User Käyttäjä Salasana  
   
tiistai 29.7.2025 / 21:04
Hae keskustelualueilta:        In English   Suomeksi   På svenska
afterdawn.com > keskustelu > yleistä keskustelua tietokoneista > virukset ja haittaohjelmat - hijackthis -logit > hidastunut netti
Näytä aiheet
 
Keskustelualueet
Keskustelualueet
Hidastunut netti
  Siirry:
 
Kirjoittaja Viesti
Khuz
Newbie
_
15. kesäkuuta 2007 @ 10:04 _ Linkki tähän viestiin    Lähetä käyttäjälle yksityisviesti   
Logfile of HijackThis v1.99.1
Scan saved at 13:56:53, on 15.6.2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
c:\Program Files\Common Files\Symantec Shared\ccProxy.exe
c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
c:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
c:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\windows\system\hpsysdrv.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jucheck.exe
C:\WINDOWS\system32\hphmon06.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\ALCXMNTR.EXE
C:\WINDOWS\system32\diisgqje.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\DOCUME~1\HP_OMI~1\LOCALS~1\Temp\Tilapäinen kansio 1 HijackThis.zip\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3...lion&pf=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3...lion&pf=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3...lion&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3...lion&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3...lion&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3...lion&pf=desktop
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: (no name) - {060BC2B0-B40E-B0FC-BE02-3B0A9B0350B6} - C:\WINDOWS\system\bzmtcs32.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {2D2A157F-A2BD-45CC-971D-F6C7D78D8994} - c:\windows\system32\mfcamfc.dll
O2 - BHO: (no name) - {67B04E76-D9E1-4FA6-A920-DEC576C5BF40} - c:\windows\system32\gelfqher.dll
O2 - BHO: (no name) - {73364D99-1240-4dff-B12A-67E448373148} - C:\WINDOWS\system32\ipv6monr.dll
O2 - BHO: CNisExtBho Class - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - c:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - c:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: HP-näkymä - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - c:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HPHUPD06] c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [ccApp] -
O4 - HKLM\..\Run: [SSC_UserPrompt] c:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
O4 - HKLM\..\Run: [NAV CfgWiz] "c:\Program Files\Norton AntiVirus\CfgWiz.exe" /GUID {0D7956A2-5A08-4ec2-A72C-DF8495A66016} /MODE CfgWiz /CMDLINE "REBOOT"
O4 - HKLM\..\Run: [IS CfgWiz] c:\Program Files\Common Files\Symantec Shared\cfgwiz.exe /GUID NIS /CMDLINE "REBOOT"
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
O4 - HKLM\..\Run: [Reminder] "C:\Windows\Creator\Remind_XP.exe"
O4 - HKLM\..\Run: [diisgqje] C:\WINDOWS\system32\diisgqje.exe
O4 - HKCU\..\Run: [diisgqje] C:\WINDOWS\system32\diisgqje.exe
O4 - Startup: hamachi.lnk = C:\Program Files\Hamachi\hamachi.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: MS_update_0612_KB74062.exe
O4 - Global Startup: MS_update_0704_KB74073.exe
O4 - Global Startup: SpyCatcher Protector.lnk = C:\Program Files\SpyCatcher 2006\Protector.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O20 - Winlogon Notify: dvkwfpyo - C:\WINDOWS\SYSTEM32\mfcamfc.dll
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: iPod-palvelu (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Norton AntiVirus Auto-Protect -palvelu (navapsvc) - Symantec Corporation - c:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - c:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: SAVScan - Symantec Corporation - c:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
Member
_
15. kesäkuuta 2007 @ 10:52 _ Linkki tähän viestiin    Lähetä käyttäjälle yksityisviesti   
Ihmekkään kun hidastelee - täynnä örkkejä.


Aja nämä ohjelmat tässä järjestyksessä:
1. Dr.Web
2. Combofix
3. HijackThis
====
* Lataa Dr.Web CureIt työpöydälle:
ftp://ftp.drweb.com/pub/drweb/cureit/drweb-cureit.exe

* Tuplaklikkaa drweb-cureit.exe ja anna sen tehdä express scan
* Se skannaa käynnissä olevat ohjelmat ja jos jotain löytyy, klikkaa yes kun se kysyy haluatko poistaa sen. Tämä on vain lyhyt scan.
* Kun scan on valmis, merkkaa asemat, jotka haluat scannata.
* Valitse kaikki asemat. Punainen piste osoittaa, mitkä asemat on valittu.
* Klikaa vihreää nuolta oikealla ja scan alkaa.
* Klikkaa 'Yes to all', jos kysytään haluatko poistaa/siirtää tiedoston.
* Kun scan on valmis, katso voitko klikata next-kuvaketta löytyneiden tiedostojen vieressä:

* Jos asia on niin, klikkaa sitä ja sitten klikkaa next-kuvaketta oikealla alhaalla ja valitse Move incurable kuten alla olevalla kuvassa:


Tämä siirtää sen %userprofile%\DoctorWeb\quarantine-hakemistoon.
* Tämän jälkeen klikkaa Dr.Web CureIt-valikossa file ja valitse save report list
* Tallenna raportti työpöydälle. Raportin nimi on DrWeb.csv
* Sulje Dr.Web Cureit.
* Käynnistä kone uudelleen !! Tämä siksi, että käytössä olevat tiedostot poistetaan/siirretään käynnistyksen yhteydessä.
* Käynnistyksen jälkeen liitä Dr.Web-lokin, jonka tallensit aiemmin, sisältö seuraavaan vastaukseesi.
====
1. Lataa combofix.exe työpöydällesi jommastakummasta linkistä:
combofix.exe
combofix.exe

2. Tuplaklikkaa combofix.exe tiedostoa ja seuraa ohjeistuksia.
3. Kun työkalu on valmis, se tuottaa lokin. (C:\ComboFix.txt) Lähetä tämä loki viesti ketjuusi.
Huom! Älä klikkaile combofixin ikkunaa käytön aikana. Tämä saattaa aiheuttaa ohjelman jumiutumisen.
====

Lähetä uusi HjT loki, Dr.Web.csv ja C:\combofix.txt

Oon viikonlopun muualla joten vastaan sitten sunnuntaina

Virustorjunta.net asiantuntevaa palvelua ilman peeloilua.
Hjt-lokit tänne
Khuz
Newbie
_
15. kesäkuuta 2007 @ 13:11 _ Linkki tähän viestiin    Lähetä käyttäjälle yksityisviesti   
Noni tässä on nyt nämä logit:
HjT
Combofix
Drweb
tos järjestykses

Logfile of HijackThis v1.99.1
Scan saved at 17:08:24, on 15.6.2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)


Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
c:\Program Files\Common Files\Symantec Shared\ccProxy.exe
c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
c:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\notepad.exe
C:\WINDOWS\system32\spoolsv.exe
c:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Java\j2re1.4.2_03\bin\jucheck.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\ALCXMNTR.EXE
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\WINDOWS\system32\cmd.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\DOCUME~1\HP_OMI~1\LOCALS~1\Temp\Tilapäinen kansio 1 HijackThis.zip\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3...lion&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3...lion&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3...lion&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3...lion&pf=desktop
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: (no name) - {060BC2B0-B40E-B0FC-BE02-3B0A9B0350B6} - C:\WINDOWS\system\bzmtcs32.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {67B04E76-D9E1-4FA6-A920-DEC576C5BF40} - c:\windows\system32\gelfqher.dll
O2 - BHO: CNisExtBho Class - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - c:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - c:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: HP-näkymä - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - c:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
O4 - HKLM\..\Run: [HPHUPD06] c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
O4 - HKLM\..\Run: [ccApp] -
O4 - HKLM\..\Run: [SSC_UserPrompt] c:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
O4 - HKLM\..\Run: [NAV CfgWiz] "c:\Program Files\Norton AntiVirus\CfgWiz.exe" /GUID {0D7956A2-5A08-4ec2-A72C-DF8495A66016} /MODE CfgWiz /CMDLINE "REBOOT"
O4 - HKLM\..\Run: [IS CfgWiz] c:\Program Files\Common Files\Symantec Shared\cfgwiz.exe /GUID NIS /CMDLINE "REBOOT"
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Startup: hamachi.lnk = C:\Program Files\Hamachi\hamachi.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: MS_update_0612_KB74062.exe
O4 - Global Startup: MS_update_0704_KB74073.exe
O4 - Global Startup: SpyCatcher Protector.lnk = C:\Program Files\SpyCatcher 2006\Protector.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: iPod-palvelu (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Norton AntiVirus Auto-Protect -palvelu (navapsvc) - Symantec Corporation - c:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - c:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: SAVScan - Symantec Corporation - c:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe


ComboFix 07-06-13.3 - C:\Documents and Settings\HP_Omistaja\Ty?p?yt?\ComboFix.exe
"HP_Omistaja" - 2007-06-15 16:50:11 - Service Pack 2 NTFS


(((((((((((((((((((((((((((((((((((((((((((( V Log )))))))))))))))))))))))))))))))))))))))))))))))))))))))


C:\WINDOWS\system32\mfcamfc.dll


* * * POST RUN FILES/FOLDERS * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *



((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))


C:\WINDOWS\system32\drivers\bfmmhdim.sys
C:\WINDOWS\system32\mfcamfc.dll
C:\WINDOWS\system32\mfcamfc.dll.bak


((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))


-------\LEGACY_EMBHWDGM
-------\LEGACY_PYJLQICD
-------\embhwdgm
-------\pyjlqicd


((((((((((((((((((((((((( Files Created from 2007-05-15 to 2007-06-15 )))))))))))))))))))))))))))))))


2007-06-15 16:50 49,152 --a------ C:\WINDOWS\nircmd.exe
2007-06-15 16:48 1,046 --a------ C:\WINDOWS\system32\vgrsqfxs.exe
2007-06-15 16:48 1,046 --a------ C:\WINDOWS\system32\vcasslcl.exe
2007-06-15 16:48 1,046 --a------ C:\WINDOWS\system32\sksoaaaa.exe
2007-06-15 16:48 1,046 --a------ C:\WINDOWS\system32\plxhbupf.exe
2007-06-15 16:48 1,046 --a------ C:\WINDOWS\system32\plkrshna.exe
2007-06-15 16:48 1,046 --a------ C:\WINDOWS\system32\mfxbcaaa.exe
2007-06-15 16:48 1,046 --a------ C:\WINDOWS\system32\jryssasq.exe
2007-06-15 16:48 1,046 --a------ C:\WINDOWS\system32\jrvvgnko.exe
2007-06-15 16:48 1,046 --a------ C:\WINDOWS\system32\jrmpspyx.exe
2007-06-15 16:48 1,046 --a------ C:\WINDOWS\system32\duedaaaa.exe
2007-06-15 15:03 <KANSIO> d-------- C:\DOCUME~1\HP_OMI~1\DoctorWeb
2007-06-15 14:43 <KANSIO> d-------- C:\Program Files\Yahoo!
2007-06-15 14:43 <KANSIO> d-------- C:\Program Files\CCleaner
2007-06-15 14:39 <KANSIO> d-------- C:\VundoFix Backups
2007-06-15 14:32 1,046 --a------ C:\WINDOWS\system32\vxwcoaaa.exe
2007-06-15 14:32 1,046 --a------ C:\WINDOWS\system32\phwyfwiw.exe
2007-06-15 14:32 1,046 --a------ C:\WINDOWS\system32\phjwtxpq.exe
2007-06-15 14:32 1,046 --a------ C:\WINDOWS\system32\jnbpfhfn.exe
2007-06-15 14:32 1,046 --a------ C:\WINDOWS\system32\jjabaaaa.exe
2007-06-15 14:32 1,046 --a------ C:\WINDOWS\system32\gsqsaaaa.exe
2007-06-15 14:32 1,046 --a------ C:\WINDOWS\system32\gsnukaaa.exe
2007-06-15 14:32 1,046 --a------ C:\WINDOWS\system32\gsaahogv.exe
2007-06-15 14:32 1,046 --a------ C:\WINDOWS\system32\dqatbaaa.exe
2007-06-15 14:32 1,046 --a------ C:\WINDOWS\system32\ahofibnl.exe
2007-06-15 14:10 1,046 --a------ C:\WINDOWS\system32\vgmuqtbr.exe
2007-06-15 14:10 1,046 --a------ C:\WINDOWS\system32\soqexaaa.exe
2007-06-15 14:10 1,046 --a------ C:\WINDOWS\system32\sogaavcb.exe
2007-06-15 14:10 1,046 --a------ C:\WINDOWS\system32\jvvppaaa.exe
2007-06-15 14:10 1,046 --a------ C:\WINDOWS\system32\jvuoalik.exe
2007-06-15 14:10 1,046 --a------ C:\WINDOWS\system32\jvhwwpwr.exe
2007-06-15 14:10 1,046 --a------ C:\WINDOWS\system32\jvgetaaa.exe
2007-06-15 14:10 1,046 --a------ C:\WINDOWS\system32\gbaekaaa.exe
2007-06-15 14:10 1,046 --a------ C:\WINDOWS\system32\dyjunslq.exe
2007-06-15 14:10 1,046 --a------ C:\WINDOWS\system32\apjepndq.exe
2007-06-15 13:49 1,046 --a------ C:\WINDOWS\system32\vcqeaaaa.exe
2007-06-15 13:49 1,046 --a------ C:\WINDOWS\system32\phuaaaaa.exe
2007-06-15 13:49 1,046 --a------ C:\WINDOWS\system32\phiudaaa.exe
2007-06-15 13:49 1,046 --a------ C:\WINDOWS\system32\mfvotlju.exe
2007-06-15 13:49 1,046 --a------ C:\WINDOWS\system32\mfugaaaa.exe
2007-06-15 13:49 1,046 --a------ C:\WINDOWS\system32\jrdyijeb.exe
2007-06-15 13:49 1,046 --a------ C:\WINDOWS\system32\gsfvuaaa.exe
2007-06-15 13:49 1,046 --a------ C:\WINDOWS\system32\dqrjiaaa.exe
2007-06-15 13:49 1,046 --a------ C:\WINDOWS\system32\aliojvov.exe
2007-06-15 13:49 <KANSIO> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion
2007-06-15 12:35 <KANSIO> dr-hsc--- C:\WINDOWS\system32\dllcache
2007-06-15 04:24 2,560 --------- C:\WINDOWS\system32\drivers\cdralw2k.sys
2007-06-15 04:24 2,432 --------- C:\WINDOWS\system32\drivers\cdr4_xp.sys
2007-06-15 04:24 129,784 --------- C:\WINDOWS\system32\pxafs.dll
2007-06-15 04:21 684,567 --a------ C:\WINDOWS\system32\libeay32.dll
2007-06-15 04:21 147,729 --a------ C:\WINDOWS\system32\libssl32.dll
2007-06-15 04:17 91,136 --a------ C:\WINDOWS\system32\wbyzxnsd.dll
2007-06-15 04:17 750,592 --a------ C:\WINDOWS\system32\pllspvuc.dll
2007-06-15 04:17 59,392 --a------ C:\WINDOWS\system32\gelfqher.dll
2007-06-15 04:17 42,496 --a------ C:\WINDOWS\system32\fjxrozbp.dll
2007-06-15 04:17 139,264 --a------ C:\WINDOWS\system32\pohpvdxg.dll
2007-06-15 04:14 <KANSIO> d-------- C:\WINDOWS\0F0447B46DDD4831933A1EDF52091150.TMP
2007-06-15 04:11 74,752 --a------ C:\WINDOWS\system32\kkcakkc.dll
2007-06-15 04:11 16,384 --a------ C:\WINDOWS\system32\sxwunaaa.exe
2007-06-15 04:11 140,288 --a------ C:\WINDOWS\system32\jjxfwtvl.exe
2007-06-15 04:11 140,288 --a------ C:\WINDOWS\system32\dmbnuaaa.exe
2007-06-15 04:11 10,240 --a------ C:\WINDOWS\system\bzmtcs32.dll
2007-06-15 04:11 1,046 --a------ C:\WINDOWS\system32\vtqbnaaa.exe
2007-06-15 04:11 1,046 --a------ C:\WINDOWS\system32\pyvflccd.exe
2007-06-15 04:11 1,046 --a------ C:\WINDOWS\system32\jfkpqxxf.exe
2007-06-15 04:11 <KANSIO> dr-hs---- C:\cmdcons
2007-06-15 04:11 <KANSIO> d-------- C:\WINDOWS\setupupd
2007-06-15 04:10 221,184 --a------ C:\WINDOWS\system32\wmpns.dll
2007-06-15 04:09 1,835,008 --a------ C:\DOCUME~1\HP_OMI~1\NTUSER.DAT
2007-06-15 04:09 <KANSIO> dr------- C:\DOCUME~1\HP_OMI~1\Suosikit
2007-06-15 04:09 <KANSIO> dr------- C:\DOCUME~1\HP_OMI~1\Omat tiedostot
2007-06-15 04:09 <KANSIO> dr------- C:\DOCUME~1\HP_OMI~1\K?ynnist?-valikko
2007-06-15 04:09 <KANSIO> d--h----- C:\DOCUME~1\HP_OMI~1\Verkkoymp?rist?
2007-06-15 04:09 <KANSIO> d--h----- C:\DOCUME~1\HP_OMI~1\Tulostinymp?rist?
2007-06-15 04:09 <KANSIO> d--h----- C:\DOCUME~1\HP_OMI~1\Mallit
2007-06-15 04:09 <KANSIO> d-------- C:\DOCUME~1\HP_OMI~1\WINDOWS
2007-06-15 04:09 <KANSIO> d-------- C:\DOCUME~1\HP_OMI~1\Ty?p?yt?
2007-06-15 04:09 <KANSIO> d-------- C:\DOCUME~1\HP_OMI~1\APPLIC~1\Symantec
2007-06-15 04:09 <KANSIO> d-------- C:\DOCUME~1\HP_OMI~1\APPLIC~1\SampleView
2007-06-15 04:09 <KANSIO> d-------- C:\DOCUME~1\HP_OMI~1\APPLIC~1\Intervideo
2007-06-15 04:09 <KANSIO> d-------- C:\DOCUME~1\HP_OMI~1\APPLIC~1\Apple Computer
2007-06-15 04:07 21,060 --------- C:\WINDOWS\system32\drivers\iviaspi.sys
2007-06-15 04:07 10,368 --------- C:\WINDOWS\system32\drivers\pfc.sys
2007-06-15 03:54 9,600 --a------ C:\WINDOWS\system32\drivers\hidusb.sys
2007-06-15 03:54 52,864 --a------ C:\WINDOWS\system32\drivers\DMusic.sys
2007-06-15 03:54 31,616 --a------ C:\WINDOWS\system32\drivers\usbccgp.sys
2007-06-15 03:54 21,504 --a------ C:\WINDOWS\system32\hidserv.dll
2007-06-15 03:54 14,848 --a------ C:\WINDOWS\system32\drivers\kbdhid.sys
2007-06-15 03:54 12,160 --a------ C:\WINDOWS\system32\drivers\mouhid.sys
2007-06-15 03:53 7,552 --a------ C:\WINDOWS\system32\drivers\MSKSSRV.sys
2007-06-15 03:53 61,056 --a------ C:\WINDOWS\system32\drivers\ohci1394.sys
2007-06-15 03:53 60,800 --a------ C:\WINDOWS\system32\drivers\sysaudio.sys
2007-06-15 03:53 60,288 --a------ C:\WINDOWS\system32\drivers\drmk.sys
2007-06-15 03:53 6,400 --a------ C:\WINDOWS\system32\drivers\enum1394.sys
2007-06-15 03:53 54,272 --a------ C:\WINDOWS\system32\drivers\swmidi.sys
2007-06-15 03:53 53,248 --a------ C:\WINDOWS\system32\drivers\1394bus.sys
2007-06-15 03:53 5,376 --a------ C:\WINDOWS\system32\drivers\MSPCLOCK.sys
2007-06-15 03:53 4,992 --a------ C:\WINDOWS\system32\drivers\MSPQM.sys
2007-06-15 03:53 4,096 --a------ C:\WINDOWS\system32\ksuser.dll
2007-06-15 03:53 2,944 --a------ C:\WINDOWS\system32\drivers\drmkaud.sys


(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

2007-06-15 13:48:40 -------- d-----w C:\Program Files\Common Files\Symantec Shared
2007-06-15 13:48:40 -------- d-----w C:\DOCUME~1\HP_OMI~1\APPLIC~1\Hamachi
2007-06-15 11:14:35 -------- d-----w C:\Program Files\MSN Messenger
2007-06-15 11:07:17 -------- d-----w C:\Program Files\World of Warcraft
2007-06-15 09:46:09 -------- d-----w C:\Program Files\Windows NT
2007-06-15 09:46:00 -------- d-----w C:\Program Files\Movie Maker
2007-06-15 09:45:59 -------- d-----w C:\Program Files\Messenger
2007-06-15 01:28:08 -------- d-----w C:\Program Files\DivX
2007-06-15 01:11:42 356,362 ----a-w C:\WINDOWS\system32\perfh00B.dat
2007-06-15 01:11:41 65,898 ----a-w C:\WINDOWS\system32\perfc00B.dat
2007-06-15 00:59:34 -------- d--h--w C:\Program Files\InstallShield Installation Information
2007-06-14 23:20:00 -------- d-----w C:\Program Files\Warcraft III
2007-06-14 23:11:57 -------- d-----w C:\Program Files\Bethesda Softworks(2)
2007-06-14 23:11:34 -------- d-----w C:\Program Files\Starcraft(2)
2007-06-14 23:08:11 -------- d-----w C:\Program Files\Uthgard Launcher
2007-06-14 23:07:01 -------- d-----w C:\DOCUME~1\HP_OMI~1\APPLIC~1\Xfire
2007-06-14 22:30:26 -------- d-----w C:\Program Files\Intel
2007-06-14 22:29:50 -------- d-----w C:\Program Files\DAEMON Tools
2007-06-14 22:29:44 -------- d-----w C:\Program Files\Macrogaming
2007-05-25 08:40:36 -------- d-----w C:\DOCUME~1\HP_OMI~1\APPLIC~1\AdobeUM
2007-05-12 18:35:16 -------- d-----w C:\DOCUME~1\HP_OMI~1\APPLIC~1\Electronic Arts
2007-05-06 15:04:12 12,240 ----a-w C:\WINDOWS\scunin.dat
2007-05-02 19:38:05 54,675 ----a-w C:\WINDOWS\War3Unin.dat
2007-05-02 17:09:07 12,288 ----a-w C:\WINDOWS\winhp32cln.exe
2007-05-01 18:35:43 -------- d-----w C:\Program Files\Hamachi
2007-05-01 18:17:44 2,829 ----a-w C:\WINDOWS\War3Unin.pif
2007-05-01 18:17:44 139,264 ----a-w C:\WINDOWS\War3Unin.exe
2007-05-01 18:01:39 -------- d-----w C:\DOCUME~1\HP_OMI~1\APPLIC~1\WinRAR
2007-05-01 17:37:00 -------- d-----w C:\Program Files\Ocean Technology
2007-04-27 13:30:40 3,555 -c--a-w C:\WINDOWS\mozver.dat
2007-04-26 20:43:47 -------- d-----w C:\Program Files\TechSmith
2007-04-26 20:41:35 -------- d-----w C:\Program Files\Common Files\Wise Installation Wizard
2007-04-23 00:15:29 3,596,288 ----a-w C:\WINDOWS\system32\qt-dx331.dll
2007-04-23 00:15:18 200,704 ----a-w C:\WINDOWS\system32\ssldivx.dll
2007-04-23 00:15:18 1,044,480 ----a-w C:\WINDOWS\system32\libdivx.dll
2007-04-23 00:02:34 73,728 ----a-w C:\WINDOWS\system32\dpl100.dll
2007-04-23 00:02:34 196,608 ----a-w C:\WINDOWS\system32\dtu100.dll
2007-04-23 00:02:33 53,248 ----a-w C:\WINDOWS\system32\dpuGUI10.dll
2007-04-23 00:02:31 593,920 ----a-w C:\WINDOWS\system32\dpuGUI11.dll
2007-04-23 00:02:31 57,344 ----a-w C:\WINDOWS\system32\dpv11.dll
2007-04-23 00:02:31 344,064 ----a-w C:\WINDOWS\system32\dpus11.dll
2007-04-23 00:02:31 294,912 ----a-w C:\WINDOWS\system32\dpu11.dll
2007-04-23 00:02:31 294,912 ----a-w C:\WINDOWS\system32\dpu10.dll
2007-04-23 00:01:47 12,288 ----a-w C:\WINDOWS\system32\DivXWMPExtType.dll
2007-04-23 00:01:46 124,472 ----a-w C:\WINDOWS\system32\DivXCodecUpdateChecker.exe
2007-04-21 19:39:55 -------- d-----w C:\Program Files\VentSrv
2007-04-20 09:19:42 -------- d-----w C:\Program Files\LucasArts


((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))


*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects]
{02478D38-C3F9-4EFB-9B51-7695ECA05670}=C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll [2006-10-26 10:28]
{060BC2B0-B40E-B0FC-BE02-3B0A9B0350B6}=C:\WINDOWS\system\bzmtcs32.dll [2007-06-15 04:11]
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}=C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll [2003-11-03 22:17]
{67B04E76-D9E1-4FA6-A920-DEC576C5BF40}=c:\windows\system32\gelfqher.dll [2007-06-15 04:17]
{9ECB9560-04F9-4bbc-943D-298DDF1699E1}=c:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll [2004-02-09 15:37]
{BDF3E430-B101-42AD-A544-FADC6B084872}=c:\Program Files\Norton AntiVirus\NavShExt.dll [2004-09-03 02:23]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"="C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe" [2005-01-01 09:50]
"HPHUPD06"="c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe" [2004-06-07 20:34]
"KBD"="C:\HP\KBD\KBD.EXE" [2003-02-11 21:02]
"ISUSPM Startup"="C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2004-06-16 14:03]
"ISUSScheduler"="C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" [2004-06-16 14:03]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2004-06-17 00:38]
"VTTimer"="VTTimer.exe" []
"SiSPower"="SiSPower.dll" [2004-09-24 10:49 C:\WINDOWS\system32\SiSPower.dll]
"ccApp"="-" []
"SSC_UserPrompt"="c:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe" [2004-08-25 00:27]
"NAV CfgWiz"="c:\Program Files\Norton AntiVirus\CfgWiz.exe" [2004-09-03 03:23]
"IS CfgWiz"="c:\Program Files\Common Files\Symantec Shared\cfgwiz.exe" [2004-03-01 17:44]
"AGRSMMSG"="AGRSMMSG.exe" [2004-06-29 18:06 C:\WINDOWS\AGRSMMSG.exe]
"ATIPTA"="C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2004-09-09 21:10]
"AlcxMonitor"="ALCXMNTR.EXE" [2004-09-07 21:47 C:\WINDOWS\ALCXMNTR.EXE]
"LSBWatcher"="c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe" [2004-10-14 22:54]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MsnMsgr"="C:\Program Files\MSN Messenger\MsnMsgr.exe" [2007-01-19 12:54]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-09-15 00:20]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Svchost - netsvcs
pyjlqicd


Contents of the 'Scheduled Tasks' folder
2007-05-25 17:00:00 C:\WINDOWS\tasks\Norton AntiVirus - Tarkista tietokone - HP_Omistaja.job
2005-01-01 07:36:42 C:\WINDOWS\tasks\Symantec NetDetect.job
2007-06-03 23:00:00 C:\WINDOWS\tasks\wrSpySweeperTrialSweep.job

**************************************************************************

catchme 0.3.721 W2K/XP/Vista - userland rootkit detector by Gmer, http://www.gmer.net
Rootkit scan 2007-06-15 16:54:07
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************

Completion time: 2007-06-15 16:54:42 - machine was rebooted
C:\ComboFix-quarantined-files.txt ... 2007-06-15 16:54

--- E O F ---



diisgqje.exe;c:\windows\system32;BackDoor.Roam;Deleted.;
ipv6monr.dll;c:\windows\system32;Trojan.PWS.Tanspy;Will be cured after reboot.;
nsi30.tmp;C:\Documents and Settings\HP_Omistaja\Local Settings\Temp;Tool.Prockill;Incurable.Moved.;
SteamInstall.exe;C:\Documents and Settings\HP_Omistaja\Työpöytä\sälää;Win32.HLLW.MyBot;Deleted.;
ANTIFUN.EXE;C:\Documents and Settings\HP_Omistaja\Työpöytä\sälää\antifun;Probably BACKDOOR.Trojan;Incurable.Moved.;
KillWind.exe;C:\HP\bin;Tool.ProcessKill;Incurable.Moved.;
SetupDTSB.exe;C:\Program Files\DAEMON Tools;Adware.SaveNow;Incurable.Moved.;
mirc.exe;C:\Program Files\mIRC;Program.mIRC.617;Incurable.Moved.;
A0000072.exe;C:\System Volume Information\_restore{04486428-9B71-4484-9673-4493EB5E2F46}\RP2;BackDoor.Roam;Deleted.;
A0000074.exe;C:\System Volume Information\_restore{04486428-9B71-4484-9673-4493EB5E2F46}\RP2;Win32.HLLW.MyBot;Deleted.;
1809.exe;C:\WINDOWS;Trojan.PWS.Tanspy;Deleted.;
423125744.dll;C:\WINDOWS;Trojan.Click.2269;Deleted.;
winhp32.exe;C:\WINDOWS;Trojan.Hooker.175;Deleted.;
bqmtcs32.dll;C:\WINDOWS\system;Trojan.Mocalfost;Deleted.;
wmecst32.dll;C:\WINDOWS\system;BackDoor.IRC.Sdbot.1348;Deleted.;
ayacaaaa.exe;C:\WINDOWS\system32;Trojan.PWS.Tanspy;Deleted.;
ipv6monr.dll;C:\WINDOWS\system32;Trojan.PWS.Tanspy;Will be cured after reboot.;
ipv6mons.dll;C:\WINDOWS\system32;Trojan.PWS.Tanspy;Deleted.;
pygvaxbl.exe;C:\WINDOWS\system32;Trojan.PWS.Tanspy;Deleted.;
vpqreqgw.exe;C:\WINDOWS\system32;BackDoor.Roam;Deleted.;

Viestiä on muokattu lähettämisen jälkeen. Viimeisin muokkaus 15. kesäkuuta 2007 @ 13:13

Mainos
_
__
 
_
Member
_
17. kesäkuuta 2007 @ 14:27 _ Linkki tähän viestiin    Lähetä käyttäjälle yksityisviesti   
Moi!

Nyt on sellainen homma, että sun konees on niin täynnä örkkejä, että olisi paljon järkevämpää formatoida kuin alkaa väsäämään mitään.

Eli suosittelen että formatoit koneesi jos asennus-cd sulta löytyy.

Virustorjunta.net asiantuntevaa palvelua ilman peeloilua.
Hjt-lokit tänne
afterdawn.com > keskustelu > yleistä keskustelua tietokoneista > virukset ja haittaohjelmat - hijackthis -logit > hidastunut netti
 

Apua ongelmiin: AfterDawnin keskustelualueet | AfterDawnin Vastaukset
Uutiset: IT-alan uutiset | Uutisia puhelimista
Musiikkia: MP3Lizard.com
Tuotearviot: Laitevertailu | Vertaa puhelimia | Vertaa kännykkäliittymiä
Pelit: Pelitiedostot, pelidemot ja trailerit
Ohjelmat: download.fi | AfterDawnin ohjelma-alueet
International: AfterDawn in English | Software downloads | Free, legal MP3s | AfterDawn på svenska
RSS -syötteet: AfterDawnin uutiset | Uusimmat ohjelmapäivitykset | Keskustelualueiden viestit
Tietoja: Tietoa AfterDawn Oy:stä | Mainosta sivuillamme | Sivuston käyttöehdot ja tietoja yksityisyydensuojasta
Ota yhteyttä: Lähetä palautetta | Ota yhteyttä mainosmyyntiimme
 
  © 1999-2025 AfterDawn Oy