|
|
|
Keskustelualueet
Keskustelualueet
|
|
|
Kone hyvin todennäköisesti pursuaa viruksia / sun muuta moskaa
|
|
|
Ergelli
Newbie
|
23. syyskuuta 2007 @ 09:03 |
Linkki tähän viestiin
|
En ole kovinkaan etevä näiden tietokoneen puhdistus prosessien kanssa.
Eli osaamiseni on virustorjuntaohjelmien automaattisen puhditusoperaation käynnistämisen tasolla, mutta kyllä jotain osaan tehdä.
Ongelma: Kone tullut käsittämättömän hitaaksi ja "SecurePCCleaner" haittaohjelma kiusaa eikä lähde kirveelläkään irti. Arvostaisin kovasti jos saisin apua täältä ongelmaani ja kiitän jo etukäteen.
Tässä on HJT-logit
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:51, on 2007-08-25
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nTrayFw.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\QuickTime\QTTask.exe
C:\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
D:\Halflife ja CS Source\Steam.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Common Files\Logitech\KHAL\KHALMNPR.EXE
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Mikael\Työpöytä\HiJackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://softwarereferral.com/jump.php?wmid=6010&mid=MjI6Ojg5&lid=2
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: ContributeBHO Class - {074C1DC5-9320-4A9A-947D-C042949C6216} - E:\Photoshop\/Adobe Contribute CS3/contributeieplugin.dll
O2 - BHO: MSVPS System - {283A0EE3-2CC1-45AB-8207-B1D7B69C7F83} - C:\WINDOWS\duocore.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\Ohjelmat\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - D:\PROGRA~1\FlashGet\jccatch.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - D:\PROGRA~1\FlashGet\fgiebar.dll
O3 - Toolbar: Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - E:\Photoshop\/Adobe Contribute CS3/contributeieplugin.dll
O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
O4 - HKLM\..\Run: [nTrayFw] C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nTrayFw.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [dmxga.exe] C:\WINDOWS\system32\dmxga.exe
O4 - HKLM\..\Run: [Adobe_ID0EYTHM] C:\PROGRA~1\COMMON~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "E:\adobe\adobe reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Steam] D:\Halflife ja CS Source\Steam.exe -silent
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [SsAAD.exe] C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
O4 - HKCU\..\Run: [AdobeUpdater] C:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe
O4 - HKCU\..\Run: [CTSyncU.exe] "C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Paikallinen palve')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Verkkopalve')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: &Search - ?p=ZNfox000
O8 - Extra context menu item: Lataa FlashGetillä - D:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: Lataa kaikki FlashGetillä - D:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra button: Oheistiedot - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: PacificPoker - {94EDF7B4-4272-4af3-8F8B-4E2F68E225B7} - D:\PROGRA~1\PACIFI~1\pacificpoker.exe
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O17 - HKLM\System\CCS\Services\Tcpip\..\{4F705067-7E1D-406E-AEB6-F190D88FC4BF}: NameServer = 208.67.220.220,208.67.222.222
O17 - HKLM\System\CCS\Services\Tcpip\..\{6FE64CD9-2B24-4E23-90BD-45C45CC7F5FB}: NameServer = 85.255.114.4,85.255.112.137
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O21 - SSODL: wmpconf - {D7CEFFEA-C94D-4AD5-9F01-29180F04B362} - C:\WINDOWS\wmpconf.dll
O21 - SSODL: wmpenv - {FEBBDD85-81BA-4579-B19D-C4CC5E8E1601} - C:\WINDOWS\wmpenv.dll
O23 - Service: Adobe Version Cue CS3 - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Apache Software Foundation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: iPod-palvelu (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe
--
End of file - 10902 bytes
|
|
Hujo
Suspended permanently
|
23. syyskuuta 2007 @ 13:39 |
Linkki tähän viestiin
|
Lataa SmitfraudFix (c) S!Ri
Pura sisältö (kansio nimeltä SmitfraudFix) työpöydällesi:
Avaa SmitfraudFix kansio ja tupla-klikkaa smitfraudfix.cmd
Valitse optio #1 - Search kirjoittamalla 1 ja painamalla "Enter"; tekstitiedosto avautuu, joka listaa tarttuneet tiedostot (jos olemassa).
Postita tämän tekstitiedoston sisältö viestiketjuusi.
Huomaa : process.exe filun tunnistaa jotkut Anti-virus ohjelmat (AntiVir, Dr.Web, Kaspersky) "Haittakaluna"; se ei ole virus, vaan ohjelma joka pysäyttää prosesseja. A/V ohjelmat eivät pysty tunnistamaan hyvän ja pahan käytön tälläisten ohjelmian väliltä, silloin ne saattavat varoittaa käyttäjää.
=====================
Printtaa ohjeet ulos.
Käynnistä koneesi vikasietotilaan ja valitse tavallinen käyttäjätilisi.
Kun vikasietotilassa, avaa SmitfraudFix kansio ja tupla-klikkaa smitfraudfix.cmd
Valitse optio #2 - Clean kirjoittamalla 2 ja painamalla "Enter" poistaaksesi tarttuneet tiedostot.
Sinulta kysytään: "Registry cleaning - Do you want to clean the registry ?"; vastaa "Yes" kirjoittamalla Y ja paina "Enter" poistaaksesi työpöydän taustakuvan ja puhdistaaksesi tarttuneet rekisteriavaimet.
Työkalu tarkistaa jos wininet.dll on tarttunut. Sinua saatetaan pyytää korvaamaan tarttunut .dll (jos löytyy); vastaa "Yes" kirjoittamalla Y ja painamalla "Enter".
Työkalun saattaa tarvita käynnistää kone uudelleen; jos ei tee niin, käynnistä normaaliin Windowsiin.
Tekstitiedosto ilmestyy, puhdistusprosessin jäljiltä; kopioi & liitä tämän raportin tulokset vastaukseesi.
Raportti löytyy paikalliselta levyltäsi, useimmiten C:\rapport.txt.
Varoitus : Ajamalla optio 2:n EI-tarttuneessa tietokoneessa, poistaa sinun työpöytäsi taustakuvan.
====================
tee hommat ja laita kummastakin raportti
======================
scannaa hjt:llä merkkaa paina Fix checked
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://softwarereferral.com/jump.php?wmid=6010&mid=MjI6Ojg5&lid=2
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
==================
Lataa SDFix by AndyManchesta ja tallenna se työpöydällesi.
Käynnistä koneesi vikasietotilaan ja valitse tavallinen käyttäjätilisi:
" Käynnistä tietokone
" Kun kuulet koneen piippaavan, paina F8, kuitenkin ennen Windowsin logon esiintuloa
" Seuraavaksi pitäisi ilmestyä valikko
" Valitse valikosta vikasietotila.
" Kun vikasietotilassa, pura tiedoston SDFix.zip sisältö (SDFix kansio) työpöydällesi. Työpöydälle pitäisi ilmestyä kansio nimeltä SDFix.
" Avaa SDFix-kansio ja tuplaklikkaa tiedostoa RunThis.bat käynnistääksesi ohjelman.
" Paina Y käynnistääksesi skriptin.
" Työkalu puhdistaa troijalaisen palvelut ja tekee myös joitakin korjauksia rekisteriin. Lopuksi se pyytää käynnistämään koneen uudelleen, "Press any key to Reboot".
" Paina mitä tahansa näppäintä ja kone käynnistyy uudelleen.
" Käynnistyminen kestää normaalia kauemmin sillä SDFix puhdistaa konetta.
" Kun kone on käynnistynyt ja työpöytä latautunut, SDFix kertoo että puhdistus on suoritettu, "Finished".
" Paina sitten mitä tahansa näppäintä sulkeaksesi skriptin ja ladataksesi pikakuvakkeet työpöydälle.
" Lopuksi avaa SDFix kansio (työpöydällä) ja kopioi & liitä tiedoston Report.txt sisältö viestiketjuusi uuden HijackThis:n lokin kera.
=====================
Ohje AVG:n Anti-Spyware 7.5:n käyttöön
Huom! Tässä ohjeessa sammutetaan tuo reaaliaikasuojaus (Shield). Näin vältetään tilanteet joissa suojaus estäisi esim HijackThis:n työkalun toimintaa.
Tallenna nämä ohjeet tekstitiedostoon tai tulosta nämä, muuten et pääse niihin käsiksi vikasietotilasta
Lataa AVG:n Anti-Spyware 7.5:n
ja tallenna ohjelma työpöydällesi.
o Kun olet ladannut ohjelman, kaksoisklikkaa asennuohjelman pikakuvaketta työpöydälläsi, asennus alkaa.
o Asennuksen jälkeen täytyy ohjelma käynnistää ja sen tunnisteet päivittää.
o Käynnistä AVG:n Anti-Spyware.
o Klikkaa "Update" kuvaketta päävalikossa. Sen jälkeen klikkaa "Update now" painiketta.
o Sitten klikkaa "Start Update" kuvaketta jolloin päivitys alkaa.
o Kun päivitykset on ladattu, klikkaa "Scanner" kuvaketta ikkunan ylälaidassa. Valitse sitten "Settings" välilehti.
o Kun "Settings" valikko on auennut, klikkaa "Recommended actions" ja sitten valitse "Quarantine".
o Sitten "Reports" valikon alta:
o Laita täppi kohtaan "Automatically generate report after every scan"
o Ota täppi pois kohdasta"Only if threats were found"
o Sitten klikkaa "Shield" kuvaketta ikkunan ylälaidassa
o "Resident shield is", muuta tila active:sta inactive:ksi
o Sulje ohjelma, ÄLÄ skannaa vielä.
Käynnistä koneesi vikasietotilaan,
sammuta ja käynnistä
käynnistyksen yhteydessä naputtele F8
valitse nuoli näppäimellä vikasietotila
paina enter ja enter
HUOM! Älä käytä muita ohjelmia AVG:n skannauksen aikana, tämä saattaa häiritä skannausta.
o Kun vikasietotilassa, käynnistä AVG:n Anti-Spyware.
o Klikkaa "Scanner" kuvaketta ikkunan ylälaidassa ja valitse "Scan" välilehti. Sitten klikkaa "Complete System Scan".
o Ewido aloittaa nyt tietokoneen skannaamisen, ole kärsivällinen sillä skannaus vie aikaa.
Kun skannaus on valmis:
TÄRKEÄÄ : Älä klikkaa "Save Scan Report" ennen kuin klikkaat "Apply all Actions"
o Varmistu, että Set all elements to: näyttää Quarantine (1), jos ei, klikkaa linkkiä ja valitse Quarantine popup-valikosta.
o Sinulta kysytään mitä tehdä jos infektioita löytyi, valitse silloin "Apply all actions"
o Sitten klikkaa "Reports" kuvaketta ohjelma yläosasta.
o Klikkaa "Save report as" painiketta ikkunan vasemmassa alalaidassa ja tallenna raportti työpöydälle.
o Sulje ohjelma, käynnistä kone normaalisti ja lähetä AVG:n raportti viestikejuusi.
======================
Lataa tuolta http://www.ccleaner.com/download/builds.aspx
CCleaner v2.00.500 - Standard Build, ÄLÄ aseenna Yahoo toolbaria!
laita asetukset näin:
Valinnat --> Lisäasetukset --> Ota ruksi pois kohdasta Poista vain yli 48 tuntia vanhat tilapäistiedostot.
aja Puhdistaja > tutki nappi > aja ccleaner nappi oikea alakulma
aja Virheet > etsi rekisteri virheitä nappi > Korjaa rekisteri virheet. nappi
Voiko tietsikka koskaan toimia?
|
|
Ergelli
Newbie
|
23. syyskuuta 2007 @ 14:43 |
Linkki tähän viestiin
|
Tässä on Smitfraudfixin raportit.
SmitFraudFix v2.227
Scan done at 18:13:03.65, 2007-09-23
Run from C:\Documents and Settings\Mikael\Ty?p?yt?\SmitfraudFix\SmitfraudFix
OS: Microsoft Windows XP [versio 5.1.2600] - Windows_NT
The filesystem type is NTFS
Fix run in normal mode
»»»»»»»»»»»»»»»»»»»»»»»» Process
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nTrayFw.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\QuickTime\QTTask.exe
C:\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
D:\Halflife ja CS Source\Steam.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Common Files\Logitech\KHAL\KHALMNPR.EXE
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\WINDOWS\system32\cmd.exe
»»»»»»»»»»»»»»»»»»»»»»»» hosts
»»»»»»»»»»»»»»»»»»»»»»»» C:\
»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS
C:\WINDOWS\duocore.dll FOUND !
C:\WINDOWS\main_uninstaller.exe FOUND !
C:\WINDOWS\wmpconf.dll FOUND !
C:\WINDOWS\wmpenv.dll FOUND !
»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system
»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web
»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32
»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Mikael
»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Mikael\Application Data
»»»»»»»»»»»»»»»»»»»»»»»» Start Menu
»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\Mikael\Suosikit
C:\DOCUME~1\Mikael\Suosikit\Error Cleaner.url FOUND !
C:\DOCUME~1\Mikael\Suosikit\Privacy Protector.url FOUND !
»»»»»»»»»»»»»»»»»»»»»»»» Desktop
C:\DOCUME~1\Mikael\TYPYT~1\Error Cleaner.url FOUND !
C:\DOCUME~1\Mikael\TYPYT~1\Privacy Protector.url FOUND !
C:\DOCUME~1\Mikael\TYPYT~1\Spyware?Malware Protection.url FOUND !
»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files
C:\Program Files\VideoAccessCodec\ FOUND !
»»»»»»»»»»»»»»»»»»»»»»»» Corrupted keys
»»»»»»»»»»»»»»»»»»»»»»»» Desktop Components
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
"Source"="About:Home"
"SubscribedURL"="About:Home"
"FriendlyName"="Nykyinen kotisivu"
»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, following keys are not inevitably infected!!!
SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll
»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, following keys are not inevitably infected!!!
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=""
»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, following keys are not inevitably infected!!!
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"="csxed.exe"
»»»»»»»»»»»»»»»»»»»»»»»» Rustock
»»»»»»»»»»»»»»»»»»»»»»»» DNS
Description: NVIDIA nForce Networking Controller - Paketinajoituksen miniportti
DNS Server Search Order: 208.67.220.220
DNS Server Search Order: 208.67.222.222
HKLM\SYSTEM\CCS\Services\Tcpip\..\{10114497-932F-42CE-8B5E-9FFEA1029953}: DhcpNameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CCS\Services\Tcpip\..\{4F705067-7E1D-406E-AEB6-F190D88FC4BF}: DhcpNameServer=192.168.50.11 194.241.250.90
HKLM\SYSTEM\CCS\Services\Tcpip\..\{4F705067-7E1D-406E-AEB6-F190D88FC4BF}: NameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CCS\Services\Tcpip\..\{6FE64CD9-2B24-4E23-90BD-45C45CC7F5FB}: NameServer=85.255.114.4,85.255.112.137
HKLM\SYSTEM\CS1\Services\Tcpip\..\{10114497-932F-42CE-8B5E-9FFEA1029953}: DhcpNameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CS1\Services\Tcpip\..\{4F705067-7E1D-406E-AEB6-F190D88FC4BF}: DhcpNameServer=192.168.50.11 194.241.250.90
HKLM\SYSTEM\CS1\Services\Tcpip\..\{4F705067-7E1D-406E-AEB6-F190D88FC4BF}: NameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CS1\Services\Tcpip\..\{6FE64CD9-2B24-4E23-90BD-45C45CC7F5FB}: NameServer=85.255.114.4,85.255.112.137
HKLM\SYSTEM\CS2\Services\Tcpip\..\{10114497-932F-42CE-8B5E-9FFEA1029953}: DhcpNameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CS2\Services\Tcpip\..\{4F705067-7E1D-406E-AEB6-F190D88FC4BF}: DhcpNameServer=192.168.50.11 194.241.250.90
HKLM\SYSTEM\CS2\Services\Tcpip\..\{4F705067-7E1D-406E-AEB6-F190D88FC4BF}: NameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CS2\Services\Tcpip\..\{6FE64CD9-2B24-4E23-90BD-45C45CC7F5FB}: NameServer=85.255.114.4,85.255.112.137
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.50.11 194.241.250.90
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: NameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.50.11 194.241.250.90
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: NameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=192.168.50.11 194.241.250.90
HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: NameServer=208.67.220.220,208.67.222.222
»»»»»»»»»»»»»»»»»»»»»»»» Scanning for wininet.dll infection
»»»»»»»»»»»»»»»»»»»»»»»» End
SmitFraudFix v2.227
Scan done at 18:30:03.71, 2007-09-23
Run from C:\Documents and Settings\Mikael\Ty?p?yt?\SmitfraudFix\SmitfraudFix
OS: Microsoft Windows XP [versio 5.1.2600] - Windows_NT
The filesystem type is NTFS
Fix run in safe mode
»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Before SmitFraudFix
!!!Attention, following keys are not inevitably infected!!!
SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll
»»»»»»»»»»»»»»»»»»»»»»»» Killing process
»»»»»»»»»»»»»»»»»»»»»»»» hosts
127.0.0.1 localhost
»»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix
GenericRenosFix by S!Ri
»»»»»»»»»»»»»»»»»»»»»»»» Deleting infected files
C:\WINDOWS\duocore.dll Deleted
C:\WINDOWS\main_uninstaller.exe Deleted
C:\WINDOWS\wmpconf.dll Deleted
Deleting [HKEY_CLASSES_ROOT\CLSID\{D7CEFFEA-C94D-4AD5-9F01-29180F04B362}]
C:\WINDOWS\wmpenv.dll Deleted
Deleting [HKEY_CLASSES_ROOT\CLSID\{FEBBDD85-81BA-4579-B19D-C4CC5E8E1601}]
C:\DOCUME~1\Mikael\TYPYT~1\Error Cleaner.url Deleted
C:\DOCUME~1\Mikael\Suosikit\Error Cleaner.url Deleted
C:\DOCUME~1\Mikael\Suosikit\Privacy Protector.url Deleted
C:\Program Files\VideoAccessCodec\ Deleted
»»»»»»»»»»»»»»»»»»»»»»»» DNS
HKLM\SYSTEM\CCS\Services\Tcpip\..\{10114497-932F-42CE-8B5E-9FFEA1029953}: DhcpNameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CCS\Services\Tcpip\..\{4F705067-7E1D-406E-AEB6-F190D88FC4BF}: DhcpNameServer=192.168.50.11 194.241.250.90
HKLM\SYSTEM\CCS\Services\Tcpip\..\{4F705067-7E1D-406E-AEB6-F190D88FC4BF}: NameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CCS\Services\Tcpip\..\{6FE64CD9-2B24-4E23-90BD-45C45CC7F5FB}: NameServer=85.255.114.4,85.255.112.137
HKLM\SYSTEM\CS1\Services\Tcpip\..\{10114497-932F-42CE-8B5E-9FFEA1029953}: DhcpNameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CS1\Services\Tcpip\..\{4F705067-7E1D-406E-AEB6-F190D88FC4BF}: DhcpNameServer=192.168.50.11 194.241.250.90
HKLM\SYSTEM\CS1\Services\Tcpip\..\{4F705067-7E1D-406E-AEB6-F190D88FC4BF}: NameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CS1\Services\Tcpip\..\{6FE64CD9-2B24-4E23-90BD-45C45CC7F5FB}: NameServer=85.255.114.4,85.255.112.137
HKLM\SYSTEM\CS2\Services\Tcpip\..\{10114497-932F-42CE-8B5E-9FFEA1029953}: DhcpNameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CS2\Services\Tcpip\..\{4F705067-7E1D-406E-AEB6-F190D88FC4BF}: DhcpNameServer=192.168.50.11 194.241.250.90
HKLM\SYSTEM\CS2\Services\Tcpip\..\{4F705067-7E1D-406E-AEB6-F190D88FC4BF}: NameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CS2\Services\Tcpip\..\{6FE64CD9-2B24-4E23-90BD-45C45CC7F5FB}: NameServer=85.255.114.4,85.255.112.137
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.50.11 194.241.250.90
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: NameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.50.11 194.241.250.90
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: NameServer=208.67.220.220,208.67.222.222
HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=192.168.50.11 194.241.250.90
HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: NameServer=208.67.220.220,208.67.222.222
»»»»»»»»»»»»»»»»»»»»»»»» Deleting Temp Files
»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, following keys are not inevitably infected!!!
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"="csxed.exe"
»»»»»»»»»»»»»»»»»»»»»»»» Registry Cleaning
Registry Cleaning done.
»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler After SmitFraudFix
!!!Attention, following keys are not inevitably infected!!!
SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll
»»»»»»»»»»»»»»»»»»»»»»»» End
|
|
Ergelli
Newbie
|
23. syyskuuta 2007 @ 14:51 |
Linkki tähän viestiin
|
En löytänyt HJT:llä fixattavaks tätä riviä mistään.
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://softwarereferral.com/jump.php?wmid=6010&mid=MjI6Ojg5&lid=2
Tässä on HJT-logit smitfraudifixin jälkeen.
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:48, on 2007-09-23
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nTrayFw.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\QuickTime\QTTask.exe
C:\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
D:\Halflife ja CS Source\Steam.exe
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
C:\Program Files\Common Files\Logitech\KHAL\KHALMNPR.EXE
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Mikael\Työpöytä\HiJackThis.exe
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: ContributeBHO Class - {074C1DC5-9320-4A9A-947D-C042949C6216} - E:\Photoshop\/Adobe Contribute CS3/contributeieplugin.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\Ohjelmat\SPYBOT~1\SDHelper.dll
O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - D:\PROGRA~1\FlashGet\jccatch.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - D:\PROGRA~1\FlashGet\fgiebar.dll
O3 - Toolbar: Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - E:\Photoshop\/Adobe Contribute CS3/contributeieplugin.dll
O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
O4 - HKLM\..\Run: [nTrayFw] C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nTrayFw.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [dmxga.exe] C:\WINDOWS\system32\dmxga.exe
O4 - HKLM\..\Run: [Adobe_ID0EYTHM] C:\PROGRA~1\COMMON~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "E:\adobe\adobe reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Steam] D:\Halflife ja CS Source\Steam.exe -silent
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [SsAAD.exe] C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
O4 - HKCU\..\Run: [AdobeUpdater] C:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe
O4 - HKCU\..\Run: [CTSyncU.exe] "C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Paikallinen palve')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Verkkopalve')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: &Search - ?p=ZNfox000
O8 - Extra context menu item: Lataa FlashGetillä - D:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: Lataa kaikki FlashGetillä - D:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra button: Oheistiedot - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: PacificPoker - {94EDF7B4-4272-4af3-8F8B-4E2F68E225B7} - D:\PROGRA~1\PACIFI~1\pacificpoker.exe
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O17 - HKLM\System\CCS\Services\Tcpip\..\{4F705067-7E1D-406E-AEB6-F190D88FC4BF}: NameServer = 208.67.220.220,208.67.222.222
O17 - HKLM\System\CCS\Services\Tcpip\..\{6FE64CD9-2B24-4E23-90BD-45C45CC7F5FB}: NameServer = 85.255.114.4,85.255.112.137
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O23 - Service: Adobe Version Cue CS3 - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Apache Software Foundation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: iPod-palvelu (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe
--
End of file - 10354 bytes
|
|
Hujo
Suspended permanently
|
23. syyskuuta 2007 @ 15:02 |
Linkki tähän viestiin
|
Voiko tietsikka koskaan toimia?
|
|
Ergelli
Newbie
|
23. syyskuuta 2007 @ 15:13 |
Linkki tähän viestiin
|
Tässä ois SDFix:n raportti ja sen jälkeen suoritetun HJT:n uusin raportti
SDFix: Version 1.107
Run by Mikael on 2007-09-23 at 18:59
Microsoft Windows XP [versio 5.1.2600]
Running From: C:\DOCUME~1\Mikael\TYPYT~1\SDFix
Safe Mode:
Checking Services:
Restoring Windows Registry Values
Restoring Windows Default Hosts File
Rebooting...
Normal Mode:
Checking Files:
Trojan Files Found:
C:\Documents and Settings\Mikael\Ty?p?yt?\kuvat\Privacy Protector.url - Deleted
C:\Documents and Settings\Mikael\Ty?p?yt?\kuvat\Spyware&Malware Protection.url - Deleted
C:\WINDOWS\dat.txt - Deleted
C:\WINDOWS\rs.txt - Deleted
Removing Temp Files...
ADS Check:
C:\WINDOWS
No streams found.
C:\WINDOWS\system32
No streams found.
C:\WINDOWS\system32\svchost.exe
No streams found.
C:\WINDOWS\system32\ntoskrnl.exe
No streams found.
Final Check:
Remaining Services:
------------------
Authorized Application Key Export:
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\F-Secure\\BackWeb\\7681197\\program\\F-Secure Automatic Update.exe"="C:\\Program Files\\F-Secure\\BackWeb\\7681197\\program\\F-Secure Automatic Update.exe:*:Enabled:F-Secure Automatic Update"
"C:\\Program Files\\NVIDIA Corporation\\NetworkAccessManager\\Apache Group\\Apache2\\bin\\Apache.exe"="C:\\Program Files\\NVIDIA Corporation\\NetworkAccessManager\\Apache Group\\Apache2\\bin\\Apache.exe:*:Enabled:Apache HTTP Server"
"E:\\World of Warcraft\\WoW-1.6.0-enGB-downloader.exe"="E:\\World of Warcraft\\WoW-1.6.0-enGB-downloader.exe:*:Enabled:Blizzard Downloader"
"D:\\Halflife ja CS Source\\Steam.exe"="D:\\Halflife ja CS Source\\Steam.exe:*:Enabled:Steam"
"D:\\Halflife ja CS Source\\SteamApps\\tositappaja\\counter-strike source\\hl2.exe"="D:\\Halflife ja CS Source\\SteamApps\\tositappaja\\counter-strike source\\hl2.exe:*:Enabled:hl2"
"C:\\Program Files\\ABC\\abc.exe"="C:\\Program Files\\ABC\\abc.exe:*:Enabled:abc"
"E:\\World of Warcraft\\WoW-1.6.0.4500-to-1.6.1-enGB-downloader.exe"="E:\\World of Warcraft\\WoW-1.6.0.4500-to-1.6.1-enGB-downloader.exe:*:Enabled:Blizzard Downloader"
"D:\\Mikael\\WoW-1.6.1.4544-to-0.7.0-enGB-downloader.exe"="D:\\Mikael\\WoW-1.6.1.4544-to-0.7.0-enGB-downloader.exe:*:Enabled:Blizzard Downloader"
"C:\\Program Files\\Messenger\\msmsgs.exe"="C:\\Program Files\\Messenger\\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\\WINDOWS\\pchealth\\helpctr\\binaries\\HelpCtr.exe"="C:\\WINDOWS\\pchealth\\helpctr\\binaries\\HelpCtr.exe:*:Enabled:Et?tuki - Windows Messenger ja ??niyhteys"
"C:\\Program Files\\DC++\\DCPlusPlus.exe"="C:\\Program Files\\DC++\\DCPlusPlus.exe:*:Enabled:DC++"
"E:\\Battlefield 2142\\BF2142.exe"="E:\\Battlefield 2142\\BF2142.exe:*:Enabled:Battlefield 2"
"C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"="C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger"
"C:\\Program Files\\Bonjour\\mDNSResponder.exe"="C:\\Program Files\\Bonjour\\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\\Program Files\\Common Files\\Adobe\\Adobe Version Cue CS3\\Server\\bin\\VersionCueCS3.exe"="C:\\Program Files\\Common Files\\Adobe\\Adobe Version Cue CS3\\Server\\bin\\VersionCueCS3.exe:*:Enabled:Adobe Version Cue CS3 Server"
"C:\\iTunes\\iTunes.exe"="C:\\iTunes\\iTunes.exe:*:Enabled:iTunes"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\\Program Files\\Skype\\Phone\\Skype.exe"="C:\\Program Files\\Skype\\Phone\\Skype.exe:*:Enabled:Skype"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"="C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
Remaining Files:
---------------
File Backups: - C:\DOCUME~1\Mikael\TYPYT~1\SDFix\backups\backups.zip
Files with Hidden Attributes:
Thu 14 Jul 2005 56 ..SHR --- "C:\WINDOWS\system32\492FE3324A.sys"
Thu 14 Jul 2005 1,682 A.SH. --- "C:\WINDOWS\system32\KGyGaAvL.sys"
Sat 13 Aug 2005 4,348 A.SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
Finished!
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:12, on 2007-09-23
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\notepad.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nTrayFw.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\QuickTime\QTTask.exe
C:\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
D:\Halflife ja CS Source\Steam.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Common Files\Logitech\KHAL\KHALMNPR.EXE
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Mikael\Työpöytä\HiJackThis.exe
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: ContributeBHO Class - {074C1DC5-9320-4A9A-947D-C042949C6216} - E:\Photoshop\/Adobe Contribute CS3/contributeieplugin.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\Ohjelmat\SPYBOT~1\SDHelper.dll
O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - D:\PROGRA~1\FlashGet\jccatch.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - D:\PROGRA~1\FlashGet\fgiebar.dll
O3 - Toolbar: Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - E:\Photoshop\/Adobe Contribute CS3/contributeieplugin.dll
O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
O4 - HKLM\..\Run: [nTrayFw] C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nTrayFw.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [dmxga.exe] C:\WINDOWS\system32\dmxga.exe
O4 - HKLM\..\Run: [Adobe_ID0EYTHM] C:\PROGRA~1\COMMON~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "E:\adobe\adobe reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Steam] D:\Halflife ja CS Source\Steam.exe -silent
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [SsAAD.exe] C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
O4 - HKCU\..\Run: [AdobeUpdater] C:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe
O4 - HKCU\..\Run: [CTSyncU.exe] "C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Paikallinen palve')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Verkkopalve')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: &Search - ?p=ZNfox000
O8 - Extra context menu item: Lataa FlashGetillä - D:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: Lataa kaikki FlashGetillä - D:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra button: Oheistiedot - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: PacificPoker - {94EDF7B4-4272-4af3-8F8B-4E2F68E225B7} - D:\PROGRA~1\PACIFI~1\pacificpoker.exe
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O17 - HKLM\System\CCS\Services\Tcpip\..\{4F705067-7E1D-406E-AEB6-F190D88FC4BF}: NameServer = 208.67.220.220,208.67.222.222
O17 - HKLM\System\CCS\Services\Tcpip\..\{6FE64CD9-2B24-4E23-90BD-45C45CC7F5FB}: NameServer = 85.255.114.4,85.255.112.137
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O23 - Service: Adobe Version Cue CS3 - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Apache Software Foundation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: iPod-palvelu (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe
--
End of file - 10387 bytes
|
|
Hujo
Suspended permanently
|
23. syyskuuta 2007 @ 15:25 |
Linkki tähän viestiin
|
|
katos tuolla ylenpänä on uusi ohjelma ajettavaksi
nykäse se tässä välissä
Voiko tietsikka koskaan toimia?
Viestiä on muokattu lähettämisen jälkeen. Viimeisin muokkaus 23. syyskuuta 2007 @ 15:26
|
|
Ergelli
Newbie
|
23. syyskuuta 2007 @ 16:23 |
Linkki tähän viestiin
|
Tässä on Fixwareout:n reportaasi tilanteesta.
Username "Mikael" - 2007-09-23 20:19:30 [Fixwareout edited 2007/07/05]
»»»»»Prerun check
HKLM\SOFTWARE\~\CurrentVersion\Run\ ="dmxga"
HKLM\SOFTWARE\~\Winlogon\ "System"="csxed.exe"
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\tcpip\parameters\interfaces\{6FE64CD9-2B24-4E23-90BD-45C45CC7F5FB}
"nameserver"="85.255.114.4,85.255.112.137" <Value cleared.
DNS-tulkintatoiminnon välimuistin tyhjentäminen onnistui.
System was rebooted successfully.
»»»»» Postrun check
HKLM\SOFTWARE\~\Winlogon\ "system"=""
....
....
»»»»» Misc files.
....
»»»»» Checking for older varients.
....
»»»»» Current runs (hklm hkcu "run" Keys Only)
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NVMixerTray"="\"C:\\Program Files\\NVIDIA Corporation\\NvMixer\\NVMixerTray.exe\""
"ATIPTA"="C:\\Program Files\\ATI Technologies\\ATI Control Panel\\atiptaxx.exe"
"SunJavaUpdateSched"="C:\\Program Files\\Java\\jre1.5.0_04\\bin\\jusched.exe"
"nTrayFw"="C:\\Program Files\\NVIDIA Corporation\\NetworkAccessManager\\bin\\nTrayFw.exe"
"SoundMan"="SOUNDMAN.EXE"
"NeroFilterCheck"="C:\\WINDOWS\\system32\\NeroCheck.exe"
"DAEMON Tools"="\"C:\\Program Files\\DAEMON Tools\\daemon.exe\" -lang 1033"
"WinampAgent"="C:\\Program Files\\Winamp\\winampa.exe"
"Adobe_ID0EYTHM"="C:\\PROGRA~1\\COMMON~1\\Adobe\\ADOBEV~1\\Server\\bin\\VERSIO~2.EXE"
"Adobe Reader Speed Launcher"="\"E:\\adobe\\adobe reader 8.0\\Reader\\Reader_sl.exe\""
"avgnt"="\"C:\\Program Files\\AntiVir PersonalEdition Classic\\avgnt.exe\" /min"
"QuickTime Task"="\"C:\\Program Files\\QuickTime\\QTTask.exe\" -atboottime"
"iTunesHelper"="\"C:\\iTunes\\iTunesHelper.exe\""
"!AVG Anti-Spyware"="\"C:\\Program Files\\Grisoft\\AVG Anti-Spyware 7.5\\avgas.exe\" /minimized"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\ctfmon.exe"
"Steam"="D:\\Halflife ja CS Source\\Steam.exe -silent"
"Skype"="\"C:\\Program Files\\Skype\\Phone\\Skype.exe\" /nosplash /minimized"
"msnmsgr"="\"C:\\Program Files\\MSN Messenger\\msnmsgr.exe\" /background"
"LDM"="C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"
"SsAAD.exe"="C:\\PROGRA~1\\Sony\\SONICS~1\\SsAAD.exe"
"AdobeUpdater"="C:\\Program Files\\Common Files\\Adobe\\Updater5\\AdobeUpdater.exe"
"CTSyncU.exe"="\"C:\\Program Files\\Creative\\Sync Manager Unicode\\CTSyncU.exe\""
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\AdobeUpdater]
....
Hosts file was reset, If you use a custom hosts file please replace it
»»»»» End report »»»»»
|
|
Ergelli
Newbie
|
23. syyskuuta 2007 @ 16:28 |
Linkki tähän viestiin
|
Ehdin kyllä ajaa AVG Anti-spyware 7.5:n scannauksen enne Fixwareout:n ajamista ja AVG oksensi tälläsen raportin.
---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------
+ Created at: 20:12 2007-09-23
+ Scan result:
D:\Mikael\CursorManiaFFSetup2.0.4.21.exe -> Dropper.Small : Cleaned with backup (quarantined).
:mozilla.114:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned.
:mozilla.115:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned.
:mozilla.116:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.117:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.118:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.119:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.120:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.121:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.122:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.123:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.124:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.125:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.126:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.127:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.128:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.129:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.130:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.131:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.132:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.133:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.134:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.135:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.190:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.191:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.192:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.193:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.194:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.195:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.196:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.197:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.198:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.199:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.200:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.201:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.247:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.254:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.271:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.290:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.418:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.435:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.475:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.482:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.663:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.774:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.785:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.869:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\Mikael\Cookies\mikael@2o7[2].txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\Mikael\Cookies\mikael@blinck.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\Mikael\Cookies\mikael@msnaccountservices.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\Mikael\Cookies\mikael@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.626:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.71i : Cleaned.
:mozilla.156:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.157:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.79:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.80:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.81:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.82:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
C:\Documents and Settings\Mikael\Cookies\mikael@adbrite[2].txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.782:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.783:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.784:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Adjuggler : Cleaned.
:mozilla.836:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Adobe : Cleaned.
C:\Documents and Settings\Mikael\Cookies\mikael@www.adobe[1].txt -> TrackingCookie.Adobe : Cleaned.
:mozilla.273:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.165:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.
:mozilla.166:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.
:mozilla.455:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Adtech : Cleaned.
:mozilla.456:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Adtech : Cleaned.
C:\Documents and Settings\Mikael\Cookies\mikael@adtech[2].txt -> TrackingCookie.Adtech : Cleaned.
:mozilla.10:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.242:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.243:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.244:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.245:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.246:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.6:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.7:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.8:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.9:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.119:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.205:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
C:\Documents and Settings\Mikael\Cookies\mikael@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.234:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.235:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.338:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.339:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
C:\Documents and Settings\Mikael\Cookies\mikael@burstnet[1].txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.368:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.369:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.370:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.81:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.82:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.83:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.84:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
C:\Documents and Settings\Mikael\Cookies\mikael@centrport[1].txt -> TrackingCookie.Centrport : Cleaned.
:mozilla.482:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Clickzs : Cleaned.
:mozilla.483:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Clickzs : Cleaned.
:mozilla.522:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Clickzs : Cleaned.
:mozilla.523:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Clickzs : Cleaned.
:mozilla.524:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Clickzs : Cleaned.
:mozilla.525:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Clickzs : Cleaned.
:mozilla.526:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Clickzs : Cleaned.
:mozilla.676:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Clickzs : Cleaned.
:mozilla.677:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Clickzs : Cleaned.
:mozilla.564:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Cnn : Cleaned.
:mozilla.249:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Com : Cleaned.
:mozilla.250:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Com : Cleaned.
:mozilla.672:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Com : Cleaned.
C:\Documents and Settings\Mikael\Cookies\mikael@com[2].txt -> TrackingCookie.Com : Cleaned.
:mozilla.16:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.17:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.83:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.294:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Estat : Cleaned.
:mozilla.687:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Estat : Cleaned.
C:\Documents and Settings\Mikael\Cookies\mikael@estat[1].txt -> TrackingCookie.Estat : Cleaned.
:mozilla.160:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned.
:mozilla.394:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Euroclick : Cleaned.
C:\Documents and Settings\Mikael\Cookies\mikael@as-us.falkag[2].txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.93:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.94:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.97:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
C:\Documents and Settings\Mikael\Cookies\mikael@fortunecity[1].txt -> TrackingCookie.Fortunecity : Cleaned.
:mozilla.66:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.864:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.90:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.175:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.258:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.259:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.260:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.264:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.62:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.63:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.66:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.337:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Imrworldwide : Cleaned.
:mozilla.338:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Imrworldwide : Cleaned.
:mozilla.373:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Imrworldwide : Cleaned.
:mozilla.374:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Imrworldwide : Cleaned.
:mozilla.786:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Information : Cleaned.
C:\Documents and Settings\Mikael\Cookies\mikael@searchportal.information[1].txt -> TrackingCookie.Information : Cleaned.
C:\Documents and Settings\Mikael\Cookies\mikael@ilead.itrack[2].txt -> TrackingCookie.Itrack : Cleaned.
:mozilla.348:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Ivwbox : Cleaned.
:mozilla.726:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Ivwbox : Cleaned.
C:\Documents and Settings\Mikael\Cookies\mikael@ivwbox[1].txt -> TrackingCookie.Ivwbox : Cleaned.
:mozilla.735:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Komtrack : Cleaned.
C:\Documents and Settings\Mikael\Cookies\mikael@search.live[1].txt -> TrackingCookie.Live : Cleaned.
:mozilla.758:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Masterstats : Cleaned.
:mozilla.141:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.
C:\Documents and Settings\Mikael\Cookies\mikael@auto.search.msn[2].txt -> TrackingCookie.Msn : Cleaned.
C:\Documents and Settings\Mikael\Cookies\mikael@search.msn[2].txt -> TrackingCookie.Msn : Cleaned.
:mozilla.837:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Ne : Cleaned.
:mozilla.18:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Netflame : Cleaned.
:mozilla.23:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Netflame : Cleaned.
:mozilla.800:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.801:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Onestat : Cleaned.
:mozilla.503:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Overture : Cleaned.
:mozilla.504:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Overture : Cleaned.
:mozilla.87:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Overture : Cleaned.
:mozilla.88:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Overture : Cleaned.
:mozilla.89:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Overture : Cleaned.
C:\Documents and Settings\Mikael\Cookies\mikael@overture[2].txt -> TrackingCookie.Overture : Cleaned.
:mozilla.900:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Paypal : Cleaned.
:mozilla.161:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.162:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.163:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.164:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.341:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.342:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.343:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.344:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.354:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.355:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.356:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
C:\Documents and Settings\Mikael\Cookies\mikael@ads.pointroll[2].txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.449:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Qksrv : Cleaned.
:mozilla.450:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Qksrv : Cleaned.
:mozilla.779:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Qksrv : Cleaned.
:mozilla.780:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Qksrv : Cleaned.
:mozilla.880:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Quarterserver : Cleaned.
:mozilla.384:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.385:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
C:\Documents and Settings\Mikael\Cookies\mikael@questionmarket[1].txt -> TrackingCookie.Questionmarket : Cleaned.
C:\Documents and Settings\Mikael\Cookies\mikael@ads.realcastmedia[1].txt -> TrackingCookie.Realcastmedia : Cleaned.
:mozilla.105:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.106:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.107:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.108:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.454:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.455:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.456:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
C:\Documents and Settings\Mikael\Cookies\mikael@realmedia[1].txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.787:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Revenue : Cleaned.
C:\Documents and Settings\Mikael\Cookies\mikael@revenue[1].txt -> TrackingCookie.Revenue : Cleaned.
:mozilla.345:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.346:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.347:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.348:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.349:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.350:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.351:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.352:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.353:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.459:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.460:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.461:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.462:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.463:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.464:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.465:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.466:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.620:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.24:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.25:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.26:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.27:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.28:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.31:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.546:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.547:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.548:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.549:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.550:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.551:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
C:\Documents and Settings\Mikael\Cookies\mikael@bs.serving-sys[1].txt -> TrackingCookie.Serving-sys : Cleaned.
C:\Documents and Settings\Mikael\Cookies\mikael@serving-sys[1].txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.253:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.254:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.255:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.256:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.257:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.258:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.259:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.260:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.261:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.262:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.327:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.328:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.329:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.330:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.331:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.332:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.420:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Sitestat : Cleaned.
:mozilla.759:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned.
:mozilla.409:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Skype : Cleaned.
:mozilla.489:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Skype : Cleaned.
:mozilla.490:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Skype : Cleaned.
:mozilla.554:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Skype : Cleaned.
:mozilla.799:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Skype : Cleaned.
C:\Documents and Settings\Mikael\Cookies\mikael@skype[2].txt -> TrackingCookie.Skype : Cleaned.
:mozilla.584:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Smartadserver : Cleaned.
:mozilla.585:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Smartadserver : Cleaned.
:mozilla.586:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Smartadserver : Cleaned.
:mozilla.587:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Smartadserver : Cleaned.
:mozilla.588:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Smartadserver : Cleaned.
:mozilla.907:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned.
:mozilla.908:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned.
:mozilla.909:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned.
C:\Documents and Settings\Mikael\Cookies\mikael@www.smartadserver[2].txt -> TrackingCookie.Smartadserver : Cleaned.
C:\Documents and Settings\Mikael\Cookies\mikael@starware[2].txt -> TrackingCookie.Starware : Cleaned.
:mozilla.77:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.13:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Statistik-gallup : Cleaned.
:mozilla.14:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Statistik-gallup : Cleaned.
:mozilla.56:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Statistik-gallup : Cleaned.
C:\Documents and Settings\Mikael\Cookies\mikael@statistik-gallup[1].txt -> TrackingCookie.Statistik-gallup : Cleaned.
:mozilla.295:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.296:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.297:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.509:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.510:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.511:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.512:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.112:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.113:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.57:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.58:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.59:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
C:\Documents and Settings\Mikael\Cookies\mikael@trafficmp[2].txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.32:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.6:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
C:\Documents and Settings\Mikael\Cookies\mikael@tribalfusion[2].txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.539:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Weborama : Cleaned.
:mozilla.217:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Webtrends : Cleaned.
C:\Documents and Settings\Mikael\Cookies\mikael@m.webtrends[1].txt -> TrackingCookie.Webtrends : Cleaned.
:mozilla.571:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Yadro : Cleaned.
:mozilla.572:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Yadro : Cleaned.
:mozilla.613:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.614:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.615:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.616:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.88:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.89:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.90:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.91:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.92:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
C:\System Volume Information\_restore{273BC510-EB93-43B0-9877-6DA505C20742}\RP472\A0223316.ocx -> Trojan.Agent.aqj : Cleaned with backup (quarantined).
C:\System Volume Information\_restore{273BC510-EB93-43B0-9877-6DA505C20742}\RP461\A0208268.exe -> Trojan.DNSChanger.en : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{273BC510-EB93-43B0-9877-6DA505C20742}\RP466\A0210637.exe/mwsSetup.CommonCodebase.exe -> Trojan.Isbar.s : Cleaned with backup (quarantined).
::Report end
|
|
Hujo
Suspended permanently
|
23. syyskuuta 2007 @ 17:53 |
Linkki tähän viestiin
|
|
scannaa uusi hjt:n loki
Voiko tietsikka koskaan toimia?
|
|
Ergelli
Newbie
|
25. syyskuuta 2007 @ 12:53 |
Linkki tähän viestiin
|
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:53, on 2007-09-25
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nTrayFw.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\QuickTime\QTTask.exe
C:\iTunes\iTunesHelper.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
D:\Halflife ja CS Source\Steam.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Common Files\Logitech\KHAL\KHALMNPR.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Mikael\Työpöytä\HiJackThis.exe
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: ContributeBHO Class - {074C1DC5-9320-4A9A-947D-C042949C6216} - E:\Photoshop\/Adobe Contribute CS3/contributeieplugin.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\Ohjelmat\SPYBOT~1\SDHelper.dll
O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - D:\PROGRA~1\FlashGet\jccatch.dll
O3 - Toolbar: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - D:\PROGRA~1\FlashGet\fgiebar.dll
O3 - Toolbar: Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - E:\Photoshop\/Adobe Contribute CS3/contributeieplugin.dll
O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
O4 - HKLM\..\Run: [nTrayFw] C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nTrayFw.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [Adobe_ID0EYTHM] C:\PROGRA~1\COMMON~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "E:\adobe\adobe reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Steam] D:\Halflife ja CS Source\Steam.exe -silent
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [SsAAD.exe] C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
O4 - HKCU\..\Run: [AdobeUpdater] C:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe
O4 - HKCU\..\Run: [CTSyncU.exe] "C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Paikallinen palve')
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Paikallinen palve')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Verkkopalve')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: &Search - ?p=ZNfox000
O8 - Extra context menu item: Lataa FlashGetillä - D:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: Lataa kaikki FlashGetillä - D:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra button: Oheistiedot - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: PacificPoker - {94EDF7B4-4272-4af3-8F8B-4E2F68E225B7} - D:\PROGRA~1\PACIFI~1\pacificpoker.exe
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O17 - HKLM\System\CCS\Services\Tcpip\..\{4F705067-7E1D-406E-AEB6-F190D88FC4BF}: NameServer = 208.67.220.220,208.67.222.222
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O23 - Service: Adobe Version Cue CS3 - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Apache Software Foundation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: iPod-palvelu (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe
--
End of file - 11614 bytes
|
|
Mainos
|
|
|
|
Hujo
Suspended permanently
|
27. syyskuuta 2007 @ 15:39 |
Linkki tähän viestiin
|
sulla on siellä kaksi virustorjuntaa
avast ja avg kumpaa käytät ?
Voiko tietsikka koskaan toimia?
|
|
