HijackThis-logi, tässä ongelmia?

Discussion in 'Virukset ja haittaohjelmat - HijackThis -logit' started by henrisa, Dec 20, 2006.

Thread Status:
Not open for further replies.
  1. henrisa

    henrisa Member

    Joined:
    Dec 20, 2006
    Messages:
    9
    Likes Received:
    0
    Trophy Points:
    11
    Tere!

    Tää siskon masiina on hirvee lusmu. Osaisko joku sanoo tästä jotain. Kiitos jo!

    Logfile of HijackThis v1.99.1
    Scan saved at 0:55:00, on 21.12.2006
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.5730.0011)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    D:\PROGRA~1\backweb\4653381\Program\SERVIC~1.EXE
    C:\WINDOWS\system32\cisvc.exe
    D:\Program Files\Anti-Virus\fsgk32st.exe
    D:\Program Files\Anti-Virus\FSGK32.EXE
    D:\Program Files\backweb\4653381\program\fsbwsys.exe
    D:\Program Files\Common\FSMA32.EXE
    D:\Program Files\Anti-Virus\fssm32.exe
    C:\WINDOWS\System32\nvsvc32.exe
    D:\Program Files\Common\FSMB32.EXE
    C:\WINDOWS\system32\pctspk.exe
    C:\WINDOWS\System32\svchost.exe
    D:\Program Files\Common\FCH32.EXE
    C:\WINDOWS\system32\UAService7.exe
    D:\Program Files\Common\FAMEH32.EXE
    D:\Program Files\Anti-Virus\fsqh.exe
    D:\Program Files\Anti-Virus\fsrw.exe
    D:\Program Files\FWES\Program\fsdfwd.exe
    D:\Program Files\Anti-Virus\fsav32.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\cidaemon.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\TW-IA300C ADSL\CnxDslTb.exe
    D:\Program Files\Common\FSM32.EXE
    D:\PROGRA~1\ANTI-S~1\fsaw.exe
    D:\iTouch\iTouch.exe
    C:\WINDOWS\VM_STI.EXE
    D:\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
    C:\Program Files\MSN Messenger\MsnMsgr.Exe
    C:\Program Files\Skype\Phone\Skype.exe
    D:\Program Files\FSGUI\fsguidll.exe
    D:\Program Files\backweb\4653381\Program\fspex.exe
    C:\Program Files\Philips\SPC 200NC PC Camera\TrayMin.exe
    C:\Program Files\BitComet\BitComet.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Documents and Settings\Nina\Työpöytä\HijackThis_v1.99.1.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =

    http://g.msn.fi/0SEFIFI/SAOS01?FORM=TOOLBR
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.fi
    R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) =

    http://g.msn.fi/0SEFIFI/SAOS01?FORM=TOOLBR
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride =

    localhost
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\Userinit.exe
    O1 - Hosts: 72.232.140.18 www.winmx.com
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -

    C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program

    Files\BitComet\tools\BitCometBHO.dll
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} -

    C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [CnxDslTaskBar] "C:\Program Files\\TW-IA300C ADSL\CnxDslTb.exe"
    O4 - HKLM\..\Run: [F-Secure Manager] "D:\Program Files\Common\FSM32.EXE" /splash
    O4 - HKLM\..\Run: [F-Secure TNB] "D:\Program Files\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
    O4 - HKLM\..\Run: [F-Secure Startup Wizard] "D:\Program Files\FSGUI\FSSW.EXE" /reboot
    O4 - HKLM\..\Run: [zBrowser Launcher] D:\iTouch\iTouch.exe
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE Philips SPC 200NC PC Camera
    O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
    O4 - HKCU\..\Run: [LDM] D:\\Desktop

    Messenger\8876480\Program\LogitechDesktopMessenger.exe
    O4 - HKCU\..\Run: [Msnmsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
    O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
    O4 - HKCU\..\Run: [Steam] D:\Program Files\Steam\Steam.exe -silent
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - Global Startup: dna Nettiturva.lnk = D:\Program

    Files\backweb\4653381\Program\fspex.exe
    O4 - Global Startup: Logitech Desktop Messenger.lnk = ?
    O4 - Global Startup: TrayMin.lnk = ?
    O8 - Extra context menu item: &Estä tämä kohoikkuna - D:\Program

    Files\Anti-Spyware\blockpopups.htm
    O8 - Extra context menu item: Download all links using BitComet - res://C:\Program

    Files\BitComet\BitComet.exe/AddAllLink.htm
    O8 - Extra context menu item: Download all videos using BitComet - res://C:\Program

    Files\BitComet\BitComet.exe/AddVideo.htm
    O8 - Extra context menu item: Download link using &BitComet - res://C:\Program

    Files\BitComet\BitComet.exe/AddLink.htm
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program

    Files\Java\j2re1.4.2_05\bin\npjpi142_05.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -

    C:\Program Files\Java\j2re1.4.2_05\bin\npjpi142_05.dll
    O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - D:\Program

    Files\Anti-Spyware\ieshield.dll
    O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} -

    D:\Program Files\Anti-Spyware\ieshield.dll
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network

    Diagnostic\xpnetdiag.exe (file missing)
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 -

    {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file

    missing)
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program

    Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} -

    C:\Program Files\Messenger\msmsgs.exe
    O11 - Options group: [INTERNATIONAL] International*
    O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) -

    http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
    O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} -

    http://static.windupdates.com/cab/WebsiteAccess/ie/bridge-c18.cab
    O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} -

    http://ak.imgfarm.com/images/nocache/funwebproducts/ei/PopularScreenSaversInitialSetup1.0

    .0.8.cab
    O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) -

    http://messenger.zone.msn.com/binary/MineSweeper.cab28578.cab
    O16 - DPF: {3FE16C08-D6A7-4133-84FC-D5BFB4F7D886} (WebGameLoader Class) -

    http://www.miniclip.com/ricochet/ReflexiveWebGameLoader.cab
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) -

    http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?11

    37134877328
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) -

    http://messenger.zone.msn.com/binary/MessengerStatsClient.cab28578.cab
    O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl

    Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
    O18 - Protocol: bw+0 - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw+0s - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw-0 - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw-0s - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw00 - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw00s - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw10 - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw10s - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw20 - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw20s - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw30 - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw30s - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw40 - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw40s - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw50 - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw50s - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw60 - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw60s - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw70 - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw70s - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw80 - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw80s - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw90 - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw90s - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwa0 - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwa0s - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwb0 - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwb0s - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwc0 - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwc0s - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwd0 - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwd0s - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwe0 - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwe0s - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwf0 - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwf0s - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - D:\Desktop

    Messenger\8876480\Program\GAPlugProtocol-8876480.dll
    O18 - Protocol: bwg0 - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwg0s - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwh0 - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwh0s - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwi0 - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwi0s - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwj0 - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwj0s - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwk0 - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwk0s - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwl0 - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwl0s - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwm0 - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwm0s - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwn0 - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwn0s - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwo0 - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwo0s - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwp0 - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwp0s - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwq0 - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwq0s - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwr0 - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwr0s - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bws0 - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bws0s - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwt0 - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwt0s - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwu0 - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwu0s - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwv0 - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwv0s - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bww0 - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bww0s - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwx0 - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwx0s - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwy0 - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwy0s - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwz0 - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwz0s - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} -

    C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} -

    C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: offline-8876480 - {DA37D7D5-29C9-4D35-8A3E-5BC51FEC5E33} - D:\Desktop

    Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Filter: text/html - (no CLSID) - (no file)
    O23 - Service: dna Nettiturva (BackWeb Plug-in - 4653381) - dna Nettiturva -

    D:\PROGRA~1\backweb\4653381\Program\SERVIC~1.EXE
    O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation -

    D:\Program Files\Anti-Virus\fsgk32st.exe
    O23 - Service: fsbwsys - F-Secure Corp. - D:\Program

    Files\backweb\4653381\program\fsbwsys.exe
    O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation -

    D:\Program Files\FWES\Program\fsdfwd.exe
    O23 - Service: FSMA - F-Secure Corporation - D:\Program Files\Common\FSMA32.EXE
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation -

    C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation -

    C:\WINDOWS\System32\nvsvc32.exe
    O23 - Service: PCTEL Speaker Phone (Pctspk) - PCtel, Inc. -

    C:\WINDOWS\system32\pctspk.exe
    O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Unknown owner -

    C:\WINDOWS\system32\UAService7.exe
     
    henrisa, Dec 20, 2006
    #1
  2. Hujo

    Hujo Guest

    Lisää poista sovelutuksesta poista

    kaikki javat
    Logitech Desktop Messenger


    scannaa hjt:llä merkkaa paina fix checked

    O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
    O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} -http://static.windupdates.com/cab/WebsiteAccess/ie/bridge-c18.cab
    O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} -http://ak.imgfarm.com/images/nocache/fun...InitialSetup1.0.0.8.cab
    O18 - Filter: text/html - (no CLSID) - (no file)

    laita uusi hjt loki jos sais ton lokin parempaan muotoon
    Klikaat siinä muistion päällä hiiren oikenpuoleisella napilla valitse kaikki > kopioi siten avaat vistiketjusi ja vastaus kohdan siten van oikeen puoleisella taas ja liität
     
    Last edited by a moderator: Dec 20, 2006
    Hujo, Dec 20, 2006
    #2
  3. henrisa

    henrisa Member

    Joined:
    Dec 20, 2006
    Messages:
    9
    Likes Received:
    0
    Trophy Points:
    11
    Thanks so far. Edellä mainitut tehty. Uus loki..

    Logfile of HijackThis v1.99.1
    Scan saved at 13:29:55, on 21.12.2006
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.5730.0011)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    D:\PROGRA~1\backweb\4653381\Program\SERVIC~1.EXE
    C:\WINDOWS\system32\cisvc.exe
    D:\Program Files\Anti-Virus\fsgk32st.exe
    D:\Program Files\Anti-Virus\FSGK32.EXE
    D:\Program Files\backweb\4653381\program\fsbwsys.exe
    D:\Program Files\Common\FSMA32.EXE
    C:\WINDOWS\System32\nvsvc32.exe
    C:\WINDOWS\system32\pctspk.exe
    D:\Program Files\Common\FSMB32.EXE
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\UAService7.exe
    D:\Program Files\Anti-Virus\fssm32.exe
    D:\Program Files\Common\FCH32.EXE
    C:\WINDOWS\System32\svchost.exe
    D:\Program Files\Common\FAMEH32.EXE
    D:\Program Files\Anti-Virus\fsqh.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\WINDOWS\Explorer.EXE
    D:\Program Files\Anti-Virus\fsrw.exe
    D:\Program Files\FWES\Program\fsdfwd.exe
    D:\Program Files\Anti-Virus\fsav32.exe
    C:\Program Files\TW-IA300C ADSL\CnxDslTb.exe
    D:\Program Files\Common\FSM32.EXE
    D:\PROGRA~1\ANTI-S~1\fsaw.exe
    D:\iTouch\iTouch.exe
    C:\WINDOWS\VM_STI.EXE
    D:\Program Files\FSGUI\fsguidll.exe
    D:\Program Files\backweb\4653381\Program\fspex.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\WINDOWS\system32\msiexec.exe
    C:\WINDOWS\system32\cidaemon.exe
    C:\Temp\HijackThis_v1.99.1.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://g.msn.fi/0SEFIFI/SAOS01?FORM=TOOLBR
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.fi
    R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.fi/0SEFIFI/SAOS01?FORM=TOOLBR
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\Userinit.exe
    O1 - Hosts: 72.232.140.18 www.winmx.com
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO.dll
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [CnxDslTaskBar] "C:\Program Files\\TW-IA300C ADSL\CnxDslTb.exe"
    O4 - HKLM\..\Run: [F-Secure Manager] "D:\Program Files\Common\FSM32.EXE" /splash
    O4 - HKLM\..\Run: [F-Secure TNB] "D:\Program Files\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
    O4 - HKLM\..\Run: [F-Secure Startup Wizard] "D:\Program Files\FSGUI\FSSW.EXE" /reboot
    O4 - HKLM\..\Run: [zBrowser Launcher] D:\iTouch\iTouch.exe
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE Philips SPC 200NC PC Camera
    O4 - HKCU\..\Run: [Msnmsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
    O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
    O4 - HKCU\..\Run: [Steam] D:\Program Files\Steam\Steam.exe -silent
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - Global Startup: dna Nettiturva.lnk = D:\Program Files\backweb\4653381\Program\fspex.exe
    O4 - Global Startup: TrayMin.lnk = ?
    O8 - Extra context menu item: &Estä tämä kohoikkuna - D:\Program Files\Anti-Spyware\blockpopups.htm
    O8 - Extra context menu item: Download all links using BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
    O8 - Extra context menu item: Download all videos using BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
    O8 - Extra context menu item: Download link using &BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
    O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - D:\Program Files\Anti-Spyware\ieshield.dll
    O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - D:\Program Files\Anti-Spyware\ieshield.dll
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O11 - Options group: [INTERNATIONAL] International*
    O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
    O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab28578.cab
    O16 - DPF: {3FE16C08-D6A7-4133-84FC-D5BFB4F7D886} (WebGameLoader Class) - http://www.miniclip.com/ricochet/ReflexiveWebGameLoader.cab
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1137134877328
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab28578.cab
    O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O23 - Service: dna Nettiturva (BackWeb Plug-in - 4653381) - dna Nettiturva - D:\PROGRA~1\backweb\4653381\Program\SERVIC~1.EXE
    O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - D:\Program Files\Anti-Virus\fsgk32st.exe
    O23 - Service: fsbwsys - F-Secure Corp. - D:\Program Files\backweb\4653381\program\fsbwsys.exe
    O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - D:\Program Files\FWES\Program\fsdfwd.exe
    O23 - Service: FSMA - F-Secure Corporation - D:\Program Files\Common\FSMA32.EXE
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
    O23 - Service: PCTEL Speaker Phone (Pctspk) - PCtel, Inc. - C:\WINDOWS\system32\pctspk.exe
    O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Unknown owner - C:\WINDOWS\system32\UAService7.exe
     
    henrisa, Dec 21, 2006
    #3
  4. Hujo

    Hujo Guest

    Hujo, Dec 21, 2006
    #4
Thread Status:
Not open for further replies.

Share This Page