Hijack - Logi, Jelppiä tarvittais

Terve!

Asensin tyhmänä divocodecin ja nyt CID-popuppeja ilmestyy koko ajan. Voisiko joku auttaa. Alla Hijack logini.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:20:58, on 15.3.2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16609)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\ASUS\ASUS Live Update\ALU.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\ASUS\ATK Media\DMedia.exe
C:\Windows\ASScrPro.exe
C:\Program Files\ASUS\ASUS Direct Console\LCMP.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\McAfee\VirusScan Enterprise\shstat.exe
C:\Program Files\McAfee\Common Framework\UdaterUI.exe
C:\Program Files\TomTom HOME 2\HOMERunner.exe
C:\Program Files\Apoint2K\ApMsgFwd.exe
C:\Program Files\McAfee\Common Framework\McTray.exe
C:\Program Files\Apoint2K\HidFind.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE
C:\Program Files\Apoint2K\Apvfb.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtBty.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosAVRC.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\tosOBEX.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtProc.exe
C:\Program Files\Symantec AntiVirus\VPTray.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Symantec AntiVirus\vpc32.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fi/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.asus.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.wlannet.com:3128
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan Enterprise\scriptcl.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Liven kirjautumisapuohjelma - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files\ASUS\ATK Media\DMEDIA.EXE
O4 - HKLM\..\Run: [PowerForPhone] C:\Program Files\PowerForPhone\PowerForPhone.exe
O4 - HKLM\..\Run: [ASUS Screen Saver Protector] C:\Windows\ASScrPro.exe
O4 - HKLM\..\Run: [DirectMessenger] "C:\Program Files\ASUS\ASUS Direct Console\LCMP.EXE"
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\McAfee\VirusScan Enterprise\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\McAfee\Common Framework\UdaterUI.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [TomTomHOME.exe] "C:\Program Files\TomTom HOME 2\HOMERunner.exe" -s
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [PCPitstop Registration Reminder] C:\Program Files\PCPitstop\Exterminate\Reminder.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Bold wma] "C:\ProgramData\TONSCDROMCDROM.tpzzymc"
O4 - HKCU\..\Run: [hold data mags move] "C:\ProgramData\Show boob barb.s2neyn1"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Paikallinen palvelu')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'Paikallinen palvelu')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Verkkopalvelu')
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Bluetooth Manager.lnk = ?
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: E&xport to Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O13 - Gopher Prefix:
O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} (F-Secure Online Scanner 3.3) - http://support.f-secure.com/ols/fscax.cab
O16 - DPF: {CE8267C2-D41A-4A50-A69D-F32B5C289F14} (FileOpenInstaller) - http://plugin.fileopen.com/current/FileOpen.CAB
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: ASLDR Service (ASLDRService) - Unknown owner - C:\Program Files\ATK Hotkey\ASLDRSrv.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: iPod-palvelu (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: McAfee Framework Service (McAfeeFramework) - McAfee, Inc. - C:\Program Files\McAfee\Common Framework\FrameworkService.exe
O23 - Service: McAfee McShield (McShield) - McAfee, Inc. - C:\Program Files\McAfee\VirusScan Enterprise\mcshield.exe
O23 - Service: McAfee Task Manager (McTaskManager) - McAfee, Inc. - C:\Program Files\McAfee\VirusScan Enterprise\vstskmgr.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: spmgr - Unknown owner - C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe
O23 - Service: Syntek AVStream USB2.0 WebCam Service (StkSSrv) - Syntek America Inc. - C:\Windows\System32\StkCSrv.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe
O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe

--
End of file - 10676 bytes

 

1.Lataa combofix.exe työpöydällesi yhdestä linkistä:
combofix1
combofix2

2. Tuplaklikkaa combofix.exe tiedostoa ja seuraa ohjeistuksia.
3. Kun työkalu on valmis, se tuottaa lokin. Lähetä tämä loki viesti ketjuusi.
Huom! Älä klikkaile combofixin ikkunaa käytön aikana. Tämä saattaa aiheuttaa ohjelman jumiutumisen.

 

ComboFix 08-03-14.4 - Mikko 2008-03-15 11:39:56.1 - NTFSx86
Microsoft® Windows Vista™ Home Premium 6.0.6000.0.1252.1.1035.18.1109 [GMT 2:00]
Running from: C:\Users\Mikko\Desktop\ComboFix.exe
* Created a new restore point
.

((((( Tiedostot, jotka on luotu seuraavalla aikavälillä: 2008-02-15 to 2008-03-15 )))))))))))))))))
.

Tiedostoja ei ole luotu tällä aikavälillä

.
(((((((((((((((((((((((((((((((((((( Find3M-raportti ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-03-15 09:42 --------- d-----w C:\Users\Mikko\AppData\Roaming\Skype
2008-03-15 09:08 --------- d-----w C:\Program Files\Trend Micro
2008-03-15 07:38 --------- d-----w C:\Program Files\Java
2008-03-15 07:00 --------- d-----w C:\ProgramData\Symantec
2008-03-15 06:59 805 ----a-w C:\Windows\system32\drivers\SYMEVENT.INF
2008-03-15 06:59 8,014 ----a-w C:\Windows\system32\drivers\SYMEVENT.CAT
2008-03-15 06:59 109,744 ----a-w C:\Windows\system32\drivers\SYMEVENT.SYS
2008-03-15 06:59 --------- d-----w C:\Program Files\Symantec
2008-03-15 06:59 --------- d-----w C:\Program Files\Common Files\Symantec Shared
2008-03-15 06:58 --------- d-----w C:\Program Files\Symantec AntiVirus
2008-03-15 06:54 --------- d-----w C:\Program Files\Common Files\InstallShield
2008-03-15 06:47 --------- d-----w C:\Users\Mikko\AppData\Roaming\SUPERAntiSpyware.com
2008-03-15 06:47 --------- d-----w C:\Program Files\SUPERAntiSpyware
2008-03-15 06:47 --------- d-----w C:\Program Files\Common Files\Wise Installation Wizard
2008-03-15 06:43 --------- d-----w C:\Users\Mikko\AppData\Roaming\skypePM
2008-03-12 20:09 --------- d-----w C:\Program Files\DC++
2008-03-12 19:45 --------- d-----w C:\ProgramData\SUPERAntiSpyware.com
2008-03-12 19:41 4,304 ----a-w C:\Windows\System32\tmp.reg
2008-03-11 19:45 106 ----a-w C:\delete.bat
2008-03-11 16:28 --------- d-----w C:\Program Files\PCPitstop
2008-03-11 16:28 --------- d-----w C:\Program Files\Common Files\Scanner
2008-03-11 16:25 --------- d-----w C:\Program Files\Exterminate It!
2008-03-11 15:30 --------- d-----w C:\ProgramData\Lavasoft
2008-03-11 15:30 --------- d-----w C:\Program Files\Lavasoft
2008-03-10 19:08 --------- d-----w C:\ProgramData\playref
2008-03-10 19:08 --------- d-----w C:\ProgramData\Bash Dvd Hold Data
2008-03-08 23:15 86,528 ----a-w C:\Windows\System32\VACFix.exe
2008-03-05 20:29 82,432 ----a-w C:\Windows\System32\IEDFix.exe
2008-03-05 16:25 --------- d-----w C:\Users\Mikko\AppData\Roaming\uTorrent
2008-02-27 04:56 45,056 ----a-w C:\Windows\System32\acovcnt.exe
2008-02-13 19:44 194,560 ----a-w C:\Windows\System32\WebClnt.dll
2008-02-13 19:44 110,080 ----a-w C:\Windows\system32\drivers\mrxdav.sys
2008-02-13 19:40 803,328 ----a-w C:\Windows\system32\drivers\tcpip.sys
2008-02-13 19:40 24,064 ----a-w C:\Windows\System32\netcfg.exe
2008-02-13 19:40 22,016 ----a-w C:\Windows\System32\netiougc.exe
2008-02-13 19:40 216,632 ----a-w C:\Windows\system32\drivers\netio.sys
2008-02-13 19:40 167,424 ----a-w C:\Windows\System32\tcpipcfg.dll
2008-02-13 19:38 824,832 ----a-w C:\Windows\System32\wininet.dll
2008-02-13 19:38 56,320 ----a-w C:\Windows\System32\iesetup.dll
2008-02-13 19:38 52,736 ----a-w C:\Windows\AppPatch\iebrshim.dll
2008-02-13 19:38 26,624 ----a-w C:\Windows\System32\ieUnatt.exe
2008-02-12 06:17 --------- d-----w C:\Program Files\Mobile Partner
2008-02-04 11:07 --------- d-----w C:\Program Files\Canon
2008-02-04 10:48 --------- d-----w C:\Program Files\CardRecovery
2008-02-03 13:42 --------- d-----w C:\Program Files\uTorrent
2008-01-23 09:08 --------- d-----w C:\Program Files\Euroword 2001
2008-01-09 09:16 11,776 ----a-w C:\Windows\System32\sbunattend.exe
2007-12-07 17:07 32 ----a-w C:\Users\All Users\ezsid.dat
2007-12-07 17:07 32 ----a-w C:\ProgramData\ezsid.dat
2007-11-11 02:44 22,328 ----a-w C:\Users\Mikko\AppData\Roaming\PnkBstrK.sys
2006-11-02 12:50 174 --sha-w C:\Program Files\desktop.ini
2007-11-22 16:45 16,384 --sha-w C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
2007-11-22 16:45 32,768 --sha-w C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
2007-11-22 16:45 16,384 --sha-w C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
.

(((((((((((((((((((((((((((((( Rekisterin käynnistyskohteet )))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Huom* Tyhjiä arvoja ja laillisia oletusarvoja ei näytetä

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe" [2008-01-09 11:16 1232896]
"StartCCC"="C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2006-11-10 21:35 90112]
"ehTray.exe"="C:\Windows\ehome\ehTray.exe" [2006-11-02 14:35 125440]
"Skype"="C:\Program Files\Skype\Phone\Skype.exe" [2007-11-12 22:48 21760296]
"Bold wma"="C:\ProgramData\TONSCDROMCDROM.tpzzymc" [2008-03-10 21:07 24592]
"hold data mags move"="C:\ProgramData\Show boob barb.s2neyn1" [2008-03-10 21:08 208912]
"msnmsgr"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [2007-12-07 04:26 5724184]
"WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [2006-11-02 14:36 201728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="C:\Program Files\Windows Defender\MSASCui.exe" [2006-11-02 14:34 1004136]
"RtHDVCpl"="RtHDVCpl.exe" [2006-12-01 07:37 4186112 C:\Windows\RtHDVCpl.exe]
"SMSERIAL"="C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe" [2006-11-22 11:31 630784]
"Apoint"="C:\Program Files\Apoint2K\Apoint.exe" [2006-09-12 03:22 155648]
"ATKMEDIA"="C:\Program Files\ASUS\ATK Media\DMEDIA.EXE" [2006-11-02 17:27 61440]
"PowerForPhone"="C:\Program Files\PowerForPhone\PowerForPhone.exe" [2007-01-16 00:17 778240]
"ASUS Screen Saver Protector"="C:\Windows\ASScrPro.exe" [2007-06-01 09:47 33136]
"DirectMessenger"="C:\Program Files\ASUS\ASUS Direct Console\LCMP.EXE" [2007-02-02 04:58 987648]
"Symantec PIF AlertEng"="C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" [2007-03-12 17:30 517768]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 04:25 144784]
"ShStatEXE"="C:\Program Files\McAfee\VirusScan Enterprise\SHSTAT.exe" [2006-11-30 14:50 112216]
"McAfeeUpdaterUI"="C:\Program Files\McAfee\Common Framework\UdaterUI.exe" [2006-11-17 19:39 136768]
"TomTomHOME.exe"="C:\Program Files\TomTom HOME 2\HOMERunner.exe" [2007-08-15 23:59 374688]
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2007-11-15 06:43 286720]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2007-09-06 01:03 267064]
"PCPitstop Registration Reminder"="C:\Program Files\PCPitstop\Exterminate\Reminder.exe" [2007-05-24 12:21 991232]
"ccApp"="C:\Program Files\Common Files\Symantec Shared\ccApp.exe" [2006-11-22 17:12 107112]
"vptray"="C:\PROGRA~1\SYMANT~1\VPTray.exe" [2006-11-28 06:34 134808]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
Adobe Reader Speed Launch.lnk - C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2004-12-14 13:44:06 29696]
Bluetooth Manager.lnk - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe [2007-01-18 23:48:42 2752512]
WinZip Quick Pick.lnk - C:\Program Files\WinZip\WZQKPICK.EXE [2007-06-01 00:19:15 106560]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ChkMail]
--a------ 2007-02-13 00:27 737280 C:\Program Files\ChkMail\ChkMail\ChkMail.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"UacDisableNotify"=dword:00000001
"InternetSettingsDisableNotify"=dword:00000001
"AutoUpdateDisableNotify"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{38E06C96-1C85-4883-B106-5012188B61E7}"= UDP:C:\Program Files\McAfee\Common Framework\FrameworkService.exe:McAfee Framework Service
"{BE29D9BC-E2C9-46E3-A5F0-51B7FB5F71CA}"= TCP:C:\Program Files\McAfee\Common Framework\FrameworkService.exe:McAfee Framework Service
"{06234130-5773-4E9D-A528-9BB583D85CC6}"= UDP:C:\Windows\System32\PnkBstrA.exenkBstrA
"{94611E3C-592F-4F93-9CFF-F89E6BC7FCB2}"= TCP:C:\Windows\System32\PnkBstrA.exenkBstrA
"{47B120A0-A2B5-403B-BB8C-40F412D62F5D}"= UDP:C:\Windows\System32\PnkBstrB.exenkBstrB
"{CEECC6B9-12E0-4106-A3EA-9239A368E1CC}"= TCP:C:\Windows\System32\PnkBstrB.exenkBstrB
"{224EA0E4-D4C4-48B8-AC2F-93ADBFB22074}"= UDP:C:\Program Files\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe:Call of Duty(R) 4 - Modern Warfare(TM)
"{7B0CAF3B-E894-44FE-8D1D-D606AF09A147}"= TCP:C:\Program Files\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe:Call of Duty(R) 4 - Modern Warfare(TM)
"{04624757-C964-4A1C-BC8E-F7B5D8891432}"= UDP:C:\Program Files\ACSPMonitor\ASMonitor.exe:System
"{8A4B01A8-CBEF-4F3A-A33C-A9F05DFBBC81}"= TCP:C:\Program Files\ACSPMonitor\ASMonitor.exe:System
"{D3AE5142-D64F-484B-979C-E6563AC6D003}"= UDP:C:\Program Files\ACSPMonitor\ASMonitor.exe:System
"{3959E4E9-6571-4A01-B159-C6E1FC16F7A8}"= TCP:C:\Program Files\ACSPMonitor\ASMonitor.exe:System
"TCP Query User{A04D5343-4C95-4B07-ABB6-3D85D33FFEFB}C:\\program files\\utorrent\\utorrent.exe"= UDP:C:\program files\utorrent\utorrent.exe:uTorrent
"UDP Query User{82920416-B715-4701-85A6-D0D79989E2BE}C:\\program files\\utorrent\\utorrent.exe"= TCP:C:\program files\utorrent\utorrent.exe:uTorrent
"{486D7D46-9D81-49F1-87AE-3D787BD1FECF}"= C:\Program Files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)
"TCP Query User{3360D4C1-02E0-445B-B92E-0C11CDBABF58}C:\\program files\\skype\\phone\\skype.exe"= Disabled:UDP:C:\program files\skype\phone\skype.exe:Skype. Take a deep breath
"UDP Query User{7F291F1F-41ED-40A3-A609-61D0352A3DCF}C:\\program files\\skype\\phone\\skype.exe"= Disabled:TCP:C:\program files\skype\phone\skype.exe:Skype. Take a deep breath
"TCP Query User{191AE3FE-9DFB-4C57-BC6A-E98C7F42D246}C:\\program files\\skype\\phone\\skype.exe"= Disabled:UDP:C:\program files\skype\phone\skype.exe:Skype. Take a deep breath
"UDP Query User{B1E171EA-DF62-4242-8D0D-665428EDD047}C:\\program files\\skype\\phone\\skype.exe"= Disabled:TCP:C:\program files\skype\phone\skype.exe:Skype. Take a deep breath
"{7B4796A4-E0CE-49A2-91DA-0752FEDD12CE}"= Disabled:UDP:21:utorrentti
"{5D892DD5-E4E8-4C4D-9C63-17E8DF6F970B}"= UDP:C:\Program Files\uTorrent\uTorrent.exe:µTorrent
"{E340DE88-9784-4ACC-BDD8-AF2F779D3619}"= TCP:C:\Program Files\uTorrent\uTorrent.exe:µTorrent
"TCP Query User{BA5BD2CE-B23E-403C-A6A3-3A3BA52B32E1}C:\\program files\\mozilla firefox\\firefox.exe"= UDP:C:\program files\mozilla firefox\firefox.exe:Firefox
"UDP Query User{5A6B406A-F206-47ED-893C-F5A1EBAF5F88}C:\\program files\\mozilla firefox\\firefox.exe"= TCP:C:\program files\mozilla firefox\firefox.exe:Firefox
"{A847DE15-B48A-4F8B-AB20-FFFB0F064EEA}"= UDP:C:\Program Files\Symantec AntiVirus\Rtvscan.exe:Symantec Antivirus
"{3932DE1B-38D5-4935-86B6-7F2C6D2F70ED}"= TCP:C:\Program Files\Symantec AntiVirus\Rtvscan.exe:Symantec Antivirus
"{277BF652-E4EA-476E-B5F1-C572AB38223A}"= UDP:C:\Program Files\Common Files\Symantec Shared\ccApp.exe:Symantec Email
"{415AF2AE-AD08-4811-835A-984CA48F9803}"= TCP:C:\Program Files\Common Files\Symantec Shared\ccApp.exe:Symantec Email
"{B60DBC9F-07D6-44F1-83BE-A0BB0FE7C545}"= UDP:C:\Program Files\iTunes\iTunes.exe:iTunes
"{59D151C5-3B46-4F8F-A9AE-F314052CAE10}"= TCP:C:\Program Files\iTunes\iTunes.exe:iTunes

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\RestrictedServices\Static\System]
"DFSR-1"= RPort=5722|UDP:%SystemRoot%\system32\svchost.exe|Svc=DFSR:Allow inbound TCP traffic|

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile\AuthorizedApplications\List]
"C:\\Program Files\\BitTorrent\\bittorrent.exe"= C:\Program Files\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent

R2 StkSSrv;Syntek AVStream USB2.0 WebCam Service;C:\Windows\System32\StkCSrv.exe [2006-12-10 18:31]
R2 TOSHIBA Bluetooth Service;TOSHIBA Bluetooth Service;C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe [2006-11-01 07:40]
R3 AVer3xEn;AVerMedia SAA713x BDA Encoder Service;C:\Windows\system32\DRIVERS\AVer3xEn.sys [2006-11-14 10:24]
R3 itecir;ITECIR Infrared Receiver;C:\Windows\system32\DRIVERS\itecir.sys [2006-11-25 00:38]
R3 R300;R300;C:\Windows\system32\DRIVERS\atikmdag.sys [2006-12-20 15:49]
R3 StkCMini;Syntek AVStream USB2.0 1.3M WebCam;C:\Windows\system32\Drivers\StkCMini.sys [2007-01-19 17:19]
R3 WCPU;WCPU;C:\Program Files\P4G\WCPU.sys [2007-01-03 00:37]
S3 TPM;TPM;C:\Windows\system32\drivers\tpm.sys [2006-11-02 11:50]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bthsvcs REG_MULTI_SZ BthServ

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{018669c8-100f-11dc-9eed-806e6f6e6963}]
\shell\AutoRun\command - D:\setup.exe -q

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{1c814486-d92f-11dc-a668-001a92c5ffb0}]
\shell\AutoRun\command - E:\AutoRun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{1c81449f-d92f-11dc-a668-001a92c5ffb0}]
\shell\AutoRun\command - E:\AutoRun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{1c8144a5-d92f-11dc-a668-001a92c5ffb0}]
\shell\AutoRun\command - E:\AutoRun.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{51671110-9bab-11dc-b131-001a92c5ffb0}]
\shell\AutoRun\command - G:\LaunchU3.exe -a

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{cc321d70-ed2f-11dc-9d70-001a92c5ffb0}]
\shell\AutoRun\command - F:\LaunchU3.exe -a

*Newly Created Service* - EECTRL
*Newly Created Service* - ERASERUTILDRV10631
*Newly Created Service* - ERASERUTILDRV10741
*Newly Created Service* - NAVENG
*Newly Created Service* - NAVEX15
*Newly Created Service* - SPBBCDRV
*Newly Created Service* - SRTSP
*Newly Created Service* - SRTSPX

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\ccc-core-static]
msiexec /fums {8BB7F11E-4F20-9E97-0350-0EEDEF3C3D89} /qb
.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-03-15 11:41:59
Windows 6.0.6000 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"vptray"="C:\\PROGRA~1\\SYMANT~1\\VPTray.exe"
.
--------------------- DLLs Loaded Under Running Processes ---------------------

PROCESS: C:\Windows\Explorer.exe [6.00.6000.16386]
-> C:\Program Files\ASUS\ASUS Direct Console\MSNHOOK.DLL
.
Completion time: 2008-03-15 11:42:52
.
2008-03-15 06:48:18 --- E O F ---

 

Ohje AVG:n Anti-Spyware 7.5:n käyttöön
Huom! Tässä ohjeessa sammutetaan tuo reaaliaikasuojaus (Shield). Näin vältetään tilanteet joissa suojaus estäisi esim HijackThis:n työkalun toimintaa.

Tallenna nämä ohjeet tekstitiedostoon tai tulosta nämä, muuten et pääse niihin käsiksi vikasietotilasta

Lataa AVG:n Anti-Spyware 7.5:n
ja tallenna ohjelma työpöydällesi.
o Kun olet ladannut ohjelman, kaksoisklikkaa asennuohjelman pikakuvaketta työpöydälläsi, asennus alkaa.
o Asennuksen jälkeen täytyy ohjelma käynnistää ja sen tunnisteet päivittää.
o Käynnistä AVG:n Anti-Spyware.
o Klikkaa "Update" kuvaketta päävalikossa. Sen jälkeen klikkaa "Update now" painiketta.

o Sitten klikkaa "Start Update" kuvaketta jolloin päivitys alkaa.

o Kun päivitykset on ladattu, klikkaa "Scanner" kuvaketta ikkunan ylälaidassa. Valitse sitten "Settings" välilehti.
o Kun "Settings" valikko on auennut, klikkaa "Recommended actions" ja sitten valitse "Quarantine".

o Sitten "Reports" valikon alta:
o Laita täppi kohtaan "Automatically generate report after every scan"
o Ota täppi pois kohdasta"Only if threats were found"

o Sitten klikkaa "Shield" kuvaketta ikkunan ylälaidassa
o "Resident shield is", muuta tila active:sta inactive:ksi
o Sulje ohjelma, ÄLÄ skannaa vielä.

Käynnistä koneesi vikasietotilaan,
sammuta ja käynnistä
käynnistyksen yhteydessä naputtele F8
valitse nuoli näppäimellä vikasietotila
paina enter ja enter

Toisissa koneissa paukutetaan F8:sin sijasta F5:tä

HUOM! Älä käytä muita ohjelmia AVG:n skannauksen aikana, tämä saattaa häiritä skannausta.
o Kun vikasietotilassa, käynnistä AVG:n Anti-Spyware.
o Klikkaa "Scanner" kuvaketta ikkunan ylälaidassa ja valitse "Scan" välilehti. Sitten klikkaa "Complete System Scan".
o Ewido aloittaa nyt tietokoneen skannaamisen, ole kärsivällinen sillä skannaus vie aikaa.

Kun skannaus on valmis:
TÄRKEÄÄ : Älä klikkaa "Save Scan Report" ennen kuin klikkaat "Apply all Actions"
o Varmistu, että Set all elements to: näyttää Quarantine (1), jos ei, klikkaa linkkiä ja valitse Quarantine popup-valikosta.
o Sinulta kysytään mitä tehdä jos infektioita löytyi, valitse silloin "Apply all actions"

o Sitten klikkaa "Reports" kuvaketta ohjelma yläosasta.
o Klikkaa "Save report as" painiketta ikkunan vasemmassa alalaidassa ja tallenna raportti työpöydälle.
o Sulje ohjelma, käynnistä kone normaalisti ja lähetä AVG:n raportti viestikejuusi.

 

AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at: 13:43:42 15.3.2008

+ Scan result:



C:\Users\Mikko\ohjelmat\Actual Spy 2.8\crack.rar/tracedxwardom.org\Baris332woltran.com\crack Actual Spy v3.0\ASMonitor.exe -> Not-A-Virus.Monitor.Win32.ActualSpy.28 : Cleaned.
:mozilla.254:C:\Users\Mikko\AppData\Roaming\Mozilla\Firefox\Profiles\m93btsyf.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.293:C:\Users\Mikko\AppData\Roaming\Mozilla\Firefox\Profiles\m93btsyf.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.316:C:\Users\Mikko\AppData\Roaming\Mozilla\Firefox\Profiles\m93btsyf.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.435:C:\Users\Mikko\AppData\Roaming\Mozilla\Firefox\Profiles\m93btsyf.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.474:C:\Users\Mikko\AppData\Roaming\Mozilla\Firefox\Profiles\m93btsyf.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.73:C:\Users\Mikko\AppData\Roaming\Mozilla\Firefox\Profiles\m93btsyf.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.74:C:\Users\Mikko\AppData\Roaming\Mozilla\Firefox\Profiles\m93btsyf.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.75:C:\Users\Mikko\AppData\Roaming\Mozilla\Firefox\Profiles\m93btsyf.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.76:C:\Users\Mikko\AppData\Roaming\Mozilla\Firefox\Profiles\m93btsyf.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.77:C:\Users\Mikko\AppData\Roaming\Mozilla\Firefox\Profiles\m93btsyf.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.78:C:\Users\Mikko\AppData\Roaming\Mozilla\Firefox\Profiles\m93btsyf.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.79:C:\Users\Mikko\AppData\Roaming\Mozilla\Firefox\Profiles\m93btsyf.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.80:C:\Users\Mikko\AppData\Roaming\Mozilla\Firefox\Profiles\m93btsyf.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
C:\Users\Mikko\AppData\Roaming\Microsoft\Windows\Cookies\Low\mikko@partygaming.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.834:C:\Users\Mikko\AppData\Roaming\Mozilla\Firefox\Profiles\m93btsyf.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
C:\Users\Mikko\AppData\Roaming\Microsoft\Windows\Cookies\Low\mikko@bfast[1].txt -> TrackingCookie.Bfast : Cleaned.
C:\Users\Mikko\AppData\Roaming\Microsoft\Windows\Cookies\Low\mikko@connextra[4].txt -> TrackingCookie.Connextra : Cleaned.
:mozilla.235:C:\Users\Mikko\AppData\Roaming\Mozilla\Firefox\Profiles\m93btsyf.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
C:\Users\Mikko\AppData\Roaming\Microsoft\Windows\Cookies\mikko@fastclick[1].txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.232:C:\Users\Mikko\AppData\Roaming\Mozilla\Firefox\Profiles\m93btsyf.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.309:C:\Users\Mikko\AppData\Roaming\Mozilla\Firefox\Profiles\m93btsyf.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.251:C:\Users\Mikko\AppData\Roaming\Mozilla\Firefox\Profiles\m93btsyf.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.297:C:\Users\Mikko\AppData\Roaming\Mozilla\Firefox\Profiles\m93btsyf.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.304:C:\Users\Mikko\AppData\Roaming\Mozilla\Firefox\Profiles\m93btsyf.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.306:C:\Users\Mikko\AppData\Roaming\Mozilla\Firefox\Profiles\m93btsyf.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.307:C:\Users\Mikko\AppData\Roaming\Mozilla\Firefox\Profiles\m93btsyf.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.413:C:\Users\Mikko\AppData\Roaming\Mozilla\Firefox\Profiles\m93btsyf.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.452:C:\Users\Mikko\AppData\Roaming\Mozilla\Firefox\Profiles\m93btsyf.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.580:C:\Users\Mikko\AppData\Roaming\Mozilla\Firefox\Profiles\m93btsyf.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.581:C:\Users\Mikko\AppData\Roaming\Mozilla\Firefox\Profiles\m93btsyf.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.582:C:\Users\Mikko\AppData\Roaming\Mozilla\Firefox\Profiles\m93btsyf.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.671:C:\Users\Mikko\AppData\Roaming\Mozilla\Firefox\Profiles\m93btsyf.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.893:C:\Users\Mikko\AppData\Roaming\Mozilla\Firefox\Profiles\m93btsyf.default\cookies.txt -> TrackingCookie.Information : Cleaned.
:mozilla.196:C:\Users\Mikko\AppData\Roaming\Mozilla\Firefox\Profiles\m93btsyf.default\cookies.txt -> TrackingCookie.Intelli-direct : Cleaned.
C:\Users\Mikko\AppData\Roaming\Microsoft\Windows\Cookies\Low\mikko@ivwbox[2].txt -> TrackingCookie.Ivwbox : Cleaned.
:mozilla.16:C:\Users\Mikko\AppData\Roaming\Mozilla\Firefox\Profiles\m93btsyf.default\cookies.txt -> TrackingCookie.Netflame : Cleaned.
:mozilla.619:C:\Users\Mikko\AppData\Roaming\Mozilla\Firefox\Profiles\m93btsyf.default\cookies.txt -> TrackingCookie.Saxobank : Cleaned.
:mozilla.433:C:\Users\Mikko\AppData\Roaming\Mozilla\Firefox\Profiles\m93btsyf.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned.
:mozilla.434:C:\Users\Mikko\AppData\Roaming\Mozilla\Firefox\Profiles\m93btsyf.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned.
:mozilla.607:C:\Users\Mikko\AppData\Roaming\Mozilla\Firefox\Profiles\m93btsyf.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned.
:mozilla.608:C:\Users\Mikko\AppData\Roaming\Mozilla\Firefox\Profiles\m93btsyf.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned.
:mozilla.238:C:\Users\Mikko\AppData\Roaming\Mozilla\Firefox\Profiles\m93btsyf.default\cookies.txt -> TrackingCookie.Skype : Cleaned.
:mozilla.239:C:\Users\Mikko\AppData\Roaming\Mozilla\Firefox\Profiles\m93btsyf.default\cookies.txt -> TrackingCookie.Skype : Cleaned.
C:\Users\Mikko\AppData\Roaming\Microsoft\Windows\Cookies\mikko@skype[2].txt -> TrackingCookie.Skype : Cleaned.
:mozilla.874:C:\Users\Mikko\AppData\Roaming\Mozilla\Firefox\Profiles\m93btsyf.default\cookies.txt -> TrackingCookie.Spylog : Cleaned.
:mozilla.272:C:\Users\Mikko\AppData\Roaming\Mozilla\Firefox\Profiles\m93btsyf.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.273:C:\Users\Mikko\AppData\Roaming\Mozilla\Firefox\Profiles\m93btsyf.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.274:C:\Users\Mikko\AppData\Roaming\Mozilla\Firefox\Profiles\m93btsyf.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.275:C:\Users\Mikko\AppData\Roaming\Mozilla\Firefox\Profiles\m93btsyf.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.276:C:\Users\Mikko\AppData\Roaming\Mozilla\Firefox\Profiles\m93btsyf.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.277:C:\Users\Mikko\AppData\Roaming\Mozilla\Firefox\Profiles\m93btsyf.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.278:C:\Users\Mikko\AppData\Roaming\Mozilla\Firefox\Profiles\m93btsyf.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.279:C:\Users\Mikko\AppData\Roaming\Mozilla\Firefox\Profiles\m93btsyf.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.280:C:\Users\Mikko\AppData\Roaming\Mozilla\Firefox\Profiles\m93btsyf.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.281:C:\Users\Mikko\AppData\Roaming\Mozilla\Firefox\Profiles\m93btsyf.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.282:C:\Users\Mikko\AppData\Roaming\Mozilla\Firefox\Profiles\m93btsyf.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.283:C:\Users\Mikko\AppData\Roaming\Mozilla\Firefox\Profiles\m93btsyf.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.284:C:\Users\Mikko\AppData\Roaming\Mozilla\Firefox\Profiles\m93btsyf.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.285:C:\Users\Mikko\AppData\Roaming\Mozilla\Firefox\Profiles\m93btsyf.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.286:C:\Users\Mikko\AppData\Roaming\Mozilla\Firefox\Profiles\m93btsyf.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.287:C:\Users\Mikko\AppData\Roaming\Mozilla\Firefox\Profiles\m93btsyf.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.288:C:\Users\Mikko\AppData\Roaming\Mozilla\Firefox\Profiles\m93btsyf.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.289:C:\Users\Mikko\AppData\Roaming\Mozilla\Firefox\Profiles\m93btsyf.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.290:C:\Users\Mikko\AppData\Roaming\Mozilla\Firefox\Profiles\m93btsyf.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.291:C:\Users\Mikko\AppData\Roaming\Mozilla\Firefox\Profiles\m93btsyf.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.20:C:\Users\Mikko\AppData\Roaming\Mozilla\Firefox\Profiles\m93btsyf.default\cookies.txt -> TrackingCookie.Statistik-gallup : Cleaned.
C:\Users\Mikko\AppData\Roaming\Microsoft\Windows\Cookies\Low\mikko@statistik-gallup[1].txt -> TrackingCookie.Statistik-gallup : Cleaned.
C:\Users\Mikko\AppData\Roaming\Microsoft\Windows\Cookies\mikko@statistik-gallup[1].txt -> TrackingCookie.Statistik-gallup : Cleaned.
:mozilla.464:C:\Users\Mikko\AppData\Roaming\Mozilla\Firefox\Profiles\m93btsyf.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.465:C:\Users\Mikko\AppData\Roaming\Mozilla\Firefox\Profiles\m93btsyf.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.583:C:\Users\Mikko\AppData\Roaming\Mozilla\Firefox\Profiles\m93btsyf.default\cookies.txt -> TrackingCookie.Webtrends : Cleaned.
C:\Users\Mikko\AppData\Roaming\Microsoft\Windows\Cookies\Low\mikko@m.webtrends[1].txt -> TrackingCookie.Webtrends : Cleaned.
:mozilla.123:C:\Users\Mikko\AppData\Roaming\Mozilla\Firefox\Profiles\m93btsyf.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned.
:mozilla.262:C:\Users\Mikko\AppData\Roaming\Mozilla\Firefox\Profiles\m93btsyf.default\cookies.txt -> TrackingCookie.Wegcash : Cleaned.
:mozilla.144:C:\Users\Mikko\AppData\Roaming\Mozilla\Firefox\Profiles\m93btsyf.default\cookies.txt -> TrackingCookie.Yadro : Cleaned.
C:\Users\Mikko\AppData\Roaming\Microsoft\Windows\Cookies\Low\mikko@ad.yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Cleaned.
C:\Users\Mikko\ohjelmat\Sim-Card\sim-card(2).exe -> Trojan.Delf.anx : Cleaned.
C:\Users\Mikko\ohjelmat\Sim-Card\sim-card.exe -> Trojan.Delf.anx : Cleaned.


::Report end

 

onkos vielä ongelmaa

 

Kiitoksia paljon... toistaiseksi ei ongelmia

 

Lataa tuolta http://www.ccleaner.com/download/builds.aspx
CCleaner v2.05.555- Standard Build, ÄLÄ aseenna Yahoo toolbaria!

laita asetukset näin:
Valinnat --> Lisäasetukset --> Ota ruksi pois kohdasta Poista vain yli 48 tuntia vanhat tilapäistiedostot.

aja Puhdistaja > tutki nappi > aja ccleaner nappi oikea alakulma
aja Virheet > etsi rekisteri virheitä nappi > Korjaa rekisteri virheet. nappi

 

Näin mulla: spybotti ei toiminu toho eikä mikää muukaa mut sittenmenin lisää tai poista ohjelma ni joha siellä oli joku cid helper ni poistin sen eikä oo ikinä tullu enää takas

 

Ei piru... Ongelma palasi taas

 

• Avaa HiJackThis
• Klikkaa "Configure" valintaa oikealla alhaalla
• Klikkaa "Misc Tools"
• Klikkaa boxia joka sanoo "Uninstall Manager"
• Klikkaa valintaa "Save list"
• Kopioi ja liitä kyseinen lista muistiosta postiisi