HJT -loki - Ongelmia ilmennyt

Discussion in 'Virukset ja haittaohjelmat - HijackThis -logit' started by RIVER2, May 23, 2007.

  1. RIVER2

    RIVER2 Guest

    Vaikka minulla on F-secure, eivät virukset ja kaapatut internet yhteydet taida jättää minua rauhaan. Äsken poistin jonkun Hijacked internet acces by new.net -ohjelman, jonka poiston jälkeen netti toimi vihdoin. Ja lisäksi on ollut viruksia, joita ei f-secure pystynyt poistamaan, joten päädyin HjT:hen.:

    Logfile of Trend Micro HijackThis v2.0.0 (BETA)
    Scan saved at 20:08:22, on 23.5.2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\ehome\ehtray.exe
    C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
    C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
    C:\WINDOWS\system32\RUNDLL32.EXE
    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    C:\Program Files\HP\QuickPlay\QPService.exe
    C:\WINDOWS\system32\rundll32.exe
    C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
    C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe
    C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe
    C:\Program Files\PC Protection\Common\FSM32.EXE
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
    C:\Program Files\WIDCOMM\Bluetooth-ohjelmisto\BTTray.exe
    C:\Program Files\Hewlett-Packard\HP Pavilion Webcam\HPWebcam.exe
    C:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE
    C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
    C:\PROGRA~1\PCPROT~1\backweb\4384293\Program\SERVIC~1.EXE
    C:\Program Files\WIDCOMM\Bluetooth-ohjelmisto\bin\btwdins.exe
    C:\WINDOWS\eHome\ehRecvr.exe
    C:\WINDOWS\eHome\ehSched.exe
    C:\Program Files\PC Protection\Anti-Virus\fsgk32st.exe
    C:\Program Files\PC Protection\Anti-Virus\FSGK32.EXE
    C:\Program Files\PC Protection\backweb\4384293\program\fsbwsys.exe
    C:\Program Files\PC Protection\Common\FSMA32.EXE
    C:\Program Files\PC Protection\Common\FSMB32.EXE
    C:\Program Files\PC Protection\Anti-Virus\fssm32.exe
    C:\Program Files\PC Protection\backweb\4384293\Program\fspex.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Common Files\LightScribe\LSSrvc.exe
    C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
    C:\Program Files\PC Protection\Common\FCH32.EXE
    C:\WINDOWS\system32\nvsvc32.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\PC Protection\Anti-Virus\fsqh.exe
    C:\Program Files\PC Protection\Common\FAMEH32.EXE
    C:\Program Files\PC Protection\Anti-Virus\fsrw.exe
    C:\Program Files\PC Protection\FSPC\fspc.exe
    C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
    C:\Program Files\PC Protection\Anti-Virus\fsav32.exe
    C:\WINDOWS\system32\dllhost.exe
    C:\Program Files\PC Protection\FWES\Program\fsdfwd.exe
    C:\PROGRA~1\PCPROT~1\ANTI-S~1\fsaw.exe
    C:\WINDOWS\eHome\ehmsas.exe
    C:\Program Files\PC Protection\FSGUI\fsguidll.exe
    C:\WINDOWS\explorer.exe
    C:\Program Files\PC Protection\FSGUI\fsavgui.exe
    C:\Program Files\Winamp\winamp.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Documents and Settings\Jonsku\Desktop\scanner.exe

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: Idea2 SidebarBrowserMonitor Class - {45AD732C-2CE2-4666-B366-B2214AD57A49} - C:\Program Files\Desktop Sidebar\sbhelp.dll
    O2 - BHO: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: TGTSoft Explorer Toolbar Changer - {C333CF63-767F-4831-94AC-E683D962C63C} - C:\Program Files\TGTSoft\StyleXP\TGT_BHO.dll
    O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O3 - Toolbar: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
    O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
    O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /nodetect
    O4 - HKLM\..\Run: [MsmqIntCert] regsvr32 /s mqrt.dll
    O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] CHDAudPropShortcut.exe
    O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
    O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
    O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
    O4 - HKLM\..\Run: [Cpqset] C:\Program Files\Hewlett-Packard\Default Settings\cpqset.exe
    O4 - HKLM\..\Run: [RecGuard] C:\Windows\SMINST\RecGuard.exe
    O4 - HKLM\..\Run: [Reminder] C:\Windows\CREATOR\Remind_XP.exe
    O4 - HKLM\..\Run: [OpwareSE2] "C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe"
    O4 - HKLM\..\Run: [OPSE reminder] "C:\Program Files\ScanSoft\OmniPageSE2.0\EregEng\Ereg.exe" -r "C:\Program Files\ScanSoft\OmniPageSE2.0\EregEng\ereg.ini"
    O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\PC Protection\Common\FSM32.EXE" /splash
    O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\PC Protection\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
    O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\PC Protection\FSGUI\FSSW.EXE" /reboot
    O4 - HKLM\..\Run: [News Service] "C:\Program Files\PC Protection\FSGUI\ispnews.exe"
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
    O4 - HKCU\..\Run: [STYLEXP] C:\Program Files\TGTSoft\StyleXP\StyleXP.exe -Hide
    O4 - HKCU\..\Run: [SIDEBAR] "C:\Program Files\Desktop Sidebar\dsidebar.exe"
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Paikallinen palve')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Verkkopalve')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
    O4 - Startup: Instance Manager Group Default Instance Group.lnk = C:\Program Files\Samurize\InstanceManager.exe
    O4 - Startup: Instance Manager Server Group Default Instance Group.lnk = C:\Program Files\Samurize\InstanceManager.exe
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: BTTray.lnk = ?
    O4 - Global Startup: F-Secure PC Protection Plus.lnk = C:\Program Files\PC Protection\backweb\4384293\Program\fspex.exe
    O4 - Global Startup: HP Pavilion Webcam Tray Icon.lnk = ?
    O4 - Global Startup: HP Photosmart Premier -pikakäynnistys.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
    O8 - Extra context menu item: &Estä tämä kohoikkuna - C:\Program Files\PC Protection\Anti-Spyware\blockpopups.htm
    O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
    O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
    O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
    O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
    O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
    O9 - Extra button: Subscribe in Desktop Sidebar - {09FE188B-6E85-479e-9411-51FB2220DF80} - C:\Program Files\Desktop Sidebar\sbhelp.dll
    O9 - Extra 'Tools' menuitem: Subscribe in Desktop Sidebar - {09FE188B-6E85-479e-9411-51FB2220DF80} - C:\Program Files\Desktop Sidebar\sbhelp.dll
    O9 - Extra button: Web-suodatin - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\PC Protection\FSPC\fspcmsie.dll
    O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\PC Protection\FSPC\fspcmsie.dll
    O9 - Extra 'Tools' menuitem: Web-suodatin - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\PC Protection\FSPC\fspcmsie.dll
    O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\PC Protection\Anti-Spyware\ieshield.dll
    O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\PC Protection\Anti-Spyware\ieshield.dll
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
    O16 - DPF: {0B79F48A-E8D6-11DB-9283-E25056D89593} (F-Secure Online Scanner 3.1) - http://support.f-secure.com/ols/fscax.cab
    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by19fd.bay19.hotmail.msn.com/resources/MsnPUpld.cab
    O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://217.152.196.254/activex/AxisCamControl.cab
    O16 - DPF: {9D190AE6-C81E-4039-8061-978EBAD10073} (F-Secure Online Scanner 3.0) - http://support.f-secure.com/ols/fscax.cab
    O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAVA/Secure/HPGetDownloadManager.ocx
    O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
    O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
    O23 - Service: AddFiltr - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\AddFiltr.exe
    O23 - Service: F-Secure PC Protection Plus (BackWeb Plug-in - 4384293) - BackWeb Technologies Inc. - C:\PROGRA~1\PCPROT~1\backweb\4384293\Program\SERVIC~1.EXE
    O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth-ohjelmisto\bin\btwdins.exe
    O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - Unknown owner - C:\Program Files\PC Protection\Anti-Virus\fsgk32st.exe
    O23 - Service: FSBWSYS - Unknown owner - C:\Program Files\PC Protection\backweb\4384293\program\fsbwsys.exe
    O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\PC Protection\FWES\Program\fsdfwd.exe
    O23 - Service: F-Secure HTTP Server (fshttps) - F-Secure Corporation - C:\Program Files\PC Protection\FSPC\fshttps\fshttps.exe
    O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\PC Protection\Common\FSMA32.EXE
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - c:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
    O23 - Service: iPod-palvelu (iPod Service) - Unknown owner - C:\Program Files\iPod\bin\iPodService.exe (file missing)
    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
    O23 - Service: StyleXPService - Unknown owner - C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe

    --
    End of file - 13624 bytes
     
  2. Auttaja

    Auttaja Guest

    hauska homma lokisi on kyll puhas

    ======0

    1,Lataa AVG Anti-Spyware 7.5 ja tallenna ohjelma työpöydällesi. Jos sinulla on jo kyseinen ohjelma siirry suoraan kohtaan 2!

    [*]Kun olet ladannut ohjelman, kaksoisklikkaa asennuohjelman pikakuvaketta työpöydälläsi, asennus alkaa.
    [*]Asennuksen jälkeen täytyy ohjelma käynnistää ja sen tunnisteet päivittää.

    2. [*]Käynnistä AVG eAnti-Spyware.
    [*]Klikkaa "Update" kuvaketta päävalikossa. Sen jälkeen klikkaa "Update now" painiketta.
    [*]Sitten klikkaa "Start Update" kuvaketta jolloin päivitys alkaa.
    [*]Paina hetken kuluttua uudestaan "Start Update" , jos päivitykset eivät heti onnistu
    [*]Jos automaattipäivitys ei jostain syystä toimi, niin tunnisteet voi ladata manuaalisesti http://www.ewido.net/en/download/updates/ -linkin takaa.
    [*]Kun päivitykset on ladattu, klikkaa "Scanner" kuvaketta ikkunan ylälaidassa. Valitse sitten "Settings" välilehti.
    [*]Kun "Settings" valikko on auennut, klikkaa "Recommended actions" ja sitten valitse "Quarantine".
    [*]Sitten "Reports" valikon alta:
    [*]Laita täppi kohtaan "Automatically generate report after every scan"
    [*]Ota täppi pois kohdasta"Only if threats were found"
    [*]Sitten klikkaa "Shield" kuvaketta ikkunan ylälaidassa
    [*]"Resident shield is", muuta tila active:sta inactive:ksi
    [*]Sulje ohjelma, ÄLÄ skannaa vielä.

    Käynnistä tietokoneesi vikasietotilaan


    HUOM! Älä käytä muita ohjelmia AVG skannauksen aikana, tämä saattaa häiritä skannausta.
    [*]Kun vikasietotilassa, käynnistä AVG Anti-Spyware.
    [*]Klikkaa "Scanner" kuvaketta ikkunan ylälaidassa ja valitse "Scan" välilehti. Sitten klikkaa "Complete System Scan".
    [*]AVG aloittaa nyt tietokoneen skannaamisen, ole kärsivällinen sillä skannaus vie aikaa.
    Kun skannaus on valmis:
    TÄRKEÄÄ : Älä klikkaa "Save Scan Report" ennen kuin klikkaat "Apply all Actions"
    [*]Varmistu, että Set all elements to: näyttää Quarantine (1), jos ei, klikkaa linkkiä ja valitse Quarantine popup-valikosta.
    [*]Sinulta kysytään mitä tehdä jos infektioita löytyi, valitse silloin "Apply all actions"
    [​IMG]
    [*]Sitten klikkaa "Reports" kuvaketta ohjelma yläosasta.
    [*]Klikkaa "Save report as" painiketta ikkunan vasemmassa alalaidassa ja tallenna raportti työpöydälle.
    [*]Sulje ohjelma, käynnistä kone normaalisti ja lähetä AVG:n raportti viestiketjuusi.

     
  3. RIVER2

    RIVER2 Guest

    Ok.. Taitaa F-secure lentää roskikseen, kun AVG voitti sen 59-0.
    Tässäpä logi:

    ---------------------------------------------------------
    AVG Anti-Spyware - Scan Report
    ---------------------------------------------------------

    + Created at: 23:11:09 23.5.2007

    + Scan result:



    C:\Program Files\BitComet Accelerator\NNGLZA638.EXE -> Adware.NewDotNet : Cleaned with backup (quarantined).
    C:\System Volume Information\_restore{A13B5E8E-F617-46BA-B368-1985B3BA9E17}\RP113\A0069918.exe -> Adware.NewDotNet : Cleaned with backup (quarantined).
    C:\System Volume Information\_restore{A13B5E8E-F617-46BA-B368-1985B3BA9E17}\RP113\A0069922.dll -> Adware.NewDotNet : Cleaned with backup (quarantined).
    C:\WINDOWS\NDNuninstall6_38.exe -> Adware.NewDotNet : Cleaned with backup (quarantined).
    HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4A2AACF3-ADF6-11D5-98A9-00E018981B9E} -> Adware.NewDotNet : Cleaned with backup (quarantined).
    HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4A2AACF3-ADF6-11D5-98A9-00E018981B9E} -> Adware.NewDotNet : Cleaned with backup (quarantined).
    HKU\S-1-5-21-2104543419-4010924093-2300410612-1006\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4A2AACF3-ADF6-11D5-98A9-00E018981B9E} -> Adware.NewDotNet : Cleaned with backup (quarantined).
    C:\System Volume Information\_restore{A13B5E8E-F617-46BA-B368-1985B3BA9E17}\RP93\A0065112.exe -> Adware.Relevant : Cleaned with backup (quarantined).
    C:\System Volume Information\_restore{A13B5E8E-F617-46BA-B368-1985B3BA9E17}\RP95\A0066841.exe -> Adware.Relevant : Cleaned with backup (quarantined).
    HKLM\SOFTWARE\Classes\WUSN.1 -> Adware.SaveNow : Cleaned with backup (quarantined).
    :mozilla.83:C:\Documents and Settings\Jonsku\Application Data\Mozilla\Firefox\Profiles\uckzrzn1.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
    :mozilla.88:C:\Documents and Settings\Jonsku\Application Data\Mozilla\Firefox\Profiles\uckzrzn1.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
    C:\Documents and Settings\Jonsku\Cookies\jonsku@3.adbrite[2].txt -> TrackingCookie.Adbrite : Cleaned.
    C:\Documents and Settings\Jonsku\Cookies\jonsku@ads.adbrite[1].txt -> TrackingCookie.Adbrite : Cleaned.
    :mozilla.100:C:\Documents and Settings\Jonsku\Application Data\Mozilla\Firefox\Profiles\uckzrzn1.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
    :mozilla.101:C:\Documents and Settings\Jonsku\Application Data\Mozilla\Firefox\Profiles\uckzrzn1.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
    :mozilla.102:C:\Documents and Settings\Jonsku\Application Data\Mozilla\Firefox\Profiles\uckzrzn1.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
    :mozilla.104:C:\Documents and Settings\Jonsku\Application Data\Mozilla\Firefox\Profiles\uckzrzn1.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
    :mozilla.105:C:\Documents and Settings\Jonsku\Application Data\Mozilla\Firefox\Profiles\uckzrzn1.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
    :mozilla.98:C:\Documents and Settings\Jonsku\Application Data\Mozilla\Firefox\Profiles\uckzrzn1.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
    :mozilla.99:C:\Documents and Settings\Jonsku\Application Data\Mozilla\Firefox\Profiles\uckzrzn1.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
    :mozilla.30:C:\Documents and Settings\Jonsku\Application Data\Mozilla\Firefox\Profiles\uckzrzn1.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.
    :mozilla.31:C:\Documents and Settings\Jonsku\Application Data\Mozilla\Firefox\Profiles\uckzrzn1.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.
    :mozilla.40:C:\Documents and Settings\Jonsku\Application Data\Mozilla\Firefox\Profiles\uckzrzn1.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
    :mozilla.41:C:\Documents and Settings\Jonsku\Application Data\Mozilla\Firefox\Profiles\uckzrzn1.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
    :mozilla.94:C:\Documents and Settings\Jonsku\Application Data\Mozilla\Firefox\Profiles\uckzrzn1.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
    :mozilla.103:C:\Documents and Settings\Jonsku\Application Data\Mozilla\Firefox\Profiles\uckzrzn1.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
    :mozilla.106:C:\Documents and Settings\Jonsku\Application Data\Mozilla\Firefox\Profiles\uckzrzn1.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
    :mozilla.107:C:\Documents and Settings\Jonsku\Application Data\Mozilla\Firefox\Profiles\uckzrzn1.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
    C:\Documents and Settings\Saana\Cookies\saana@connextra[1].txt -> TrackingCookie.Connextra : Cleaned.
    C:\Documents and Settings\Jonsku\Cookies\jonsku@cpvfeed[2].txt -> TrackingCookie.Cpvfeed : Cleaned.
    C:\Documents and Settings\Jonsku\Local Settings\Temp\Cookies\jonsku@cpvfeed[2].txt -> TrackingCookie.Cpvfeed : Cleaned.
    :mozilla.10:C:\Documents and Settings\Jonsku\Application Data\Mozilla\Firefox\Profiles\uckzrzn1.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
    :mozilla.63:C:\Documents and Settings\Jonsku\Application Data\Mozilla\Firefox\Profiles\uckzrzn1.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
    :mozilla.64:C:\Documents and Settings\Jonsku\Application Data\Mozilla\Firefox\Profiles\uckzrzn1.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
    :mozilla.65:C:\Documents and Settings\Jonsku\Application Data\Mozilla\Firefox\Profiles\uckzrzn1.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
    :mozilla.66:C:\Documents and Settings\Jonsku\Application Data\Mozilla\Firefox\Profiles\uckzrzn1.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
    :mozilla.76:C:\Documents and Settings\Jonsku\Application Data\Mozilla\Firefox\Profiles\uckzrzn1.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
    :mozilla.77:C:\Documents and Settings\Jonsku\Application Data\Mozilla\Firefox\Profiles\uckzrzn1.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
    :mozilla.78:C:\Documents and Settings\Jonsku\Application Data\Mozilla\Firefox\Profiles\uckzrzn1.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
    :mozilla.79:C:\Documents and Settings\Jonsku\Application Data\Mozilla\Firefox\Profiles\uckzrzn1.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
    C:\Documents and Settings\Saana\Cookies\saana@komtrack[2].txt -> TrackingCookie.Komtrack : Cleaned.
    C:\Documents and Settings\Äippä\Cookies\äippä@search.live[1].txt -> TrackingCookie.Live : Cleaned.
    :mozilla.109:C:\Documents and Settings\Jonsku\Application Data\Mozilla\Firefox\Profiles\uckzrzn1.default\cookies.txt -> TrackingCookie.Paypal : Cleaned.
    :mozilla.46:C:\Documents and Settings\Jonsku\Application Data\Mozilla\Firefox\Profiles\uckzrzn1.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
    :mozilla.47:C:\Documents and Settings\Jonsku\Application Data\Mozilla\Firefox\Profiles\uckzrzn1.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
    :mozilla.48:C:\Documents and Settings\Jonsku\Application Data\Mozilla\Firefox\Profiles\uckzrzn1.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
    :mozilla.49:C:\Documents and Settings\Jonsku\Application Data\Mozilla\Firefox\Profiles\uckzrzn1.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
    :mozilla.50:C:\Documents and Settings\Jonsku\Application Data\Mozilla\Firefox\Profiles\uckzrzn1.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
    :mozilla.51:C:\Documents and Settings\Jonsku\Application Data\Mozilla\Firefox\Profiles\uckzrzn1.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
    :mozilla.67:C:\Documents and Settings\Jonsku\Application Data\Mozilla\Firefox\Profiles\uckzrzn1.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
    :mozilla.68:C:\Documents and Settings\Jonsku\Application Data\Mozilla\Firefox\Profiles\uckzrzn1.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
    :mozilla.10:C:\Documents and Settings\Saana\Application Data\Mozilla\Firefox\Profiles\7ow4cbis.default\cookies.txt -> TrackingCookie.Statistik-gallup : Cleaned.
    :mozilla.7:C:\Documents and Settings\Jonsku\Application Data\Mozilla\Firefox\Profiles\uckzrzn1.default\cookies.txt -> TrackingCookie.Statistik-gallup : Cleaned.
    :mozilla.28:C:\Documents and Settings\Jonsku\Application Data\Mozilla\Firefox\Profiles\uckzrzn1.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
    :mozilla.29:C:\Documents and Settings\Jonsku\Application Data\Mozilla\Firefox\Profiles\uckzrzn1.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
    :mozilla.89:C:\Documents and Settings\Jonsku\Application Data\Mozilla\Firefox\Profiles\uckzrzn1.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
    C:\Documents and Settings\Jonsku\Cookies\jonsku@m.webtrends[2].txt -> TrackingCookie.Webtrends : Cleaned.
    C:\Documents and Settings\lare\Cookies\saana@m.webtrends[1].txt -> TrackingCookie.Webtrends : Cleaned.


    ::Report end

     
  4. Auttaja

    Auttaja Guest

    jeep, ei toikaan mit'ää' vakavaa löytäny

    Pysy puhtaana

    -> Tyhjennä järjestelmänpalautus Ohjeet
    Tyhjennä järjestelmänpalautuskansio ja luo uusi palautuspiste. Tämä puhdistaa palautuskansion mahdollisista haittaohjelmajäännöksistä.

    -> Käytä CCleaneria -> CCleaner
    Lataa ja asenna CCleaner. Puhdista väliaikaistiedostot ja -kansiot ohjelmalla säännöllisesti.

    -> Asenna SpywareBlaster -> SpywareBlaster
    SpywareBlaster estää haittaohjelmia asentumasta koneellesi. Ei kuluta muistia!
    Opas saatavilla suomeksi! Nimimerkki Ad-Awaren opas

    -> Asenna MVPS Hosts tiedosto -> MVPS Hosts
    Estää koneesi yhteyden haitallisiin sivustoihin.
    Opas saatavilla suomeksi! Nimimerkki Axelin opas

    -> Vaihda selaimesi Firefoxiin -> Firefox
    Firefox on nopeampi, turvallisempi ja parempi selain kuin Internet Explorer.

    -> Pidä järjestelmäsi ajantasalla. -> Windows Update
    Vieraile Windows Updatessa säännöllisesti.

    -> Pidä palomuuri ja virustorjunta ajantasalla
    Päivitä ja skannaa koneesi säännöllisesti virustorjuntaohjelmallasi.
    ja hyvä myös escan http://koti.mbnet.fi/pattaya1/escanmwav.htm

    ->Pidä ohjelmistosi ajantasalla. -> Secunia Software Inspector
    Secunia Software Inspector tutkii sinun järjestälmäsi ja ohjelmistosi puuttuvien turvallisuuspäivityksien osalta. Tavallinen tutkinta kestää normaalisti 5-40 sekuntia, kun läpikotainen (thorough system inspection) voi kestää useita minuutteja.

    ->Seuraa säännöllisesti viestintäviraston tietoja uusista haavoittuvuuksista -> CERT-FI
     

Share This Page