Hjt loki

Discussion in 'Virukset ja haittaohjelmat' started by Wblack, Jun 18, 2005.

  1. Wblack

    Wblack Member

    Joined:
    Jun 18, 2005
    Messages:
    7
    Likes Received:
    0
    Trophy Points:
    11
    Logfile of HijackThis v1.99.1
    Scan saved at 11:55:33, on 18.6.2005
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
    E:\Ohjelmat\Sygate Personal Firewall\smc.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\Ohjelmat\AVGFRE~1\avgamsvr.exe
    C:\Ohjelmat\AVGFRE~1\avgupsvc.exe
    C:\WINDOWS\SOUNDMAN.EXE
    C:\Program Files\ABIT\ABIT uGuru\uGuru.exe
    C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
    C:\Program Files\ABIT\ABIT uGuru\uGuru_Event_Receiver.exe
    E:\Ohjelmat\Winamp\winampa.exe
    E:\ohjelmat\powerstrip\pstrip.exe
    C:\Program Files\MSN Apps\Updater\01.02.3000.1001\fi\msnappau.exe
    C:\Ohjelmat\AVGFRE~1\avgcc.exe
    C:\Ohjelmat\AVGFRE~1\avgemc.exe
    C:\Program Files\Common Files\Real\Update_OB\realsched.exe
    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    E:\Ohjelmat\AntiSpyware\gcasServ.exe
    C:\WINDOWS\system32\rundll32.exe
    C:\WINDOWS\system32\ctfmon.exe
    E:\pelit\steam\steam.exe
    E:\Ohjelmat\Ajurit\Momo\lwemon.exe
    E:\Ohjelmat\AntiSpyware\gcasDtServ.exe
    C:\Program Files\TGTSoft\StyleXP\StyleXP.exe
    E:\Ohjelmat\GetRight\getright.exe
    E:\Ohjelmat\GetRight\getright.exe
    C:\Program Files\VIA\RAID\raid_tool.exe
    E:\Ohjelmat\Macro Scheduler\msched.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\Kaspersky\mwavscan.com
    C:\Kaspersky\kavss.exe
    E:\Purku\hijackthis\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://search.qsrch.com/
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
    O2 - BHO: bho2gr Class - {31FF080D-12A3-439A-A2EF-4BA95A3148E8} - E:\Ohjelmat\GetRight\xx2gr.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - E:\Ohjelmat\Spybot - Search & Destroy\SDHelper.dll
    O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
    O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fi\msntb.dll
    O2 - BHO: TGTSoft Explorer Toolbar Changer - {C333CF63-767F-4831-94AC-E683D962C63C} - C:\Program Files\TGTSoft\StyleXP\TGT_BHO.dll
    O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fi\msntb.dll
    O3 - Toolbar: (no name) - {4E7BD74F-2B8D-469E-C0FF-FD67B79CAF2C} - (no file)
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [ABIT uGuru] C:\Program Files\ABIT\ABIT uGuru\uGuru.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
    O4 - HKLM\..\Run: [WinampAgent] E:\Ohjelmat\Winamp\winampa.exe
    O4 - HKLM\..\Run: [PowerStrip] e:\ohjelmat\powerstrip\pstrip.exe
    O4 - HKLM\..\Run: [DAEMON Tools-1033] "E:\Ohjelmat\D-Toolz\daemon.exe" -lang 1033
    O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.02.3000.1001\fi\msnappau.exe"
    O4 - HKLM\..\Run: [SmcService] E:\Ohjelmat\SYGATE~1\smc.exe -startgui
    O4 - HKLM\..\Run: [AVG7_CC] C:\Ohjelmat\AVGFRE~1\avgcc.exe /STARTUP
    O4 - HKLM\..\Run: [AVG7_EMC] C:\Ohjelmat\AVGFRE~1\avgemc.exe
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [gcasServ] "E:\Ohjelmat\AntiSpyware\gcasServ.exe"
    O4 - HKLM\..\Run: [New.net Startup] rundll32 C:\PROGRA~1\NEWDOT~1\NEWDOT~1.DLL,NewDotNetStartup -s
    O4 - HKLM\..\RunOnce: [MicrosoftAntiSpywareCleaner] E:\Ohjelmat\AntiSpyware\gcASCleaner.exe
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [Steam] "e:\pelit\steam\steam.exe" -silent
    O4 - HKCU\..\Run: [Start WingMan Profiler] "E:\Ohjelmat\Ajurit\Momo\lwemon.exe" /noui
    O4 - HKCU\..\Run: [STYLEXP] C:\Program Files\TGTSoft\StyleXP\StyleXP.exe -Hide
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
    O4 - Startup: Macro Scheduler.lnk = E:\Ohjelmat\Macro Scheduler\msched.exe
    O4 - Startup: Xfire.lnk = E:\Ohjelmat\Xfire\Xfire.exe
    O4 - Global Startup: GetRight - Tray Icon.lnk = E:\Ohjelmat\GetRight\getright.exe
    O4 - Global Startup: VIA RAID TOOL.lnk = C:\Program Files\VIA\RAID\raid_tool.exe
    O8 - Extra context menu item: Download with GetRight - E:\Ohjelmat\GetRight\GRdownload.htm
    O8 - Extra context menu item: Open with GetRight Browser - E:\Ohjelmat\GetRight\GRbrowse.htm
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O10 - Hijacked Internet access by New.Net
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.c...ls/en/x86/client/wuweb_site.cab?1113078317640
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\Ohjelmat\AVGFRE~1\avgamsvr.exe
    O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\Ohjelmat\AVGFRE~1\avgupsvc.exe
    O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - E:\Ohjelmat\Sygate Personal Firewall\smc.exe
    O23 - Service: StyleXPService - Unknown owner - C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe

    Löytyykös mitään epäilyttävää?
     
    Wblack, Jun 18, 2005
    #1
  2. Wblack

    Wblack Member

    Joined:
    Jun 18, 2005
    Messages:
    7
    Likes Received:
    0
    Trophy Points:
    11
    eScan antoi tämmöttten lokin

    File C:\Documents and Settings\Jones\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\count.jar-6699b1e6-151c3629.zip infected by "Exploit.Java.ByteVerify" Virus. Action Taken: File Renamed.
    File C:\Program Files\NewDotNet\newdotnet6_38.dll tagged as not-a-virus:AdWare.NewDotNet. No Action Taken.
    File C:\Program Files\quickbar\Cache\NNEZTY638.exe tagged as not-a-virus:AdWare.NewDotNet. No Action Taken.
    File C:\System Volume Information\_restore{A970B599-8020-44FF-A38E-C5CC62F0AA8C}\RP110\A0018983.exe tagged as not-a-virus:AdWare.NewDotNet. No Action Taken.
    File C:\System Volume Information\_restore{A970B599-8020-44FF-A38E-C5CC62F0AA8C}\RP110\A0018984.exe tagged as not-a-virus:AdWare.NewDotNet. No Action Taken.
    File C:\System Volume Information\_restore{A970B599-8020-44FF-A38E-C5CC62F0AA8C}\RP112\A0020486.exe tagged as not-a-virus:AdWare.NewDotNet. No Action Taken.
    File C:\System Volume Information\_restore{A970B599-8020-44FF-A38E-C5CC62F0AA8C}\RP112\A0020534.exe tagged as not-a-virus:AdWare.NewDotNet. No Action Taken.
    File C:\System Volume Information\_restore{A970B599-8020-44FF-A38E-C5CC62F0AA8C}\RP49\A0005627.exe tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken.
    File E:\Ohjelmat\mIRC\mirc.exe tagged as not-a-virus:Client-IRC.Win32.mIRC.16. No Action Taken.
    File E:\Pelit\Quake 3\Extras\WorldNet\PCVKIT.EXE tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken.
    File E:\Purku\pod25ins.exe tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken.
    File E:\System Volume Information\_restore{A970B599-8020-44FF-A38E-C5CC62F0AA8C}\RP63\A0007008.exe tagged as not-a-virus:Server-Proxy.Win32.3proxy.Hltv. No Action Taken.
    File E:\System Volume Information\_restore{A970B599-8020-44FF-A38E-C5CC62F0AA8C}\RP64\A0007109.exe infected by "Trojan-Spy.Win32.VB.ea" Virus. Action Taken: File Deleted.
    File E:\System Volume Information\_restore{A970B599-8020-44FF-A38E-C5CC62F0AA8C}\RP65\A0007337.EXE infected by "Trojan.DOS.ControlDuSockets.a" Virus. Action Taken: File Deleted.
    File E:\System Volume Information\_restore{A970B599-8020-44FF-A38E-C5CC62F0AA8C}\RP85\A0011368.exe tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken.
    File E:\System Volume Information\_restore{A970B599-8020-44FF-A38E-C5CC62F0AA8C}\RP92\A0015016.exe tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken.
    File E:\System Volume Information\_restore{A970B599-8020-44FF-A38E-C5CC62F0AA8C}\RP98\A0015404.exe tagged as not-a-virus:AdWare.EZula.z. No Action Taken.
    File F:\Purku\Softa\mirc616.exe tagged as not-a-virus:Client-IRC.Win32.mIRC.16. No Action Taken.
    File F:\Purku\Softa\aida32ee_393.exe tagged as not-a-virus:Tool.Win32.AIDA.3862. No Action Taken.
    File F:\Jaot\BattleLANv0.5.rar tagged as not-a-virus:NetTool.Win32.PsKill. No Action Taken.
    File F:\Jaot\BattleLANv0.5\BattleLANv0.5\pskill.exe tagged as not-a-virus:NetTool.Win32.PsKill. No Action Taken.
    File F:\System Volume Information\_restore{A970B599-8020-44FF-A38E-C5CC62F0AA8C}\RP70\A0009046.exe tagged as not-a-virus:AdWare.MediaBack.c. No Action Taken.
     
    Last edited: Jun 18, 2005
    Wblack, Jun 18, 2005
    #2
  3. morsku

    morsku Guest

    Last edited by a moderator: Jun 18, 2005
    morsku, Jun 18, 2005
    #3
  4. Wblack

    Wblack Member

    Joined:
    Jun 18, 2005
    Messages:
    7
    Likes Received:
    0
    Trophy Points:
    11
    Mitäs muuta pitäs tehä?
     
    Wblack, Jun 18, 2005
    #4
  5. tapiiri

    tapiiri Regular member

    Joined:
    Jun 11, 2005
    Messages:
    1,142
    Likes Received:
    0
    Trophy Points:
    46
    laita uusi hjt-logi, niin nähdään poistuiko newnet
     
    tapiiri, Jun 18, 2005
    #5
  6. Wblack

    Wblack Member

    Joined:
    Jun 18, 2005
    Messages:
    7
    Likes Received:
    0
    Trophy Points:
    11
    Logfile of HijackThis v1.99.1
    Scan saved at 18:35:54, on 18.6.2005
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
    E:\Ohjelmat\Sygate Personal Firewall\smc.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\Ohjelmat\AVGFRE~1\avgamsvr.exe
    C:\Ohjelmat\AVGFRE~1\avgupsvc.exe
    C:\WINDOWS\SOUNDMAN.EXE
    C:\Program Files\ABIT\ABIT uGuru\uGuru.exe
    C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
    E:\Ohjelmat\Winamp\winampa.exe
    C:\Program Files\ABIT\ABIT uGuru\uGuru_Event_Receiver.exe
    E:\ohjelmat\powerstrip\pstrip.exe
    E:\Ohjelmat\D-Toolz\daemon.exe
    C:\Program Files\MSN Apps\Updater\01.02.3000.1001\fi\msnappau.exe
    C:\Ohjelmat\AVGFRE~1\avgcc.exe
    C:\Ohjelmat\AVGFRE~1\avgemc.exe
    C:\Program Files\Common Files\Real\Update_OB\realsched.exe
    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    E:\Ohjelmat\AntiSpyWare\gcasServ.exe
    C:\WINDOWS\system32\ctfmon.exe
    E:\pelit\steam\steam.exe
    C:\WINDOWS\System32\svchost.exe
    E:\Ohjelmat\Ajurit\Momo\lwemon.exe
    C:\Program Files\TGTSoft\StyleXP\StyleXP.exe
    E:\Ohjelmat\AntiSpyWare\gcasDtServ.exe
    E:\Ohjelmat\GetRight\getright.exe
    E:\Ohjelmat\GetRight\getright.exe
    C:\Program Files\VIA\RAID\raid_tool.exe
    E:\Ohjelmat\Macro Scheduler\msched.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\WINDOWS\system32\wuauclt.exe
    E:\Purku\hijackthis\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://search.qsrch.com/
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
    O2 - BHO: bho2gr Class - {31FF080D-12A3-439A-A2EF-4BA95A3148E8} - E:\Ohjelmat\GetRight\xx2gr.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - E:\Ohjelmat\Spybot - Search & Destroy\SDHelper.dll
    O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
    O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fi\msntb.dll
    O2 - BHO: TGTSoft Explorer Toolbar Changer - {C333CF63-767F-4831-94AC-E683D962C63C} - C:\Program Files\TGTSoft\StyleXP\TGT_BHO.dll
    O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fi\msntb.dll
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [ABIT uGuru] C:\Program Files\ABIT\ABIT uGuru\uGuru.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
    O4 - HKLM\..\Run: [WinampAgent] E:\Ohjelmat\Winamp\winampa.exe
    O4 - HKLM\..\Run: [PowerStrip] e:\ohjelmat\powerstrip\pstrip.exe
    O4 - HKLM\..\Run: [DAEMON Tools-1033] "E:\Ohjelmat\D-Toolz\daemon.exe" -lang 1033
    O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.02.3000.1001\fi\msnappau.exe"
    O4 - HKLM\..\Run: [SmcService] E:\Ohjelmat\SYGATE~1\smc.exe -startgui
    O4 - HKLM\..\Run: [AVG7_CC] C:\Ohjelmat\AVGFRE~1\avgcc.exe /STARTUP
    O4 - HKLM\..\Run: [AVG7_EMC] C:\Ohjelmat\AVGFRE~1\avgemc.exe
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [gcasServ] "E:\Ohjelmat\AntiSpyWare\gcasServ.exe"
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [Steam] "e:\pelit\steam\steam.exe" -silent
    O4 - HKCU\..\Run: [Start WingMan Profiler] "E:\Ohjelmat\Ajurit\Momo\lwemon.exe" /noui
    O4 - HKCU\..\Run: [PeerGuardian] E:\Ohjelmat\PeerGuardian2\pg2.exe
    O4 - HKCU\..\Run: [STYLEXP] C:\Program Files\TGTSoft\StyleXP\StyleXP.exe -Hide
    O4 - HKCU\..\Run: [MessengerPlus3] "\" /WinStart
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
    O4 - Startup: Macro Scheduler.lnk = E:\Ohjelmat\Macro Scheduler\msched.exe
    O4 - Startup: Xfire.lnk = E:\Ohjelmat\Xfire\Xfire.exe
    O4 - Global Startup: GetRight - Tray Icon.lnk = E:\Ohjelmat\GetRight\getright.exe
    O4 - Global Startup: VIA RAID TOOL.lnk = C:\Program Files\VIA\RAID\raid_tool.exe
    O8 - Extra context menu item: Download with GetRight - E:\Ohjelmat\GetRight\GRdownload.htm
    O8 - Extra context menu item: Open with GetRight Browser - E:\Ohjelmat\GetRight\GRbrowse.htm
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.c...ls/en/x86/client/wuweb_site.cab?1113078317640
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\Ohjelmat\AVGFRE~1\avgamsvr.exe
    O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\Ohjelmat\AVGFRE~1\avgupsvc.exe
    O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - E:\Ohjelmat\Sygate Personal Firewall\smc.exe
    O23 - Service: StyleXPService - Unknown owner - C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe

     
    Wblack, Jun 18, 2005
    #6
  7. tapiiri

    tapiiri Regular member

    Joined:
    Jun 11, 2005
    Messages:
    1,142
    Likes Received:
    0
    Trophy Points:
    46
    Poissa on. Logissa ei mielstäni ole örkkejä.

    Escan-listassasi näyttää suurin osa örkeistä olevan järjestelmän palautus pisteissä. Sammuta järjestelmän palautus ja boottaa kone. Laita
    järjestelmän palautus takaisin päälle.

    Jäljellä jää nuo:

    File E:\Ohjelmat\mIRC\mirc.exe tagged as not-a-virus:Client-IRC.Win32.mIRC.16. No Action Taken.
    File E:\Pelit\Quake 3\Extras\WorldNet\PCVKIT.EXE tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken.
    File E:\Purku\pod25ins.exe tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken.
    File F:\Purku\Softa\mirc616.exe tagged as not-a-virus:Client-IRC.Win32.mIRC.16. No Action Taken.
    File F:\Purku\Softa\aida32ee_393.exe tagged as not-a-virus:Tool.Win32.AIDA.3862. No Action Taken.
    File F:\Jaot\BattleLANv0.5.rar tagged as not-a-virus:NetTool.Win32.PsKill. No Action Taken.
    File F:\Jaot\BattleLANv0.5\BattleLANv0.5\pskill.exe tagged as not-a-virus:NetTool.Win32.PsKill. No Action Taken.

    Katso onko ne tarpeellisia ja poista jos ei ole vikasietotilassa..
     
    tapiiri, Jun 18, 2005
    #7

Share This Page