JRT loki

Discussion in 'Virukset ja haittaohjelmat - HijackThis -logit' started by djjari, Sep 21, 2016.

Page 1 of 2
  1. djjari

    djjari Active member

    Joined:
    Dec 17, 2010
    Messages:
    1,150
    Likes Received:
    6
    Trophy Points:
    68
    Junkware Removal Tool (JRT) by Malwarebytes
    Version: 8.0.7 (07.03.2016)
    Operating System: Windows 7 Home Premium x64
    Ran by Jarppa (Administrator) on ke 21.09.2016 at 21:51:13,41
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




    File System: 8

    Failed to delete: C:\Users\Jarppa\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\46VJXVFL (Temporary Internet Files Folder)
    Failed to delete: C:\Users\Jarppa\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CL864JIU (Temporary Internet Files Folder)
    Failed to delete: C:\Users\Jarppa\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XHS93X89 (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Jarppa\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\C9OJFQ7X (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\46VJXVFL (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\C9OJFQ7X (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CL864JIU (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XHS93X89 (Temporary Internet Files Folder)



    Registry: 0





    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Scan was completed on ke 21.09.2016 at 21:51:59,56
    End of JRT log
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~



    noi ei lähde millään pois,yrittänyt jo monta kertaa,mitähän voisi seuraavaksi koittaa

    jotain on pakko olla pielessä
     
    djjari, Sep 21, 2016
    #1
  2. 1pertti

    1pertti Senior member

    Joined:
    Sep 10, 2008
    Messages:
    9,211
    Likes Received:
    1,235
    Trophy Points:
    243
    En tiedä onnistuuko näin yksinkertaisesti, mutta koska poistettavat kohteet ovat kaikki Temporary Internet Files -kansiossa, niin lataa CCleaner Free, ellei sinulla sitä jo ole. Aja sen puhdistustoiminto aivan oletusasetuksin eli valitse Siivous, paina Analysoi ja sitten Suorita CCleaner. CCleaner poistaa mm. nuo tilapäiset internet-tiedostot ja toivon mukaan samalla myös nuo ongelmakohteet.
     
    1pertti, Sep 21, 2016
    #2
  3. djjari

    djjari Active member

    Joined:
    Dec 17, 2010
    Messages:
    1,150
    Likes Received:
    6
    Trophy Points:
    68

    ei auta,samaa tulee koko ajan jos tekee tarkistuksen tolla JRT ohjelmalla uudestaan

    saman lokin antaa joka kerta
     
    djjari, Sep 21, 2016
    #3
  4. 1pertti

    1pertti Senior member

    Joined:
    Sep 10, 2008
    Messages:
    9,211
    Likes Received:
    1,235
    Trophy Points:
    243
    Tuntuu oudolta, ettei kohteessa Temporary Internet Files olevan kohteen poisto onnistu, mutta olen kyllä aivan maallikko näissä virusasioissa. Koska kyseessä tosiaan on tilapäiskansio, niin tämäkin on aika hakuammuntaa. Joskus haitallisen kohteen poisto ei onnistu, koska se on käynnissä. Siksi voisi poistoa yrittää vielä siten, että ensin ajaa RKill-nimisen sovelluksen, joka pysäyttää mahdolliset haitalliset prosessit. RKill ei poista mitään, vaan sen suorittamisen jälkeen täytyy ajaa varsinainen poisto-ohjelma, kuten tuo JRT käynnistämättä konetta välillä uudelleen.
    http://www.bleepingcomputer.com/download/rkill/
     
    1pertti, Sep 21, 2016
    #4
  5. djjari

    djjari Active member

    Joined:
    Dec 17, 2010
    Messages:
    1,150
    Likes Received:
    6
    Trophy Points:
    68

    edelleen antaa tätä samaa lokia

    File System: 8

    Failed to delete: C:\Users\Jarppa\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\46VJXVFL (Temporary Internet Files Folder)
    Failed to delete: C:\Users\Jarppa\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\C9OJFQ7X (Temporary Internet Files Folder)
    Failed to delete: C:\Users\Jarppa\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XHS93X89 (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Jarppa\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CL864JIU (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\46VJXVFL (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\C9OJFQ7X (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CL864JIU (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XHS93X89 (Temporary Internet Files Folder)
     
    djjari, Sep 22, 2016
    #5
  6. 1pertti

    1pertti Senior member

    Joined:
    Sep 10, 2008
    Messages:
    9,211
    Likes Received:
    1,235
    Trophy Points:
    243
    Tuota... Onko nyt varmaa, että kyseessä on uusi loki? Tuossahan ei näy päivämäärää eikä kelloaikaa ja mukana on edelleen myös nuo onnistuneesti poistetut kohteet.
     
    1pertti, Sep 22, 2016
    #6
  7. djjari

    djjari Active member

    Joined:
    Dec 17, 2010
    Messages:
    1,150
    Likes Received:
    6
    Trophy Points:
    68

    Junkware Removal Tool (JRT) by Malwarebytes
    Version: 8.0.7 (07.03.2016)
    Operating System: Windows 7 Home Premium x64
    Ran by Jarppa (Administrator) on to 22.09.2016 at 22:09:28,42
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




    File System: 8

    Failed to delete: C:\Users\Jarppa\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\46VJXVFL (Temporary Internet Files Folder)
    Failed to delete: C:\Users\Jarppa\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\C9OJFQ7X (Temporary Internet Files Folder)
    Failed to delete: C:\Users\Jarppa\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XHS93X89 (Temporary Internet Files Folder)
    Successfully deleted: C:\Users\Jarppa\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CL864JIU (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\46VJXVFL (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\C9OJFQ7X (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CL864JIU (Temporary Internet Files Folder)
    Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XHS93X89 (Temporary Internet Files Folder)



    Registry: 0





    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Scan was completed on to 22.09.2016 at 22:10:16,34
    End of JRT log
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     
    djjari, Sep 22, 2016
    #7
  8. 1pertti

    1pertti Senior member

    Joined:
    Sep 10, 2008
    Messages:
    9,211
    Likes Received:
    1,235
    Trophy Points:
    243
    Nyt kun katsoin uudelleen ja tarkemmin tuota lokia, huomasin merkillisen seikan. Siellä on samat väliaikaiset internet-kansiot kahteen kertaan ja tuo toinen polku "C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\46VJXVFL (Temporary Internet Files Folder)" ei ole mikään oikea polku kohteelle "Temporary Internet Files\Content.IE5\" Aikani ihmeteltyäni ja googlattuani löytyi tuollainen ketju, jonka koko sisältö ensilukemalta edes oikein avautunut:
    http://answers.microsoft.com/en-us/...umber-of/1b51fbf8-9cc2-4ed2-a150-947d7e02bb5f
     
    1pertti, Sep 23, 2016
    #8
  9. djjari

    djjari Active member

    Joined:
    Dec 17, 2010
    Messages:
    1,150
    Likes Received:
    6
    Trophy Points:
    68
    Malwarebytes löytää koko ajan tollasen haittaohjelman,joka näyttää punasta kategoriaa

    tässä vielä HiJackThis loki


    Logfile of Trend Micro HijackThis v2.0.4
    Scan saved at 9:38:10, on 24.9.2016
    Platform: Windows 7 SP1 (WinNT 6.00.3505)
    MSIE: Internet Explorer v11.0 (11.00.9600.18450)
    Boot mode: Normal

    Running processes:
    C:\Program Files (x86)\Skype\Phone\Skype.exe
    C:\Program Files (x86)\Steam\Steam.exe
    C:\Program Files (x86)\Creative\Sound Blaster Z-Series\Sound Blaster Z-Series Control Panel\SBZ.exe
    C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
    C:\Program Files (x86)\LG Software\LG Smart Share\Update\SmartShareTray.exe
    C:\Program Files (x86)\LG Software\LG Smart Share\DMS\SmartShareDMS.exe
    C:\Program Files (x86)\LG Software\LG Smart Share\DMR\SmartShareDMR.exe
    C:\Program Files (x86)\LG Software\LG Smart Share\DMC\Aggregation.exe
    C:\Program Files (x86)\LG Software\LG Smart Share\DMS\AutoThumb.exe
    C:\haittaohjelmien poistotyökalut\Malwarebytes Anti-Malware\mbam.exe
    C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
    C:\Program Files (x86)\LG Software\LG Smart Share\DMS\avconv.exe
    C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    F2 - REG:system.ini: UserInit=userinit.exe,
    O4 - HKLM\..\Run: [Sound Blaster Z-Series Control Panel] "C:\Program Files (x86)\Creative\Sound Blaster Z-Series\Sound Blaster Z-Series Control Panel\SBZ.exe" /r
    O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
    O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
    O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\steam.exe" -silent
    O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'Paikallinen palvelu')
    O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'Paikallinen palvelu')
    O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'Verkkopalvelu')
    O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'Verkkopalvelu')
    O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
    O16 - DPF: {D4B68B83-8710-488B-A692-D74B50BA558E} (Creative Software AutoUpdate Support Package 2) - http://files.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
    O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://files.creative.com/Web/softwareupdate/ocx/150323/CTPID.cab
    O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
    O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
    O23 - Service: @%SystemRoot%\system32\aelupsvc.dll,-1 (AeLookupSvc) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
    O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
    O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
    O23 - Service: ACP User Service (amdacpusrsvc) - Advanced Micro Devices - C:\Program Files\AMD\{920DEC42-4CA5-4d1d-9487-67BE645CDDFC}\amdacpusrsvc.exe
    O23 - Service: @%systemroot%\system32\appidsvc.dll,-100 (AppIDSvc) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%systemroot%\system32\appinfo.dll,-100 (Appinfo) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: Arohary - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-204 (AudioEndpointBuilder) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-200 (AudioSrv) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\AxInstSV.dll,-103 (AxInstSV) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\bdesvc.dll,-100 (BDESVC) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\bfe.dll,-1001 (BFE) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\qmgr.dll,-1000 (BITS) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%systemroot%\system32\browser.dll,-100 (Browser) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%SystemRoot%\System32\bthserv.dll,-101 (bthserv) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\System32\certprop.dll,-11 (CertPropSvc) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\cryptsvc.dll,-1001 (CryptSvc) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: Creative Audio Service (CTAudSvcService) - Creative Technology Ltd - C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
    O23 - Service: Sound Blaster Audio Service (CtHdaSvc) - Creative Technology Ltd - C:\Windows\sysWow64\CtHdaSvc.exe
    O23 - Service: @oleres.dll,-5012 (DcomLaunch) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\defragsvc.dll,-101 (defragsvc) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\dhcpcore.dll,-100 (Dhcp) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\UtcResources.dll,-3001 (DiagTrack) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: Disc Soft Lite Bus Service - Disc Soft Ltd - E:\05.OHJELMAT\DaemonTools\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
    O23 - Service: @%SystemRoot%\System32\dnsapi.dll,-101 (Dnscache) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%systemroot%\system32\dot3svc.dll,-1102 (dot3svc) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%systemroot%\system32\dps.dll,-500 (DPS) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%systemroot%\system32\eapsvc.dll,-1 (EapHost) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\wevtsvc.dll,-200 (eventlog) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @comres.dll,-2450 (EventSystem) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
    O23 - Service: @%systemroot%\system32\fdPHost.dll,-100 (fdPHost) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%systemroot%\system32\fdrespub.dll,-100 (FDResPub) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%systemroot%\system32\FntCache.dll,-100 (FontCache) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @gpapi.dll,-112 (gpsvc) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\System32\hidserv.dll,-101 (hidserv) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\kmsvc.dll,-6 (hkmsvc) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%SystemRoot%\System32\ListSvc.dll,-100 (HomeGroupListener) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%SystemRoot%\System32\provsvc.dll,-100 (HomeGroupProvider) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\ikeext.dll,-501 (IKEEXT) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%systemroot%\system32\IPBusEnum.dll,-102 (IPBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\iphlpsvc.dll,-500 (iphlpsvc) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
    O23 - Service: @comres.dll,-2946 (KtmRm) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%systemroot%\system32\srvsvc.dll,-100 (LanmanServer) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%systemroot%\system32\wkssvc.dll,-100 (LanmanWorkstation) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\lltdres.dll,-1 (lltdsvc) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\lmhsvc.dll,-101 (lmhosts) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%systemroot%\system32\mmcss.dll,-100 (MMCSS) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
    O23 - Service: @%SystemRoot%\system32\FirewallAPI.dll,-23090 (MpsSvc) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\iscsidsc.dll,-5000 (MSiSCSI) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\msimsg.dll,-27 (msiserver) - Unknown owner - C:\Windows\system32\msiexec.exe
    O23 - Service: @%SystemRoot%\system32\qagentrt.dll,-6 (napagent) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\netman.dll,-109 (Netman) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\netprofm.dll,-202 (netprofm) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%SystemRoot%\System32\nlasvc.dll,-1 (NlaSvc) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\nsisvc.dll,-200 (nsi) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\pnrpsvc.dll,-8004 (p2pimsvc) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8006 (p2psvc) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\pcasvc.dll,-1 (PcaSvc) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%systemroot%\sysWow64\perfhost.exe,-2 (PerfHost) - Unknown owner - C:\Windows\SysWow64\perfhost.exe
    O23 - Service: @%systemroot%\system32\pla.dll,-500 (pla) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\umpnpmgr.dll,-100 (PlugPlay) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\pnrpauto.dll,-8002 (PNRPAutoReg) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\pnrpsvc.dll,-8000 (PNRPsvc) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%SystemRoot%\System32\polstore.dll,-5010 (PolicyAgent) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\umpo.dll,-100 (Power) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%systemroot%\system32\profsvc.dll,-300 (ProfSvc) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%Systemroot%\system32\rasauto.dll,-200 (RasAuto) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%Systemroot%\system32\rasmans.dll,-200 (RasMan) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @regsvc.dll,-1 (RemoteRegistry) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%windir%\system32\RpcEpMap.dll,-1001 (RpcEptMapper) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
    O23 - Service: @oleres.dll,-5010 (RpcSs) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
    O23 - Service: @%SystemRoot%\System32\SCardSvr.dll,-1 (SCardSvr) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\schedsvc.dll,-100 (Schedule) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\System32\certprop.dll,-13 (SCPolicySvc) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\sdrsvc.dll,-107 (SDRSVC) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\Sens.dll,-200 (SENS) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\System32\sensrsvc.dll,-1000 (SensrSvc) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\System32\SessEnv.dll,-1026 (SessionEnv) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%SystemRoot%\System32\shsvcs.dll,-12288 (ShellHWDetection) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
    O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
    O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\sppuinotify.dll,-103 (sppuinotify) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%systemroot%\system32\ssdpsrv.dll,-100 (SSDPSRV) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\sstpsvc.dll,-200 (SstpSvc) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
    O23 - Service: @%SystemRoot%\system32\wiaservc.dll,-9 (stisvc) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\System32\swprv.dll,-103 (swprv) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: Superfetch (SysMain) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\tapisrv.dll,-10100 (TapiSrv) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%SystemRoot%\System32\termsrv.dll,-268 (TermService) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%SystemRoot%\System32\themeservice.dll,-8192 (Themes) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%systemroot%\system32\mmcss.dll,-102 (THREADORDER) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\trkwks.dll,-1 (TrkWks) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%SystemRoot%\servicing\TrustedInstaller.exe,-100 (TrustedInstaller) - Unknown owner - C:\Windows\servicing\TrustedInstaller.exe
    O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
    O23 - Service: @%systemroot%\system32\upnphost.dll,-213 (upnphost) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\dwm.exe,-2000 (UxSms) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
    O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\w32time.dll,-200 (W32Time) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
    O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
    O23 - Service: @%systemroot%\system32\wbiosrvc.dll,-100 (WbioSrvc) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\wcncsvc.dll,-3 (wcncsvc) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\WcsPlugInService.dll,-200 (WcsPlugInService) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%systemroot%\system32\wdi.dll,-502 (WdiServiceHost) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%systemroot%\system32\wdi.dll,-500 (WdiSystemHost) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%systemroot%\system32\webclnt.dll,-100 (WebClient) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\wecsvc.dll,-200 (Wecsvc) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\System32\wercplsupport.dll,-101 (wercplsupport) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%SystemRoot%\System32\wersvc.dll,-100 (WerSvc) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%ProgramFiles%\Windows Defender\MsMpRes.dll,-103 (WinDefend) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\winhttp.dll,-100 (WinHttpAutoProxySvc) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%Systemroot%\system32\wbem\wmisvc.dll,-205 (Winmgmt) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%Systemroot%\system32\wsmsvc.dll,-101 (WinRM) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%SystemRoot%\System32\wlansvc.dll,-257 (Wlansvc) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
    O23 - Service: @%SystemRoot%\system32\wpcsvc.dll,-100 (WPCSvc) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\wpdbusenum.dll,-100 (WPDBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\System32\wscsvc.dll,-200 (wscsvc) - Unknown owner - C:\Windows\System32\svchost.exe
    O23 - Service: @%systemroot%\system32\SearchIndexer.exe,-103 (WSearch) - Unknown owner - C:\Windows\system32\SearchIndexer.exe
    O23 - Service: @%systemroot%\system32\wuaueng.dll,-105 (wuauserv) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\system32\wudfsvc.dll,-1000 (wudfsvc) - Unknown owner - C:\Windows\system32\svchost.exe
    O23 - Service: @%SystemRoot%\System32\wwansvc.dll,-257 (WwanSvc) - Unknown owner - C:\Windows\system32\svchost.exe

    --
    End of file - 20374 bytes
     

    Attached Files:

    • 1.
      1.jpg
      File size:
      57.4 KB
    djjari, Sep 24, 2016
    #9
  10. djjari

    djjari Active member

    Joined:
    Dec 17, 2010
    Messages:
    1,150
    Likes Received:
    6
    Trophy Points:
    68
    jotain on nyt kyllä pahasti pielessä,kun noita ei saa millään pois

    nyt taisin saada ne pois, täytyy vielä tarkkailla ja tehdä välillä tarkistus varmuuden vuoksi uudelleen
     

    Attached Files:

    • 2.
      2.jpg
      File size:
      37.6 KB
    Last edited: Sep 24, 2016
    djjari, Sep 24, 2016
    #10
  11. djjari

    djjari Active member

    Joined:
    Dec 17, 2010
    Messages:
    1,150
    Likes Received:
    6
    Trophy Points:
    68
    ei se nyt jätä mun konetta rauhaan,taas löyty tollaset,vaikka jo luulin saaneeni tän koneen puhtaaks :(
     

    Attached Files:

    djjari, Sep 26, 2016
    #11
  12. *Trinity*

    *Trinity* Senior member

    Joined:
    Dec 15, 2014
    Messages:
    6,949
    Likes Received:
    1,260
    Trophy Points:
    243
    Heh ja hah.

    Noi alun jutut ei ilmeisesti ole varsinaisia haitaohjelmia, eikä liity noihin muihn löytöihin.


    Edittiä:
    Aja vielä kertaalleen JRT ja sen jäälkeen lataa Adwcleanerr alla olevalta sivulta.
    https://toolslib.net/downloads/viewdownload/1-adwcleaner/
    aukaise AdwCleaner
    Klikkaa Scan ja jos otain läytyy niin clean
    käynnistä kone uudelleen.
    Anna kummmastakin lokit.

    Lataa tfc cleaner (tämä on temppien poistoon, katsotaan lähteekö nuo alun jutut)
    http://www.bleepingcomputer.com/download/tfc/

    Auakiset vain TFC cleanerin ja klikkaat start
    Ohjelma on valmis kun koko poiston tulkoset on näkyvissä, tässä saattaa mennä useampi minuuttti.

    Noilla alkuun sitten täytyy miettiä noita varsinaisia haittaohjelmia.
     
    Last edited: Sep 26, 2016
    *Trinity*, Sep 26, 2016
    #12
    djjari likes this.
  13. djjari

    djjari Active member

    Joined:
    Dec 17, 2010
    Messages:
    1,150
    Likes Received:
    6
    Trophy Points:
    68

    asensin windowsin kokonaan uudestaan,mutta tuo käynnistys ongelma vaan jatkuu,eli jos koneen uudelleen käynnistää niin jää jumiin,juuri vähän ennen kunnes windows logo ehtii tulla
     
    djjari, Sep 27, 2016
    #13
  14. *Trinity*

    *Trinity* Senior member

    Joined:
    Dec 15, 2014
    Messages:
    6,949
    Likes Received:
    1,260
    Trophy Points:
    243
    Käynnistysongelma jatkuu? oliko se siis ennen tätä uudelleen asennusta myös.
     
    *Trinity*, Sep 27, 2016
    #14
    djjari likes this.
  15. djjari

    djjari Active member

    Joined:
    Dec 17, 2010
    Messages:
    1,150
    Likes Received:
    6
    Trophy Points:
    68
    oli joo,välillä käynnistuu ja välillä ei
     
    djjari, Sep 27, 2016
    #15
  16. *Trinity*

    *Trinity* Senior member

    Joined:
    Dec 15, 2014
    Messages:
    6,949
    Likes Received:
    1,260
    Trophy Points:
    243
    Jaaha no voisit testata levyn kunnon aluksi, pistä kuva ohjelmasta tänne..

    Eli crystaldiskinfo seuraavalta sivulta.
    http://crystalmark.info/download/index-e.html

    Kannattaa ladata portbale versio, asennettavan mukana tulee ylimääräisiä.
     
    *Trinity*, Sep 27, 2016
    #16
    djjari likes this.
  17. djjari

    djjari Active member

    Joined:
    Dec 17, 2010
    Messages:
    1,150
    Likes Received:
    6
    Trophy Points:
    68
    -----------------------------------------------------------------------
    CrystalDiskMark 3.0.4 x64 (C) 2007-2015 hiyohiyo
    Crystal Dew World : http://crystalmark.info/
    -----------------------------------------------------------------------
    * MB/s = 1,000,000 byte/s [SATA/300 = 300,000,000 byte/s]

    Sequential Read : 436.907 MB/s
    Sequential Write : 377.820 MB/s
    Random Read 512KB : 320.548 MB/s
    Random Write 512KB : 337.017 MB/s
    Random Read 4KB (QD=1) : 9.337 MB/s [ 2279.7 IOPS]
    Random Write 4KB (QD=1) : 12.304 MB/s [ 3003.8 IOPS]
    Random Read 4KB (QD=32) : 248.914 MB/s [ 60770.1 IOPS]
    Random Write 4KB (QD=32) : 198.259 MB/s [ 48403.2 IOPS]

    Test : 1000 MB [C: 21.1% (49.1/232.7 GB)] (x5)
    Date : 2016/09/27 20:09:40
    OS : Windows 7 Home Premium SP1 [6.1 Build 7601] (x64)


    tollasta se antoi ja laitan vielä kuvakaappauksen
     

    Attached Files:

    djjari, Sep 27, 2016
    #17
  18. *Trinity*

    *Trinity* Senior member

    Joined:
    Dec 15, 2014
    Messages:
    6,949
    Likes Received:
    1,260
    Trophy Points:
    243
    Nyt tuli väärä ohjelma eli siis crystaldiskinfo. Tuo kuva on crystaldiskmarkista.
     
    *Trinity*, Sep 27, 2016
    #18
  19. djjari

    djjari Active member

    Joined:
    Dec 17, 2010
    Messages:
    1,150
    Likes Received:
    6
    Trophy Points:
    68

    mikä se oikea linkki on,kun en löydä sitä
     
    djjari, Sep 27, 2016
    #19
  20. *Trinity*

    *Trinity* Senior member

    Joined:
    Dec 15, 2014
    Messages:
    6,949
    Likes Received:
    1,260
    Trophy Points:
    243
    *Trinity*, Sep 27, 2016
    #20
    djjari likes this.
Page 1 of 2

Share This Page