HiJackThis loki

Discussion in 'Virukset ja haittaohjelmat' started by harska_88, Jul 14, 2005.

  1. harska_88

    harska_88 Member

    Joined:
    Jan 14, 2005
    Messages:
    14
    Likes Received:
    0
    Trophy Points:
    11
    Logfile of HijackThis v1.99.1
    Scan saved at 22:37:22, on 14.7.2005
    Platform: Windows XP (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 (6.00.2600.0000)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Sygate\SPF\smc.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\AVPersonal\AVGUARD.EXE
    C:\Program Files\AVPersonal\AVWUPSRV.EXE
    C:\WINDOWS\System32\tcpsvcs.exe
    C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
    C:\Program Files\AVPersonal\AVGNT.EXE
    C:\Program Files\Winamp\winampa.exe
    C:\WINDOWS\System32\ctfmon.exe
    C:\Program Files\Skype\Phone\Skype.exe
    C:\WINDOWS\System32\wuauclt.exe
    C:\WINDOWS\explorer.exe
    C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
    C:\Documents and Settings\Jukka\Työpöytä\hijackthis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    R3 - Default URLSearchHook is missing
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
    O4 - HKLM\..\Run: [HLL Data Parameter] hllcxpa.exe
    O4 - HKLM\..\Run: [Dot.net Networking] SNSS32.EXE
    O4 - HKLM\..\Run: [PPPOEO] pingppac.exe
    O4 - HKLM\..\Run: [Preview AdService] C:\Program Files\Preview AdService\PrevAdServ.exe
    O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
    O4 - HKLM\..\Run: [Windows Protectot] boxide.exe
    O4 - HKLM\..\Run: [IP Configre] winipcfg.exe
    O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
    O4 - HKLM\..\Run: [AVGCtrl] "C:\Program Files\AVPersonal\AVGNT.EXE" /min
    O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
    O4 - HKLM\..\RunServices: [HLL Data Parameter] hllcxpa.exe
    O4 - HKLM\..\RunServices: [Dot.net Networking] SNSS32.EXE
    O4 - HKLM\..\RunServices: [PPPOEO] pingppac.exe
    O4 - HKLM\..\RunServices: [Windows Protectot] boxide.exe
    O4 - HKLM\..\RunServices: [IP Configre] winipcfg.exe
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
    O4 - HKCU\..\Run: [HLL Data Parameter] hllcxpa.exe
    O4 - HKCU\..\Run: [IP Configre] winipcfg.exe
    O4 - HKCU\..\Run: [Windows Protectot] boxide.exe
    O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
    O4 - HKCU\..\RunServices: [HLL Data Parameter] hllcxpa.exe
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
    O23 - Service: AntiVir Service (AntiVirService) - H+BEDV Datentechnik GmbH - C:\Program Files\AVPersonal\AVGUARD.EXE
    O23 - Service: AntiVir Update (AVWUpSrv) - H+BEDV Datentechnik GmbH, Germany - C:\Program Files\AVPersonal\AVWUPSRV.EXE
    O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe

     
    harska_88, Jul 14, 2005
    #1
  2. stauf

    stauf Regular member

    Joined:
    Feb 14, 2005
    Messages:
    571
    Likes Received:
    0
    Trophy Points:
    26
    Ainakin Windows ja IE pitää päivittää.

    Ja kyllä siellä töhnää on, Toymaatti ja muut gurut varmaan neuvovat tarkemmin.
     
    stauf, Jul 14, 2005
    #2
  3. Toymaatti

    Toymaatti Active member

    Joined:
    Feb 4, 2005
    Messages:
    1,038
    Likes Received:
    0
    Trophy Points:
    66
    Siirrä HjT kansioineen C:n juureen näin
    C:\hijackthis\HijackThis.exe

    Poista Lisää/Poista sovelluksesta
    Preview AdService

    Merkkaa nuo, sulje selain ja muut ikkunat, klikkaa Fix
    R3 - Default URLSearchHook is missing
    O4 - HKLM\..\Run: [HLL Data Parameter] hllcxpa.exe
    O4 - HKLM\..\Run: [HLL Data Parameter] hllcxpa.exe
    O4 - HKLM\..\Run: [Dot.net Networking] SNSS32.EXE
    O4 - HKLM\..\Run: [PPPOEO] pingppac.exe
    O4 - HKLM\..\Run: [Preview AdService] C:\Program Files\Preview AdService\PrevAdServ.exe
    O4 - HKLM\..\Run: [Windows Protectot] boxide.exe
    O4 - HKLM\..\RunServices: [HLL Data Parameter] hllcxpa.exe
    O4 - HKLM\..\RunServices: [Dot.net Networking] SNSS32.EXE
    O4 - HKLM\..\RunServices: [PPPOEO] pingppac.exe
    O4 - HKLM\..\RunServices: [Windows Protectot] boxide.exe
    O4 - HKCU\..\Run: [HLL Data Parameter] hllcxpa.exe
    O4 - HKCU\..\Run: [Windows Protectot] boxide.exe
    O4 - HKCU\..\RunServices: [HLL Data Parameter] hllcxpa.exe

    Poista tuo kansio jos se vielä löytyy
    C:\Program Files\===>Preview AdService<===


    Sitten scannaa noilla online scannereilla ja anna poistaa kaikki mitä löytyy.

    - Trend Micro http://fi.trendmicro-europe.com/consumer/products/housecall_launch.php

    - Panda http://www.pandasoftware.com/activescan/com/activescan_principal.htm

    Ja vielä eScanilla

    - http://koti.mbnet.fi/pattaya1/escanmwav.htm

    Ja sitten tosiaankin, hae HETI uusimmat päivitykset XP:lle ja IE:lle
     
    Toymaatti, Jul 14, 2005
    #3

Share This Page