.0.50727\SYSTEM.DIRECTORYSERVICES.PROTOCOLS.DLL
* C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V2.0.50727\SYSTEM.DLL
* C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V2.0.50727\SYSTEM.DRAWING.DESIGN.DLL
* C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V2.0.50727\SYSTEM.DRAWING.DLL
* C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V2.0.50727\SYSTEM.ENTERPRISESERVICES.DLL
* C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V2.0.50727\SYSTEM.ENTERPRISESERVICES.THUNK.DLL
* C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V2.0.50727\SYSTEM.MANAGEMENT.DLL
* C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V2.0.50727\SYSTEM.MESSAGING.DLL
* C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V2.0.50727\SYSTEM.RUNTIME.REMOTING.DLL
* C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V2.0.50727\SYSTEM.SECURITY.DLL
* C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V2.0.50727\SYSTEM.RUNTIME.SERIALIZATION.FORMATTERS.SOAP.DLL
* C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V2.0.50727\SYSTEM.SERVICEPROCESS.DLL
* C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V2.0.50727\SYSTEM.TRANSACTIONS.DLL
* C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V2.0.50727\SYSTEM.WEB.DLL
* C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V2.0.50727\SYSTEM.WEB.MOBILE.DLL
* C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V2.0.50727\SYSTEM.WEB.SERVICES.DLL
* C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V2.0.50727\SYSTEM.WINDOWS.FORMS.DLL
* C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V2.0.50727\SYSTEM.XML.DLL
* C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V2.0.50727\TLBREF.DLL
* C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V2.0.50727\VBC.EXE
* C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V2.0.50727\VSAVB7RT.DLL
* C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V2.0.50727\WEBENGINE.DLL
* C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V2.0.50727\_NETWORKINGPERFCOUNTERS.INI
* C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V2.0.50727\ASP.NETWEBADMINFILES\IMAGES\ASPDOTNET_LOGO.JPG
* C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V2.0.50727\1033\ALINKUI.DLL
* C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V2.0.50727\1033\CSCOMPUI.DLL
* C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V2.0.50727\1033\CVTRESUI.DLL
* C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V2.0.50727\1033\VBC7UI.DLL
* C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V2.0.50727\1033\VSAVB7RTUI.DLL
* C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V1.1.4322\ACCESSIBILITY.DLL
* C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V1.1.4322\ALINK.DLL
* C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V1.1.4322\ASPNET_RC.DLL
* C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V1.1.4322\ASPNET_REGIIS.EXE
* C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V1.1.4322\ASPNET_STATE.EXE
* C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V1.1.4322\CASPOL.EXE
* C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V1.1.4322\CORPERFMONEXT.DLL
* C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V1.1.4322\CSCOMP.DLL
* C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V1.1.4322\CSCOMPMGD.DLL
* C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V1.1.4322\DIASYMREADER.DLL
* C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V1.1.4322\C_G18030.DLL
* C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V1.1.4322\EVENTLOGMESSAGES.DLL
* C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V1.1.4322\FUSION.DLL
* C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V1.1.4322\IEEXEC.EXE
* C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V1.1.4322\IIEHOST.DLL
* C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V1.1.4322\ILASM.EXE
* C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V1.1.4322\INSTALLUTIL.EXE
* C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V1.1.4322\JSC.EXE
* C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V1.1.4322\ISYMWRAPPER.DLL
* C:\WINDOWS\MICROSOFT.NET\DIRECTX FOR MANAGED CODE\1.0.2903.0\MICROSOFT.DIRECTX.DIRECT3DX.DLL
* C:\WINDOWS\MICROSOFT.NET\DIRECTX FOR MANAGED CODE\1.0.2902.0\MICROSOFT.DIRECTX.DIRECT3D.DLL
* C:\WINDOWS\$NTUNINSTALLKB917734_WMP10$\SPUNINST\SPUNINST.INF
* C:\WINDOWS\$NTUNINSTALLKB917422$\SPUNINST\SPUNINST.EXE
* C:\SYSTEM VOLUME INFORMATION\_RESTORE{18340257-378F-4DA9-AD9B-84C8A51C540F}\RP997\A0084066.DLL
* C:\SYSTEM VOLUME INFORMATION\_RESTORE{18340257-378F-4DA9-AD9B-84C8A51C540F}\RP1050\A0088014.EXE
* C:\SYSTEM VOLUME INFORMATION\_RESTORE{18340257-378F-4DA9-AD9B-84C8A51C540F}\RP1050\A0088018.EXE
* C:\SYSTEM VOLUME INFORMATION\_RESTORE{18340257-378F-4DA9-AD9B-84C8A51C540F}\RP1050\A0088025.EXE
* C:\SYSTEM VOLUME INFORMATION\_RESTORE{18340257-378F-4DA9-AD9B-84C8A51C540F}\RP1050\A0088036.EXE
* C:\SYSTEM VOLUME INFORMATION\_RESTORE{18340257-378F-4DA9-AD9B-84C8A51C540F}\RP1050\A0088037.EXE
* C:\SYSTEM VOLUME INFORMATION\_RESTORE{18340257-378F-4DA9-AD9B-84C8A51C540F}\RP1050\A0088042.EXE
* C:\SYSTEM VOLUME INFORMATION\_RESTORE{18340257-378F-4DA9-AD9B-84C8A51C540F}\RP1030\A0087463.DLL
* C:\PROGRAM FILES\SKYPE\PLUGIN MANAGER\EZPMUTILS.DLL
* C:\PROGRAM FILES\SKYPE\PLUGIN MANAGER\SPMSERVICES.DLL
* C:\PROGRAM FILES\REAL\REALPLAYER\SETUP\SETUP.EXE
* C:\Program Files\F-Secure\common\custom\custom1\rifs\AXDIST.EXE\axdist.inf
* C:\Program Files\F-Secure\common\custom\custom1\rifs\AXDIST.EXE\hlink.dll
* C:\Program Files\F-Secure\common\custom\custom1\rifs\AXDIST.EXE\hlinkprx.dll
* C:\Program Files\F-Secure\common\custom\custom1\rifs\AXDIST.EXE\inloader.dll
* C:\Program Files\F-Secure\common\custom\custom1\rifs\AXDIST.EXE\oleaut32.dll
* C:\Program Files\F-Secure\common\custom\custom1\rifs\AXDIST.EXE\schannel.dll
* C:\Program Files\F-Secure\common\custom\custom1\rifs\AXDIST.EXE\stdole2.tlb
* C:\Program Files\F-Secure\common\custom\custom1\rifs\AXDIST.EXE\urlmon.dll
* C:\Program Files\F-Secure\common\custom\custom1\rifs\AXDIST.EXE\wininet.dll
* C:\Program Files\F-Secure\common\custom\custom1\rifs\AXDIST.EXE\ADVPACK.DLL
* C:\Program Files\F-Secure\common\custom\custom1\rifs\AXDIST.EXE\W95INF32.DLL
* C:\Program Files\F-Secure\common\custom\custom1\rifs\AXDIST.EXE\W95INF16.DLL
* C:\PROGRAM FILES\AQUITANIA\UNINSTALL.EXE
* C:\PROGRAM FILES\ABBYY FINEREADER 6.0 SPRINT\FINEREADER6.SPRINT.DOT
* C:\NVIDIA\WINXP\182.08\IS\PHYSX_9.09.0203_SYSTEMSOFTWARE.EXE
* C:\NVIDIA\WINXP\181.22\ENGLISH\PHYSX_9.09.0010_SYSTEMSOFTWARE.EXE
* C:\MEDIAONE2\IVIASPI.EXE
* C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\NTUSER.DAT
* C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\NTUSER.DAT.LOG
* C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\LOCAL SETTINGS\APPLICATION DATA\MICROSOFT\WINDOWS\USRCLASS.DAT
* C:\DOCUMENTS AND SETTINGS\NETWORKSERVICE\LOCAL SETTINGS\APPLICATION DATA\MICROSOFT\WINDOWS\USRCLASS.DAT.LOG
* C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\NTUSER.DAT
* C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\NTUSER.DAT.LOG
* C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\LOCAL SETTINGS\APPLICATION DATA\MICROSOFT\WINDOWS\USRCLASS.DAT
* C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\LOCAL SETTINGS\APPLICATION DATA\MICROSOFT\WINDOWS\USRCLASS.DAT.LOG
* C:\DOCUMENTS AND SETTINGS\FUJITSU\NTUSER.DAT
* C:\DOCUMENTS AND SETTINGS\FUJITSU\NTUSER.DAT.LOG
* C:\DOCUMENTS AND SETTINGS\FUJITSU\TYÖPÖYTÄ\VENTRILOMIX05(2).EXE
* C:\DOCUMENTS AND SETTINGS\FUJITSU\TYÖPÖYTÄ\VENTRILOMIX05.EXE
* C:\DOCUMENTS AND SETTINGS\FUJITSU\TYÖPÖYTÄ\AQUITANIA 1.23[PCGAME][H33T][MRTEK2K]\AQUITANIA.EXE.EXE
* C:\DOCUMENTS AND SETTINGS\FUJITSU\OMAT TIEDOSTOT\DOWNLOADS\CRADLEOFROME_PATCHED_DJSYS\CRADLEOFROMESETUP.EXE
* C:\DOCUMENTS AND SETTINGS\FUJITSU\LOCAL SETTINGS\TEMP\ETILQS_JOQQYGGL4V1IDRITW9XJ
* C:\DOCUMENTS AND SETTINGS\FUJITSU\LOCAL SETTINGS\APPLICATION DATA\MICROSOFT\WINDOWS LIVE CONTACTS\{6429BB05-B19D-48E3-826F-45F6D060304D}\DBSTORE\CONTACTS.EDB
* C:\DOCUMENTS AND SETTINGS\FUJITSU\LOCAL SETTINGS\APPLICATION DATA\MICROSOFT\WINDOWS LIVE CONTACTS\{6429BB05-B19D-48E3-826F-45F6D060304D}\DBSTORE\TEMPEDB.EDB
* C:\DOCUMENTS AND SETTINGS\FUJITSU\LOCAL SETTINGS\APPLICATION DATA\MICROSOFT\WINDOWS LIVE CONTACTS\{6429BB05-B19D-48E3-826F-45F6D060304D}\DBSTORE\LOGFILES\EDB.LOG
* C:\DOCUMENTS AND SETTINGS\FUJITSU\LOCAL SETTINGS\APPLICATION DATA\MICROSOFT\WINDOWS LIVE CONTACTS\{6429BB05-B19D-48E3-826F-45F6D060304D}\DBSTORE\LOGFILES\EDBTMP.LOG
* C:\DOCUMENTS AND SETTINGS\FUJITSU\LOCAL SETTINGS\APPLICATION DATA\MICROSOFT\WINDOWS LIVE CONTACTS\{6048FB0B-E0BC-47B1-94CC-7E8C8EC9FF3A}\DBSTORE\CONTACTS.EDB
* C:\DOCUMENTS AND SETTINGS\FUJITSU\LOCAL SETTINGS\APPLICATION DATA\MICROSOFT\WINDOWS LIVE CONTACTS\{6048FB0B-E0BC-47B1-94CC-7E8C8EC9FF3A}\DBSTORE\TEMPEDB.EDB
* C:\DOCUMENTS AND SETTINGS\FUJITSU\LOCAL SETTINGS\APPLICATION DATA\MICROSOFT\WINDOWS LIVE CONTACTS\{6048FB0B-E0BC-47B1-94CC-7E8C8EC9FF3A}\DBSTORE\LOGFILES\EDB.LOG
* C:\DOCUMENTS AND SETTINGS\FUJITSU\LOCAL SETTINGS\APPLICATION DATA\MICROSOFT\WINDOWS LIVE CONTACTS\{6048FB0B-E0BC-47B1-94CC-7E8C8EC9FF3A}\DBSTORE\LOGFILES\EDBTMP.LOG
* C:\DOCUMENTS AND SETTINGS\FUJITSU\LOCAL SETTINGS\APPLICATION DATA\MICROSOFT\WINDOWS\USRCLASS.DAT
* C:\DOCUMENTS AND SETTINGS\FUJITSU\LOCAL SETTINGS\APPLICATION DATA\MICROSOFT\WINDOWS\USRCLASS.DAT.LOG
* C:\Documents and Settings\Fujitsu\Local Settings\Application Data\Microsoft\Messenger\larppa80_99@hotmail.com\ObjectStore\CustomEmoticons\QwMUXQeFTbyA3F24d24EBjJl8WY=.id2\2T÷?8×ūµ µ¹ wmf0šÉ>Øž?¤`?Ŗ?ŽČų9?šŹŚrĄ<$ŗ?ā“. °d?%å÷
* C:\DOCUMENTS AND SETTINGS\FUJITSU\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\7SIB9JAQ.DEFAULT\PARENT.LOCK
* C:\DOCUMENTS AND SETTINGS\FUJITSU\APPLICATION DATA\ADOBE\ACROBAT\7.0\UPDATER\ADBERDR810_FI_FI.EXE
* C:\DOCUMENTS AND SETTINGS\FUJITSU\APPLICATION DATA\ADOBE\ACROBAT\7.0\UPDATER\ADBERDR709_FI_FI.EXE
Options
Scanning engines:
Scanning options:
* Scan all files
* Scan inside archives
* Use advanced heuristics
Copyright © 1998-2009 Product support | Send virus sample to F-Secure
F-Secure assumes no responsibility for material created or published by third parties that F-Secure World Wide Web pages have a link to. Unless you have clearly stated otherwise, by submitting material to any of our servers, for example by E-mail or via our F-Secure's CGI E-mail, you agree that the material you make available may be published in the F-Secure World Wide Pages or hard-copy publications. You will reach F-Secure public web site by clicking on underlined links. While doing this, your access will be logged to our private access statistics with your domain name. This information will not be given to any third party. You agree not to take action against us in relation to material that you submit. Unless you have clearly stated otherwise, by submitting material you warrant that F-Secure may incorporate any concepts described in it in the F-Secure products/publications without liability.
|
AfterDawn Addict
|
14. lokakuuta 2009 @ 15:36 |
Linkki tähän viestiin
|
|
Suosittelen poistamaan koneelta tämän ohjelman =>
Aquitania 1.23 (rarria myöten)
Auttoiko vuosihuolto ???
.
(:)
|
|
Mainos
|
|
|
|
J1N
Newbie
|
14. lokakuuta 2009 @ 16:30 |
Linkki tähän viestiin
|
|
Kummasti tuli vauhtia lisää. Kiitos ja kumarrus.
|
|
