Hjt Logi kone jumittelee...

Discussion in 'Virukset ja haittaohjelmat - HijackThis -logit' started by greenryda, Nov 26, 2007.

  1. greenryda

    greenryda Member

    Joined:
    Nov 28, 2006
    Messages:
    43
    Likes Received:
    0
    Trophy Points:
    16
    Kone takkuilee, voisko joku vilkasta??

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 22:06:02, on 26.11.2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\Explorer.EXE
    c:\Program Files\Common Files\Symantec Shared\ccProxy.exe
    c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    c:\Program Files\Norton Internet Security\ISSVC.exe
    c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
    c:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
    c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
    C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
    C:\WINDOWS\system32\nvsvc32.exe
    C:\WINDOWS\system32\svchost.exe
    c:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
    C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
    C:\windows\system\hpsysdrv.exe
    C:\WINDOWS\AGRSMMSG.exe
    C:\WINDOWS\system32\hphmon06.exe
    C:\HP\KBD\KBD.EXE
    C:\Program Files\Common Files\Symantec Shared\ccApp.exe
    C:\WINDOWS\ALCXMNTR.EXE
    C:\WINDOWS\system32\rundll32.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    C:\Program Files\MagicDisc\MagicDisc.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FI_FI&c=Q305&bd=pavilion&pf=desktop
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FI_FI&c=Q305&bd=pavilion&pf=desktop
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FI_FI&c=Q305&bd=pavilion&pf=desktop
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FI_FI&c=Q305&bd=pavilion&pf=desktop
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FI_FI&c=Q305&bd=pavilion&pf=desktop
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FI_FI&c=Q305&bd=pavilion&pf=desktop
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FI_FI&c=Q305&bd=pavilion&pf=desktop
    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.symantec.com/techsupp/se...ish&product=NIS&version=8.0.5.14&build=RETAIL
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: HP-näkymä - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
    O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
    O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
    O4 - HKLM\..\Run: [HPHUPD06] c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
    O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
    O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
    O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
    O4 - HKLM\..\Run: [SSC_UserPrompt] c:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
    O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"
    O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
    O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
    O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
    O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe"
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [YeppStudioAgent] C:\Program Files\Samsung\SamsungMediaStudio4.1\SamsungMediaStudioAgent.exe
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Paikallinen palve')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Verkkopalve')
    O4 - .DEFAULT User Startup: AutoTBar.exe (User 'Default user')
    O4 - Startup: MagicDisc.lnk = C:\Program Files\MagicDisc\MagicDisc.exe
    O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O9 - Extra button: Yhteysohje - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
    O9 - Extra 'Tools' menuitem: Yhteysohje - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra button: Yhteysohje - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm (HKCU)
    O9 - Extra 'Tools' menuitem: Yhteysohje - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm (HKCU)
    O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - http://www.symantec.com/techsupp/asa/ctrl/LSSupCtl.cab
    O16 - DPF: {22A19EED-49CF-4BDE-8C6F-FD60B54B655D} (ie_api Class) - https://esignature.sonera.com/exec/xwfm/public/EllosYksityislaina/fi/Ellos_Yksityislaina/a_hakija/1_0_0/PKISignatureAPI/plugin-install/library/binary/win32/dssClient.cab
    O16 - DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} (Groove Control) - http://download.shockwave.com/pub/otoy/OTOYAX.cab
    O16 - DPF: {83AFB5CA-ED35-11D4-A452-0080C8D85045} (GameDesire Poker Games) - http://67.15.101.3/g_bin/eng/poker_2_0_0_43.cab
    O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} - http://www.symantec.com/techsupp/asa/ctrl/SymAData.cab
    O17 - HKLM\System\CCS\Services\Tcpip\..\{29837807-683E-4FD6-9715-7017B6C7DF8E}: NameServer = 85.255.116.37,85.255.112.85
    O17 - HKLM\System\CCS\Services\Tcpip\..\{3FE51F59-FCBB-4DDF-B966-667F403C993A}: NameServer = 85.255.116.37,85.255.112.85
    O17 - HKLM\System\CCS\Services\Tcpip\..\{8F3C6E77-62D8-402C-BF36-7943FA7B45F6}: NameServer = 85.255.116.37,85.255.112.85
    O17 - HKLM\System\CCS\Services\Tcpip\..\{A350513C-8B01-4CE4-A812-23DCF1798E0F}: NameServer = 85.255.116.37,85.255.112.85
    O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.116.37 85.255.112.85
    O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.116.37 85.255.112.85
    O21 - SSODL: DCOM Server 3339 - {2C1CD3D7-86AC-4068-93BC-A02304BB3339} - C:\WINDOWS\system32\3339_27.dll (file missing)
    O22 - SharedTaskScheduler: DCOM Server 3339 - {2C1CD3D7-86AC-4068-93BC-A02304BB3339} - C:\WINDOWS\system32\3339_27.dll (file missing)
    O23 - Service: Microsoft ASPI Manager (aspi113210) - Unknown owner - C:\WINDOWS\system32\aspi25469.exe (file missing)
    O23 - Service: Automattinen LiveUpdate-ajastustoiminto - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
    O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccProxy.exe
    O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
    O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: ISSvc (ISSVC) - Symantec Corporation - c:\Program Files\Norton Internet Security\ISSVC.exe
    O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~2.EXE
    O23 - Service: Norton AntiVirus Auto-Protect -palvelu (navapsvc) - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
    O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
    O23 - Service: SAVScan - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
    O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
    O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
    O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
    O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe

    --
    End of file - 11741 bytes
     
    greenryda, Nov 26, 2007
    #1
  2. tomato71

    tomato71 Regular member

    Joined:
    Apr 30, 2006
    Messages:
    1,151
    Likes Received:
    0
    Trophy Points:
    46
    moi
    hieno örkkikokoelma :D
    aloitetaan tästä....

    Tee uusi hjt-scannaus Do a System scan only
    Sulje kaikki muut ikkunat ja selaimen.Merkkaa nämä rivit ja paina Fix checked

    O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
    O17 - HKLM\System\CCS\Services\Tcpip\..\{29837807-683E-4FD6-9715-7017B6C7DF8E}: NameServer = 85.255.116.37,85.255.112.85
    O17 - HKLM\System\CCS\Services\Tcpip\..\{3FE51F59-FCBB-4DDF-B966-667F403C993A}: NameServer = 85.255.116.37,85.255.112.85
    O17 - HKLM\System\CCS\Services\Tcpip\..\{8F3C6E77-62D8-402C-BF36-7943FA7B45F6}: NameServer = 85.255.116.37,85.255.112.85
    O17 - HKLM\System\CCS\Services\Tcpip\..\{A350513C-8B01-4CE4-A812-23DCF1798E0F}: NameServer = 85.255.116.37,85.255.112.85
    O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.116.37 85.255.112.85
    O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.116.37 85.255.112.85
    O21 - SSODL: DCOM Server 3339 - {2C1CD3D7-86AC-4068-93BC-A02304BB3339} - C:\WINDOWS\system32\3339_27.dll (file missing)
    O22 - SharedTaskScheduler: DCOM Server 3339 - {2C1CD3D7-86AC-4068-93BC-A02304BB3339} - C:\WINDOWS\system32\3339_27.dll (file missing)

    ja sitten...

    Lataa fixwareout.exe täältä > Täältä
    tai > Täältä
    ja tallenna se työpöydälle. Tuplaklikkaa sitä ja seuraa ohjeita. Klikkaa Next, sitten Install ja varmistu, että "Run fixit" on valittu. Sinun pitää käynnistää kone uudelleen, kun niin käsketään.



    ja sitten...

    Lataa SDFix by AndyManchesta ja tallenna se työpöydällesi.

    Käynnistä koneesi vikasietotilaan ja valitse tavallinen käyttäjätilisi:
    *Käynnistä tietokone
    *Kun kuulet koneen piippaavan, paina F8, kuitenkin ennen Windowsin logon esiintuloa
    *Seuraavaksi pitäisi ilmestyä valikko
    *Valitse valikosta vikasietotila.

    * Kun vikasietotilassa, pura tiedoston SDFix.zip sisältö (SDFix kansio). Työpöydälle ilmestyy sdfix.exe. Tuplakilikkaa sitä, niin tiedosto purkaantuu ja asentaa itsensä siihen levyasemaan, minne on käyttöjärjestelmä on asennettu ja juureen ilmestyy kansio SDFix, ESIM c:\SDFix
    * Avaa SDFix-kansio ja tuplaklikkaa tiedostoa RunThis.bat käynnistääksesi ohjelman.
    * Paina Y käynnistääksesi skriptin.
    * Työkalu puhdistaa troijalaisen palvelut ja tekee myös joitakin korjauksia rekisteriin. Lopuksi se pyytää käynnistämään koneen uudelleen, "Press any key to Reboot".
    * Paina mitä tahansa näppäintä ja kone käynnistyy uudelleen.
    * Käynnistyminen kestää normaalia kauemmin sillä SDFix puhdistaa konetta.
    * Kun kone on käynnistynyt ja työpöytä latautunut, SDFix kertoo että puhdistus on suoritettu, "Finished".
    * Paina sitten mitä tahansa näppäintä sulkeaksesi skriptin ja ladataksesi pikakuvakkeet työpöydälle.
    * Lopuksi avaa SDFix kansio (työpöydällä) ja kopioi & liitä tiedoston Report.txt sisältö viestiketjuusi uuden HijackThis lokin kera.


    ja vielä...

    1. Lataa combofix.exe työpöydällesi jommastakummasta linkistä:
    combofix.exe
    combofix.exe

    2. Tuplaklikkaa combofix.exe tiedostoa ja seuraa ohjeistuksia.
    3. Kun työkalu on valmis, se tuottaa lokin. (C:\ComboFix.txt) Lähetä tämä loki viesti ketjuusi.
    Huom! Älä klikkaile combofixin ikkunaa käytön aikana. Tämä saattaa aiheuttaa ohjelman jumiutumisen.

    Lähetä c:\fixwareout\report.txt + Report.txt (sdfix) + C:\ComboFix.txt + uusi hjt-loki
     
    tomato71, Nov 27, 2007
    #2
  3. greenryda

    greenryda Member

    Joined:
    Nov 28, 2006
    Messages:
    43
    Likes Received:
    0
    Trophy Points:
    16

    Tässä näitä on..

    Fixware:


    Username "HP_Omistaja" - 27.11.2007 18:30:20 [Fixwareout edited 9/01/2007]

    ~~~~~ Prerun check

    HKEY_LOCAL_MACHINE\system\currentcontrolset\services\tcpip\parameters\interfaces\{29837807-683E-4FD6-9715-7017B6C7DF8E}
    "DhcpNameServer"="85.255.116.37,85.255.112.85" <Value cleared.
    HKEY_LOCAL_MACHINE\system\currentcontrolset\services\tcpip\parameters\interfaces\{29E2A72A-C71E-4553-8F75-12F3CAD62710}
    "DhcpNameServer"="85.255.116.37,85.255.112.85" <Value cleared.
    HKEY_LOCAL_MACHINE\system\currentcontrolset\services\tcpip\parameters\interfaces\{A350513C-8B01-4CE4-A812-23DCF1798E0F}
    "DhcpNameServer"="85.255.116.37,85.255.112.85" <Value cleared.

    DNS-tulkintatoiminnon välimuistin tyhjentäminen epäonnistui: Toiminto epäonnistui sitä suoritettaessa.


    System was rebooted successfully.

    ~~~~~ Postrun check
    HKLM\SOFTWARE\~\Winlogon\ "System"=""
    ....
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls "daolnwodi" Deleted
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls "putesprpgd" Deleted
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls "onisacputes" Deleted
    ....
    ~~~~~ Misc files.
    ....
    ~~~~~ Checking for older varients.
    ....

    ~~~~~ Current runs (hklm hkcu "run" Keys Only)
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "hpsysdrv"="c:\\windows\\system\\hpsysdrv.exe"
    "AGRSMMSG"="AGRSMMSG.exe"
    "HPHUPD06"="c:\\Program Files\\HP\\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\\hphupd06.exe"
    "HPHmon06"="C:\\WINDOWS\\system32\\hphmon06.exe"
    "KBD"="C:\\HP\\KBD\\KBD.EXE"
    "Recguard"="C:\\WINDOWS\\SMINST\\RECGUARD.EXE"
    "SSC_UserPrompt"="c:\\Program Files\\Common Files\\Symantec Shared\\Security Center\\UsrPrmpt.exe"
    "ccApp"="\"c:\\Program Files\\Common Files\\Symantec Shared\\ccApp.exe\""
    "PS2"="C:\\WINDOWS\\system32\\ps2.exe"
    "iTunesHelper"="\"C:\\Program Files\\iTunes\\iTunesHelper.exe\""
    "Symantec NetDriver Monitor"="C:\\PROGRA~1\\SYMNET~1\\SNDMon.exe /Consumer"
    "Adobe Photo Downloader"="\"C:\\Program Files\\Adobe\\Photoshop Album Starter Edition\\3.2\\Apps\\apdproxy.exe\""
    "Adobe Reader Speed Launcher"="\"C:\\Program Files\\Adobe\\Reader 8.0\\Reader\\Reader_sl.exe\""
    "YeppStudioAgent"="C:\\Program Files\\Samsung\\SamsungMediaStudio4.1\\SamsungMediaStudioAgent.exe"
    "NvCplDaemon"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvCpl.dll,NvStartup"

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    ....
    Hosts file was reset, If you use a custom hosts file please replace it...
    ~~~~~ End report ~~~~~


    SDFix:


    SDFix: Version 1.115

    Run by HP_Omistaja on ti 27.11.2007 at 18:59

    Microsoft Windows XP [versio 5.1.2600]

    Running From: C:\DOCUME~1\HP_OMI~1\TYPYT~1\SDFix

    Safe Mode:
    Checking Services:

    Name:
    aspi113210

    Path:
    C:\WINDOWS\system32\aspi25469.exe

    aspi113210 - Deleted



    Restoring Windows Registry Values
    Restoring Windows Default Hosts File

    Rebooting...


    Normal Mode:
    Checking Files:

    Trojan Files Found:

    C:\WINDOWS\system32\aspi25469.exe - Deleted
    C:\WINDOWS\system32\kr_done1 - Deleted
    C:\WINDOWS\system32\ws386.ini - Deleted




    Removing Temp Files...

    ADS Check:

    C:\WINDOWS
    No streams found.

    C:\WINDOWS\system32
    No streams found.

    C:\WINDOWS\system32\svchost.exe
    No streams found.

    C:\WINDOWS\system32\ntoskrnl.exe
    No streams found.



    Final Check:

    catchme 0.3.1262.1 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2007-11-27 19:05:21
    Windows 5.1.2600 Service Pack 2 NTFS

    scanning hidden processes ...

    scanning hidden services & system hive ...

    scanning hidden registry entries ...

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\\x90\x2022\x20ac|\xff\xff\xff\xff"\x2022\x20ac|\xfe\xbb\xd3w\2]
    "b049C053C7D38EE4AB9A00CB3B5D2472"="C?\Program Files\Common Files\Microsoft Shared\Web Folders\PUBPLACE.HTT"

    scanning hidden files ...


    scan completed successfully
    hidden processes: 0
    hidden services: 0
    hidden files: 3


    Remaining Services:
    ------------------



    Authorized Application Key Export:

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
    "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:mad:xpsp2res.dll,-22019"
    "C:\\Program Files\\BitTorrent\\bittorrent.exe"="C:\\Program Files\\BitTorrent\\bittorrent.exe:*:Enabled:BitTorrent"
    "C:\\Program Files\\Internet Explorer\\IEXPLORE.EXE"="C:\\Program Files\\Internet Explorer\\IEXPLORE.EXE:*:Enabled:Internet Explorer"
    "C:\\Program Files\\iTunes\\iTunes.exe"="C:\\Program Files\\iTunes\\iTunes.exe:*:Enabled:iTunes"

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
    "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:mad:xpsp2res.dll,-22019"
    "%ProgramFiles%\\iTunes\\iTunes.exe"="%ProgramFiles%\\iTunes\\iTunes.exe:*:enabled:iTunes"

    Remaining Files:
    ---------------

    File Backups: - C:\DOCUME~1\HP_OMI~1\TYPYT~1\SDFix\backups\backups.zip

    Files with Hidden Attributes:

    Sat 3 Jun 2006 213 A.SHR --- "C:\BOOT.BAK"
    Sun 22 Jan 2006 22 A.SH. --- "C:\WINDOWS\SMINST\HPCD.sys"
    Sat 24 Jun 2006 4,348 A.SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
    Mon 12 Sep 2005 4,348 A.SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.key.bak"
    Mon 8 May 2006 28,672 A..H. --- "C:\Documents and Settings\HP_Omistaja\Ty”p”yt„\~WRL2069.tmp"
    Thu 15 Nov 2007 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\28daf2e1f8ef97b772dfdbad9c3d0bd9\BIT3.tmp"
    Sun 21 May 2006 246,784 ...H. --- "C:\Documents and Settings\HP_Omistaja\Application Data\Microsoft\Word\~WRL0495.tmp"
    Sat 24 Jun 2006 4,348 ...H. --- "C:\Documents and Settings\HP_Omistaja\Omat tiedostot\Omat musiikkitiedostot\K„ytt”oikeuden varmuuskopio\drmv1key.bak"
    Sun 20 Aug 2006 20 A..H. --- "C:\Documents and Settings\HP_Omistaja\Omat tiedostot\Omat musiikkitiedostot\K„ytt”oikeuden varmuuskopio\drmv1lic.bak"
    Sat 24 Jun 2006 312 A.SH. --- "C:\Documents and Settings\HP_Omistaja\Omat tiedostot\Omat musiikkitiedostot\K„ytt”oikeuden varmuuskopio\drmv2key.bak"

    Finished!

    Combofix:

    ComboFix 07-11-19.4 - HP_Omistaja 2007-11-27 19:12:19.1 - NTFSx86
    Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1035.18.679 [GMT 2:00]
    Running from: C:\Documents and Settings\HP_Omistaja\Työpöytä\ComboFix.exe
    * Created a new restore point
    .

    (((((((((((((((((((((((((((((((((((((( Muut poistot ))))))))))))))))))))))))))))))))))))))))))))))))))))))))
    .

    D:\Autorun.inf

    .
    ((((( Tiedostot, jotka on luotu seuraavalla aikavälillä: 2007-10-27 to 2007-11-27 )))))))))))))))))
    .

    2007-11-27 18:57 <KANSIO> d-------- C:\WINDOWS\ERUNT
    2007-11-27 00:14 <KANSIO> d-------- C:\Documents and Settings\All Users\Application Data\nView_Profiles
    2007-11-26 22:05 <KANSIO> d-------- C:\Program Files\Trend Micro
    2007-11-24 13:55 <KANSIO> d-------- C:\Program Files\Alwil Software

    .
    (((((((((((((((((((((((((((((((((((( Find3M-raportti ))))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2007-11-27 16:24 --------- d-----w C:\Program Files\Common Files\Symantec Shared
    2007-11-26 20:08 --------- d-----w C:\Program Files\MagicDisc
    2007-11-24 11:46 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
    2007-11-24 11:44 --------- d--h--w C:\Program Files\Zero G Registry
    2007-11-24 11:44 --------- d-----w C:\Documents and Settings\All Users\Application Data\Downloaded Installations
    2007-11-24 11:42 --------- d-----w C:\Program Files\BitTorrent
    2007-11-22 20:12 --------- d-----w C:\Program Files\Norton Internet Security
    2007-11-19 17:32 --------- d-----w C:\Program Files\DC++
    2007-11-05 10:54 --------- d-----w C:\Program Files\Java
    2007-10-25 16:56 8,458,752 ----a-w C:\WINDOWS\system32\dllcache\shell32.dll
    2007-09-13 17:32 65,024 ----a-w C:\WINDOWS\IFinst26.exe
    2006-09-11 17:10 29,280 ----a-w C:\Documents and Settings\HP_Omistaja\Application Data\GDIPFONTCACHEV1.DAT
    2006-01-22 00:33 22 --sha-w C:\WINDOWS\SMINST\HPCD.sys
    .

    (((((((((((((((((((((((((((((( Rekisterin käynnistyskohteet )))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Huom* Tyhjiä arvoja ja laillisia oletusarvoja ei näytetä

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "hpsysdrv"="c:\windows\system\hpsysdrv.exe" [1998-05-07 18:04]
    "AGRSMMSG"="AGRSMMSG.exe" [2004-06-29 19:06 C:\WINDOWS\AGRSMMSG.exe]
    "HPHUPD06"="c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe" [2004-06-07 21:34]
    "HPHmon06"="C:\WINDOWS\system32\hphmon06.exe" [2004-06-07 21:29]
    "KBD"="C:\HP\KBD\KBD.EXE" [2005-02-03 00:44]
    "Recguard"="C:\WINDOWS\SMINST\RECGUARD.EXE" [2004-04-14 22:43]
    "SSC_UserPrompt"="c:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe" [2004-11-08 11:06]
    "ccApp"="c:\Program Files\Common Files\Symantec Shared\ccApp.exe" [2007-02-26 11:11]
    "PS2"="C:\WINDOWS\system32\ps2.exe" []
    "iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2006-09-12 00:58]
    "Symantec NetDriver Monitor"="C:\PROGRA~1\SYMNET~1\SNDMon.exe" [2007-09-24 15:33]
    "Adobe Photo Downloader"="C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe" [2007-03-09 10:09]
    "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-10-10 19:51]
    "YeppStudioAgent"="C:\Program Files\Samsung\SamsungMediaStudio4.1\SamsungMediaStudioAgent.exe" []
    "NvCplDaemon"="RUNDLL32.exe" [2004-09-15 14:00 C:\WINDOWS\system32\rundll32.exe]

    C:\Documents and Settings\All Users\K„ynnist„-valikko\Ohjelmat\K„ynnistys\
    Adobe Gamma Loader.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2006-04-17 07:19:13]
    HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe [2004-11-05 02:28:24]
    Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2001-02-13 11:01:04]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE]
    2004-09-15 14:00 15360 --a------ C:\WINDOWS\system32\ctfmon.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LSBWatcher]
    2004-10-14 22:54 253952 --a------ c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
    C:\Program Files\MSN Messenger\msnmsgr.exe /background

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
    2001-07-09 10:50 155648 --a------ C:\WINDOWS\system32\NeroCheck.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
    RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
    nwiz.exe /installquiet /keeploaded /nodetect

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
    C:\Program Files\QuickTime\qttask.exe -atboottime

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
    2007-09-25 01:11 132496 --a------ C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe

    R2 Automattinen LiveUpdate-ajastustoiminto;Automattinen LiveUpdate-ajastustoiminto;"C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe"
    R3 netrcacm;RCA USB Digital Cable Modem Driver;C:\WINDOWS\system32\DRIVERS\netrcacm.sys
    S3 WN5401;Liteon Wireless LAN PCI 802.11 a/b/g adapter WN5401A;C:\WINDOWS\system32\DRIVERS\wn5401.sys

    *Newly Created Service* - CATCHME

    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{016926EC-A7C2-EB46-0200-040003000402}]
    C:\WINDOWS\system32\RunDLL32.exe
    .
    'Ajoitetut tehtävät'-kansion sisältö
    "2007-11-23 20:31:01 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
    - C:\Program Files\Apple Software Update\SoftwareUpdate.exe
    "2007-11-27 01:00:00 C:\WINDOWS\Tasks\Norton AntiVirus - Tarkista tietokone - HP_Omistaja.job"
    - c:\PROGRA~1\NORTON~1\NORTON~1\NAVW32.EXEh/task:
    "2007-11-27 17:13:00 C:\WINDOWS\Tasks\Symantec NetDetect.job"
    - C:\Program Files\Symantec\LiveUpdate\NDetect.exe
    .
    **************************************************************************

    catchme 0.3.1262 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2007-11-27 19:13:23
    Windows 5.1.2600 Service Pack 2 NTFS

    scanning hidden processes ...

    scanning hidden autostart entries ...

    scanning hidden files ...

    scan completed successfully
    hidden files: 0

    **************************************************************************
    .
    Completion time: 2007-11-27 19:13:51
    .
    --- E O F ---

    Hjt:

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 19:17:23, on 27.11.2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    c:\Program Files\Common Files\Symantec Shared\ccProxy.exe
    c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    c:\Program Files\Norton Internet Security\ISSVC.exe
    c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
    c:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
    c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
    C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
    C:\WINDOWS\system32\nvsvc32.exe
    C:\WINDOWS\system32\svchost.exe
    c:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
    C:\windows\system\hpsysdrv.exe
    C:\WINDOWS\AGRSMMSG.exe
    C:\WINDOWS\system32\hphmon06.exe
    C:\HP\KBD\KBD.EXE
    C:\Program Files\Common Files\Symantec Shared\ccApp.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\WINDOWS\explorer.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FI_FI&c=Q305&bd=pavilion&pf=desktop
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FI_FI&c=Q305&bd=pavilion&pf=desktop
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FI_FI&c=Q305&bd=pavilion&pf=desktop
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FI_FI&c=Q305&bd=pavilion&pf=desktop
    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.symantec.com/techsupp/se...ish&product=NIS&version=8.0.5.14&build=RETAIL
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: HP-näkymä - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
    O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
    O4 - HKLM\..\Run: [HPHUPD06] c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
    O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
    O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
    O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
    O4 - HKLM\..\Run: [SSC_UserPrompt] c:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
    O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"
    O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
    O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe"
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [YeppStudioAgent] C:\Program Files\Samsung\SamsungMediaStudio4.1\SamsungMediaStudioAgent.exe
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Paikallinen palve')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Verkkopalve')
    O4 - .DEFAULT User Startup: AutoTBar.exe (User 'Default user')
    O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O9 - Extra button: Yhteysohje - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
    O9 - Extra 'Tools' menuitem: Yhteysohje - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra button: Yhteysohje - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm (HKCU)
    O9 - Extra 'Tools' menuitem: Yhteysohje - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm (HKCU)
    O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - http://www.symantec.com/techsupp/asa/ctrl/LSSupCtl.cab
    O16 - DPF: {22A19EED-49CF-4BDE-8C6F-FD60B54B655D} (ie_api Class) - https://esignature.sonera.com/exec/xwfm/public/EllosYksityislaina/fi/Ellos_Yksityislaina/a_hakija/1_0_0/PKISignatureAPI/plugin-install/library/binary/win32/dssClient.cab
    O16 - DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} (Groove Control) - http://download.shockwave.com/pub/otoy/OTOYAX.cab
    O16 - DPF: {83AFB5CA-ED35-11D4-A452-0080C8D85045} (GameDesire Poker Games) - http://67.15.101.3/g_bin/eng/poker_2_0_0_43.cab
    O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} - http://www.symantec.com/techsupp/asa/ctrl/SymAData.cab
    O23 - Service: Automattinen LiveUpdate-ajastustoiminto - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
    O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccProxy.exe
    O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
    O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: ISSvc (ISSVC) - Symantec Corporation - c:\Program Files\Norton Internet Security\ISSVC.exe
    O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~2.EXE
    O23 - Service: Norton AntiVirus Auto-Protect -palvelu (navapsvc) - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
    O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
    O23 - Service: SAVScan - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
    O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
    O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
    O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
    O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe

    --
    End of file - 9308 bytes
     
    greenryda, Nov 27, 2007
    #3
  4. janinik

    janinik Member

    Joined:
    Nov 27, 2007
    Messages:
    1
    Likes Received:
    0
    Trophy Points:
    11
    Tämmönen logi tuli..

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 19:25:32, on 27.11.2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Ahead\InCD\InCDsrv.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\oodag.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\WINDOWS\system32\WgaTray.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\htpatch.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\Program Files\CyberLink DVD Solution\PowerDVD\PDVDServ.exe
    C:\Program Files\Ahead\InCD\InCD.exe
    C:\Program Files\Common Files\Real\Update_OB\realsched.exe
    C:\Program Files\Picasa2\PicasaMediaDetector.exe
    C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
    C:\Program Files\Google\Gmail Notifier\gnotify.exe
    C:\WINDOWS\system32\RunDll32.exe
    C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
    C:\Program Files\Labtec Wireless Desktop\MagicKey.exe
    C:\Program Files\Labtec Wireless Desktop\MulMouse.exe
    C:\WINDOWS\system32\lxcrcoms.exe
    C:\Program Files\Labtec Wireless Desktop\OSD.EXE
    C:\Program Files\MSN Messenger\usnsvc.exe
    C:\Program Files\Grapevine Buzzz\buzzz.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    O2 - BHO: Adobe PDF Reader -linkkiavustaja - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: Lexmark Työkalurivi - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll (file missing)
    O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.3.28.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O3 - Toolbar: Lexmark Työkalurivi - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll (file missing)
    O4 - HKLM\..\Run: [HTpatch] C:\WINDOWS\htpatch.exe
    O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
    O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
    O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink DVD Solution\PowerDVD\PDVDServ.exe"
    O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [LGODDFU] "C:\Program Files\lg_fwupdate\fwupdate.exe" blrun
    O4 - HKLM\..\Run: [LXCRCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCRtime.dll,_RunDLLEntry@16
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
    O4 - HKLM\..\Run: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] C:\Program Files\Google\Gmail Notifier\gnotify.exe
    O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
    O4 - HKCU\..\Run: [Funk Logo] C:\DOCUME~1\JANINI~1\APPLIC~1\CLOSEF~1\Curb Once.exe
    O4 - HKCU\..\Run: [KCeasy] C:\Program Files\KCeasy\KCeasy.exe /hide
    O4 - HKCU\..\Run: [Performance Center] C:\Program Files\Ascentive\Performance Center\APCMain.exe -m
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Paikallinen palve')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Verkkopalve')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
    O4 - Global Startup: Enable Labtec Wireless Desktop.lnk = C:\Program Files\Labtec Wireless Desktop\MagicKey.exe
    O4 - Global Startup: Shortcut to buzzz.exe.LNK = C:\Program Files\Grapevine Buzzz\buzzz.exe
    O8 - Extra context menu item: Download all links using BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
    O8 - Extra context menu item: Download all videos using BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
    O8 - Extra context menu item: Download link using &BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
    O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
    O9 - Extra button: Oheistiedot - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Ahead\InCD\InCDsrv.exe
    O23 - Service: lxcr_device - - C:\WINDOWS\system32\lxcrcoms.exe
    O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe
    O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
    O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\Sptisrv.exe

    --
    End of file - 8160 bytes
     
    janinik, Nov 27, 2007
    #4
  5. tomato71

    tomato71 Regular member

    Joined:
    Apr 30, 2006
    Messages:
    1,151
    Likes Received:
    0
    Trophy Points:
    46
    ja sitten...


    Sitten käytä Windowsin "Etsi" toimintoa.
    Käynnistä-valikko "Etsi"
    ->Lisävaihtoehdot
    ->Raksi seuraaviin:
    -Etsi järjestelmäkansioista
    -Etsi piilotiedostoista ja -kansioista
    -Etsi alikansioista
    ->Hakusanaksi C:\WINDOWS\system32\3339_27.dll
    Poista jos löytyy


    ja sitten...

    Varmistu ensin, että piilotiedostot on näkyvillä.

    Piilotiedostot näkyviin

    Mene --> tänne

    Kun sivu on latautunut, klikkaa Selaa-nappulaa ja etsi seuraava tiedosto ja paina Submit.

    C:\WINDOWS\IFinst26.exe

    Lähetä skannin tulokset seuraavassa viestissäsi.

    Jos Jotti on ruuhkainen, yritä samaa Virustotalissa: http://www.virustotal.com/flash/index_en.html




    Tallenna nämä ohjeet tekstitiedostoon tai tulosta nämä, muuten et pääse niihin käsiksi vikasietotilasta

    Lataa AVG Anti-Spyware 7.5 ja tallenna ohjelma työpöydällesi.
    *Kun olet ladannut ohjelman, kaksoisklikkaa asennuohjelman pikakuvaketta työpöydälläsi, asennus alkaa.
    *Asennuksen jälkeen täytyy ohjelma käynnistää ja sen tunnisteet päivittää.
    *Käynnistä AVG Anti-Spyware.
    *Klikkaa "Update" kuvaketta päävalikossa. Sen jälkeen klikkaa "Update now" painiketta.
    *Sitten klikkaa "Start Update" kuvaketta jolloin päivitys alkaa.

    *Kun päivitykset on ladattu, klikkaa "Scanner" kuvaketta ikkunan ylälaidassa. Valitse sitten "Settings" välilehti.
    *Kun "Settings" valikko on auennut, klikkaa "Recommended actions" ja sitten valitse "Quarantine".
    *Sitten "Reports" valikon alta:
    *Ota täppi pois kohdasta"Automatically generate report after every scan"
    *Ota täppi pois kohdasta"Only if threats were found

    *Sitten klikkaa "Shield" kuvaketta ikkunan ylälaidassa
    *"Resident shield is", muuta tila active:sta inactive:ksi
    *Sulje ohjelma, ÄLÄ skannaa vielä.
    Käynnistä koneesi vikasietotilaan, Ohje!



    HUOM! Älä käytä muita ohjelmia AVG skannauksen aikana, tämä saattaa häiritä skannausta.
    *Kun vikasietotilassa, käynnistä AVG Anti-Spyware.
    *Klikkaa "Scanner" kuvaketta ikkunan ylälaidassa ja valitse "Scan" välilehti. Sitten klikkaa "Complete System Scan".
    *AVG aloittaa nyt tietokoneen skannaamisen, ole kärsivällinen sillä skannaus vie aikaa.

    Kun skannaus on valmis:
    TÄRKEÄÄ : Älä klikkaa "Save Scan Report" ennen kuin klikkaat "Apply all Actions"
    *Varmistu, että Set all elements to: näyttää Quarantine (1), jos ei, klikkaa linkkiä ja valitse Quarantine popup-valikosta.
    *Sinulta kysytään mitä tehdä jos infektioita löytyi, valitse silloin "Apply all actions"
    [​IMG]
    *Sitten klikkaa "Reports" kuvaketta ohjelma yläosasta.
    *Klikkaa "Save report as" painiketta ikkunan vasemmassa alalaidassa ja tallenna raportti työpöydälle.
    *Sulje ohjelma, käynnistä kone normaalisti ja lähetä AVG:n raportti viestikejuusi.

    Lähetä avg-loki ja virustotal/jotti tulos + uusi hjt-loki
     
    tomato71, Nov 27, 2007
    #5
  6. greenryda

    greenryda Member

    Joined:
    Nov 28, 2006
    Messages:
    43
    Likes Received:
    0
    Trophy Points:
    16

    Oliko nää hjeet mulle vai tuolle janinik:lle???
     
    greenryda, Nov 29, 2007
    #6
  7. tomato71

    tomato71 Regular member

    Joined:
    Apr 30, 2006
    Messages:
    1,151
    Likes Received:
    0
    Trophy Points:
    46
    ohjeet oli greenrydalle
     
    tomato71, Nov 29, 2007
    #7
  8. greenryda

    greenryda Member

    Joined:
    Nov 28, 2006
    Messages:
    43
    Likes Received:
    0
    Trophy Points:
    16

    Meinasitko tätä:


    Scanner results
    Scan taken on 01 Dec 2007 17:09:13 (GMT)
    A-Squared
    Found nothing
    AntiVir
    Found nothing
    ArcaVir
    Found nothing
    Avast
    Found nothing
    AVG Antivirus
    Found nothing
    BitDefender
    Found nothing
    ClamAV
    Found nothing
    CPsecure
    Found nothing
    Dr.Web
    Found nothing
    F-Prot Antivirus
    Found nothing
    F-Secure Anti-Virus
    Found nothing
    Fortinet
    Found nothing
    Ikarus
    Found nothing
    Kaspersky Anti-Virus
    Found nothing
    NOD32
    Found nothing
    Norman Virus Control
    Found nothing
    Panda Antivirus
    Found nothing
    Rising Antivirus
    Found nothing
    Sophos Antivirus
    Found nothing
    VirusBuster
    Found nothing
    VBA32
    Found nothing
     
    greenryda, Dec 1, 2007
    #8
  9. tomato71

    tomato71 Regular member

    Joined:
    Apr 30, 2006
    Messages:
    1,151
    Likes Received:
    0
    Trophy Points:
    46
    jep,se + nämä muut jutut
     
    tomato71, Dec 1, 2007
    #9
  10. greenryda

    greenryda Member

    Joined:
    Nov 28, 2006
    Messages:
    43
    Likes Received:
    0
    Trophy Points:
    16


    Täs ois:


    ---------------------------------------------------------
    AVG Anti-Spyware - Scan Report
    ---------------------------------------------------------

    + Created at: 21:38:44 1.12.2007

    + Scan result:



    :mozilla.772:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned.
    :mozilla.773:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned.
    :mozilla.390:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.433:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.592:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.662:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.684:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.687:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.74:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.75:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.76:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.77:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.782:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.78:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.79:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.80:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.81:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.82:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.83:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.84:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.85:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.86:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.87:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.88:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.89:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@cbs.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
    C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
    C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@nordea.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
    C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@sonyeurope.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.263:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
    :mozilla.264:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
    :mozilla.265:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
    :mozilla.861:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
    C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@adbrite[2].txt -> TrackingCookie.Adbrite : Cleaned.
    C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@ads.adbrite[2].txt -> TrackingCookie.Adbrite : Cleaned.
    :mozilla.616:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Adobe : Cleaned.
    :mozilla.617:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Adobe : Cleaned.
    C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@www.adobe[1].txt -> TrackingCookie.Adobe : Cleaned.
    C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@www.adobe[2].txt -> TrackingCookie.Adobe : Cleaned.
    :mozilla.526:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
    :mozilla.527:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
    :mozilla.528:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
    :mozilla.529:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
    :mozilla.530:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
    :mozilla.531:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
    :mozilla.532:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
    C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@adrevolver[3].txt -> TrackingCookie.Adrevolver : Cleaned.
    :mozilla.113:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.
    :mozilla.114:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.
    C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@adtech[2].txt -> TrackingCookie.Adtech : Cleaned.
    :mozilla.221:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
    :mozilla.222:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
    :mozilla.223:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
    :mozilla.224:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
    :mozilla.225:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
    C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@advertising[1].txt -> TrackingCookie.Advertising : Cleaned.
    :mozilla.555:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Adviva : Cleaned.
    :mozilla.199:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
    C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned.
    :mozilla.298:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
    :mozilla.299:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
    :mozilla.301:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
    C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@burstnet[1].txt -> TrackingCookie.Burstnet : Cleaned.
    C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@www.burstnet[1].txt -> TrackingCookie.Burstnet : Cleaned.
    :mozilla.289:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
    :mozilla.290:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
    :mozilla.291:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
    :mozilla.292:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
    :mozilla.293:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
    :mozilla.294:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
    :mozilla.295:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
    :mozilla.788:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Clickbank : Cleaned.
    C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@connextra[2].txt -> TrackingCookie.Connextra : Cleaned.
    :mozilla.101:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
    C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned.
    :mozilla.252:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Etracker : Cleaned.
    C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@www.etracker[1].txt -> TrackingCookie.Etracker : Cleaned.
    :mozilla.554:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned.
    C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@a.as-us.falkag[2].txt -> TrackingCookie.Falkag : Cleaned.
    :mozilla.271:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
    :mozilla.272:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
    :mozilla.273:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
    :mozilla.274:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
    C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@fastclick[2].txt -> TrackingCookie.Fastclick : Cleaned.
    :mozilla.484:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
    :mozilla.511:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
    :mozilla.520:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
    :mozilla.100:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
    :mozilla.597:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
    :mozilla.608:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
    :mozilla.656:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
    :mozilla.657:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
    :mozilla.660:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
    :mozilla.661:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
    :mozilla.702:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
    :mozilla.712:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
    :mozilla.778:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
    C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@ehg-dig.hitbox[2].txt -> TrackingCookie.Hitbox : Cleaned.
    C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@ehg-talentumoyi.hitbox[1].txt -> TrackingCookie.Hitbox : Cleaned.
    C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@hitbox[1].txt -> TrackingCookie.Hitbox : Cleaned.
    :mozilla.703:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Imrworldwide : Cleaned.
    :mozilla.704:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Imrworldwide : Cleaned.
    C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@searchportal.information[2].txt -> TrackingCookie.Information : Cleaned.
    :mozilla.355:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Intelli-direct : Cleaned.
    :mozilla.581:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
    :mozilla.583:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
    C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@server.iad.liveperson[1].txt -> TrackingCookie.Liveperson : Cleaned.
    :mozilla.886:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Masterstats : Cleaned.
    :mozilla.590:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.
    C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@mediaplex[1].txt -> TrackingCookie.Mediaplex : Cleaned.
    C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@search.msn[1].txt -> TrackingCookie.Msn : Cleaned.
    C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@search.msn[2].txt -> TrackingCookie.Msn : Cleaned.
    C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@navrcholu[2].txt -> TrackingCookie.Navrcholu : Cleaned.
    C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@navrcholu[3].txt -> TrackingCookie.Navrcholu : Cleaned.
    :mozilla.7:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Netflame : Cleaned.
    :mozilla.556:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Onestat : Cleaned.
    :mozilla.559:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Onestat : Cleaned.
    :mozilla.560:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Onestat : Cleaned.
    :mozilla.356:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Overture : Cleaned.
    :mozilla.357:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Overture : Cleaned.
    :mozilla.358:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Overture : Cleaned.
    :mozilla.735:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
    :mozilla.736:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
    :mozilla.737:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
    :mozilla.738:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
    :mozilla.739:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
    :mozilla.740:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
    :mozilla.741:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
    :mozilla.742:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
    :mozilla.743:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
    :mozilla.619:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
    :mozilla.620:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
    C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@questionmarket[1].txt -> TrackingCookie.Questionmarket : Cleaned.
    C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@real[1].txt -> TrackingCookie.Real : Cleaned.
    C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@realmedia[1].txt -> TrackingCookie.Realmedia : Cleaned.
    :mozilla.341:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
    :mozilla.342:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
    :mozilla.345:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
    :mozilla.346:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
    :mozilla.347:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
    :mozilla.348:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
    :mozilla.349:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
    :mozilla.351:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
    :mozilla.352:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
    :mozilla.353:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
    :mozilla.813:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
    C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@revsci[2].txt -> TrackingCookie.Revsci : Cleaned.
    C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@revsci[3].txt -> TrackingCookie.Revsci : Cleaned.
    :mozilla.44:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
    :mozilla.45:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
    :mozilla.46:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
    :mozilla.47:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
    :mozilla.48:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
    :mozilla.49:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
    :mozilla.50:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
    C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@bs.serving-sys[1].txt -> TrackingCookie.Serving-sys : Cleaned.
    C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@serving-sys[2].txt -> TrackingCookie.Serving-sys : Cleaned.
    :mozilla.8:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Statistik-gallup : Cleaned.
    C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@statistik-gallup[1].txt -> TrackingCookie.Statistik-gallup : Cleaned.
    C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@statistik-gallup[2].txt -> TrackingCookie.Statistik-gallup : Cleaned.
    :mozilla.695:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
    :mozilla.696:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
    :mozilla.697:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
    C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@tacoda[2].txt -> TrackingCookie.Tacoda : Cleaned.
    :mozilla.105:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
    :mozilla.106:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
    :mozilla.107:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
    :mozilla.296:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
    C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : Cleaned.
    :mozilla.653:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Valueclick : Cleaned.
    C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@valueclick[1].txt -> TrackingCookie.Valueclick : Cleaned.
    C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@m.webtrends[2].txt -> TrackingCookie.Webtrends : Cleaned.
    :mozilla.621:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned.
    :mozilla.622:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned.
    :mozilla.377:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
    :mozilla.378:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
    :mozilla.379:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
    :mozilla.380:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
    :mozilla.381:C:\Documents and Settings\HP_Omistaja\Application Data\Mozilla\Firefox\Profiles\8jwai1fa.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
    C:\Documents and Settings\HP_Omistaja\Cookies\hp_omistaja@ad.yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Cleaned.


    ::Report end



    ja hjt:


    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 21:44:01, on 1.12.2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\Explorer.EXE
    c:\Program Files\Common Files\Symantec Shared\ccProxy.exe
    c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    c:\Program Files\Norton Internet Security\ISSVC.exe
    c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
    c:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
    c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
    C:\WINDOWS\system32\nvsvc32.exe
    C:\WINDOWS\system32\svchost.exe
    c:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
    C:\windows\system\hpsysdrv.exe
    C:\WINDOWS\AGRSMMSG.exe
    C:\WINDOWS\system32\hphmon06.exe
    C:\HP\KBD\KBD.EXE
    C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
    C:\Program Files\Common Files\Symantec Shared\ccApp.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe
    C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FI_FI&c=Q305&bd=pavilion&pf=desktop
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://finnish.toggle.com/index.php?rvs=hompag
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FI_FI&c=Q305&bd=pavilion&pf=desktop
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FI_FI&c=Q305&bd=pavilion&pf=desktop
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=FI_FI&c=Q305&bd=pavilion&pf=desktop
    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.symantec.com/techsupp/se...ish&product=NIS&version=8.0.5.14&build=RETAIL
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: HP-näkymä - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - c:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
    O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
    O4 - HKLM\..\Run: [HPHUPD06] c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
    O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
    O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
    O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
    O4 - HKLM\..\Run: [SSC_UserPrompt] c:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
    O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"
    O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
    O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe"
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [YeppStudioAgent] C:\Program Files\Samsung\SamsungMediaStudio4.1\SamsungMediaStudioAgent.exe
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [SsAAD.exe] C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Paikallinen palve')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Verkkopalve')
    O4 - .DEFAULT User Startup: AutoTBar.exe (User 'Default user')
    O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
    O9 - Extra button: Yhteysohje - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
    O9 - Extra 'Tools' menuitem: Yhteysohje - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra button: Yhteysohje - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm (HKCU)
    O9 - Extra 'Tools' menuitem: Yhteysohje - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm (HKCU)
    O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - http://www.symantec.com/techsupp/asa/ctrl/LSSupCtl.cab
    O16 - DPF: {22A19EED-49CF-4BDE-8C6F-FD60B54B655D} (ie_api Class) - https://esignature.sonera.com/exec/xwfm/public/EllosYksityislaina/fi/Ellos_Yksityislaina/a_hakija/1_0_0/PKISignatureAPI/plugin-install/library/binary/win32/dssClient.cab
    O16 - DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} (Groove Control) - http://download.shockwave.com/pub/otoy/OTOYAX.cab
    O16 - DPF: {83AFB5CA-ED35-11D4-A452-0080C8D85045} (GameDesire Poker Games) - http://67.15.101.3/g_bin/eng/poker_2_0_0_43.cab
    O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} - http://www.symantec.com/techsupp/asa/ctrl/SymAData.cab
    O23 - Service: Automattinen LiveUpdate-ajastustoiminto - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
    O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccProxy.exe
    O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
    O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: ISSvc (ISSVC) - Symantec Corporation - c:\Program Files\Norton Internet Security\ISSVC.exe
    O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~2.EXE
    O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
    O23 - Service: Norton AntiVirus Auto-Protect -palvelu (navapsvc) - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
    O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
    O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
    O23 - Service: SAVScan - Symantec Corporation - c:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
    O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
    O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
    O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
    O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
    O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe
    O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe

    --
    End of file - 10544 bytes
     
    greenryda, Dec 1, 2007
    #10
  11. tomato71

    tomato71 Regular member

    Joined:
    Apr 30, 2006
    Messages:
    1,151
    Likes Received:
    0
    Trophy Points:
    46
    moi
    löytykö/poistitko tämän C:\WINDOWS\system32\3339_27.dll

    avg ei löytänyt ku evästeitä :(

    Skannaa koneesi Kaspersky Online Skannerilla
    Käytä Internet Explorer
    Sinulta kysytään sallitko ActiveX -komponentin asentamisen Kasperskyltä, klikkaa Kyllä.
    • Ohjelma käynnistyy ja aloittaa viimeisimpien tunnistetiedostojen lataamisen.
    • Kun skanneri on asennettu ja tunnistetiedot ladattu, klikkaa Next.
    • Klikkaa nyt asetuksia, Scan Settings
    • Tarkista asetuksista, että seuraavat ovat valittuina:

      o Scan using the following Anti-Virus database:

      + Extended (Jos valittavissa, muuten valitse Standard)

      o Scan Options:

      + Scan Archives
      + Scan Mail Bases
    • Klikkaa OK
    • Nyt valitse "select a target to scan" otsikon alta Oma Tietokone, My Computer
    • Skannaus vie aikaa, joten ole kärsivällinen. Kun skannaus on valmis saat ilmoituksen, jos koneesi on saastunut.
    • Klikkaa nyt Save as Text-painiketta.
    • Tallenna tiedosto työpöydällesi.
    • Kopioi ja Liitä tiedoston sisältö seuraavaan vastaukseesi
     
    tomato71, Dec 1, 2007
    #11
  12. greenryda

    greenryda Member

    Joined:
    Nov 28, 2006
    Messages:
    43
    Likes Received:
    0
    Trophy Points:
    16


    Moro. en löytäny tätä C:\WINDOWS\system32\3339_27.dll....
     
    greenryda, Dec 6, 2007
    #12
  13. tomato71

    tomato71 Regular member

    Joined:
    Apr 30, 2006
    Messages:
    1,151
    Likes Received:
    0
    Trophy Points:
    46
    ok
    skannaa kasperskyn kanssa ohjeitten mukaisesti
     
    tomato71, Dec 6, 2007
    #13
  14. greenryda

    greenryda Member

    Joined:
    Nov 28, 2006
    Messages:
    43
    Likes Received:
    0
    Trophy Points:
    16


    Tämmöst löyty:

    -------------------------------------------------------------------------------
    KASPERSKY ONLINE SCANNER REPORT
    Thursday, December 06, 2007 8:15:03 PM
    Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)
    Kaspersky Online Scanner version: 5.0.98.0
    Kaspersky Anti-Virus database last update: 6/12/2007
    Kaspersky Anti-Virus database records: 474036
    -------------------------------------------------------------------------------

    Scan Settings:
    Scan using the following antivirus database: extended
    Scan Archives: true
    Scan Mail Bases: true

    Scan Target - My Computer:
    C:\
    D:\
    E:\
    F:\
    H:\
    I:\
    J:\
    K:\

    Scan Statistics:
    Total number of scanned objects: 83519
    Number of viruses found: 24
    Number of infected objects: 110
    Number of suspicious objects: 0
    Duration of the scan process: 01:18:26

    Infected Object Name / Virus Name / Last Action
    C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\user.dmp Object is locked skipped
    C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped
    C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped
    C:\Documents and Settings\All Users\Application Data\Symantec\Common Client\Confid.log Object is locked skipped
    C:\Documents and Settings\All Users\Application Data\Symantec\Common Client\Content.log Object is locked skipped
    C:\Documents and Settings\All Users\Application Data\Symantec\Common Client\Privacy.log Object is locked skipped
    C:\Documents and Settings\All Users\Application Data\Symantec\Common Client\Restrict.log Object is locked skipped
    C:\Documents and Settings\All Users\Application Data\Symantec\Common Client\settings.dat Object is locked skipped
    C:\Documents and Settings\All Users\Application Data\Symantec\Common Client\WebHist.log Object is locked skipped
    C:\Documents and Settings\All Users\Application Data\Symantec\LiveUpdate\2007-12-06_Log.ALUSchedulerSvc.LiveUpdate Object is locked skipped
    C:\Documents and Settings\HP_Omistaja\Cookies\index.dat Object is locked skipped
    C:\Documents and Settings\HP_Omistaja\Local Settings\Application Data\Adobe\Acrobat\8.0\Updater\updater.log Object is locked skipped
    C:\Documents and Settings\HP_Omistaja\Local Settings\Application Data\Adobe\Updater5\aumLib.log Object is locked skipped
    C:\Documents and Settings\HP_Omistaja\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
    C:\Documents and Settings\HP_Omistaja\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
    C:\Documents and Settings\HP_Omistaja\Local Settings\Sivuhistoria\History.IE5\index.dat Object is locked skipped
    C:\Documents and Settings\HP_Omistaja\Local Settings\Temp\hpodvd09.log Object is locked skipped
    C:\Documents and Settings\HP_Omistaja\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
    C:\Documents and Settings\HP_Omistaja\NTUSER.DAT Object is locked skipped
    C:\Documents and Settings\HP_Omistaja\ntuser.dat.LOG Object is locked skipped
    C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
    C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
    C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
    C:\Documents and Settings\LocalService\Local Settings\Sivuhistoria\History.IE5\index.dat Object is locked skipped
    C:\Documents and Settings\LocalService\Local Settings\Temp\Cookies\index.dat Object is locked skipped
    C:\Documents and Settings\LocalService\Local Settings\Temp\Sivuhistoria\History.IE5\index.dat Object is locked skipped
    C:\Documents and Settings\LocalService\Local Settings\Temp\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
    C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
    C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
    C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
    C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
    C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
    C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
    C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
    C:\Program Files\Common Files\Symantec Shared\AntiSpam\Log\Spam.log Object is locked skipped
    C:\Program Files\Common Files\Symantec Shared\SNDALRT.log Object is locked skipped
    C:\Program Files\Common Files\Symantec Shared\SNDCON.log Object is locked skipped
    C:\Program Files\Common Files\Symantec Shared\SNDDBG.log Object is locked skipped
    C:\Program Files\Common Files\Symantec Shared\SNDFW.log Object is locked skipped
    C:\Program Files\Common Files\Symantec Shared\SNDIDS.log Object is locked skipped
    C:\Program Files\Common Files\Symantec Shared\SNDSYS.log Object is locked skipped
    C:\Program Files\Common Files\Symantec Shared\SPPolicy.log Object is locked skipped
    C:\Program Files\Common Files\Symantec Shared\SPStart.log Object is locked skipped
    C:\Program Files\Common Files\Symantec Shared\SPStop.log Object is locked skipped
    C:\Program Files\MSN Messenger\riched20.dll Infected: not-a-virus:AdTool.Win32.MyWebSearch skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\AVApp.log Object is locked skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\AVError.log Object is locked skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\AVVirus.log Object is locked skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\03727B0D.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\03E10E93.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\045D4A0A.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\04AE63B0.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\050D2548.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\056512E7.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\05C4547F.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\062D140C.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\068B55A4.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\07592AC1.scr Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\07AE6E64.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\080D2FFC.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\086B7193.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\090F24E0.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\09913450.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0A420F8E.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0A583575.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0A795951.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0ACE3028.tmp Infected: not-a-virus:AdWare.Win32.180Solutions.as skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0AD733A1.tmp Infected: Trojan-Downloader.Win32.Adload.jm skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0ADB44E5.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0B472E6F.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0B984815.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0BF135B4.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0C766F20.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0CCB32C3.pif Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0D242062.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0D7C0E01.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0DB02DC7.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0DF1757F.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0E2C693F.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0E9E26C1.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0F5C29F1.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0FC13F81.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\105420DF.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\10991294.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\10DA5A4C.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\114C17CE.pif Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\11975D7C.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\12067101.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\12653299.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\12E8420A.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\13605385.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\139B4744.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\14242AAD.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\14764453.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\14B4620F.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\14FF27BC.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\15406F74.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\15750F3B.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\15DA24CB.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\17063B81.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\18432424.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\188B0F44.bs Infected: not-virus:Hoax.Win32.Renos.fi skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\188B0F44.exe Infected: not-virus:Hoax.Win32.Renos.fi skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\18A2352B.exe Infected: Trojan-Clicker.Win32.Costrat.m skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\18A50FB8.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\18ED2B69.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\195240FA.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\199A5CAB.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1A201618.scr Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1A6507CC.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1AB04D79.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1AEE6B35.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1B6028B7.scr Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1BC86844.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1C3B25C7.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1CB00D45.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1D0C24E1.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1D5D3E87.scr Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1DCC520D.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1E1143C1.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1E945331.pif Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1EB040C3.tmp Infected: Worm.Win32.VB.an skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1EEF6ACD.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1F964815.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\1FE10DC3.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\20437957.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\20B860D6.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\20F02A99.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\217F61FA.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\21DE2392.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\22613302.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\22A27ABB.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\25452247.exe Infected: Trojan-Clicker.Win32.Costrat.m skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\287C7C10.zip/BlackBox.class Infected: Exploit.Java.ByteVerify skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\287C7C10.zip/VerifierBug.class Infected: Exploit.Java.ByteVerify skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\287C7C10.zip/Beyond.class Infected: Trojan-Downloader.Java.OpenConnection.aa skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\287C7C10.zip ZIP: infected - 3 skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\287C7C10.zip CryptFF: infected - 3 skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\297D25A3.DLL Infected: not-a-virus:AdTool.Win32.MyWebSearch.ax skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\2B9D33CF.exe Infected: Trojan-Spy.Win32.BZub.dh skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\3A7644BD.exe Infected: Trojan-Downloader.Win32.Small.ccm skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\3A7A6EB9.exe Infected: Trojan-Downloader.Win32.Small.ccm skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\3EA82B31.exe Infected: Backdoor.Win32.Agent.adr skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\49447640.exe Infected: Trojan-Downloader.Win32.Small.ccm skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\4E910DCE.par Infected: P2P-Worm.Win32.Tibick.d skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\55E5545A.exe Infected: Backdoor.Win32.Agent.adr skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6212001D.exe Infected: not-a-virus:AdWare.Win32.WinAD.bo skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\639542D2.dll Infected: Trojan.Win32.Agent.pk skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6D3378B5.dll Infected: Trojan-Spy.Win32.BZub.dv skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\6DCD2E0C.exe Infected: Trojan-Dropper.Win32.Small.asw skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\71382249.exe Infected: Trojan.Win32.Small.gq skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\714F482F.exe Infected: Trojan-Downloader.Win32.Small.buy skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\74207118.tmp Infected: P2P-Worm.Win32.VB.dw skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\75361052.par Infected: P2P-Worm.Win32.Backterra.d skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\7A5C3CC4.exe Infected: Email-Worm.Win32.NetSky.q skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\7DC62119.exe Infected: Trojan-Spy.Win32.Agent.ol skipped
    C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\7F73069B.exe Infected: not-a-virus:AdWare.Win32.Raze.a skipped
    C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
    C:\System Volume Information\_restore{7BD41464-2CC7-4899-A278-DFE2F6B620D8}\RP577\change.log Object is locked skipped
    C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
    C:\WINDOWS\SchedLgU.Txt Object is locked skipped
    C:\WINDOWS\SoftwareDistribution\EventCache\{99DD658A-F8BD-40A9-B8DB-0B71CE67AA50}.bin Object is locked skipped
    C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
    C:\WINDOWS\Sti_Trace.log Object is locked skipped
    C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped
    C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped
    C:\WINDOWS\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb Object is locked skipped
    C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
    C:\WINDOWS\system32\config\default Object is locked skipped
    C:\WINDOWS\system32\config\default.LOG Object is locked skipped
    C:\WINDOWS\system32\config\SAM Object is locked skipped
    C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
    C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
    C:\WINDOWS\system32\config\SECURITY Object is locked skipped
    C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
    C:\WINDOWS\system32\config\software Object is locked skipped
    C:\WINDOWS\system32\config\software.LOG Object is locked skipped
    C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
    C:\WINDOWS\system32\config\system Object is locked skipped
    C:\WINDOWS\system32\config\system.LOG Object is locked skipped
    C:\WINDOWS\system32\h323log.txt Object is locked skipped
    C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
    C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
    C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
    C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
    C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
    C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
    C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
    C:\WINDOWS\wiadebug.log Object is locked skipped
    C:\WINDOWS\wiaservc.log Object is locked skipped
    C:\WINDOWS\WindowsUpdate.log Object is locked skipped

    Scan process completed.
     
    greenryda, Dec 6, 2007
    #14
  15. tomato71

    tomato71 Regular member

    Joined:
    Apr 30, 2006
    Messages:
    1,151
    Likes Received:
    0
    Trophy Points:
    46
    jep
    tämä tiedosto pitää vielä tarkistaa...

    Varmistu ensin, että piilotiedostot on näkyvillä.

    Piilotiedostot näkyviin

    Mene --> tänne

    Kun sivu on latautunut, klikkaa Selaa-nappulaa ja etsi seuraava tiedosto ja paina Submit.

    C:\Program Files\MSN Messenger\riched20.dll

    Lähetä skannin tulokset seuraavassa viestissäsi.

    Jos Jotti on ruuhkainen, yritä samaa Virustotalissa: http://www.virustotal.com/flash/index_en.html

     
    tomato71, Dec 6, 2007
    #15
  16. greenryda

    greenryda Member

    Joined:
    Nov 28, 2006
    Messages:
    43
    Likes Received:
    0
    Trophy Points:
    16

    Täs ois...

    Scan taken on 06 Dec 2007 21:13:15 (GMT)
    A-Squared
    Found Adware.Win32.MyWebSearch
    AntiVir
    Found ADSPY/Mywebsearch.A.47
    ArcaVir
    Found Adware.Mywebsearch
    Avast
    Found nothing
    AVG Antivirus
    Found nothing
    BitDefender
    Found Adware.MyWebSearch.AV
    ClamAV
    Found Adware.Searchbar-19
    CPsecure
    Found nothing
    Dr.Web
    Found Adware.Msearch
    F-Prot Antivirus
    Found nothing
    F-Secure Anti-Virus
    Found not-a-virus:AdTool.Win32.MyWebSearch (6, 2, 615)
    Fortinet
    Found Adware/MyWebSearch
    Ikarus
    Found not-a-virus:AdTool.Win32.MyWebSearch
    Kaspersky Anti-Virus
    Found not-a-virus:AdTool.Win32.MyWebSearch
    NOD32
    Found Win32/FunWeb application
    Norman Virus Control
    Found nothing
    Panda Antivirus
    Found nothing
    Rising Antivirus
    Found nothing
    Sophos Antivirus
    Found nothing
    VirusBuster
    Found nothing
    VBA32
    Found AdWare.ToolBar.MyWebSearch
     
    greenryda, Dec 6, 2007
    #16
  17. tomato71

    tomato71 Regular member

    Joined:
    Apr 30, 2006
    Messages:
    1,151
    Likes Received:
    0
    Trophy Points:
    46
    moi
    poista tämä tiedosto
    C:\Program Files\MSN Messenger\riched20.dll
    vielä ongelmia??
     
    tomato71, Dec 8, 2007
    #17
  18. greenryda

    greenryda Member

    Joined:
    Nov 28, 2006
    Messages:
    43
    Likes Received:
    0
    Trophy Points:
    16


    Moi. Nyt rupee kyl olee jo parempi.

    Kiitoksia taas kerrran!!!
     
    greenryda, Dec 9, 2007
    #18

Share This Page