|
Tarvitsen apuanne!
|
|
|
etplayer1
Junior Member
2 tuotearviota
|
4. helmikuuta 2008 @ 19:24 |
Linkki tähän viestiin
|
Moi! Mulla olis tässä pikku ongelma. Ajoin koneen läpi f-securella ja ad-awarella. Ad-aware löysi vain jotain pieniä mainostiedostoja mutta f-secure löysi win32(piste)trojandownloader(piste)small:in mutta se ei osaa poistaa sitä. Eli miten sen saa pois?
Olen ladannut HiJackThis ohjelman ja olen kuullut että sillä sais nuo sitkeimmätkin haittaohjelmat pois koneelta mutta en osaa käyttää sitä.
Ja olen tässä huomannut myös semmosen jutun että /C: -asemaan tulee koko ajan jotain outoja tiedostoja eli tila loppuu sieltä kohta, vaikken lataa sinne mitään tms. Luulen että toi trojan downloaderi latailee jotain omia tiedostoja koneelleni. Nyt tarvitsisin teidän apuanne! Olisin hyvin kiitollinen jos voisitte etes jotenkin auttaa minua tässä ongelmassa!
Edit: Kone skannattu AVG anti-spyware -ohjelmalla. Mutta voitteko ystävällisesti tarkistaa login siitä huolimatta, jotta sinne ei jäisi mitään ylimääräisiä "kökköjä" kummittelemaan.
HJT-logi:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:17:27, on 4.2.2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\F-Secure\Common\FSM32.EXE
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\Program Files\Google\Gmail Notifier\gnotify.exe
C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
C:\Program Files\NetLimiter\NetLimiter.exe
C:\Program Files\Logitech\Video\LogiTray.exe
F:\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\WINDOWS\system32\LVComS.exe
C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe
C:\PROGRA~1\COMMON~1\PCSuite\Services\SERVIC~1.EXE
F:\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
C:\Program Files\F-Secure\BackWeb\7681197\Program\F-Secure Automatic Update.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
C:\Program Files\F-Secure\Common\FSMA32.EXE
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
C:\Program Files\F-Secure\Common\FSMB32.EXE
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\Program Files\F-Secure\Common\FCH32.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\F-Secure\Common\FAMEH32.EXE
C:\Program Files\F-Secure\Anti-Virus\fsqh.exe
C:\Program Files\F-Secure\Anti-Virus\fsrw.exe
C:\Program Files\F-Secure\Common\FNRB32.EXE
C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
C:\Program Files\F-Secure\Common\FIH32.EXE
C:\WINDOWS\system32\WgaTray.exe
C:\PROGRA~1\F-Secure\ANTI-S~1\fsaw.exe
C:\Program Files\F-Secure\FSGUI\fsguidll.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fi/
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] C:\Program Files\Google\Gmail Notifier\gnotify.exe
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -onlytray
O4 - HKLM\..\Run: [NetLimiter] C:\Program Files\NetLimiter\NetLimiter.exe /s
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "F:\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [043637e3] rundll32.exe "C:\WINDOWS\system32\kyvkkqde.dll",b
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: F-Secure Automatic Update.lnk = C:\Program Files\F-Secure\BackWeb\7681197\program\F-Secure Automatic Update.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O8 - Extra context menu item: &Block this popup - C:\Program Files\F-Secure\Anti-Spyware\blockpopups.htm
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Avaa uuteen etuvälilehteen - res://C:\Program Files\Windows Live Toolbar\Components\fi-fi\msntabres.dll.mui/230?42e34bf2d6574abb80d1d6c4bc7e0366
O8 - Extra context menu item: Avaa uuteen taustavälilehteen - res://C:\Program Files\Windows Live Toolbar\Components\fi-fi\msntabres.dll.mui/229?42e34bf2d6574abb80d1d6c4bc7e0366
O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: IE Shield - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure\Anti-Spyware\ieshield.dll
O9 - Extra 'Tools' menuitem: IE Shield... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure\Anti-Spyware\ieshield.dll
O9 - Extra button: Oheistiedot - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdat...b?1164648388828
O17 - HKLM\System\CCS\Services\Tcpip\..\{451EF1CD-7324-4280-B8E1-813A6094BDF4}: NameServer = 213.139.190.3 212.50.131.153
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - (no file)
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - F:\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: F-Secure Automatic Update (BackWeb Plug-in - 7681197) - F-Secure Automatic Update - C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corp. - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Apache Software Foundation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
--
End of file - 9467 bytes
|
|
Hujo
Suspended permanently
|
5. helmikuuta 2008 @ 03:18 |
Linkki tähän viestiin
|
Lataa VundoFix.exe työpöydällesi.
Tupla-klikkaa VundoFix.exe ajaaksesi sen.
Klikkaa Scan for Vundo valintaa.
Kun skannaus on valmis, klikkaa Remove Vundo valintaa.
Sinulta kysytään haluatko poistaa filut - klikkaa YES.
Kun olet klikannut yes, työpöytäsi tyhjenee kun se alkaa poistamaan Vundoa.
Kun se on valmis, fiksi ilmoittaa käynnistäväsi koneesi uudelleen, klikkaa OK.
Postita C:\vundofix.txt lokin sekä tuoreen HijackThis lokin sisältö.
Huomaa: Se on mahdollista että VundoFix löysi tiedoston jota se ei pystynyt poistamaan.
Tässä tilanteessa, VundoFix ajaa itsensä rebootissa, seuraa vain yläpuolelle olevia ohjeita alkaen kohdasta "Klikkaa Scan for Vundo valintaa." kun VundoFix ilmaantuu uudelleenkäynnistyksen yhteydessä.
Voiko tietsikka koskaan toimia?
|
|
etplayer1
Junior Member
2 tuotearviota
|
5. helmikuuta 2008 @ 16:46 |
Linkki tähän viestiin
|
Tässä on vundofix -loki:
VundoFix V6.7.7
Checking Java version...
Java version is 1.5.0.9
Old versions of java are exploitable and should be removed.
Java version is 1.5.0.11
Scan started at 16:14:38 5.2.2008
Listing files found while scanning....
C:\windows\system32\abeeg.bak1
C:\windows\system32\abeeg.bak2
C:\windows\system32\abeeg.ini
C:\windows\system32\abeeg.ini2
C:\windows\system32\accdd.bak2
C:\windows\system32\accdd.ini
C:\windows\system32\accdd.ini2
C:\windows\system32\adeeg.bak1
C:\windows\system32\adeeg.bak2
C:\windows\system32\adeeg.ini
C:\WINDOWS\system32\aeklchqd.dll
C:\WINDOWS\system32\aermevdo.dll
C:\WINDOWS\system32\aivbmfai.dll
C:\WINDOWS\system32\amxgoged.dll
C:\WINDOWS\system32\atfyqcax.dll
C:\WINDOWS\system32\awtqn.dll
C:\WINDOWS\system32\awtqo.dll
C:\WINDOWS\system32\awtqr.dll
C:\windows\system32\awtsp.dll
C:\WINDOWS\system32\awtsr.dll
C:\windows\system32\avvmaupi.ini
C:\WINDOWS\system32\awvtq.dll
C:\windows\system32\awvvv.dll
C:\windows\system32\aycdd.bak1
C:\windows\system32\aycdd.bak2
C:\windows\system32\aycdd.ini
C:\windows\system32\aynwxhsu.ini
C:\windows\system32\bcsbqybp.ini
C:\windows\system32\bfdenwfy.ini
C:\WINDOWS\system32\bmmjyrsw.dll
C:\WINDOWS\system32\bplhfdyp.dll
C:\WINDOWS\system32\bqkeibwc.ini
C:\WINDOWS\system32\bqoynspn.dll
C:\WINDOWS\system32\btyavtax.dll
C:\WINDOWS\system32\buwnwjwq.dll
C:\WINDOWS\system32\bwcqmwke.dll
C:\WINDOWS\system32\bvfsuhep.dll
C:\windows\system32\bxdmshwn.dll
C:\WINDOWS\system32\cacsvisa.dll
C:\windows\system32\cfhkj.bak1
C:\windows\system32\cfhkj.bak2
C:\windows\system32\cfhkj.ini
C:\WINDOWS\system32\cwbiekqb.dll
C:\windows\system32\cyvxwjbt.ini
C:\WINDOWS\system32\ddayy.dll
C:\WINDOWS\system32\ddcca.dll
C:\WINDOWS\system32\ddcya.dll
C:\WINDOWS\system32\ddcyv.dll
C:\WINDOWS\system32\dgtnbstu.dll
C:\WINDOWS\system32\divjwdtn.dll
C:\WINDOWS\system32\dixympqk.dll
C:\WINDOWS\system32\dkcpwsnv.dll
C:\WINDOWS\system32\dotcfpky.dll
C:\WINDOWS\system32\dvjjwtjv.dll
C:\WINDOWS\system32\dwkjmoif.dll
C:\WINDOWS\system32\dwvluwva.dll
C:\WINDOWS\system32\emlmwcmc.dll
C:\WINDOWS\system32\ewsgwlpb.dll
C:\windows\system32\eyeapbtv.ini
C:\WINDOWS\system32\fcoqkjql.dll
C:\WINDOWS\system32\ffljyjoc.dll
C:\windows\system32\fhhkj.bak1
C:\windows\system32\fhhkj.ini
C:\WINDOWS\system32\fmxwdixn.dll
C:\WINDOWS\system32\fwgielsi.dll
C:\WINDOWS\system32\fviaarcw.dll
C:\WINDOWS\system32\gbfrjpgd.dll
C:\WINDOWS\system32\gebca.dll
C:\WINDOWS\system32\gebya.dll
C:\WINDOWS\system32\geeba.dll
C:\windows\system32\geeda.dll
C:\WINDOWS\system32\geedd.dll
C:\windows\system32\gfhkj.ini
C:\windows\system32\gfhkj.ini2
C:\WINDOWS\system32\gifmsrwp.dll
C:\WINDOWS\system32\giucoffi.dll
C:\windows\system32\gjkmp.bak1
C:\windows\system32\gjkmp.bak2
C:\windows\system32\gjkmp.ini
C:\windows\system32\gjkmp.ini2
C:\WINDOWS\system32\grrfjbkk.dll
C:\WINDOWS\system32\henvravp.dll
C:\windows\system32\hgjlm.bak1
C:\windows\system32\hgjlm.ini
C:\WINDOWS\system32\hgjylgit.dll
C:\WINDOWS\system32\hsjbcaoi.dll
C:\WINDOWS\system32\iafmbvia.ini
C:\WINDOWS\system32\ieibsswt.dll
C:\WINDOWS\system32\ifjginpr.dll
C:\windows\system32\ilkkj.bak1
C:\windows\system32\ilkkj.bak2
C:\windows\system32\ilkkj.ini
C:\windows\system32\ilkkj.ini2
C:\WINDOWS\system32\ininocxh.dll
C:\WINDOWS\system32\inuvtgue.dll
C:\WINDOWS\system32\ipuamvva.dll
C:\WINDOWS\system32\ismqggbk.dll
C:\WINDOWS\system32\jamhsakc.dll
C:\WINDOWS\system32\jcqshyci.dll
C:\WINDOWS\system32\jibrrioe.dll
C:\windows\system32\jjjlm.bak1
C:\windows\system32\jjjlm.bak2
C:\windows\system32\jjjlm.ini
C:\windows\system32\jjjlm.ini2
C:\WINDOWS\system32\jkhfc.dll
C:\WINDOWS\system32\jkhfd.dll
C:\WINDOWS\system32\jkhfe.dll
C:\WINDOWS\system32\jkhfg.dll
C:\WINDOWS\system32\jkhhf.dll
C:\WINDOWS\system32\jkkjg.dll
C:\WINDOWS\system32\jkkjh.dll
C:\WINDOWS\system32\jkkjj.dll
C:\WINDOWS\system32\jkkjk.dll
C:\WINDOWS\system32\jkkli.dll
C:\WINDOWS\system32\jkklk.dll
C:\WINDOWS\system32\jmqiccep.dll
C:\WINDOWS\system32\jmwywswi.dll
C:\WINDOWS\system32\jntdlgai.dll
C:\WINDOWS\system32\jpudegmv.dll
C:\WINDOWS\system32\jrbhuxee.dll
C:\windows\system32\jvfueduk.dll
C:\WINDOWS\system32\kaecpist.dll
C:\WINDOWS\system32\kghpekvr.dll
C:\WINDOWS\system32\kgsqrgiq.dll
C:\WINDOWS\system32\khwaeyrb.dll
C:\WINDOWS\system32\kqyoaqsy.dll
C:\WINDOWS\system32\krmbjlvc.dll
C:\WINDOWS\system32\kyvkkqde.dll
C:\WINDOWS\system32\lehayuai.dll
C:\WINDOWS\system32\lgixiosn.dll
C:\windows\system32\ljlwhfgh.dll
C:\WINDOWS\system32\lprsqilh.dll
C:\WINDOWS\system32\lsnjvlua.dll
C:\WINDOWS\system32\luuywyyl.dll
C:\WINDOWS\system32\mhqjcvas.dll
C:\WINDOWS\system32\mljgh.dll
C:\WINDOWS\system32\mljjj.dll
C:\WINDOWS\system32\mlljj.dll
C:\WINDOWS\system32\mnqgjdar.dll
C:\WINDOWS\system32\mosqivao.dll
C:\WINDOWS\system32\mtfdvxbj.dll
C:\WINDOWS\system32\mttmpxkn.dll
C:\WINDOWS\system32\mtywkixa.dll
C:\WINDOWS\system32\mugmedas.dll
C:\WINDOWS\system32\mwfvpvfq.dll
C:\windows\system32\nkxpmttm.ini
C:\WINDOWS\system32\nnwwktxr.dll
C:\WINDOWS\system32\nufhyqua.dll
C:\WINDOWS\system32\nwckofve.dll
C:\WINDOWS\system32\nvjkpmvf.dll
C:\WINDOWS\system32\ocexipdh.dll
C:\WINDOWS\system32\odvemrea.ini
C:\WINDOWS\system32\oegqxooy.dll
C:\WINDOWS\system32\okswwtli.dll
C:\windows\system32\oqtwa.bak1
C:\windows\system32\oqtwa.bak2
C:\windows\system32\oqtwa.ini
C:\WINDOWS\system32\oqxklnfg.dll
C:\WINDOWS\system32\osrjjrtk.dll
C:\WINDOWS\system32\pbyqbscb.dll
C:\WINDOWS\system32\pehusfvb.ini
C:\WINDOWS\system32\pmkjg.dll
C:\WINDOWS\system32\pmkjh.dll
C:\WINDOWS\system32\pmkji.dll
C:\windows\system32\pmnll.dll
C:\WINDOWS\system32\pmnnl.dll
C:\WINDOWS\system32\pnccvdki.dll
C:\WINDOWS\system32\pnwudpsx.dll
C:\windows\system32\ppqss.bak1
C:\windows\system32\ppqss.ini
C:\WINDOWS\system32\pqyivefi.dll
C:\WINDOWS\system32\prairrjx.dll
C:\windows\system32\prqss.bak1
C:\windows\system32\prqss.bak2
C:\windows\system32\prqss.ini
C:\windows\system32\prqss.ini2
C:\WINDOWS\system32\prwmytjy.dll
C:\WINDOWS\system32\pryixqjv.dll
C:\windows\system32\pstwa.ini
C:\windows\system32\pvarvneh.ini
C:\WINDOWS\system32\pxcdxtuk.dll
C:\WINDOWS\system32\qatolrvq.dll
C:\windows\system32\qdspmtmk.dll
C:\WINDOWS\system32\qemdxupw.dll
C:\WINDOWS\system32\qewbpiqq.dll
C:\WINDOWS\system32\qqtwennp.dll
C:\windows\system32\qtstv.bak1
C:\windows\system32\qtstv.ini
C:\windows\system32\qtvwa.bak1
C:\windows\system32\qtvwa.bak2
C:\windows\system32\qtvwa.ini
C:\windows\system32\qvrlotaq.ini
C:\WINDOWS\system32\rdchvqkc.dll
C:\WINDOWS\system32\rihpenqv.dll
C:\WINDOWS\system32\rqtwa.bak2
C:\WINDOWS\system32\rqtwa.ini
C:\windows\system32\rvkephgk.ini
C:\windows\system32\rvwhjvwk.dll
C:\WINDOWS\system32\shqsssqq.dll
C:\WINDOWS\system32\sivbbvlt.dll
C:\WINDOWS\system32\slhlalam.dll
C:\WINDOWS\system32\sqcekqoq.dll
C:\WINDOWS\system32\ssqpnkk.dll
C:\WINDOWS\system32\ssqpp.dll
C:\WINDOWS\system32\ssqrp.dll
C:\windows\system32\ssqrr.dll
C:\WINDOWS\system32\ssqrs.dll
C:\WINDOWS\system32\ssttq.dll
C:\windows\system32\stutv.bak2
C:\windows\system32\stutv.ini
C:\WINDOWS\system32\sucqmbbx.dll
C:\windows\system32\swsulvev.ini
C:\WINDOWS\system32\tbjwxvyc.dll
C:\windows\system32\tiglyjgh.ini
C:\WINDOWS\system32\tlpiuhbm.dll
C:\WINDOWS\system32\tqcddcxx.dll
C:\WINDOWS\system32\ttvnrjdp.dll
C:\windows\system32\twssbiei.ini
C:\WINDOWS\system32\uafdvsti.dll
C:\WINDOWS\system32\ucjriqjr.dll
C:\WINDOWS\system32\urgeyumv.dll
C:\WINDOWS\system32\ushxwnya.dll
C:\WINDOWS\system32\wbxtfwvr.dll
C:\WINDOWS\system32\vciomqrf.dll
C:\WINDOWS\system32\vevlusws.dll
C:\WINDOWS\system32\vfmgcqfu.dll
C:\WINDOWS\system32\whdkpohb.dll
C:\windows\system32\wlmpylmv.ini
C:\WINDOWS\system32\vmlypmlw.dll
C:\windows\system32\vokpshjy.dll
C:\WINDOWS\system32\wpbisact.dll
C:\windows\system32\wpuxdmeq.ini
C:\windows\system32\wsryjmmb.ini
C:\WINDOWS\system32\vtbpaeye.dll
C:\WINDOWS\system32\vtsqo.dll
C:\WINDOWS\system32\vtstq.dll
C:\WINDOWS\system32\vturp.dll
C:\WINDOWS\system32\vtuts.dll
C:\WINDOWS\system32\wudyenxy.dll
C:\windows\system32\vvvwa.bak1
C:\WINDOWS\system32\vvvwa.ini
C:\WINDOWS\system32\wvwyxfof.dll
C:\WINDOWS\system32\wxpthrsr.dll
C:\WINDOWS\system32\wxwflnqq.dll
C:\windows\system32\vycdd.bak1
C:\windows\system32\vycdd.ini
C:\WINDOWS\system32\vytgbrxv.dll
C:\WINDOWS\system32\xacqyfta.ini
C:\windows\system32\xjrriarp.ini
C:\WINDOWS\system32\xmtojsem.dll
C:\WINDOWS\system32\xrnxjqos.dll
C:\WINDOWS\system32\xwxxdgns.dll
C:\WINDOWS\system32\ybvfumuq.dll
C:\WINDOWS\system32\ydivxnol.dll
C:\WINDOWS\system32\yfwnedfb.dll
C:\windows\system32\yljthxpt.dll
C:\windows\system32\yxneyduw.ini
Beginning removal...
Attempting to delete C:\windows\system32\abeeg.bak1
C:\windows\system32\abeeg.bak1 Has been deleted!
Attempting to delete C:\windows\system32\abeeg.bak2
C:\windows\system32\abeeg.bak2 Has been deleted!
Attempting to delete C:\windows\system32\abeeg.ini
C:\windows\system32\abeeg.ini Has been deleted!
Attempting to delete C:\windows\system32\abeeg.ini2
C:\windows\system32\abeeg.ini2 Has been deleted!
Attempting to delete C:\windows\system32\accdd.bak2
C:\windows\system32\accdd.bak2 Has been deleted!
Attempting to delete C:\windows\system32\accdd.ini
C:\windows\system32\accdd.ini Has been deleted!
Attempting to delete C:\windows\system32\accdd.ini2
C:\windows\system32\accdd.ini2 Has been deleted!
Attempting to delete C:\windows\system32\adeeg.bak1
C:\windows\system32\adeeg.bak1 Has been deleted!
Attempting to delete C:\windows\system32\adeeg.bak2
C:\windows\system32\adeeg.bak2 Has been deleted!
Attempting to delete C:\windows\system32\adeeg.ini
C:\windows\system32\adeeg.ini Has been deleted!
Attempting to delete C:\WINDOWS\system32\aeklchqd.dll
C:\WINDOWS\system32\aeklchqd.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\aermevdo.dll
C:\WINDOWS\system32\aermevdo.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\aivbmfai.dll
C:\WINDOWS\system32\aivbmfai.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\amxgoged.dll
C:\WINDOWS\system32\amxgoged.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\atfyqcax.dll
C:\WINDOWS\system32\atfyqcax.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\awtqn.dll
C:\WINDOWS\system32\awtqn.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\awtqo.dll
C:\WINDOWS\system32\awtqo.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\awtqr.dll
C:\WINDOWS\system32\awtqr.dll Has been deleted!
Attempting to delete C:\windows\system32\awtsp.dll
C:\windows\system32\awtsp.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\awtsr.dll
C:\WINDOWS\system32\awtsr.dll Has been deleted!
Attempting to delete C:\windows\system32\avvmaupi.ini
C:\windows\system32\avvmaupi.ini Has been deleted!
Attempting to delete C:\WINDOWS\system32\awvtq.dll
C:\WINDOWS\system32\awvtq.dll Has been deleted!
Attempting to delete C:\windows\system32\awvvv.dll
C:\windows\system32\awvvv.dll Has been deleted!
Attempting to delete C:\windows\system32\aycdd.bak1
C:\windows\system32\aycdd.bak1 Has been deleted!
Attempting to delete C:\windows\system32\aycdd.bak2
C:\windows\system32\aycdd.bak2 Has been deleted!
Attempting to delete C:\windows\system32\aycdd.ini
C:\windows\system32\aycdd.ini Has been deleted!
Attempting to delete C:\windows\system32\aynwxhsu.ini
C:\windows\system32\aynwxhsu.ini Has been deleted!
Attempting to delete C:\windows\system32\bcsbqybp.ini
C:\windows\system32\bcsbqybp.ini Has been deleted!
Attempting to delete C:\windows\system32\bfdenwfy.ini
C:\windows\system32\bfdenwfy.ini Has been deleted!
Attempting to delete C:\WINDOWS\system32\bmmjyrsw.dll
C:\WINDOWS\system32\bmmjyrsw.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\bplhfdyp.dll
C:\WINDOWS\system32\bplhfdyp.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\bqkeibwc.ini
C:\WINDOWS\system32\bqkeibwc.ini Has been deleted!
Attempting to delete C:\WINDOWS\system32\bqoynspn.dll
C:\WINDOWS\system32\bqoynspn.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\btyavtax.dll
C:\WINDOWS\system32\btyavtax.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\buwnwjwq.dll
C:\WINDOWS\system32\buwnwjwq.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\bwcqmwke.dll
C:\WINDOWS\system32\bwcqmwke.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\bvfsuhep.dll
C:\WINDOWS\system32\bvfsuhep.dll Has been deleted!
Attempting to delete C:\windows\system32\bxdmshwn.dll
C:\windows\system32\bxdmshwn.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\cacsvisa.dll
C:\WINDOWS\system32\cacsvisa.dll Has been deleted!
Attempting to delete C:\windows\system32\cfhkj.bak1
C:\windows\system32\cfhkj.bak1 Has been deleted!
Attempting to delete C:\windows\system32\cfhkj.bak2
C:\windows\system32\cfhkj.bak2 Has been deleted!
Attempting to delete C:\windows\system32\cfhkj.ini
C:\windows\system32\cfhkj.ini Has been deleted!
Attempting to delete C:\WINDOWS\system32\cwbiekqb.dll
C:\WINDOWS\system32\cwbiekqb.dll Has been deleted!
Attempting to delete C:\windows\system32\cyvxwjbt.ini
C:\windows\system32\cyvxwjbt.ini Has been deleted!
Attempting to delete C:\WINDOWS\system32\ddayy.dll
C:\WINDOWS\system32\ddayy.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\ddcca.dll
C:\WINDOWS\system32\ddcca.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\ddcya.dll
C:\WINDOWS\system32\ddcya.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\ddcyv.dll
C:\WINDOWS\system32\ddcyv.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\dgtnbstu.dll
C:\WINDOWS\system32\dgtnbstu.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\divjwdtn.dll
C:\WINDOWS\system32\divjwdtn.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\dixympqk.dll
C:\WINDOWS\system32\dixympqk.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\dkcpwsnv.dll
C:\WINDOWS\system32\dkcpwsnv.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\dotcfpky.dll
C:\WINDOWS\system32\dotcfpky.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\dvjjwtjv.dll
C:\WINDOWS\system32\dvjjwtjv.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\dwkjmoif.dll
C:\WINDOWS\system32\dwkjmoif.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\dwvluwva.dll
C:\WINDOWS\system32\dwvluwva.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\emlmwcmc.dll
C:\WINDOWS\system32\emlmwcmc.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\ewsgwlpb.dll
C:\WINDOWS\system32\ewsgwlpb.dll Has been deleted!
Attempting to delete C:\windows\system32\eyeapbtv.ini
C:\windows\system32\eyeapbtv.ini Has been deleted!
Attempting to delete C:\WINDOWS\system32\fcoqkjql.dll
C:\WINDOWS\system32\fcoqkjql.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\ffljyjoc.dll
C:\WINDOWS\system32\ffljyjoc.dll Has been deleted!
Attempting to delete C:\windows\system32\fhhkj.bak1
C:\windows\system32\fhhkj.bak1 Has been deleted!
Attempting to delete C:\windows\system32\fhhkj.ini
C:\windows\system32\fhhkj.ini Has been deleted!
Attempting to delete C:\WINDOWS\system32\fmxwdixn.dll
C:\WINDOWS\system32\fmxwdixn.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\fwgielsi.dll
C:\WINDOWS\system32\fwgielsi.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\fviaarcw.dll
C:\WINDOWS\system32\fviaarcw.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\gbfrjpgd.dll
C:\WINDOWS\system32\gbfrjpgd.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\gebca.dll
C:\WINDOWS\system32\gebca.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\gebya.dll
C:\WINDOWS\system32\gebya.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\geeba.dll
C:\WINDOWS\system32\geeba.dll Has been deleted!
Attempting to delete C:\windows\system32\geeda.dll
C:\windows\system32\geeda.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\geedd.dll
C:\WINDOWS\system32\geedd.dll Has been deleted!
Attempting to delete C:\windows\system32\gfhkj.ini
C:\windows\system32\gfhkj.ini Has been deleted!
Attempting to delete C:\windows\system32\gfhkj.ini2
C:\windows\system32\gfhkj.ini2 Has been deleted!
Attempting to delete C:\WINDOWS\system32\gifmsrwp.dll
C:\WINDOWS\system32\gifmsrwp.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\giucoffi.dll
C:\WINDOWS\system32\giucoffi.dll Has been deleted!
Attempting to delete C:\windows\system32\gjkmp.bak1
C:\windows\system32\gjkmp.bak1 Has been deleted!
Attempting to delete C:\windows\system32\gjkmp.bak2
C:\windows\system32\gjkmp.bak2 Has been deleted!
Attempting to delete C:\windows\system32\gjkmp.ini
C:\windows\system32\gjkmp.ini Has been deleted!
Attempting to delete C:\windows\system32\gjkmp.ini2
C:\windows\system32\gjkmp.ini2 Has been deleted!
Attempting to delete C:\WINDOWS\system32\grrfjbkk.dll
C:\WINDOWS\system32\grrfjbkk.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\henvravp.dll
C:\WINDOWS\system32\henvravp.dll Has been deleted!
Attempting to delete C:\windows\system32\hgjlm.bak1
C:\windows\system32\hgjlm.bak1 Has been deleted!
Attempting to delete C:\windows\system32\hgjlm.ini
C:\windows\system32\hgjlm.ini Has been deleted!
Attempting to delete C:\WINDOWS\system32\hgjylgit.dll
C:\WINDOWS\system32\hgjylgit.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\hsjbcaoi.dll
C:\WINDOWS\system32\hsjbcaoi.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\iafmbvia.ini
C:\WINDOWS\system32\iafmbvia.ini Has been deleted!
Attempting to delete C:\WINDOWS\system32\ieibsswt.dll
C:\WINDOWS\system32\ieibsswt.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\ifjginpr.dll
C:\WINDOWS\system32\ifjginpr.dll Has been deleted!
Attempting to delete C:\windows\system32\ilkkj.bak1
C:\windows\system32\ilkkj.bak1 Has been deleted!
Attempting to delete C:\windows\system32\ilkkj.bak2
C:\windows\system32\ilkkj.bak2 Has been deleted!
Attempting to delete C:\windows\system32\ilkkj.ini
C:\windows\system32\ilkkj.ini Has been deleted!
Attempting to delete C:\windows\system32\ilkkj.ini2
C:\windows\system32\ilkkj.ini2 Has been deleted!
Attempting to delete C:\WINDOWS\system32\ininocxh.dll
C:\WINDOWS\system32\ininocxh.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\inuvtgue.dll
C:\WINDOWS\system32\inuvtgue.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\ipuamvva.dll
C:\WINDOWS\system32\ipuamvva.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\ismqggbk.dll
C:\WINDOWS\system32\ismqggbk.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\jamhsakc.dll
C:\WINDOWS\system32\jamhsakc.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\jcqshyci.dll
C:\WINDOWS\system32\jcqshyci.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\jibrrioe.dll
C:\WINDOWS\system32\jibrrioe.dll Has been deleted!
Attempting to delete C:\windows\system32\jjjlm.bak1
C:\windows\system32\jjjlm.bak1 Has been deleted!
Attempting to delete C:\windows\system32\jjjlm.bak2
C:\windows\system32\jjjlm.bak2 Has been deleted!
Attempting to delete C:\windows\system32\jjjlm.ini
C:\windows\system32\jjjlm.ini Has been deleted!
Attempting to delete C:\windows\system32\jjjlm.ini2
C:\windows\system32\jjjlm.ini2 Has been deleted!
Attempting to delete C:\WINDOWS\system32\jkhfc.dll
C:\WINDOWS\system32\jkhfc.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\jkhfd.dll
C:\WINDOWS\system32\jkhfd.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\jkhfe.dll
C:\WINDOWS\system32\jkhfe.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\jkhfg.dll
C:\WINDOWS\system32\jkhfg.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\jkhhf.dll
C:\WINDOWS\system32\jkhhf.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\jkkjg.dll
C:\WINDOWS\system32\jkkjg.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\jkkjh.dll
C:\WINDOWS\system32\jkkjh.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\jkkjj.dll
C:\WINDOWS\system32\jkkjj.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\jkkjk.dll
C:\WINDOWS\system32\jkkjk.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\jkkli.dll
C:\WINDOWS\system32\jkkli.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\jkklk.dll
C:\WINDOWS\system32\jkklk.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\jmqiccep.dll
C:\WINDOWS\system32\jmqiccep.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\jmwywswi.dll
C:\WINDOWS\system32\jmwywswi.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\jntdlgai.dll
C:\WINDOWS\system32\jntdlgai.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\jpudegmv.dll
C:\WINDOWS\system32\jpudegmv.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\jrbhuxee.dll
C:\WINDOWS\system32\jrbhuxee.dll Has been deleted!
Attempting to delete C:\windows\system32\jvfueduk.dll
C:\windows\system32\jvfueduk.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\kaecpist.dll
C:\WINDOWS\system32\kaecpist.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\kghpekvr.dll
C:\WINDOWS\system32\kghpekvr.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\kgsqrgiq.dll
C:\WINDOWS\system32\kgsqrgiq.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\khwaeyrb.dll
C:\WINDOWS\system32\khwaeyrb.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\kqyoaqsy.dll
C:\WINDOWS\system32\kqyoaqsy.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\krmbjlvc.dll
C:\WINDOWS\system32\krmbjlvc.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\kyvkkqde.dll
C:\WINDOWS\system32\kyvkkqde.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\lehayuai.dll
C:\WINDOWS\system32\lehayuai.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\lgixiosn.dll
C:\WINDOWS\system32\lgixiosn.dll Has been deleted!
Attempting to delete C:\windows\system32\ljlwhfgh.dll
C:\windows\system32\ljlwhfgh.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\lprsqilh.dll
C:\WINDOWS\system32\lprsqilh.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\lsnjvlua.dll
C:\WINDOWS\system32\lsnjvlua.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\luuywyyl.dll
C:\WINDOWS\system32\luuywyyl.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\mhqjcvas.dll
C:\WINDOWS\system32\mhqjcvas.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\mljgh.dll
C:\WINDOWS\system32\mljgh.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\mljjj.dll
C:\WINDOWS\system32\mljjj.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\mlljj.dll
C:\WINDOWS\system32\mlljj.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\mnqgjdar.dll
C:\WINDOWS\system32\mnqgjdar.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\mosqivao.dll
C:\WINDOWS\system32\mosqivao.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\mtfdvxbj.dll
C:\WINDOWS\system32\mtfdvxbj.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\mttmpxkn.dll
C:\WINDOWS\system32\mttmpxkn.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\mtywkixa.dll
C:\WINDOWS\system32\mtywkixa.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\mugmedas.dll
C:\WINDOWS\system32\mugmedas.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\mwfvpvfq.dll
C:\WINDOWS\system32\mwfvpvfq.dll Has been deleted!
Attempting to delete C:\windows\system32\nkxpmttm.ini
C:\windows\system32\nkxpmttm.ini Has been deleted!
Attempting to delete C:\WINDOWS\system32\nnwwktxr.dll
C:\WINDOWS\system32\nnwwktxr.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\nufhyqua.dll
C:\WINDOWS\system32\nufhyqua.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\nwckofve.dll
C:\WINDOWS\system32\nwckofve.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\nvjkpmvf.dll
C:\WINDOWS\system32\nvjkpmvf.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\ocexipdh.dll
C:\WINDOWS\system32\ocexipdh.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\odvemrea.ini
C:\WINDOWS\system32\odvemrea.ini Has been deleted!
Attempting to delete C:\WINDOWS\system32\oegqxooy.dll
C:\WINDOWS\system32\oegqxooy.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\okswwtli.dll
C:\WINDOWS\system32\okswwtli.dll Has been deleted!
Attempting to delete C:\windows\system32\oqtwa.bak1
C:\windows\system32\oqtwa.bak1 Has been deleted!
Attempting to delete C:\windows\system32\oqtwa.bak2
C:\windows\system32\oqtwa.bak2 Has been deleted!
Attempting to delete C:\windows\system32\oqtwa.ini
C:\windows\system32\oqtwa.ini Has been deleted!
Attempting to delete C:\WINDOWS\system32\oqxklnfg.dll
C:\WINDOWS\system32\oqxklnfg.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\osrjjrtk.dll
C:\WINDOWS\system32\osrjjrtk.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\pbyqbscb.dll
C:\WINDOWS\system32\pbyqbscb.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\pehusfvb.ini
C:\WINDOWS\system32\pehusfvb.ini Has been deleted!
Attempting to delete C:\WINDOWS\system32\pmkjg.dll
C:\WINDOWS\system32\pmkjg.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\pmkjh.dll
C:\WINDOWS\system32\pmkjh.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\pmkji.dll
C:\WINDOWS\system32\pmkji.dll Has been deleted!
Attempting to delete C:\windows\system32\pmnll.dll
C:\windows\system32\pmnll.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\pmnnl.dll
C:\WINDOWS\system32\pmnnl.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\pnccvdki.dll
C:\WINDOWS\system32\pnccvdki.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\pnwudpsx.dll
C:\WINDOWS\system32\pnwudpsx.dll Has been deleted!
Attempting to delete C:\windows\system32\ppqss.bak1
C:\windows\system32\ppqss.bak1 Has been deleted!
Attempting to delete C:\windows\system32\ppqss.ini
C:\windows\system32\ppqss.ini Has been deleted!
Attempting to delete C:\WINDOWS\system32\pqyivefi.dll
C:\WINDOWS\system32\pqyivefi.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\prairrjx.dll
C:\WINDOWS\system32\prairrjx.dll Has been deleted!
Attempting to delete C:\windows\system32\prqss.bak1
C:\windows\system32\prqss.bak1 Has been deleted!
Attempting to delete C:\windows\system32\prqss.bak2
C:\windows\system32\prqss.bak2 Has been deleted!
Attempting to delete C:\windows\system32\prqss.ini
C:\windows\system32\prqss.ini Has been deleted!
Attempting to delete C:\windows\system32\prqss.ini2
C:\windows\system32\prqss.ini2 Has been deleted!
Attempting to delete C:\WINDOWS\system32\prwmytjy.dll
C:\WINDOWS\system32\prwmytjy.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\pryixqjv.dll
C:\WINDOWS\system32\pryixqjv.dll Has been deleted!
Attempting to delete C:\windows\system32\pstwa.ini
C:\windows\system32\pstwa.ini Has been deleted!
Attempting to delete C:\windows\system32\pvarvneh.ini
C:\windows\system32\pvarvneh.ini Has been deleted!
Attempting to delete C:\WINDOWS\system32\pxcdxtuk.dll
C:\WINDOWS\system32\pxcdxtuk.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\qatolrvq.dll
C:\WINDOWS\system32\qatolrvq.dll Has been deleted!
Attempting to delete C:\windows\system32\qdspmtmk.dll
C:\windows\system32\qdspmtmk.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\qemdxupw.dll
C:\WINDOWS\system32\qemdxupw.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\qewbpiqq.dll
C:\WINDOWS\system32\qewbpiqq.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\qqtwennp.dll
C:\WINDOWS\system32\qqtwennp.dll Has been deleted!
Attempting to delete C:\windows\system32\qtstv.bak1
C:\windows\system32\qtstv.bak1 Has been deleted!
Attempting to delete C:\windows\system32\qtstv.ini
C:\windows\system32\qtstv.ini Has been deleted!
Attempting to delete C:\windows\system32\qtvwa.bak1
C:\windows\system32\qtvwa.bak1 Has been deleted!
Attempting to delete C:\windows\system32\qtvwa.bak2
C:\windows\system32\qtvwa.bak2 Has been deleted!
Attempting to delete C:\windows\system32\qtvwa.ini
C:\windows\system32\qtvwa.ini Has been deleted!
Attempting to delete C:\windows\system32\qvrlotaq.ini
C:\windows\system32\qvrlotaq.ini Has been deleted!
Attempting to delete C:\WINDOWS\system32\rdchvqkc.dll
C:\WINDOWS\system32\rdchvqkc.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\rihpenqv.dll
C:\WINDOWS\system32\rihpenqv.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\rqtwa.bak2
C:\WINDOWS\system32\rqtwa.bak2 Has been deleted!
Attempting to delete C:\WINDOWS\system32\rqtwa.ini
C:\WINDOWS\system32\rqtwa.ini Has been deleted!
Attempting to delete C:\windows\system32\rvkephgk.ini
C:\windows\system32\rvkephgk.ini Has been deleted!
Attempting to delete C:\windows\system32\rvwhjvwk.dll
C:\windows\system32\rvwhjvwk.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\shqsssqq.dll
C:\WINDOWS\system32\shqsssqq.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\sivbbvlt.dll
C:\WINDOWS\system32\sivbbvlt.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\slhlalam.dll
C:\WINDOWS\system32\slhlalam.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\sqcekqoq.dll
C:\WINDOWS\system32\sqcekqoq.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\ssqpp.dll
C:\WINDOWS\system32\ssqpp.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\ssqrp.dll
C:\WINDOWS\system32\ssqrp.dll Has been deleted!
Attempting to delete C:\windows\system32\ssqrr.dll
C:\windows\system32\ssqrr.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\ssqrs.dll
C:\WINDOWS\system32\ssqrs.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\ssttq.dll
C:\WINDOWS\system32\ssttq.dll Has been deleted!
Attempting to delete C:\windows\system32\stutv.bak2
C:\windows\system32\stutv.bak2 Has been deleted!
Attempting to delete C:\windows\system32\stutv.ini
C:\windows\system32\stutv.ini Has been deleted!
Attempting to delete C:\WINDOWS\system32\sucqmbbx.dll
C:\WINDOWS\system32\sucqmbbx.dll Has been deleted!
Attempting to delete C:\windows\system32\swsulvev.ini
C:\windows\system32\swsulvev.ini Has been deleted!
Attempting to delete C:\WINDOWS\system32\tbjwxvyc.dll
C:\WINDOWS\system32\tbjwxvyc.dll Has been deleted!
Attempting to delete C:\windows\system32\tiglyjgh.ini
C:\windows\system32\tiglyjgh.ini Has been deleted!
Attempting to delete C:\WINDOWS\system32\tlpiuhbm.dll
C:\WINDOWS\system32\tlpiuhbm.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\tqcddcxx.dll
C:\WINDOWS\system32\tqcddcxx.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\ttvnrjdp.dll
C:\WINDOWS\system32\ttvnrjdp.dll Has been deleted!
Attempting to delete C:\windows\system32\twssbiei.ini
C:\windows\system32\twssbiei.ini Has been deleted!
Attempting to delete C:\WINDOWS\system32\uafdvsti.dll
C:\WINDOWS\system32\uafdvsti.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\ucjriqjr.dll
C:\WINDOWS\system32\ucjriqjr.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\urgeyumv.dll
C:\WINDOWS\system32\urgeyumv.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\ushxwnya.dll
C:\WINDOWS\system32\ushxwnya.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\wbxtfwvr.dll
C:\WINDOWS\system32\wbxtfwvr.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\vciomqrf.dll
C:\WINDOWS\system32\vciomqrf.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\vevlusws.dll
C:\WINDOWS\system32\vevlusws.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\vfmgcqfu.dll
C:\WINDOWS\system32\vfmgcqfu.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\whdkpohb.dll
C:\WINDOWS\system32\whdkpohb.dll Has been deleted!
Attempting to delete C:\windows\system32\wlmpylmv.ini
C:\windows\system32\wlmpylmv.ini Has been deleted!
Attempting to delete C:\WINDOWS\system32\vmlypmlw.dll
C:\WINDOWS\system32\vmlypmlw.dll Has been deleted!
Attempting to delete C:\windows\system32\vokpshjy.dll
C:\windows\system32\vokpshjy.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\wpbisact.dll
C:\WINDOWS\system32\wpbisact.dll Has been deleted!
Attempting to delete C:\windows\system32\wpuxdmeq.ini
C:\windows\system32\wpuxdmeq.ini Has been deleted!
Attempting to delete C:\windows\system32\wsryjmmb.ini
C:\windows\system32\wsryjmmb.ini Has been deleted!
Attempting to delete C:\WINDOWS\system32\vtbpaeye.dll
C:\WINDOWS\system32\vtbpaeye.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\vtsqo.dll
C:\WINDOWS\system32\vtsqo.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\vtstq.dll
C:\WINDOWS\system32\vtstq.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\vturp.dll
C:\WINDOWS\system32\vturp.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\vtuts.dll
C:\WINDOWS\system32\vtuts.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\wudyenxy.dll
C:\WINDOWS\system32\wudyenxy.dll Has been deleted!
Attempting to delete C:\windows\system32\vvvwa.bak1
C:\windows\system32\vvvwa.bak1 Has been deleted!
Attempting to delete C:\WINDOWS\system32\vvvwa.ini
C:\WINDOWS\system32\vvvwa.ini Has been deleted!
Attempting to delete C:\WINDOWS\system32\wvwyxfof.dll
C:\WINDOWS\system32\wvwyxfof.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\wxpthrsr.dll
C:\WINDOWS\system32\wxpthrsr.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\wxwflnqq.dll
C:\WINDOWS\system32\wxwflnqq.dll Has been deleted!
Attempting to delete C:\windows\system32\vycdd.bak1
C:\windows\system32\vycdd.bak1 Has been deleted!
Attempting to delete C:\windows\system32\vycdd.ini
C:\windows\system32\vycdd.ini Has been deleted!
Attempting to delete C:\WINDOWS\system32\vytgbrxv.dll
C:\WINDOWS\system32\vytgbrxv.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\xacqyfta.ini
C:\WINDOWS\system32\xacqyfta.ini Has been deleted!
Attempting to delete C:\windows\system32\xjrriarp.ini
C:\windows\system32\xjrriarp.ini Has been deleted!
Attempting to delete C:\WINDOWS\system32\xmtojsem.dll
C:\WINDOWS\system32\xmtojsem.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\xrnxjqos.dll
C:\WINDOWS\system32\xrnxjqos.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\xwxxdgns.dll
C:\WINDOWS\system32\xwxxdgns.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\ybvfumuq.dll
C:\WINDOWS\system32\ybvfumuq.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\ydivxnol.dll
C:\WINDOWS\system32\ydivxnol.dll Has been deleted!
Attempting to delete C:\WINDOWS\system32\yfwnedfb.dll
C:\WINDOWS\system32\yfwnedfb.dll Has been deleted!
Attempting to delete C:\windows\system32\yljthxpt.dll
C:\windows\system32\yljthxpt.dll Has been deleted!
Attempting to delete C:\windows\system32\yxneyduw.ini
C:\windows\system32\yxneyduw.ini Has been deleted!
Performing Repairs to the registry.
Done!
... ja tässä on HJT-loki:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:39:54, on 5.2.2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\F-Secure\Common\FSM32.EXE
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\Program Files\Google\Gmail Notifier\gnotify.exe
C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
C:\Program Files\NetLimiter\NetLimiter.exe
C:\Program Files\Logitech\Video\LogiTray.exe
F:\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Skype\Phone\Skype.exe
C:\WINDOWS\system32\LVComS.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\PROGRA~1\COMMON~1\PCSuite\Services\SERVIC~1.EXE
C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe
F:\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
C:\Program Files\F-Secure\Common\FSMA32.EXE
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
C:\Program Files\F-Secure\Common\FSMB32.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\F-Secure\BackWeb\7681197\Program\F-Secure Automatic Update.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\Program Files\F-Secure\Common\FCH32.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\F-Secure\Common\FAMEH32.EXE
C:\Program Files\F-Secure\Anti-Virus\fsqh.exe
C:\Program Files\F-Secure\Anti-Virus\fsrw.exe
C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
C:\Program Files\F-Secure\Common\FNRB32.EXE
C:\WINDOWS\system32\WgaTray.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
C:\Program Files\F-Secure\Common\FIH32.EXE
C:\PROGRA~1\F-Secure\ANTI-S~1\fsaw.exe
C:\Program Files\F-Secure\FSGUI\fsguidll.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fi/
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {0FDB01BD-856C-4306-B543-A201C69AD4E8} - (no file)
O2 - BHO: (no name) - {31973DF4-4332-461B-A9BA-0F325E9C42ED} - C:\WINDOWS\system32\awvtq.dll (file missing)
O2 - BHO: {113bb99a-31ff-544a-c454-52682f70c7a4} - {4a7c07f2-8625-454c-a445-ff13a99bb311} - C:\WINDOWS\system32\nnwwktxr.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {B6D8493E-BA75-4327-8D2E-20F0F98C549a} - (no file)
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: (no name) - {F6B7896D-B28F-4CAD-9399-AE3AC1F56265} - (no file)
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] C:\Program Files\Google\Gmail Notifier\gnotify.exe
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -onlytray
O4 - HKLM\..\Run: [NetLimiter] C:\Program Files\NetLimiter\NetLimiter.exe /s
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "F:\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [043637e3] rundll32.exe "C:\WINDOWS\system32\aabkbuco.dll",b
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: F-Secure Automatic Update.lnk = C:\Program Files\F-Secure\BackWeb\7681197\program\F-Secure Automatic Update.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O8 - Extra context menu item: &Block this popup - C:\Program Files\F-Secure\Anti-Spyware\blockpopups.htm
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Avaa uuteen etuvälilehteen - res://C:\Program Files\Windows Live Toolbar\Components\fi-fi\msntabres.dll.mui/230?42e34bf2d6574abb80d1d6c4bc7e0366
O8 - Extra context menu item: Avaa uuteen taustavälilehteen - res://C:\Program Files\Windows Live Toolbar\Components\fi-fi\msntabres.dll.mui/229?42e34bf2d6574abb80d1d6c4bc7e0366
O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: IE Shield - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure\Anti-Spyware\ieshield.dll
O9 - Extra 'Tools' menuitem: IE Shield... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure\Anti-Spyware\ieshield.dll
O9 - Extra button: Oheistiedot - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdat...b?1164648388828
O17 - HKLM\System\CCS\Services\Tcpip\..\{451EF1CD-7324-4280-B8E1-813A6094BDF4}: NameServer = 213.139.190.3 212.50.131.153
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - (no file)
O20 - Winlogon Notify: ssqpnkk - ssqpnkk.dll (file missing)
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - F:\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: F-Secure Automatic Update (BackWeb Plug-in - 7681197) - F-Secure Automatic Update - C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corp. - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Apache Software Foundation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
--
End of file - 10658 bytes
Löytyykö mitään ihmeellistä? Jos löytyy niin miten minun tulisi tässä vaiheessa toimia?
|
|
Hujo
Suspended permanently
|
5. helmikuuta 2008 @ 17:01 |
Linkki tähän viestiin
|
scannaa hjt:llä merkkaa paina Fix checked
O2 - BHO: (no name) - {0FDB01BD-856C-4306-B543-A201C69AD4E8} - (no file)
O2 - BHO: (no name) - {31973DF4-4332-461B-A9BA-0F325E9C42ED} - C:\WINDOWS\system32\awvtq.dll (file missing)
O2 - BHO: {113bb99a-31ff-544a-c454-52682f70c7a4} - {4a7c07f2-8625-454c-a445-ff13a99bb311} - C:\WINDOWS\system32\nnwwktxr.dll (file missing)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: (no name) - {B6D8493E-BA75-4327-8D2E-20F0F98C549a} - (no file)
O2 - BHO: (no name) - {F6B7896D-B28F-4CAD-9399-AE3AC1F56265} - (no file)
O20 - Winlogon Notify: ssqpnkk - ssqpnkk.dll (file missing)
================
Päivitä AVG Anti-Spyware 7.5 ja aja vikasiedossa.
===============
Nimeä uudelleen
C:\Program Files\Trend Micro\HijackThis\==> HijackThis.exe <== skanneriksi se millä scannaat uuden hjt:n lokin
Voiko tietsikka koskaan toimia?
|
|
etplayer1
Junior Member
2 tuotearviota
|
5. helmikuuta 2008 @ 17:09 |
Linkki tähän viestiin
|
|
Miten mennään vikasietotilaan? Ja miten siitä tilasta pääsee pois?
|
|
Hujo
Suspended permanently
|
5. helmikuuta 2008 @ 17:18 |
Linkki tähän viestiin
|
|
sammuta ja käynnistä
käynnistyksen yhteydessä hakkaa F8 nappia
valitse nuolinäppäimellä vikasietotila
paina enter ja enter
valitse käyttäjätilisi
paina kyllä
Jossakin koneissa hakataan F8:sin sijasta F5:tä
================
pois pääsee
käynnistä > sammuta tietokone > Käynnistä uudelleen
Voiko tietsikka koskaan toimia?
Viestiä on muokattu lähettämisen jälkeen. Viimeisin muokkaus 5. helmikuuta 2008 @ 17:19
|
|
etplayer1
Junior Member
2 tuotearviota
|
5. helmikuuta 2008 @ 18:04 |
Linkki tähän viestiin
|
Kone skannattu vikasietotilassa AVG-AntiSpyware -ohjelmalla.
Tässä vielä HJT-loki:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:02:34, on 5.2.2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\F-Secure\Common\FSM32.EXE
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Google\Gmail Notifier\gnotify.exe
C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
C:\Program Files\NetLimiter\NetLimiter.exe
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
C:\Program Files\Logitech\Video\LogiTray.exe
F:\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\WINDOWS\system32\LVComS.exe
C:\PROGRA~1\COMMON~1\PCSuite\Services\SERVIC~1.EXE
C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe
F:\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
C:\Program Files\F-Secure\BackWeb\7681197\Program\F-Secure Automatic Update.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
C:\Program Files\F-Secure\Common\FSMA32.EXE
C:\Program Files\F-Secure\Common\FSMB32.EXE
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\F-Secure\Common\FCH32.EXE
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\F-Secure\Common\FAMEH32.EXE
C:\Program Files\F-Secure\Anti-Virus\fsqh.exe
C:\Program Files\F-Secure\Anti-Virus\fsrw.exe
C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
C:\Program Files\F-Secure\Common\FNRB32.EXE
C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
C:\Program Files\F-Secure\Common\FIH32.EXE
C:\WINDOWS\system32\WgaTray.exe
C:\WINDOWS\system32\wuauclt.exe
C:\PROGRA~1\F-Secure\ANTI-S~1\fsaw.exe
C:\Program Files\F-Secure\FSGUI\fsguidll.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fi/
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] C:\Program Files\Google\Gmail Notifier\gnotify.exe
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -onlytray
O4 - HKLM\..\Run: [NetLimiter] C:\Program Files\NetLimiter\NetLimiter.exe /s
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "F:\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [043637e3] rundll32.exe "C:\WINDOWS\system32\aabkbuco.dll",b
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: F-Secure Automatic Update.lnk = C:\Program Files\F-Secure\BackWeb\7681197\program\F-Secure Automatic Update.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O8 - Extra context menu item: &Block this popup - C:\Program Files\F-Secure\Anti-Spyware\blockpopups.htm
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Avaa uuteen etuvälilehteen - res://C:\Program Files\Windows Live Toolbar\Components\fi-fi\msntabres.dll.mui/230?42e34bf2d6574abb80d1d6c4bc7e0366
O8 - Extra context menu item: Avaa uuteen taustavälilehteen - res://C:\Program Files\Windows Live Toolbar\Components\fi-fi\msntabres.dll.mui/229?42e34bf2d6574abb80d1d6c4bc7e0366
O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\npjpi160_02.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\npjpi160_02.dll
O9 - Extra button: IE Shield - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure\Anti-Spyware\ieshield.dll
O9 - Extra 'Tools' menuitem: IE Shield... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure\Anti-Spyware\ieshield.dll
O9 - Extra button: Oheistiedot - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdat...b?1164648388828
O17 - HKLM\System\CCS\Services\Tcpip\..\{451EF1CD-7324-4280-B8E1-813A6094BDF4}: NameServer = 213.139.190.3 212.50.131.153
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - (no file)
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - F:\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: F-Secure Automatic Update (BackWeb Plug-in - 7681197) - F-Secure Automatic Update - C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corp. - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Apache Software Foundation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
--
End of file - 10133 bytes
Onko kaikki nyt OK?
|
|
Hujo
Suspended permanently
|
5. helmikuuta 2008 @ 18:31 |
Linkki tähän viestiin
|
Javan päivitys ja välimuistin tyhjennys:
1. Klikkaa Käynnistä -> Ohjauspaneeli ja tupla-klikkaa Lisää tai poista sovellus Ohjauspaneelissa.
2. Etsi listasta kaikki entiset Java versiosi. (J2SE Runtime Environment.... )
Niissä pitäisi olla seuraava kuva vieressä: 
3. Valitse kaikki entiset Java versiosi ja valitse Poista.
4. Asenna uusin Java päivitys seuraavasta linkistä..
5. Käynnistä kone uudelleen asennuksen jälkeen:
http://java.sun.com/javase/downloads/index.jsp
Rullaa alas kohteeseen Java Runtime Environment (JRE) 6u4
Paina Download
Ruksaa Accept, ota offline installation, tallenna vaikka työpöydälle ja asenna se.
6. Käynnistyksen jälkeen, mene takaisin Ohjauspaneeliin ja avaa Java asetuksesi (Muita Ohjauspaneelin asetuksia -> Java kahvikuppi).
7. General Settings -osion alla, vedä liukusäädintä (Disk Space) pienemmälle, ja klikkaa Delete Files -nappia.
(Jotkut javapohjaiset ohjelmat saattavat tarvita enemmän levytilaa.
Jos huomaat säädön pienentämisen jälkeen koneessa hitautta, siirrä liukusäädintä isommalle).
8. Varmista että kaikki kaksi valintaa ovat rastitettuja:
*Applications and Applets
*Trace and Log Files
Ja paina OK -nappia
9. Klikkaa OK "Temporary Files Settings" -ikkunassasi.
10. Klikkaa OK jättääksesi Java asetusikkunasi.
====
aja uudestaan tuo vundofix
====
Nimeä uudelleen
C:\Program Files\Trend Micro\HijackThis\==> HijackThis.exe <== skanneriksi
===
lataa startuplite
tallena tiedosto työpöydälle. Tuplalikkaa StartUpLitenn.exe:ä
sitten voi valita mitä jätät käynnistyviin ja paina sitten continue.
===
Lataa: RegSeeker.zip työpöydälle:
http://fileforum.betanews.com/detail/RegSeeker/1035382760/1
Pura zip C:\RegSeeker\ kansioon. Sieltä käynnistät RegSeeker.exe ohjelman.
Oikeasa yläkulmassa on Languages.... linkki, josta valitset Suomenkielen.
Vasemmasta alakulmasta ruksit Luo vrmuuskopio ja sitten linkki Puhdista rekisteri
Ruksit kaikkiin muihin kohtiin paitsi "Käyttökelvottomat.." sitten "OK" (odotat hetken).
Ruutuun ilmestyy lista epäkelvoista rekisterimerkinnöistä, jotka alapalkista Valitse kohdasta
klikkaat Valitse kaikki jolloin valitut saavat keltaisen pohjavärin.
Alapalkin Toiminnot linkistä klikkaat Poista valitut kohteet
Ponnahdusikkunaan "Kaikki valitut kohteet poistetaan ? vastaat "OK".
Seuraavaan Ponnahdusikkunaan "Varmuuskopiot" vastaat "OK".
Klikaa vasemmalta Lopeta RegSeeker ja käynnistä koneesi uudelleen.
============
Oletko pistänyt skypen pois
Voiko tietsikka koskaan toimia?
Viestiä on muokattu lähettämisen jälkeen. Viimeisin muokkaus 5. helmikuuta 2008 @ 18:35
|
|
etplayer1
Junior Member
2 tuotearviota
|
5. helmikuuta 2008 @ 19:30 |
Linkki tähän viestiin
|
Java päivitetty ja välimuisti tyhjennetty! Tein juuri niin kuin olit käskenyt. Kysyit tuosta Skypestä. Pitääkö se muka poistaa? Onko siitä mitään haittaa? En mielellään menis poistelemaan sitä, sillä se on tärkeä ohjelma minulle.
Mutta tässä tulee vielä HJT-loki:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:29:03, on 5.2.2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\F-Secure\Common\FSM32.EXE
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Google\Gmail Notifier\gnotify.exe
C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
C:\Program Files\NetLimiter\NetLimiter.exe
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
C:\Program Files\Logitech\Video\LogiTray.exe
F:\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\WINDOWS\system32\LVComS.exe
C:\PROGRA~1\COMMON~1\PCSuite\Services\SERVIC~1.EXE
C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe
F:\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
C:\Program Files\F-Secure\BackWeb\7681197\Program\F-Secure Automatic Update.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
C:\Program Files\F-Secure\Common\FSMA32.EXE
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
C:\Program Files\F-Secure\Common\FSMB32.EXE
C:\Program Files\F-Secure\Common\FCH32.EXE
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\Program Files\F-Secure\Anti-Virus\fsqh.exe
C:\Program Files\F-Secure\Common\FAMEH32.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\F-Secure\Anti-Virus\fsrw.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
C:\Program Files\F-Secure\Common\FNRB32.EXE
C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
C:\Program Files\F-Secure\Common\FIH32.EXE
C:\WINDOWS\system32\WgaTray.exe
C:\PROGRA~1\F-Secure\ANTI-S~1\fsaw.exe
C:\Program Files\F-Secure\FSGUI\fsguidll.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis.exe\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fi/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] C:\Program Files\Google\Gmail Notifier\gnotify.exe
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -onlytray
O4 - HKLM\..\Run: [NetLimiter] C:\Program Files\NetLimiter\NetLimiter.exe /s
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "F:\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [043637e3] rundll32.exe "C:\WINDOWS\system32\aabkbuco.dll",b
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: F-Secure Automatic Update.lnk = C:\Program Files\F-Secure\BackWeb\7681197\program\F-Secure Automatic Update.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O8 - Extra context menu item: &Block this popup - C:\Program Files\F-Secure\Anti-Spyware\blockpopups.htm
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Avaa uuteen etuvälilehteen - res://C:\Program Files\Windows Live Toolbar\Components\fi-fi\msntabres.dll.mui/230?42e34bf2d6574abb80d1d6c4bc7e0366
O8 - Extra context menu item: Avaa uuteen taustavälilehteen - res://C:\Program Files\Windows Live Toolbar\Components\fi-fi\msntabres.dll.mui/229?42e34bf2d6574abb80d1d6c4bc7e0366
O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll
O9 - Extra button: IE Shield - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure\Anti-Spyware\ieshield.dll
O9 - Extra 'Tools' menuitem: IE Shield... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure\Anti-Spyware\ieshield.dll
O9 - Extra button: Oheistiedot - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdat...b?1164648388828
O17 - HKLM\System\CCS\Services\Tcpip\..\{451EF1CD-7324-4280-B8E1-813A6094BDF4}: NameServer = 213.139.190.3 212.50.131.153
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - (no file)
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - F:\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: F-Secure Automatic Update (BackWeb Plug-in - 7681197) - F-Secure Automatic Update - C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corp. - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Apache Software Foundation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
--
End of file - 9705 bytes
Miltä nyt näyttää?
|
|
Hujo
Suspended permanently
|
5. helmikuuta 2008 @ 19:39 |
Linkki tähän viestiin
|
Voiko tietsikka koskaan toimia?
|
|
etplayer1
Junior Member
2 tuotearviota
|
5. helmikuuta 2008 @ 22:14 |
Linkki tähän viestiin
|
Kone skannattu eScan AntiVirus -ohjelmalla.
Tässä on virus loki:
File C:\WINDOWS\system32\aabkbuco.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\WINDOWS\system32\eribpfue.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\WINDOWS\system32\hrvqlhkj.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\WINDOWS\system32\icslnpwx.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\WINDOWS\system32\KHCPWUMO.0LL infected by "Backdoor.Win32.Agent.dlj" Virus. Action Taken: File Renamed.
File C:\WINDOWS\system32\krbttukj.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\WINDOWS\system32\ooncpoof.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\WINDOWS\system32\rqrqgsml.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\WINDOWS\system32\rwovvckl.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\WINDOWS\system32\ugcagvxy.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\WINDOWS\system32\xhmjueyp.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\Documents and Settings\Mark\Desktop\Lataukset\mirc63.exe tagged as not-a-virus:Client-IRC.Win32.mIRC.63. No Action Taken.
File C:\Documents and Settings\Mark\Desktop\Lataukset\mirc631.exe tagged as not-a-virus:Client-IRC.Win32.mIRC.631. No Action Taken.
File C:\Documents and Settings\Mark\Incomplete\T-233472-MIRC 6.21 + KEYGEN WORKEEEEEES.0XE infected by "Trojan-Dropper.Win32.VB.lu" Virus. Action Taken: File Deleted.
File C:\Documents and Settings\Mark\Local Settings\Temporary Internet Files\Content.IE5\9DNXDH3P\ptch[1] tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\Documents and Settings\Mark\Local Settings\Temporary Internet Files\Content.IE5\9S2CDEOG\hctp[1] tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\Documents and Settings\Meri\Local Settings\Temp\agukogdu.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\Documents and Settings\Meri\Local Settings\Temp\ddayv.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\Documents and Settings\Meri\Local Settings\Temp\qcvhtntt.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\05AJC1I7\CA49O5C3 tagged as not-a-virus:AdWare.Win32.Virtumonde.wl. No Action Taken.
File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\05AJC1I7\CAYJUV6X tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\05AJC1I7\ybol[1].dll tagged as not-a-virus:AdWare.Win32.BHO.ok. No Action Taken.
File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\45YJOTIJ\CAEF41YR infected by "Backdoor.Win32.Hupigon.qcs" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\45YJOTIJ\CAFEE5FN tagged as not-a-virus:AdWare.Win32.Virtumonde.atv. No Action Taken.
File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\AHCZMTO1\CA2741MB tagged as not-a-virus:AdWare.Win32.Virtumonde.vq. No Action Taken.
File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\AHCZMTO1\CADOYL5R tagged as not-a-virus:AdWare.Win32.Virtumonde.acg. No Action Taken.
File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\AHCZMTO1\CAK1K1KF infected by "Trojan.Win32.Inject.kk" Virus. Action Taken: File Deleted.
File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\AHCZMTO1\CANAQ5NJ infected by "Trojan.Win32.Inject.kk" Virus. Action Taken: File Deleted.
File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\C16RWTA7\CAUN4LM3 infected by "Trojan.Win32.Inject.kk" Virus. Action Taken: File Deleted.
File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\C16RWTA7\CAZESZRX tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\C16RWTA7\CAZUU53N tagged as not-a-virus:AdWare.Win32.Virtumonde.acg. No Action Taken.
File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\C16RWTA7\ptch[1] tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\C5WTUFW5\CA67KD6N tagged as not-a-virus:AdWare.Win32.Virtumonde.wt. No Action Taken.
File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\C5WTUFW5\CADGYL13 infected by "Trojan.Win32.Inject.kk" Virus. Action Taken: File Deleted.
File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\C5WTUFW5\CAW5IZ8T tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\C5WTUFW5\i0ck[1].dll tagged as not-a-virus:AdWare.Win32.BHO.xi. No Action Taken.
File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\C5WTUFW5\ptch[1] tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\C5WTUFW5\ptch[2] tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\JSKGXPR6\CAIFS5AR tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\JSKGXPR6\hctp[1] tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\JSKGXPR6\ptch[1] tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\L9PNAEF6\7uft[1].dll tagged as not-a-virus:AdWare.Win32.BHO.xw. No Action Taken.
File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\L9PNAEF6\CAEN8XAZ tagged as not-a-virus:PSWTool.Win32.Virtumonde.ada. No Action Taken.
File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\L9PNAEF6\CAPSM9DR infected by "Trojan.Win32.Inject.kk" Virus. Action Taken: File Deleted.
File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\L9PNAEF6\CATWY9HF infected by "Trojan.Win32.Inject.kk" Virus. Action Taken: File Deleted.
File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\L9PNAEF6\CAZYEXV7 infected by "Trojan.Win32.Inject.kk" Virus. Action Taken: File Deleted.
File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\L9PNAEF6\gepj[2] tagged as not-a-virus:AdWare.Win32.Virtumonde.dcd. No Action Taken.
File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\L9PNAEF6\hctp[1] tagged as not-a-virus:AdWare.Win32.Virtumonde.eec. No Action Taken.
File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\L9PNAEF6\vasya[1] infected by "Trojan.Win32.Agent.bck" Virus. Action Taken: File Deleted.
File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\LOP4HR2Y\CAINC9QF tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\LOP4HR2Y\CAQRKHQR infected by "Trojan.Win32.Inject.kk" Virus. Action Taken: File Deleted.
File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\LOP4HR2Y\ptch[1] tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\QX8NIN0J\CAEJ8TAZ infected by "Trojan.Win32.Inject.kk" Virus. Action Taken: File Deleted.
File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\QX8NIN0J\CAQ7CP2B infected by "Trojan.Win32.Inject.kk" Virus. Action Taken: File Deleted.
File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\QX8NIN0J\hctp[1] tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\QX8NIN0J\ptch[1] tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\QXKR2XA5\CANEE5JN tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\QXKR2XA5\CANEUTZN tagged as not-a-virus:AdWare.Win32.Virtumonde.acz. No Action Taken.
File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\QXKR2XA5\CAXGKNX5 tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\SLYR0DIJ\valera[1] infected by "Trojan.Win32.Agent.bck" Virus. Action Taken: File Deleted.
File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\VJPE2E7Z\CA72IPJ3 tagged as not-a-virus:PSWTool.Win32.Virtumonde.ada. No Action Taken.
File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\VJPE2E7Z\CAP8ETH7 infected by "Trojan.Win32.Inject.kk" Virus. Action Taken: File Deleted.
File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\VJPE2E7Z\hctp[1] tagged as not-a-virus:AdWare.Win32.Virtumonde.flq. No Action Taken.
File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\WL4N4J8F\CASLSDCZ tagged as not-a-virus:AdWare.Win32.Virtumonde.wt. No Action Taken.
File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\WL4N4J8F\ptch[1] tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\WRXZU27H\CA5KM1L3 tagged as not-a-virus:AdWare.Win32.Virtumonde.wj. No Action Taken.
File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\WRXZU27H\CAVUITBN infected by "Trojan.Win32.Inject.kk" Virus. Action Taken: File Deleted.
File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\WRXZU27H\CAWLA7OD tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\WRXZU27H\nufwa[1].dll tagged as not-a-virus:AdWare.Win32.BHO.qj. No Action Taken.
File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\WRXZU27H\ptch[1] tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\X8JBV140\CAO52RKP tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\X8JBV140\pochki20071106[1] infected by "Trojan.Win32.Obfuscated.kp" Virus. Action Taken: File Deleted.
File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\YZYRQTUR\CAE7KD6N tagged as not-a-virus:AdWare.Win32.Virtumonde.acz. No Action Taken.
File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\YZYRQTUR\CAHSIHPJ tagged as not-a-virus:AdWare.Win32.Virtumonde.wu. No Action Taken.
File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\YZYRQTUR\CAZME5R3 infected by "Trojan.Win32.Inject.kk" Virus. Action Taken: File Deleted.
File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\YZYRQTUR\hctp[1] tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\YZYRQTUR\hctp[2] tagged as not-a-virus:AdWare.Win32.Virtumonde.flq. No Action Taken.
File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\YZYRQTUR\vasya[1] infected by "Trojan.Win32.Agent.bck" Virus. Action Taken: File Deleted.
File C:\Program Files\mIRC\mirc.exe tagged as not-a-virus:Client-IRC.Win32.mIRC.631. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP349\A0035539.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP349\A0036539.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP349\A0036540.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP349\A0036697.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP349\A0036698.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP349\A0036699.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP350\A0036746.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP350\A0036765.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP350\A0036781.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP350\A0036782.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP350\A0036783.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP350\A0036802.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP351\A0036836.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP351\A0036837.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP351\A0036930.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP351\A0036931.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP351\A0036932.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP353\A0037014.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP353\A0037015.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP353\A0037016.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP354\A0037057.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP354\A0037058.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP354\A0037059.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP354\A0037141.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP355\A0038142.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP355\A0038202.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP356\A0038256.0LL infected by "Backdoor.Win32.Agent.dlj" Virus. Action Taken: File Renamed.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP356\A0038267.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP358\A0039256.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP359\A0039350.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP359\A0039351.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP359\A0039368.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP360\A0039434.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP360\A0039435.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP360\A0039436.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP361\A0039520.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP361\A0039521.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP361\A0039522.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP362\A0039579.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP362\A0039580.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP362\A0039581.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP362\A0039596.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP362\A0039615.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP362\A0039616.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP362\A0039617.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP363\A0039644.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP363\A0039683.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP363\A0039684.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP364\A0039712.0ll infected by "Trojan.Win32.Pakes.bwd" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP364\A0039713.0ll infected by "Trojan.Win32.Pakes.bwd" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP364\A0039714.0xe infected by "Trojan-Downloader.Win32.Agent.gwe" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP364\A0039715.0xe infected by "Trojan-Downloader.Win32.Agent.gwe" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP364\A0039762.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP364\A0039763.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP364\A0039764.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP364\A0039798.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP364\A0039831.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP364\A0039832.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP365\A0039898.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP365\A0039899.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP365\A0039900.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP365\A0039913.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP366\A0039966.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP366\A0039967.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP366\A0039968.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP367\A0040011.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP367\A0040032.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP368\A0040073.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP368\A0040109.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP368\A0040110.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP370\A0040226.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP370\A0041226.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP370\A0041227.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP372\A0041345.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP374\A0041425.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP374\A0041444.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP375\A0041504.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP376\A0041552.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP376\A0041553.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP376\A0041566.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP377\A0041627.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP377\A0041628.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP378\A0041665.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP378\A0041682.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP380\A0041763.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP380\A0041801.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.eby. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP380\A0041802.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP380\A0041803.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP382\A0041904.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP382\A0041905.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP382\A0041906.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP383\A0041923.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP383\A0041924.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP384\A0041976.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP385\A0043010.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP386\A0043047.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP386\A0043048.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP386\A0043049.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP388\A0043162.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP388\A0043163.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP388\A0043164.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP389\A0043197.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP389\A0043198.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP389\A0043278.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP390\A0043326.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.jp. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043375.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gip. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043400.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043401.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043402.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043403.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043404.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043407.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043408.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043409.dll tagged as not-a-virus:PSWTool.Win32.Virtumonde.ada. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043411.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043418.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043420.dll tagged as not-a-virus:AdWare.Win32.SuperJuan.is. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043421.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043422.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043423.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043424.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043426.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043428.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043430.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043431.dll tagged as not-a-virus:PSWTool.Win32.Virtumonde.ada. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043432.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043433.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.wj. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043434.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043435.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043436.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043437.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043438.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043439.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043440.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043441.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043442.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043443.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043445.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043446.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043448.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043449.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043450.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043451.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043452.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043453.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043455.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.wl. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043456.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043458.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043459.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043461.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043462.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043464.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043465.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043467.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043468.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043470.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043471.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043472.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043473.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043474.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043475.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043476.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043478.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043479.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043480.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043481.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043482.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.wj. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043483.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043484.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043485.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043486.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.acg. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043488.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043489.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043490.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043491.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043492.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043493.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043495.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043496.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043497.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043498.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043499.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043500.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043501.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043502.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043503.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043505.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043506.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043507.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043508.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043509.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.wu. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043510.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.atv. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043511.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043512.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043513.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043514.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043515.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043516.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043517.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043518.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043520.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043521.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043522.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043523.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043525.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043526.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043528.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043529.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043530.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043534.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043537.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043538.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043540.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043541.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043543.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043544.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043547.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043548.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043551.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043552.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043555.dll tagged as not-a-virus:AdWare.Win32.SuperJuan.auj. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043556.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043560.dll tagged as not-a-virus:AdWare.Win32.SuperJuan.is. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043561.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043562.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043563.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043564.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.acz. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043565.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043567.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043568.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043570.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043572.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043574.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043575.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043576.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043578.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043579.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043580.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043581.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043582.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043583.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043584.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043585.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043586.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043588.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043590.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043593.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043594.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043595.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043596.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043597.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043598.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043600.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043601.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043602.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043604.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043607.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043608.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043609.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043610.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043611.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043612.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\aeklchqd.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\aermevdo.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\aivbmfai.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\amxgoged.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\atfyqcax.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\awtqr.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\awtsp.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\awtsr.dll.bad tagged as not-a-virus:PSWTool.Win32.Virtumonde.ada. No Action Taken.
File C:\VundoFix Backups\awvtq.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\bplhfdyp.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\bqoynspn.dll.bad tagged as not-a-virus:AdWare.Win32.SuperJuan.is. No Action Taken.
File C:\VundoFix Backups\btyavtax.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\buwnwjwq.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\bvfsuhep.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\bwcqmwke.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\cacsvisa.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\cwbiekqb.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\ddayy.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\ddcca.dll.bad tagged as not-a-virus:PSWTool.Win32.Virtumonde.ada. No Action Taken.
File C:\VundoFix Backups\ddcya.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\ddcyv.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.wj. No Action Taken.
File C:\VundoFix Backups\dgtnbstu.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\divjwdtn.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\dixympqk.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\dkcpwsnv.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\dotcfpky.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\dvjjwtjv.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\dwkjmoif.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\dwvluwva.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\emlmwcmc.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\ewsgwlpb.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\fcoqkjql.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\ffljyjoc.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\fmxwdixn.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\fviaarcw.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\fwgielsi.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\gbfrjpgd.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\gebca.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\gebya.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\geeda.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.wl. No Action Taken.
File C:\VundoFix Backups\geedd.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\gifmsrwp.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\giucoffi.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\grrfjbkk.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\henvravp.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\hgjylgit.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\hsjbcaoi.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\ieibsswt.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\ifjginpr.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\ininocxh.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\inuvtgue.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\ipuamvva.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\ismqggbk.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\jamhsakc.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\jcqshyci.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\jibrrioe.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\jkhfc.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\jkhfd.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\jkhfe.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\jkhfg.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\jkhhf.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.wj. No Action Taken.
File C:\VundoFix Backups\jkkjg.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\jkkjh.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\jkkjj.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\jkkjk.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.acg. No Action Taken.
File C:\VundoFix Backups\jkklk.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\jmqiccep.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\jmwywswi.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\jntdlgai.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\jpudegmv.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\jrbhuxee.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\kaecpist.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\kghpekvr.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\kgsqrgiq.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\khwaeyrb.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\kqyoaqsy.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\krmbjlvc.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\kyvkkqde.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\lehayuai.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\lgixiosn.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\lprsqilh.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\lsnjvlua.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\luuywyyl.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\mhqjcvas.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\mljgh.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.wu. No Action Taken.
File C:\VundoFix Backups\mljjj.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.atv. No Action Taken.
File C:\VundoFix Backups\mlljj.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\mnqgjdar.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\mosqivao.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\mtfdvxbj.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\mttmpxkn.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\mtywkixa.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\mugmedas.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\mwfvpvfq.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\nnwwktxr.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\nufhyqua.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\nvjkpmvf.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\nwckofve.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\ocexipdh.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\oegqxooy.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\okswwtli.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\oqxklnfg.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\osrjjrtk.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\pbyqbscb.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\pmkji.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\pnccvdki.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\pnwudpsx.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\pqyivefi.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\prairrjx.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\prwmytjy.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\pryixqjv.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\pxcdxtuk.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\qatolrvq.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\qewbpiqq.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\qqtwennp.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\rdchvqkc.dll.bad tagged as not-a-virus:AdWare.Win32.SuperJuan.auj. No Action Taken.
File C:\VundoFix Backups\rihpenqv.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\shqsssqq.dll.bad tagged as not-a-virus:AdWare.Win32.SuperJuan.is. No Action Taken.
File C:\VundoFix Backups\sivbbvlt.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\slhlalam.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\sqcekqoq.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\ssqpp.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.acz. No Action Taken.
File C:\VundoFix Backups\ssqrp.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\ssqrs.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\ssttq.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\sucqmbbx.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\tbjwxvyc.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\tlpiuhbm.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\tqcddcxx.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\ttvnrjdp.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\uafdvsti.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\ucjriqjr.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\urgeyumv.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\ushxwnya.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\vciomqrf.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\vevlusws.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\vfmgcqfu.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\vmlypmlw.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\vtbpaeye.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\vtsqo.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\vtstq.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\vturp.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\vtuts.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\vytgbrxv.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\wbxtfwvr.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\whdkpohb.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\wpbisact.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\wudyenxy.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\wvwyxfof.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\wxpthrsr.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\wxwflnqq.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\xmtojsem.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\xrnxjqos.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\xwxxdgns.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\ybvfumuq.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\ydivxnol.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\VundoFix Backups\yfwnedfb.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\WINDOWS\system32\aabkbuco.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\WINDOWS\system32\eribpfue.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\WINDOWS\system32\hrvqlhkj.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\WINDOWS\system32\icslnpwx.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\WINDOWS\system32\krbttukj.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\WINDOWS\system32\ooncpoof.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\WINDOWS\system32\rqrqgsml.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\WINDOWS\system32\rwovvckl.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\WINDOWS\system32\ugcagvxy.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File C:\WINDOWS\system32\xhmjueyp.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken.
File D:\downloads-softat_ym\asennetut\MIRC616.EXE tagged as not-a-virus:Client-IRC.Win32.mIRC.616. No Action Taken.
|
|
Hujo
Suspended permanently
|
5. helmikuuta 2008 @ 22:30 |
Linkki tähän viestiin
|
Lataa tuolta http://www.ccleaner.com/download/builds.aspx
CCleaner v2.03.532- Standard Build, ÄLÄ aseenna Yahoo toolbaria!
laita asetukset näin:
Valinnat --> Lisäasetukset --> Ota ruksi pois kohdasta Poista vain yli 48 tuntia vanhat tilapäistiedostot.
aja Puhdistaja > tutki nappi > aja ccleaner nappi oikea alakulma
aja Virheet > etsi rekisteri virheitä nappi > Korjaa rekisteri virheet. nappi
==============
Lataa Atribunen ATF Cleaner
Ohjeet;
Tupla-klikkaa ATF-Cleaner.exe käynnistääksesi ohjelman.Main:n alla valitse: Select All
Klikkaa Empty Selected valintaa.
Jos käytät FireFoxia selaimenasi Klikkaa Firefox yläpuolelta ja valitse: Select All
Klikkaa Empty Selected valintaa.
HUOMIO: Jos haluaisit pitää tallennetut salasanasi, klikkaa No kun se sitä kysyy.
Jos käytät Operaa selaimenasiKlikkaa Opera yläpuolelta ja valitse: Select All
Klikkaa Empty Selected valintaa taas.
HUOMIO: Jos haluaisit pitää tallennetut salasanasi, klikkaa No kun se sitä kysyy.
Klikkaa Exit päävalikosta sulkeaksesi ohjelman.
Teknistä tukea tulee jos tupla-klikkaat sähköpostiosoitetta joka sijaitsee jokaisen menun alapuolella kyseisessä työkalussa. (Huomatkaa että se tuki on sitten englanniksi)
==============
Poista lisää poista sovelutuksesta
Java version is 1.5.0.9
Java version is 1.5.0.11
============
Tuhjennä
C:\VundoFix Backups <-- sisältö ja tyhjennä roskis
=================
1. Klikkaa käynnistä > Oma tietokone oikean puoleisella hiiren napilla
2. Valitse ominaisuudet
3. Valitse järjestelmän palauttaminen välilehti
4. Ruksi eteen ¤ poista järjestelmän palauttaminen kaikissa asemissa
5. Paina Käytä
6. Paina ok
7. Sammuta ja käynnistä
8. Ota ruksi pois ¤ poista järjestelmän palauttaminen kaikissa asemissa
9. Käytä ja OK
===========
aja tuo vundofix vielä uudelleen lävitse
==========
Nimeä tuo uudelleen
C:\Program Files\Trend Micro\HijackThis\>>> HijackThis.exe <<< skanneriksi.exe
Voiko tietsikka koskaan toimia?
|
|
etplayer1
Junior Member
2 tuotearviota
|
5. helmikuuta 2008 @ 22:33 |
Linkki tähän viestiin
|
|
Tästä on hyvä jatkaa huomenna. Kiitos paljon avusta, Hujo!
|
|
etplayer1
Junior Member
2 tuotearviota
|
6. helmikuuta 2008 @ 19:04 |
Linkki tähän viestiin
|
Ccleaner asennettu ja ajettu, niin myös ATF cleaner.
Vanhat javat poistettu.
Vundofix backups -kansio tyhjennetty.
Järjestelmän palautusjuttu tehty.
Vundofix ei löytänyt enää mitään.
HiJackThis uudelleennimetty Skanner.exe:ksi
Oliko vielä muuta? :D
|
|
Hujo
Suspended permanently
|
6. helmikuuta 2008 @ 23:17 |
Linkki tähän viestiin
|
|
ota sitten uusi hjt:n loki
Voiko tietsikka koskaan toimia?
|
|
etplayer1
Junior Member
2 tuotearviota
|
7. helmikuuta 2008 @ 14:39 |
Linkki tähän viestiin
|
Tässä on HJT-loki:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:38:48, on 7.2.2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\F-Secure\Common\FSM32.EXE
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Google\Gmail Notifier\gnotify.exe
C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
C:\Program Files\NetLimiter\NetLimiter.exe
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
C:\Program Files\Logitech\Video\LogiTray.exe
F:\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\WINDOWS\system32\LVComS.exe
C:\PROGRA~1\COMMON~1\PCSuite\Services\SERVIC~1.EXE
C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe
F:\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
C:\Program Files\F-Secure\BackWeb\7681197\Program\F-Secure Automatic Update.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
C:\Program Files\F-Secure\Common\FSMA32.EXE
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
C:\Program Files\F-Secure\Common\FSMB32.EXE
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\F-Secure\Common\FCH32.EXE
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\F-Secure\Common\FAMEH32.EXE
C:\Program Files\F-Secure\Anti-Virus\fsqh.exe
C:\Program Files\F-Secure\Anti-Virus\fsrw.exe
C:\Program Files\F-Secure\Common\FNRB32.EXE
C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
C:\Program Files\F-Secure\Common\FIH32.EXE
C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
C:\PROGRA~1\F-Secure\ANTI-S~1\fsaw.exe
C:\WINDOWS\system32\WgaTray.exe
C:\Program Files\F-Secure\FSGUI\fsguidll.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis.exe\skanner.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fi/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] C:\Program Files\Google\Gmail Notifier\gnotify.exe
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -onlytray
O4 - HKLM\..\Run: [NetLimiter] C:\Program Files\NetLimiter\NetLimiter.exe /s
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "F:\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: F-Secure Automatic Update.lnk = C:\Program Files\F-Secure\BackWeb\7681197\program\F-Secure Automatic Update.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O8 - Extra context menu item: &Block this popup - C:\Program Files\F-Secure\Anti-Spyware\blockpopups.htm
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Avaa uuteen etuvälilehteen - res://C:\Program Files\Windows Live Toolbar\Components\fi-fi\msntabres.dll.mui/230?42e34bf2d6574abb80d1d6c4bc7e0366
O8 - Extra context menu item: Avaa uuteen taustavälilehteen - res://C:\Program Files\Windows Live Toolbar\Components\fi-fi\msntabres.dll.mui/229?42e34bf2d6574abb80d1d6c4bc7e0366
O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll
O9 - Extra button: IE Shield - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure\Anti-Spyware\ieshield.dll
O9 - Extra 'Tools' menuitem: IE Shield... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure\Anti-Spyware\ieshield.dll
O9 - Extra button: Oheistiedot - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdat...b?1164648388828
O17 - HKLM\System\CCS\Services\Tcpip\..\{451EF1CD-7324-4280-B8E1-813A6094BDF4}: NameServer = 213.139.190.3 212.50.131.153
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - (no file)
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - F:\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: F-Secure Automatic Update (BackWeb Plug-in - 7681197) - F-Secure Automatic Update - C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corp. - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Apache Software Foundation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
--
End of file - 9761 bytes
|
|
Hujo
Suspended permanently
|
7. helmikuuta 2008 @ 17:26 |
Linkki tähän viestiin
|
Lataa OTMoveIt
OTMoveIt ja tallenna se työpöydällesi.
Tuplaklikkaa OTMoveIt.exe.
Klikkaa CleanUp!.
Valitse Yes kun kysytään "Begin cleanup Process?".
Jos pyydetään, että saako koneen käynnistää uudeelleen, valitse Yes.OTMoveIt poistaa itsensä kun se on valmis, jos näin ei käy poista se itse.
HUOM: Jos palomuurisi tai joku muu tietoturvaohjelma varoittaa, että OTMoveIt yrittää päästä nettin, niin anna sen päästä sinne.
Voiko tietsikka koskaan toimia?
|
|
etplayer1
Junior Member
2 tuotearviota
|
7. helmikuuta 2008 @ 17:35 |
Linkki tähän viestiin
|
Kone ajettu OTmoveIt -ohjelmalla. HJT -loki näyttää nyt tältä:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:33:21, on 7.2.2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\F-Secure\Common\FSM32.EXE
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Google\Gmail Notifier\gnotify.exe
C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
C:\Program Files\NetLimiter\NetLimiter.exe
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
C:\Program Files\Logitech\Video\LogiTray.exe
C:\WINDOWS\system32\LVComS.exe
C:\PROGRA~1\COMMON~1\PCSuite\Services\SERVIC~1.EXE
F:\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe
F:\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\Program Files\F-Secure\BackWeb\7681197\Program\F-Secure Automatic Update.exe
C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
C:\Program Files\F-Secure\Common\FSMA32.EXE
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
C:\Program Files\F-Secure\Common\FSMB32.EXE
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\F-Secure\Common\FCH32.EXE
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\F-Secure\Common\FAMEH32.EXE
C:\Program Files\F-Secure\Anti-Virus\fsqh.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\F-Secure\Anti-Virus\fsrw.exe
C:\Program Files\F-Secure\Common\FNRB32.EXE
C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
C:\Program Files\F-Secure\Common\FIH32.EXE
C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
C:\WINDOWS\system32\WgaTray.exe
C:\PROGRA~1\F-Secure\ANTI-S~1\fsaw.exe
C:\Program Files\F-Secure\FSGUI\fsguidll.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Trend Micro\HijackThis.exe\skanner.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fi/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] C:\Program Files\Google\Gmail Notifier\gnotify.exe
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -onlytray
O4 - HKLM\..\Run: [NetLimiter] C:\Program Files\NetLimiter\NetLimiter.exe /s
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "F:\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: F-Secure Automatic Update.lnk = C:\Program Files\F-Secure\BackWeb\7681197\program\F-Secure Automatic Update.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O8 - Extra context menu item: &Block this popup - C:\Program Files\F-Secure\Anti-Spyware\blockpopups.htm
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Avaa uuteen etuvälilehteen - res://C:\Program Files\Windows Live Toolbar\Components\fi-fi\msntabres.dll.mui/230?42e34bf2d6574abb80d1d6c4bc7e0366
O8 - Extra context menu item: Avaa uuteen taustavälilehteen - res://C:\Program Files\Windows Live Toolbar\Components\fi-fi\msntabres.dll.mui/229?42e34bf2d6574abb80d1d6c4bc7e0366
O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll
O9 - Extra button: IE Shield - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure\Anti-Spyware\ieshield.dll
O9 - Extra 'Tools' menuitem: IE Shield... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure\Anti-Spyware\ieshield.dll
O9 - Extra button: Oheistiedot - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdat...b?1164648388828
O17 - HKLM\System\CCS\Services\Tcpip\..\{451EF1CD-7324-4280-B8E1-813A6094BDF4}: NameServer = 213.139.190.3 212.50.131.153
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - (no file)
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - F:\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: F-Secure Automatic Update (BackWeb Plug-in - 7681197) - F-Secure Automatic Update - C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corp. - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Apache Software Foundation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
--
End of file - 9672 bytes
|
|
Hujo
Suspended permanently
|
7. helmikuuta 2008 @ 17:38 |
Linkki tähän viestiin
|
|
loki ok
miltäs kone tuntuu?
Voiko tietsikka koskaan toimia?
|
|
Mainos
|
|
|
|
etplayer1
Junior Member
2 tuotearviota
|
7. helmikuuta 2008 @ 19:09 |
Linkki tähän viestiin
|
|
C: -asemalta vapautunut n. 1 gigatavu lisää tilaa! Kone nopeutunut hieman. Kiitos vielä kerran avusta!!
|
