Dealio Toolbar -hjt-logi

Discussion in 'Virukset ja haittaohjelmat - HijackThis -logit' started by Wolfmoon, Dec 13, 2008.

  1. Wolfmoon

    Wolfmoon Member

    Joined:
    Jan 5, 2007
    Messages:
    29
    Likes Received:
    0
    Trophy Points:
    11
    Olen jotenkin vahingossa onnistunut (ilmeisesti jonkin ohjelman mukana) lataamaan ylläolevan otsikon mukaisen toolbarin, joka ei suostu millään lähtemään koneelta. Toolbarin toiminta on ilmeentynyt koneella esim. siten, että se on estänyt vaihtamasta Explorerin oletushakuselainta ja välillä uudelleenohjannut muilta sivuilta dealio.com-sivustolle. Olen kyllä huomannut tuon search settings -kansion Program Files-kansiossa, mutta sitä ei pysty poistamaan. Joten tässä olisi hijack-logi, jos sen onnistuisi nujertamaan koneeltani. Kiitoksia paljon.

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 23:16:15, on 13.12.2008
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16762)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
    C:\WINDOWS\SOUNDMAN.EXE
    C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
    C:\WINDOWS\system32\LVCOMSX.EXE
    C:\Program Files\Logitech\Video\LogiTray.exe
    C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
    C:\Program Files\Search Settings\SearchSettings.exe
    C:\Program Files\Common Files\Real\Update_OB\realsched.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
    C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
    C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\WINDOWS\system32\CTsvcCDA.exe
    C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
    C:\Program Files\CDBurnerXP\NMSAccessU.exe
    C:\WINDOWS\system32\PnkBstrA.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Logitech\Video\FxSvr2.exe
    C:\Program Files\Canon\CAL\CALMAIN.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://GLOBAL.ACER.COM/
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 87.86.13.29:80
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local;<local>
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    R3 - URLSearchHook: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - (no file)
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: Windows Liven kirjautumisapuohjelma - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
    O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
    O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fi\msntb.dll
    O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
    O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
    O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
    O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
    O4 - HKLM\..\Run: [SearchSettings] C:\Program Files\Search Settings\SearchSettings.exe
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Paikallinen palve')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Verkkopalve')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
    O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2\bin\npjpi142.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2\bin\npjpi142.dll
    O9 - Extra button: Oheistiedot - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O14 - IERESET.INF: START_PAGE_URL=http://GLOBAL.ACER.COM/
    O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
    O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
    O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
    O16 - DPF: {33288993-5664-11D4-8B5B-00D0B73B3518} (ell Class) - http://www.easports.com/downloads/games/common/ieell.cab
    O16 - DPF: {3FE16C08-D6A7-4133-84FC-D5BFB4F7D886} (WebGameLoader Class) - http://www.miniclip.com/ricochet/ReflexiveWebGameLoader.cab
    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com//PhotoUpload/MsnPUpld.cab
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
    O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
    O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://cdn2.zone.msn.com/binFramework/v10/ZIntro.cab34246.cab
    O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab31267.cab
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
    O16 - DPF: {D821DC4A-0814-435E-9820-661C543A4679} (CRLDownloadWrapper Class) - http://drmlicense.one.microsoft.com/crlupdate/en/crlocx.ocx
    O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/su2/CTL_V02002/ocx/15030/CTPID.cab
    O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
    O17 - HKLM\System\CCS\Services\Tcpip\..\{9C95C348-38DA-4D25-8817-BF5FE88366C9}: NameServer = 192.168.10.1,193.229.0.40
    O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
    O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
    O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
    O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
    O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
    O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: Bonjour-palvelu (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
    O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: iPod-palvelu (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: McAfee SiteAdvisor Service - Unknown owner - C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
    O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
    O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
    O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe

    --
    End of file - 10143 bytes
     
    Last edited: Dec 13, 2008
    Wolfmoon, Dec 13, 2008
    #1
  2. Hujo

    Hujo Guest

    Luo poistolista:
    • Avaa HiJackThis
    • Klikkaa "Configure" valintaa oikealla alhaalla
    • Klikkaa "Misc Tools"
    • Klikkaa boxia joka sanoo "Uninstall Manager"
    • Klikkaa valintaa "Save list"
    • Kopioi ja liitä kyseinen lista muistiosta ketjuusi
     
    Hujo, Dec 13, 2008
    #2
  3. Wolfmoon

    Wolfmoon Member

    Joined:
    Jan 5, 2007
    Messages:
    29
    Likes Received:
    0
    Trophy Points:
    11
    Tuossa olisi.

    AC3Filter (remove only)
    Ad-Aware
    Adobe Flash Player 10 ActiveX
    Adobe Flash Player 10 Plugin
    Adobe Photoshop 7.0
    Adobe Reader 7.1.0
    Adobe Shockwave Player 11
    Apple Mobile Device Support
    Apple Software Update
    Audacity 1.2.6
    AudibleManager
    Automaattiset valikot (Windows Live Toolbar)
    Avira AntiVir Personal - Free Antivirus
    Bink and Smacker
    Bonjour
    BSPlayer
    Canon Camera Access Library
    Canon Camera Support Core Library
    Canon Camera Window DC_DV 5 for ZoomBrowser EX
    Canon Camera Window DC_DV 6 for ZoomBrowser EX
    Canon Camera Window MC 6 for ZoomBrowser EX
    Canon G.726 WMP-Decoder
    CANON iMAGE GATEWAY Task for ZoomBrowser EX
    Canon Internet Library for ZoomBrowser EX
    Canon MovieEdit Task for ZoomBrowser EX
    Canon RAW Image Task for ZoomBrowser EX
    Canon RemoteCapture Task for ZoomBrowser EX
    Canon Utilities EOS Utility
    Canon Utilities PhotoStitch
    Canon Utilities ZoomBrowser EX
    CCleaner (remove only)
    CDBurnerXP
    Creative MediaSource 5
    Creative Software AutoUpdate
    Creative System Information
    DivXLand Media Subtitler
    EasyCleaner
    ffdshow [rev 610] [2006-12-01]
    FoxyTunes for Firefox
    Free FLV Converter V 5.8
    HijackThis 2.0.2
    Hotfix for Windows Media Format 11 SDK (KB929399)
    Hotfix-korjauspäivitys Windows Media Player 11:lle (KB939683)
    Hotfix-päivitys Windows Internet Explorer 7:lle (KB947864)
    Hotfix-päivitys Windows XP:lle (KB952287)
    InterActual Player
    iTunes
    Java 2 Runtime Environment, SE v1.4.2
    Korostuksen katselu (Windows Live Toolbar)
    Live Sound Recorder 1.2.1
    Logitech QuickCam Software
    Logitech® Camera -ohjain
    McAfee SiteAdvisor
    Microsoft .NET Framework 2.0 Service Pack 1
    Microsoft Compression Client Pack 1.0 for Windows XP
    Microsoft Internationalized Domain Names Mitigation APIs
    Microsoft National Language Support Downlevel APIs
    Microsoft Office Outlook Connector
    Microsoft Office Professional Edition 2003
    Microsoft Silverlight
    Microsoft User-Mode Driver Framework Feature Pack 1.0
    Microsoft Works 6-9 Converter
    mIRC
    Mozilla ActiveX Control v1.7.12
    Mozilla Firefox (3.0.4)
    MSN Työkalupalkki
    MSXML 4.0 SP2 (KB927978)
    MSXML 4.0 SP2 (KB936181)
    MSXML 4.0 SP2 (KB954430)
    Musicnotes Player V1.23.1
    neroxml
    NTI Backup NOW! 3
    NTI CD & DVD-Maker Gold
    PICVideo Codecs
    Player Recovery Drivers
    PowerDVD
    Päivitys Windows XP:lle (KB951072-v2)
    Päivitys Windows XP:lle (KB951978)
    Päivitys Windows XP:lle (KB955839)
    QuickTime
    RealPlayer
    Realtek AC'97 Audio
    Search Settings 1.2
    Security Update for CAPICOM (KB931906)
    Security Update for CAPICOM (KB931906)
    SiS 900 PCI Fast Ethernet Adapter Driver
    Subtitle Workshop 2.51
    Subtitle Workshop v2.51
    Suojauspäivitys ohjelmistolle Windows XP (KB941569)
    Suojauspäivitys Windows Internet Explorer 7:lle (KB928090)
    Suojauspäivitys Windows Internet Explorer 7:lle (KB929969)
    Suojauspäivitys Windows Internet Explorer 7:lle (KB931768)
    Suojauspäivitys Windows Internet Explorer 7:lle (KB933566)
    Suojauspäivitys Windows Internet Explorer 7:lle (KB937143)
    Suojauspäivitys Windows Internet Explorer 7:lle (KB938127)
    Suojauspäivitys Windows Internet Explorer 7:lle (KB939653)
    Suojauspäivitys Windows Internet Explorer 7:lle (KB942615)
    Suojauspäivitys Windows Internet Explorer 7:lle (KB944533)
    Suojauspäivitys Windows Internet Explorer 7:lle (KB950759)
    Suojauspäivitys Windows Internet Explorer 7:lle (KB953838)
    Suojauspäivitys Windows Internet Explorer 7:lle (KB956390)
    Suojauspäivitys Windows Internet Explorer 7:lle (KB958215)
    Suojauspäivitys Windows Media Player 10:lle (KB911565)
    Suojauspäivitys Windows Media Player 10:lle (KB917734)
    Suojauspäivitys Windows Media Player 11:lle (KB936782)
    Suojauspäivitys Windows Media Player 11:lle (KB954154)
    Suojauspäivitys Windows Media Playerille (KB952069)
    Suojauspäivitys Windows XP:lle (KB938464)
    Suojauspäivitys Windows XP:lle (KB946648)
    Suojauspäivitys Windows XP:lle (KB950760)
    Suojauspäivitys Windows XP:lle (KB950762)
    Suojauspäivitys Windows XP:lle (KB950974)
    Suojauspäivitys Windows XP:lle (KB951066)
    Suojauspäivitys Windows XP:lle (KB951376)
    Suojauspäivitys Windows XP:lle (KB951376-v2)
    Suojauspäivitys Windows XP:lle (KB951698)
    Suojauspäivitys Windows XP:lle (KB951748)
    Suojauspäivitys Windows XP:lle (KB952954)
    Suojauspäivitys Windows XP:lle (KB953839)
    Suojauspäivitys Windows XP:lle (KB954211)
    Suojauspäivitys Windows XP:lle (KB954459)
    Suojauspäivitys Windows XP:lle (KB954600)
    Suojauspäivitys Windows XP:lle (KB955069)
    Suojauspäivitys Windows XP:lle (KB956391)
    Suojauspäivitys Windows XP:lle (KB956802)
    Suojauspäivitys Windows XP:lle (KB956803)
    Suojauspäivitys Windows XP:lle (KB956841)
    Suojauspäivitys Windows XP:lle (KB957095)
    Suojauspäivitys Windows XP:lle (KB957097)
    Suojauspäivitys Windows XP:lle (KB958644)
    SUPERAntiSpyware Free Edition
    Uninstall 1.0.0.1
    VCRedistSetup
    VideoLAN VLC media player 0.8.6d
    Windows Live installer
    Windows Live Messenger
    Windows Live Toolbarin laajennus (Windows Live Toolbar)
    Windows Liven kirjautumisavustaja
    Windows Liven sähköposti
    Windows Media Format 11 runtime
    Windows Media Format 11 runtime
    Windows Media Player 10:n Hotfix-korjauspäivitys KB895316
    Windows Media Player 11
    Windows Media Player 11
    Windows Media Player Firefox Plugin
    Windows XP Service Pack 3
    WinPcap 4.0
    WinRAR archiver
    WinZip
    XiRCON 1.0B4
    Xvid 1.1.3 final uninstall
    XviD MPEG4 Video Codec (remove only)
     
    Last edited: Dec 14, 2008
    Wolfmoon, Dec 14, 2008
    #3
  4. Hujo

    Hujo Guest

    Poista lisää poista sovelutuksesta

    Java 2 Runtime Environment, SE v1.4.2
    Search Settings 1.2
    SUPERAntiSpyware Free Edition


    Poista vikasiedossa kansiot

    C:\Program Files\Search Settings
    C:\Program Files\SUPERAntiSpyware
    C:\Program Files\Java

    ====================

    scannaa hjt:llä merkkaa paina Fix checked

    R3 - URLSearchHook: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - (no file)
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
     
    Hujo, Dec 14, 2008
    #4
  5. Wolfmoon

    Wolfmoon Member

    Joined:
    Jan 5, 2007
    Messages:
    29
    Likes Received:
    0
    Trophy Points:
    11
    Tuli pieni probleema. Asennusohjelma ei suostu poistamaan Search Settingsiä. Herjaa tällaista: http://img185.imageshack.us/img185/2166/erroreqf9.jpg

    Sitten, kun painaa "ok", tulee viesti: "Asennuksessa tapahtui vakava virhe". Mitä tuon kanssa pitäisi tehdä, kun se tuollaista viestiä pukkaa? Toiset kaksi ohjelmaa jo poistin, mutta vikasietotilassa poistoa ja skannausta/fixiä en suorittanut vielä.
     
    Wolfmoon, Dec 16, 2008
    #5
  6. Hujo

    Hujo Guest

    sitten jatketaan vain

    Lataa Malwarebytes' Anti-Malware työpöydällesi.

    1. Tuplaklikkaa mbam-setup.exe ja seuraa ohjeita asentaaksesi ohjelman.
    2. Lopuksi varmistu, että seuraavat on valittu: Update Malwarebytes', Anti-Malwareja
    Launch Malwarebytes' Anti-Malware ja sen jälkeen klikkaaFinish.
    3. Jos päivitys löytyy. ohjelma lataa ja asentaa uusimman version.
    4. Kun ohjelma on latautunut, valitse Perform full scan ja klikkaa Scan.
    5. Kun skanni on valmis, klikkaa OK ja sitten Show Results nähdäksesi tulokset.
    6. Varmistu, että kaikki on merkitty ja klikkaa Remove Selected.
    7. Tämän jälkeen loki avautuu muistioon. Tallenna se paikkaan, josta löydät sen helposti. Loki
    löytyy myös täältä: C:\Documents and Settings\Käyttäjänimi\Application
    Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-päiväys.txt
    8. Lähetä lokin sisältö seuraavassa viestissäsi

    ===============

    1.Lataa Combofix.exe työpöydällesi yhdestä linkistä:
    Combofix1
    Combofix2

    2. Tuplaklikkaa Combofix.exe tiedostoa ja seuraa ohjeistuksia.
    3. Kun työkalu on valmis, se tuottaa lokin. Lähetä tämä loki viesti ketjuusi.
    Huom! Älä klikkaile combofixin ikkunaa käytön aikana. Tämä saattaa aiheuttaa ohjelman jumiutumisen.
     
    Hujo, Dec 16, 2008
    #6
  7. Wolfmoon

    Wolfmoon Member

    Joined:
    Jan 5, 2007
    Messages:
    29
    Likes Received:
    0
    Trophy Points:
    11
    Tässä eka logi. Vaikka logissa lukee saastuneiden tiedostojen kohdalla "no action taken", poistin kuitenkin nuo tiedostot. Se miksi asia on näin, johtuu siitä, että tallensin login ennen kuin olin tiedostot poistanut.

    Malwarebytes' Anti-Malware 1.31
    Tietokantaversio: 1506
    Windows 5.1.2600 Service Pack 3

    16.12.2008 20:49:59
    mbam-log-2008-12-16 (20-49-46).txt

    Tarkistustyyppi: Täysi tarkistus (C:\|)
    Tarkistetut kohteet: 193725
    Kulunut aika: 1 hour(s), 44 minute(s), 38 second(s)

    Saastuneita muistiprosesseja: 0
    Saastuneita muistimoduuleja: 0
    Saastuneita rekisteriavaimia: 2
    Saastuneita rekisteriarvoja: 0
    Saastuneita rekisterikohteita: 0
    Saastuneita hakemistoja: 0
    Saastuneita tiedostoja: 2

    Saastuneita muistiprosesseja:
    (Haitallisia kohteita ei löydetty)

    Saastuneita muistimoduuleja:
    (Haitallisia kohteita ei löydetty)

    Saastuneita rekisteriavaimia:
    HKEY_CLASSES_ROOT\Interface\{450b9e4d-4014-4de3-b34e-014a81468293} (Trojan.Downloader) -> No action taken.
    HKEY_CLASSES_ROOT\Typelib\{c7f00a9a-f1bc-436e-82c7-e8cae6fd67f7} (Trojan.Downloader) -> No action taken.

    Saastuneita rekisteriarvoja:
    (Haitallisia kohteita ei löydetty)

    Saastuneita rekisterikohteita:
    (Haitallisia kohteita ei löydetty)

    Saastuneita hakemistoja:
    (Haitallisia kohteita ei löydetty)

    Saastuneita tiedostoja:
    C:\WINDOWS\smdat32m.sys (Rootkit.Agent) -> No action taken.
    C:\WINDOWS\smdat32a.sys (Rootkit.Agent) -> No action taken.


    Tässä Compofix -logi

    ComboFix 08-12-15.08 - Järjestelmänvalvoja 2008-12-16 22:06:35.1 - FAT32x86
    Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1035.18.479.165 [GMT 2:00]
    Sijainti: c:\documents and settings\Työpöytä\ComboFix.exe
    * Uusi palautuspiste luotu
    .

    ((((( Tiedostot, jotka on luotu seuraavalla aikavälillä: 2008-11-16 to 2008-12-16 )))))))))))))))))
    .

    2008-12-16 18:55 . 2008-12-16 18:55 <KANSIO> d-------- c:\program files\Malwarebytes' Anti-Malware
    2008-12-16 18:55 . 2008-12-16 18:55 <KANSIO> d-------- c:\documents and settings\Application Data\Malwarebytes
    2008-12-16 18:55 . 2008-12-16 18:55 <KANSIO> d-------- c:\documents and settings\All Users\Application Data\Malwarebytes
    2008-12-16 18:55 . 2008-12-03 19:52 38,496 --a------ c:\windows\system32\drivers\mbamswissarmy.sys
    2008-12-16 18:55 . 2008-12-03 19:52 15,504 --a------ c:\windows\system32\drivers\mbam.sys
    2008-12-13 21:27 . 2008-12-13 21:27 <KANSIO> d-------- c:\program files\SUPERAntiSpyware
    2008-12-13 21:27 . 2008-12-13 21:27 <KANSIO> d-------- c:\documents and settings\Application Data\SUPERAntiSpyware.com
    2008-12-13 21:27 . 2008-12-13 21:27 <KANSIO> d-------- c:\documents and settings\All Users\Application Data\SUPERAntiSpyware.com
    2008-12-11 20:29 . 2008-12-13 10:39 23,392 --a------ c:\windows\system32\nscompat.tlb
    2008-12-11 20:29 . 2008-12-13 10:39 16,832 --a------ c:\windows\system32\amcompat.tlb
    2008-12-11 13:35 . 2008-12-11 13:35 <KANSIO> d--hs---- C:\FOUND.069
    2008-12-11 02:23 . 2008-12-11 11:14 1,393 --a------ c:\windows\imsins.BAK
    2008-12-10 09:26 . 2008-12-10 09:26 <KANSIO> d-------- c:\documents and settings\All Users\Application Data\Last.fm
    2008-12-10 09:25 . 2008-12-10 09:25 <KANSIO> d-------- c:\program files\Last.fm
    2008-12-04 23:00 . 2008-12-04 23:00 <KANSIO> d-------- c:\documents and settings\LocalService\Application Data\SACore
    2008-12-04 22:46 . 2008-12-04 22:46 <KANSIO> d-------- c:\program files\Common Files\McAfee
    2008-12-04 22:44 . 2008-12-04 22:45 <KANSIO> d-------- c:\program files\McAfee
    2008-12-03 22:43 . 2008-12-03 22:43 <KANSIO> d-------- c:\documents and settings\LocalService\Työpöytä
    2008-12-01 17:40 . 2008-12-01 17:40 <KANSIO> d-------- c:\program files\iPod
    2008-12-01 17:40 . 2008-12-01 17:40 <KANSIO> d-------- c:\documents and settings\All Users\Application Data\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
    2008-12-01 17:38 . 2008-12-01 17:38 <KANSIO> d-------- c:\program files\Bonjour
    2008-12-01 17:36 . 2008-12-01 17:36 <KANSIO> d-------- c:\program files\QuickTime
    2008-12-01 10:27 . 2008-12-01 10:27 <KANSIO> d--hs---- C:\FOUND.068
    2008-11-22 18:30 . 2008-11-22 18:31 <KANSIO> d-------- c:\program files\Microsoft Works
    2008-11-20 15:11 . 2008-11-20 15:11 <KANSIO> d-------- c:\program files\Microsoft Office Outlook Connector
    2008-11-20 15:10 . 2008-11-20 15:10 <KANSIO> d-------- c:\program files\MSECache

    .
    (((((((((((((((((((((((((((((((((((( Find3M-raportti ))))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2008-11-03 20:37 30 ----a-w c:\documents and settings\jagex_runescape_preferences.dat
    2008-10-29 18:43 --------- d-----w c:\program files\Juice
    2008-10-29 18:43 --------- d-----w c:\documents and settings\Application Data\iPodder
    2008-10-29 17:50 --------- d-----w c:\program files\Common Files\xing shared
    2008-10-28 17:40 --------- d-----w c:\program files\Common Files\DVDVideoSoft
    2008-10-28 17:40 --------- d-----w c:\documents and settings\Application Data\Search Settings
    2008-10-28 17:07 --------- d-----w c:\program files\Search Settings
    2008-10-28 16:59 --------- d-----w c:\program files\Free FLV Converter
    2008-10-28 15:52 --------- d-----w c:\documents and settings\Application Data\ImTOO Software Studio
    2008-10-28 11:16 --------- d-----w c:\program files\Broadcaster
    2008-10-24 11:21 455,296 ----a-w c:\windows\system32\drivers\mrxsmb.sys
    2008-10-24 11:21 455,296 ------w c:\windows\system32\dllcache\mrxsmb.sys
    2008-10-23 12:38 286,720 ----a-w c:\windows\system32\gdi32.dll
    2008-10-23 12:38 286,720 ------w c:\windows\system32\dllcache\gdi32.dll
    2008-10-21 22:03 --------- d-----w c:\documents and settings\Application Data\OpenOffice.org
    2008-10-21 21:59 --------- d-----w c:\program files\OpenOffice.org 3
    2008-10-17 12:49 --------- d-----w c:\documents and settings\Application Data\Creative
    2008-10-16 23:48 3,593,216 ----a-w c:\windows\system32\dllcache\mshtml.dll
    2008-10-16 13:12 70,656 ----a-w c:\windows\system32\dllcache\ie4uinit.exe
    2008-10-16 13:11 13,824 ------w c:\windows\system32\dllcache\ieudinit.exe
    2008-10-16 12:13 202,776 ----a-w c:\windows\system32\wuweb.dll
    2008-10-16 12:13 202,776 ----a-w c:\windows\system32\dllcache\wuweb.dll
    2008-10-16 12:13 1,809,944 ----a-w c:\windows\system32\wuaueng.dll
    2008-10-16 12:13 1,809,944 ----a-w c:\windows\system32\dllcache\wuaueng.dll
    2008-10-16 12:12 561,688 ----a-w c:\windows\system32\wuapi.dll
    2008-10-16 12:12 561,688 ----a-w c:\windows\system32\dllcache\wuapi.dll
    2008-10-16 12:12 323,608 ----a-w c:\windows\system32\wucltui.dll
    2008-10-16 12:12 323,608 ----a-w c:\windows\system32\dllcache\wucltui.dll
    2008-10-16 12:09 92,696 ----a-w c:\windows\system32\dllcache\cdm.dll
    2008-10-16 12:09 92,696 ----a-w c:\windows\system32\cdm.dll
    2008-10-16 12:09 51,224 ----a-w c:\windows\system32\wuauclt.exe
    2008-10-16 12:09 51,224 ----a-w c:\windows\system32\dllcache\wuauclt.exe
    2008-10-16 12:09 43,544 ----a-w c:\windows\system32\wups2.dll
    2008-10-16 12:08 34,328 ----a-w c:\windows\system32\wups.dll
    2008-10-16 12:08 34,328 ----a-w c:\windows\system32\dllcache\wups.dll
    2008-10-16 12:06 268,648 ----a-w c:\windows\system32\mucltui.dll
    2008-10-16 12:06 208,744 ----a-w c:\windows\system32\muweb.dll
    2008-10-15 17:37 337,408 ------w c:\windows\system32\dllcache\netapi32.dll
    2008-10-15 07:06 633,632 ----a-w c:\windows\system32\dllcache\iexplore.exe
    2008-10-15 07:04 161,792 ----a-w c:\windows\system32\dllcache\ieakui.dll
    2008-10-14 21:34 270,336 ----a-w c:\windows\system32\TubeFinder.exe
    2008-10-03 10:03 247,326 ----a-w c:\windows\system32\strmdll.dll
    2008-10-03 10:03 247,326 ----a-w c:\windows\system32\dllcache\strmdll.dll
    2008-09-30 14:43 1,286,152 ----a-w c:\windows\system32\msxml4.dll
    2008-02-25 18:14 228,480 ----a-w c:\program files\mwav.log
    2008-02-25 18:14 171,935 ----a-w c:\program files\mwXface.log
    2005-04-10 14:53 56 --sh--r c:\windows\system32\CF4E1B8239.sys
    .

    (((((((((((((((((((((((((((((( Rekisterin käynnistyskohteet )))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Huom* Tyhjiä arvoja ja laillisia oletusarvoja ei näytetä
    REGEDIT4

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
    "LogitechSoftwareUpdate"="c:\program files\Logitech\Video\ManifestEngine.exe" [2005-01-18 196608]
    "MSMSGS"="c:\program files\Messenger\msmsgs.exe" [2008-04-14 1695232]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "RemoteControl"="c:\program files\CyberLink\PowerDVD\PDVDServ.exe" [2003-10-21 40960]
    "LVCOMSX"="c:\windows\system32\LVCOMSX.EXE" [2004-10-08 221184]
    "LogitechVideoRepair"="c:\program files\Logitech\Video\ISStart.exe" [2005-01-18 458752]
    "LogitechVideoTray"="c:\program files\Logitech\Video\LogiTray.exe" [2005-01-18 217088]
    "avgnt"="c:\program files\AntiVir PersonalEdition Classic\avgnt.exe" [2008-07-17 266497]
    "SearchSettings"="c:\program files\Search Settings\SearchSettings.exe" [2008-06-12 991584]
    "TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2008-10-29 185872]
    "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2008-11-04 413696]
    "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2008-11-20 290088]
    "SoundMan"="SOUNDMAN.EXE" [2004-05-14 c:\windows\SOUNDMAN.EXE]

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
    "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

    c:\documents and settings\All Users\K„ynnist„-valikko\Ohjelmat\K„ynnistys\
    Adobe Reader Speed Launch.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2008-04-23 29696]
    Adobe Gamma Loader.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2005-08-27 113664]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
    "VIDC.I420"= i420vfw.dll
    "msacm.l3acm"= l3codecp.acm
    "VIDC.MJPG"= pvmjpg21.dll
    "VIDC.PVW2"= pvwv220.dll
    "VIDC.PIMJ"= pvljpg20.dll

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "%windir%\\system32\\sessmgr.exe"=
    "c:\\Program Files\\Messenger\\MSMSGS.EXE"=
    "c:\\Program Files\\DC++\\DCPlusPlus.exe"=
    "c:\\WINDOWS\\System32\\rtcshare.exe"=
    "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
    "c:\\Program Files\\Last.fm\\LastFM.exe"=
    "c:\\Program Files\\Azureus\\Azureus.exe"=
    "c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
    "c:\\Program Files\\Real\\RealPlayer\\realplay.exe"=
    "c:\\Program Files\\Wolfenstein - Enemy Territory\\ET.exe"=
    "c:\\Program Files\\B2BPOKER\\ESBC pokeri\\jre\\bin\\javaw.exe"=
    "c:\\Program Files\\mIRC\\mirc.exe"=
    "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
    "c:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
    "c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
    "c:\\Program Files\\iTunes\\iTunes.exe"=

    R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;"c:\program files\McAfee\SiteAdvisor\McSACore.exe" [2008-12-04 203280]
    S2 StudioPro;StudioPro webcam;c:\windows\system32\DRIVERS\StudioPro.sys [2008-10-28 120320]
    S3 EuMusDesignVirtualAudioCableWdm;StudioPro audio (WDM);c:\windows\system32\DRIVERS\vrtaucbl.sys [2008-10-28 38784]
    S3 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [2007-01-25 42000]

    *Newly Created Service* - PROCEXP90
    .
    'Ajoitetut tehtävät'-kansion sisältö

    2008-12-16 c:\windows\Tasks\User_Feed_Synchronization-{0439BD4C-D1CB-4CF6-BE9D-76E3BB5AEBB3}.job
    - c:\windows\system32\msfeedssync.exe [2006-10-17 11:58]

    2008-12-15 c:\windows\Tasks\AppleSoftwareUpdate.job
    - c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 12:34]
    .
    - - - - POISTETUT JÄMÄRIVIT - - - -

    HKU-Default-Run-AMonitor - c:\program files\Tiny Firewall\amon.exe


    **************************************************************************

    catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2008-12-16 22:08:56
    Windows 5.1.2600 Service Pack 3 FAT NTAPI

    tarkistaa piilotettuja prosesseja ...

    tarkistaa piilotettuja käynnistysarvoja ...

    tarkistaa piilotettuja tiedostoja ...

    tarkistus on valmis
    piilotetut tiedostot: 0

    **************************************************************************

    [HKEY_LOCAL_MACHINE\system\ControlSet001\Services\vsdatant]
    "ImagePath"=""
    .
    Valmistumisajankohta: 2008-12-16 22:09:40
    ComboFix-quarantined-files.txt 2008-12-16 20:09:38

    Ennen ajoa: 2 056 749 056 tavua vapaana
    Ajon jälkeen: 4,206,526,464 tavua vapaana

    WindowsXP-KB310994-SP2-Home-BootDisk-FIN.EXE
    [boot loader]
    timeout=2
    default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
    [operating systems]
    c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
    multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect

    197 --- E O F --- 2008-12-12 20:21:41
     
    Last edited: Dec 16, 2008
    Wolfmoon, Dec 16, 2008
    #7
  8. Hujo

    Hujo Guest

    Nyt tuon punaisella merkityn Kopioit / liität Tyhjään muistioon
    käynnistä nappi >apuohjelmat > muistio

    File::
    c:\program files\Search Settings\SearchSettings.exe
    Folder::
    c:\program files\SUPERAntiSpyware
    c:\documents and settings\Application Data\SUPERAntiSpyware.com
    c:\documents and settings\All Users\Application Data\SUPERAntiSpyware.com
    c:\documents and settings\Application Data\Search Settings
    c:\program files\Search Settings

    sittten vasemmasta ylä reunasta tiedosto > tallenna nimellä

    Kohde: työpöytä

    Tiedostonimi: CFScript.txt

    Tallennusmuoto: kaikki tiedostot

    sitten raahaat sen kuvan osoittamalla tavalla. Työpöydällä Combofix.exe:een ja pudotat sen sinne.

    [​IMG]

    combofix työstää tulee sininen taulu paina numeroa 1 ja enter

    Laita tuleva loki tänne.

    Sammutat ja käynnistät koneen
     
    Last edited by a moderator: Dec 16, 2008
    Hujo, Dec 16, 2008
    #8
  9. Wolfmoon

    Wolfmoon Member

    Joined:
    Jan 5, 2007
    Messages:
    29
    Likes Received:
    0
    Trophy Points:
    11
    Jep, tuossa olisi.

    ComboFix 08-12-15.08 - Järjestelmänvalvoja 2008-12-17 12:07:30.2 - FAT32x86
    Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1035.18.479.202 [GMT 2:00]
    Sijainti: c:\documents and settings\\Ty”p”yt„\ComboFix.exe
    Käytetyt komentorivivalitsimet :: c:\documents and settings\\Ty”p”yt„\CFScript.txt
    * Uusi palautuspiste luotu

    FILE ::
    c:\program files\Search Settings\SearchSettings.exe
    .

    (((((((((((((((((((((((((((((((((((((( Muut poistot ))))))))))))))))))))))))))))))))))))))))))))))))))))))))
    .

    c:\documents and settings\All Users\Application Data\SUPERAntiSpyware.com
    c:\program files\Search Settings
    c:\program files\Search Settings\kb127\SearchSettingsRes409.dll
    c:\program files\Search Settings\SearchSettings.exe
    c:\program files\SUPERAntiSpyware

    .
    ((((( Tiedostot, jotka on luotu seuraavalla aikavälillä: 2008-11-17 to 2008-12-17 )))))))))))))))))
    .

    2008-12-16 18:55 . 2008-12-16 18:55 <KANSIO> d-------- c:\program files\Malwarebytes' Anti-Malware
    2008-12-16 18:55 . 2008-12-16 18:55 <KANSIO> d-------- c:\documents and settings\Application Data\Malwarebytes
    2008-12-16 18:55 . 2008-12-16 18:55 <KANSIO> d-------- c:\documents and settings\All Users\Application Data\Malwarebytes
    2008-12-16 18:55 . 2008-12-03 19:52 38,496 --a------ c:\windows\system32\drivers\mbamswissarmy.sys
    2008-12-16 18:55 . 2008-12-03 19:52 15,504 --a------ c:\windows\system32\drivers\mbam.sys
    2008-12-13 21:27 . 2008-12-13 21:27 <KANSIO> d-------- c:\documents and settings\Application Data\SUPERAntiSpyware.com
    2008-12-11 20:29 . 2008-12-13 10:39 23,392 --a------ c:\windows\system32\nscompat.tlb
    2008-12-11 20:29 . 2008-12-13 10:39 16,832 --a------ c:\windows\system32\amcompat.tlb
    2008-12-11 13:35 . 2008-12-11 13:35 <KANSIO> d--hs---- C:\FOUND.069
    2008-12-11 02:23 . 2008-12-11 11:14 1,393 --a------ c:\windows\imsins.BAK
    2008-12-10 09:26 . 2008-12-10 09:26 <KANSIO> d-------- c:\documents and settings\All Users\Application Data\Last.fm
    2008-12-10 09:25 . 2008-12-10 09:25 <KANSIO> d-------- c:\program files\Last.fm
    2008-12-04 23:00 . 2008-12-04 23:00 <KANSIO> d-------- c:\documents and settings\LocalService\Application Data\SACore
    2008-12-04 22:46 . 2008-12-04 22:46 <KANSIO> d-------- c:\program files\Common Files\McAfee
    2008-12-04 22:44 . 2008-12-04 22:45 <KANSIO> d-------- c:\program files\McAfee
    2008-12-03 22:43 . 2008-12-03 22:43 <KANSIO> d-------- c:\documents and settings\LocalService\Ty”p”yt„
    2008-12-01 17:40 . 2008-12-01 17:40 <KANSIO> d-------- c:\program files\iPod
    2008-12-01 17:40 . 2008-12-01 17:40 <KANSIO> d-------- c:\documents and settings\All Users\Application Data\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
    2008-12-01 17:38 . 2008-12-01 17:38 <KANSIO> d-------- c:\program files\Bonjour
    2008-12-01 17:36 . 2008-12-01 17:36 <KANSIO> d-------- c:\program files\QuickTime
    2008-12-01 10:27 . 2008-12-01 10:27 <KANSIO> d--hs---- C:\FOUND.068
    2008-11-22 18:30 . 2008-11-22 18:31 <KANSIO> d-------- c:\program files\Microsoft Works
    2008-11-20 15:11 . 2008-11-20 15:11 <KANSIO> d-------- c:\program files\Microsoft Office Outlook Connector
    2008-11-20 15:10 . 2008-11-20 15:10 <KANSIO> d-------- c:\program files\MSECache

    .
    (((((((((((((((((((((((((((((((((((( Find3M-raportti ))))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2008-11-03 20:37 30 ----a-w c:\documents and settings\jagex_runescape_preferences.dat
    2008-10-29 18:43 --------- d-----w c:\program files\Juice
    2008-10-29 18:43 --------- d-----w c:\documents and settings\Application Data\iPodder
    2008-10-29 17:50 --------- d-----w c:\program files\Common Files\xing shared
    2008-10-28 17:40 --------- d-----w c:\program files\Common Files\DVDVideoSoft
    2008-10-28 17:40 --------- d-----w c:\documents and settings\Application Data\Search Settings
    2008-10-28 16:59 --------- d-----w c:\program files\Free FLV Converter
    2008-10-28 15:52 --------- d-----w c:\documents and settings\Application Data\ImTOO Software Studio
    2008-10-28 11:16 --------- d-----w c:\program files\Broadcaster
    2008-10-24 11:21 455,296 ----a-w c:\windows\system32\drivers\mrxsmb.sys
    2008-10-24 11:21 455,296 ------w c:\windows\system32\dllcache\mrxsmb.sys
    2008-10-23 12:38 286,720 ----a-w c:\windows\system32\gdi32.dll
    2008-10-23 12:38 286,720 ------w c:\windows\system32\dllcache\gdi32.dll
    2008-10-21 22:03 --------- d-----w c:\documents and settings\Application Data\OpenOffice.org
    2008-10-21 21:59 --------- d-----w c:\program files\OpenOffice.org 3
    2008-10-17 12:49 --------- d-----w c:\documents and settings\Application Data\Creative
    2008-10-16 23:48 3,593,216 ----a-w c:\windows\system32\dllcache\mshtml.dll
    2008-10-16 13:12 70,656 ----a-w c:\windows\system32\dllcache\ie4uinit.exe
    2008-10-16 13:11 13,824 ------w c:\windows\system32\dllcache\ieudinit.exe
    2008-10-16 12:13 202,776 ----a-w c:\windows\system32\wuweb.dll
    2008-10-16 12:13 202,776 ----a-w c:\windows\system32\dllcache\wuweb.dll
    2008-10-16 12:13 1,809,944 ----a-w c:\windows\system32\wuaueng.dll
    2008-10-16 12:13 1,809,944 ----a-w c:\windows\system32\dllcache\wuaueng.dll
    2008-10-16 12:12 561,688 ----a-w c:\windows\system32\wuapi.dll
    2008-10-16 12:12 561,688 ----a-w c:\windows\system32\dllcache\wuapi.dll
    2008-10-16 12:12 323,608 ----a-w c:\windows\system32\wucltui.dll
    2008-10-16 12:12 323,608 ----a-w c:\windows\system32\dllcache\wucltui.dll
    2008-10-16 12:09 92,696 ----a-w c:\windows\system32\dllcache\cdm.dll
    2008-10-16 12:09 92,696 ----a-w c:\windows\system32\cdm.dll
    2008-10-16 12:09 51,224 ----a-w c:\windows\system32\wuauclt.exe
    2008-10-16 12:09 51,224 ----a-w c:\windows\system32\dllcache\wuauclt.exe
    2008-10-16 12:09 43,544 ----a-w c:\windows\system32\wups2.dll
    2008-10-16 12:08 34,328 ----a-w c:\windows\system32\wups.dll
    2008-10-16 12:08 34,328 ----a-w c:\windows\system32\dllcache\wups.dll
    2008-10-16 12:06 268,648 ----a-w c:\windows\system32\mucltui.dll
    2008-10-16 12:06 208,744 ----a-w c:\windows\system32\muweb.dll
    2008-10-15 17:37 337,408 ------w c:\windows\system32\dllcache\netapi32.dll
    2008-10-15 07:06 633,632 ----a-w c:\windows\system32\dllcache\iexplore.exe
    2008-10-15 07:04 161,792 ----a-w c:\windows\system32\dllcache\ieakui.dll
    2008-10-14 21:34 270,336 ----a-w c:\windows\system32\TubeFinder.exe
    2008-10-03 10:03 247,326 ----a-w c:\windows\system32\strmdll.dll
    2008-10-03 10:03 247,326 ----a-w c:\windows\system32\dllcache\strmdll.dll
    2008-09-30 14:43 1,286,152 ----a-w c:\windows\system32\msxml4.dll
    2008-02-25 18:14 228,480 ----a-w c:\program files\mwav.log
    2008-02-25 18:14 171,935 ----a-w c:\program files\mwXface.log
    2005-04-10 14:53 56 --sh--r c:\windows\system32\CF4E1B8239.sys
    .

    ((((((((((((((((((((((((((((( snapshot@2008-12-16_22.09.11,34 )))))))))))))))))))))))))))))))))))))))))
    .
    - 2006-11-15 08:39:04 316,928 ----a-w c:\windows\inf\unregmp2.exe
    + 2007-06-27 13:40:08 318,464 ----a-w c:\windows\inf\unregmp2.exe
    - 2006-11-15 08:39:04 316,928 ----a-w c:\windows\system32\dllcache\unregmp2.exe
    + 2007-06-27 13:40:08 318,464 ----a-w c:\windows\system32\dllcache\unregmp2.exe
    .
    (((((((((((((((((((((((((((((( Rekisterin käynnistyskohteet )))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Huom* Tyhjiä arvoja ja laillisia oletusarvoja ei näytetä
    REGEDIT4

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
    "LogitechSoftwareUpdate"="c:\program files\Logitech\Video\ManifestEngine.exe" [2005-01-18 196608]
    "MSMSGS"="c:\program files\Messenger\msmsgs.exe" [2008-04-14 1695232]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "RemoteControl"="c:\program files\CyberLink\PowerDVD\PDVDServ.exe" [2003-10-21 40960]
    "LVCOMSX"="c:\windows\system32\LVCOMSX.EXE" [2004-10-08 221184]
    "LogitechVideoRepair"="c:\program files\Logitech\Video\ISStart.exe" [2005-01-18 458752]
    "LogitechVideoTray"="c:\program files\Logitech\Video\LogiTray.exe" [2005-01-18 217088]
    "avgnt"="c:\program files\AntiVir PersonalEdition Classic\avgnt.exe" [2008-07-17 266497]
    "TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2008-10-29 185872]
    "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2008-11-04 413696]
    "iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2008-11-20 290088]
    "SoundMan"="SOUNDMAN.EXE" [2004-05-14 c:\windows\SOUNDMAN.EXE]

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
    "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
    "VIDC.I420"= i420vfw.dll
    "msacm.l3acm"= l3codecp.acm
    "VIDC.MJPG"= pvmjpg21.dll
    "VIDC.PVW2"= pvwv220.dll
    "VIDC.PIMJ"= pvljpg20.dll

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "%windir%\\system32\\sessmgr.exe"=
    "c:\\Program Files\\Messenger\\MSMSGS.EXE"=
    "c:\\Program Files\\DC++\\DCPlusPlus.exe"=
    "c:\\WINDOWS\\System32\\rtcshare.exe"=
    "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
    "c:\\Program Files\\Last.fm\\LastFM.exe"=
    "c:\\Program Files\\Azureus\\Azureus.exe"=
    "c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
    "c:\\Program Files\\Real\\RealPlayer\\realplay.exe"=
    "c:\\Program Files\\Wolfenstein - Enemy Territory\\ET.exe"=
    "c:\\Program Files\\B2BPOKER\\ESBC pokeri\\jre\\bin\\javaw.exe"=
    "c:\\Program Files\\mIRC\\mirc.exe"=
    "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
    "c:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
    "c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
    "c:\\Program Files\\iTunes\\iTunes.exe"=

    R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;"c:\program files\McAfee\SiteAdvisor\McSACore.exe" [2008-12-04 203280]
    S2 StudioPro;StudioPro webcam;c:\windows\system32\DRIVERS\StudioPro.sys [2008-10-28 120320]
    S3 EuMusDesignVirtualAudioCableWdm;StudioPro audio (WDM);c:\windows\system32\DRIVERS\vrtaucbl.sys [2008-10-28 38784]
    S3 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [2007-01-25 42000]
    .
    'Ajoitetut tehtävät'-kansion sisältö

    2008-12-17 c:\windows\Tasks\User_Feed_Synchronization-{0439BD4C-D1CB-4CF6-BE9D-76E3BB5AEBB3}.job
    - c:\windows\system32\msfeedssync.exe [2006-10-17 11:58]

    2008-12-15 c:\windows\Tasks\AppleSoftwareUpdate.job
    - c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 12:34]
    .
    - - - - POISTETUT JÄMÄRIVIT - - - -

    HKLM-Run-SearchSettings - c:\program files\Search Settings\SearchSettings.exe

    **************************************************************************

    catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2008-12-17 12:10:43
    Windows 5.1.2600 Service Pack 3 FAT NTAPI

    tarkistaa piilotettuja prosesseja ...

    tarkistaa piilotettuja käynnistysarvoja ...

    tarkistaa piilotettuja tiedostoja ...

    tarkistus on valmis
    piilotetut tiedostot: 0

    **************************************************************************

    [HKEY_LOCAL_MACHINE\system\ControlSet001\Services\vsdatant]
    "ImagePath"=""
    .
    Valmistumisajankohta: 2008-12-17 12:11:36
    ComboFix-quarantined-files.txt 2008-12-17 10:11:34
    ComboFix2.txt 2008-12-16 20:09:42

    Ennen ajoa: 4ÿ052ÿ779ÿ008 tavua vapaana
    Ajon jõlkeen: 4,040,851,456 tavua vapaana

    201 --- E O F --- 2008-12-16 20:46:57
     
    Wolfmoon, Dec 17, 2008
    #9
  10. Hujo

    Hujo Guest

    scannaa uusi hjt:n loki
     
    Hujo, Dec 17, 2008
    #10
  11. Wolfmoon

    Wolfmoon Member

    Joined:
    Jan 5, 2007
    Messages:
    29
    Likes Received:
    0
    Trophy Points:
    11
    Tuossa

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 16:07:42, on 17.12.2008
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16762)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
    C:\WINDOWS\SOUNDMAN.EXE
    C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
    C:\WINDOWS\system32\LVCOMSX.EXE
    C:\Program Files\Logitech\Video\LogiTray.exe
    C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
    C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\WINDOWS\system32\CTsvcCDA.exe
    C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
    C:\Program Files\CDBurnerXP\NMSAccessU.exe
    C:\WINDOWS\system32\PnkBstrA.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Logitech\Video\FxSvr2.exe
    C:\Program Files\Canon\CAL\CALMAIN.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
    C:\WINDOWS\system32\NOTEPAD.EXE

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 87.86.13.29:80
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local;<local>
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: Windows Liven kirjautumisapuohjelma - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
    O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
    O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fi\msntb.dll
    O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
    O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
    O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
    O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
    O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    O9 - Extra button: Oheistiedot - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O14 - IERESET.INF: START_PAGE_URL=http://GLOBAL.ACER.COM/
    O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
    O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
    O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
    O16 - DPF: {33288993-5664-11D4-8B5B-00D0B73B3518} (ell Class) - http://www.easports.com/downloads/games/common/ieell.cab
    O16 - DPF: {3FE16C08-D6A7-4133-84FC-D5BFB4F7D886} (WebGameLoader Class) - http://www.miniclip.com/ricochet/ReflexiveWebGameLoader.cab
    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com//PhotoUpload/MsnPUpld.cab
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
    O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
    O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://cdn2.zone.msn.com/binFramework/v10/ZIntro.cab34246.cab
    O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab31267.cab
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
    O16 - DPF: {D821DC4A-0814-435E-9820-661C543A4679} (CRLDownloadWrapper Class) - http://drmlicense.one.microsoft.com/crlupdate/en/crlocx.ocx
    O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/su2/CTL_V02002/ocx/15030/CTPID.cab
    O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
    O17 - HKLM\System\CCS\Services\Tcpip\..\{9C95C348-38DA-4D25-8817-BF5FE88366C9}: NameServer = 192.168.10.1,193.229.0.40
    O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
    O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
    O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
    O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
    O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: Bonjour-palvelu (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
    O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: iPod-palvelu (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: McAfee SiteAdvisor Service - Unknown owner - C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
    O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
    O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
    O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe

    --
    End of file - 9295 bytes
     
    Wolfmoon, Dec 17, 2008
    #11
  12. Hujo

    Hujo Guest

    -Lataa tämä ohjelma!
    HostsXpert.zip
    - Tee uusi kansio: C:\HostsXpert
    - Pura kansioon C:\HostsXpert
    Täältä englanniksi lisäohjeita
    - Paina HostsXpert.exe ajaaksesi sen (sen pitää siis olla tuolla C:\HostsXpert kansiossa)

    - Paina "Make Hosts Writable?" oikeassa yläkulmassa (jos toiminnassa)
    - Klikkaa "Restore Microsoft's Hosts File" ja sitten OK
    - Paina X lopettaaksesi
     
    Hujo, Dec 17, 2008
    #12
  13. Wolfmoon

    Wolfmoon Member

    Joined:
    Jan 5, 2007
    Messages:
    29
    Likes Received:
    0
    Trophy Points:
    11
    Haluaisin, ennen kuin teen vielä mitään, kysyä, että mitä käytännön merkitystä tuolla ohjelmalla on tässä minun asiassani? Onko tuon asentaminen ja ohjeiden mukaisten toimintojen suorittaminen välttämätöntä?
     
    Last edited: Dec 17, 2008
    Wolfmoon, Dec 17, 2008
    #13
  14. Hujo

    Hujo Guest

    jos tee oo tekemättä.
     
    Hujo, Dec 17, 2008
    #14

Share This Page