HJT-LOGI

Discussion in 'Virukset ja haittaohjelmat' started by spuge9, Feb 6, 2006.

  1. spuge9

    spuge9 Regular member

    Joined:
    Jan 6, 2006
    Messages:
    236
    Likes Received:
    0
    Trophy Points:
    26
    Logfile of HijackThis v1.99.1
    Scan saved at 10:05:18, on 7.2.2006
    Platform: Windows 98 SE (Win9x 4.10.2222A)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINDOWS\SYSTEM\KERNEL32.DLL
    C:\WINDOWS\SYSTEM\MSGSRV32.EXE
    C:\WINDOWS\SYSTEM\MPREXE.EXE
    C:\NOVELL\CLIENT32\NWRECMSG.EXE
    C:\WINDOWS\SYSTEM\MSTASK.EXE
    C:\NOVELL\CLIENT32\WM95.EXE
    c:\windows\SYSTEM\KB891711\KB891711.EXE
    C:\WINDOWS\SYSTEM\mmtask.tsk
    C:\WINDOWS\EXPLORER.EXE
    C:\PROGRAM\DATA FELLOWS\F-SECURE\ANTI-VIRUS\DVP95_0.EXE
    C:\OHJELMATIEDOSTOT\MOUSEWARE\SYSTEM\EM_EXEC.EXE
    C:\WINDOWS\SYSTEM\SYSTRAY.EXE
    C:\WINDOWS\SYSTEM\ATIPTAXX.EXE
    C:\WINDOWS\SYSTEM\STIMON.EXE
    C:\PROGRAM\DATA FELLOWS\F-SECURE\ANTI-VIRUS\F-AGNT95.EXE
    C:\PROGRAM\MSN MESSENGER\MSNMSGR.EXE
    C:\WINDOWS\SYSTEM\WMIEXE.EXE
    C:\OHJELMATIEDOSTOT\INTERNET EXPLORER\IEXPLORE.EXE
    C:\OHJELMATIEDOSTOT\INTERNET EXPLORER\IEXPLORE.EXE
    C:\OHJELMATIEDOSTOT\INTERNET EXPLORER\IEXPLORE.EXE
    C:\WINDOWS\SYSTEM\DDHELP.EXE
    S:\82006\822006\PATTE\HIJACKTHIS.EXE

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = about:blank
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = res://C:\PROGRAM\TOOLBAR\TOOLBAR.DLL/sa
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = res://C:\PROGRAM\TOOLBAR\TOOLBAR.DLL/sa
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 172.16.51.241:8080
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    R3 - Default URLSearchHook is missing
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX
    O2 - BHO: PosHelp - {CDEEC43D-3572-4E95-A2A5-F519D29F00C0} - C:\PROGRAM\INTERNET EXPLORER 2\ADVANCED SEARCHBAR\ADVANCEDSEARCHBAR.DLL
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
    O3 - Toolbar: Advanced Searchbar - {57F02779-3D88-4958-8AD3-83C12D86ADC7} - C:\PROGRAM\INTERNET EXPLORER 2\ADVANCED SEARCHBAR\ADVANCEDSEARCHBAR.DLL
    O4 - HKLM\..\Run: [F-Secure Gatekeeper] C:\PROGRAM\DATAFE~1\F-SECURE\ANTI-V~1\DVP95.EXE
    O4 - HKLM\..\Run: [EM_EXEC] C:\OHJELM~1\MOUSEW~1\SYSTEM\EM_EXEC.EXE
    O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
    O4 - HKLM\..\Run: [AtiPTA] Atiptaxx.exe
    O4 - HKLM\..\Run: [CriticalUpdate] c:\windows\SYSTEM\wucrtupd.exe -startup
    O4 - HKLM\..\Run: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE
    O4 - HKLM\..\Run: [F-Secure Anti-Virus] C:\Program\Data Fellows\F-Secure\Anti-Virus\F-AGNT95.EXE
    O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
    O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
    O4 - HKLM\..\RunServices: [Workstation Scheduler] C:\novell\client32\wm95.exe
    O4 - HKLM\..\RunServices: [KB891711] c:\windows\SYSTEM\KB891711\KB891711.EXE
    O4 - HKCU\..\Run: [msnmsgr] "C:\PROGRAM\MSN MESSENGER\MSNMSGR.EXE" /background
    O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Toolbars\Restrictions present
    O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Toolbars\Restrictions present
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://c:\PROGRAM\MICROS~1\OFFICE10\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
    O9 - Extra button: ATI TV - {44226DFF-747E-4edc-B30C-78752E50CD0C} - C:\PROGRAM\ATI MULTIMEDIA\TV\EXPLBAR.DLL
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\SYSTEM\MSJAVA.DLL
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\SYSTEM\MSJAVA.DLL
    O9 - Extra button: Advanced Searchbar - {57F02779-3D88-4958-8AD3-83C12D86ADC7} - C:\PROGRAM\INTERNET EXPLORER 2\ADVANCED SEARCHBAR\ADVANCEDSEARCHBAR.DLL
    O9 - Extra 'Tools' menuitem: Advanced Searchbar - {57F02779-3D88-4958-8AD3-83C12D86ADC7} - C:\PROGRAM\INTERNET EXPLORER 2\ADVANCED SEARCHBAR\ADVANCEDSEARCHBAR.DLL
    O16 - DPF: {86A88967-7A20-11D2-8EDA-00600818EDB1} (ParallelGraphics Cortona Control) - http://www.parallelgraphics.com/bin/cortvrml.cab
    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by1fd.bay1.hotmail.msn.com/resources/MsnPUpld.cab
     
    spuge9, Feb 6, 2006
    #1
  2. jule100

    jule100 Guest

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = about:blank ?

    Mikä merkitys on jos HJT:tä ei ajeta paikasta , josta sitä suositellaan?
     
    jule100, Feb 6, 2006
    #2
  3. spuge9

    spuge9 Regular member

    Joined:
    Jan 6, 2006
    Messages:
    236
    Likes Received:
    0
    Trophy Points:
    26
    ei se sit löydä kaikkea , mun tehätävä oli puhdistaa yks koulun koneista ja se oli ladattu väärään paikkaa. siivon ite ton login sit!
     
    Last edited: Feb 7, 2006
    spuge9, Feb 7, 2006
    #3
  4. blade81

    blade81 Active member

    Joined:
    Jul 28, 2003
    Messages:
    1,287
    Likes Received:
    0
    Trophy Points:
    66
    Onko tuo koko loki, vai puuttuuko lopusta jotain? Hjt kannattaa tosiaan asentaa omaan hakemistoonsa.
     
    blade81, Feb 7, 2006
    #4
  5. spuge9

    spuge9 Regular member

    Joined:
    Jan 6, 2006
    Messages:
    236
    Likes Received:
    0
    Trophy Points:
    26
    administrator kone estää mitään muita pistämästä tonne mitään nii en saanu sitän sinne jonku novelli järjestelmän takii
     
    spuge9, Feb 7, 2006
    #5
  6. blade81

    blade81 Active member

    Joined:
    Jul 28, 2003
    Messages:
    1,287
    Likes Received:
    0
    Trophy Points:
    66
    Epäilen, ettei noita fixauksiakaan pysty tekemään, jos ei kerta ole admin-oikeuksia koneelle.
     
    blade81, Feb 7, 2006
    #6

Share This Page