Kiireesti apua!!!

Discussion in 'Virukset ja haittaohjelmat - HijackThis -logit' started by akslei, Jun 7, 2007.

  1. akslei

    akslei Regular member

    Joined:
    Oct 18, 2006
    Messages:
    103
    Likes Received:
    0
    Trophy Points:
    26
    Auttakaa tässä. kone ihan jumissa. kiitos!


    Logfile of Trend Micro HijackThis v2.0.0 (BETA)
    Scan saved at 17:35:38, on 7.6.2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\WINDOWS\eHome\ehRecvr.exe
    C:\WINDOWS\eHome\ehSched.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\WINDOWS\system32\dllhost.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\ctfmon.exe
    C:\WINDOWS\ehome\ehtray.exe
    C:\WINDOWS\SOUNDMAN.EXE
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
    C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
    C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
    C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
    C:\WINDOWS\eHome\ehmsas.exe
    C:\program files\steam\steam.exe
    C:\Windows\xpupdate.exe
    C:\Program Files\MagicDisc\MagicDisc.exe
    C:\WINDOWS\BricoPacks\Vista Inspirat\ObjectDock\ObjectDock.exe
    C:\WINDOWS\BricoPacks\Vista Inspirat\YzToolbar\YzToolBar.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    C:\Documents and Settings\kumpula\Desktop\HiJackThis_v2.0.0.0.exe

    O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~3\Office12\GRA8E1~1.DLL
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
    O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
    O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
    O4 - HKLM\..\Run: [RegistrySmart] "C:\Program Files\RegistrySmart\RegistrySmart.exe" -boot
    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
    O4 - HKCU\..\Run: [Windows update loader] C:\Windows\xpupdate.exe
    O4 - HKCU\..\Run: [Windows Media Center] RunDLL32.exe C:\WINDOWS\ehome\ehuihlp.dll,BootMediaCenter
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
    O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
    O4 - Startup: MagicDisc.lnk = C:\Program Files\MagicDisc\MagicDisc.exe
    O4 - Startup: Stardock ObjectDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat\ObjectDock\ObjectDock.exe
    O4 - Startup: Y'z ToolBar.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat\YzToolbar\YzToolBar.exe
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
    O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
    O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by114fd.bay114.hotmail.msn.com/resources/MsnPUpld.cab
    O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~3\Office12\GR99D3~1.DLL
    O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
    O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
    O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: Pinnacle Systems Media Service (PinnacleSys.MediaServer) - Pinnacle Systems - c:\program files\pinnacle\shared files\programs\mediaserver\pmshost.exe
    O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

    --
    End of file - 6703 bytes
     
    akslei, Jun 7, 2007
    #1
  2. Auttaja

    Auttaja Guest

    jaahas, minnes palomuuri jäänny?

    =======

    Lataa SDFix by AndyManchesta http://downloads.andymanchesta.com/RemovalTools/SDFix.exe ja tallenna se työpöydällesi.

    Käynnistä koneesi vikasietotilaan ja valitse tavallinen käyttäjätilisi:

    * Käynnistä tietokone
    * Kun kuulet koneen piippaavan, paina F8, kuitenkin ennen Windowsin logon esiintuloa
    * Seuraavaksi pitäisi ilmestyä valikko
    * Valitse valikosta vikasietotila.


    * Tee ohjelmalle oma kansio C:\SDFix ja siirrä se sinne
    * Avaa SDFix-kansio ja tuplaklikkaa tiedostoa RunThis.bat käynnistääksesi ohjelman.
    * Paina Y käynnistääksesi skriptin.
    * Työkalu puhdistaa troijalaisen palvelut ja tekee myös joitakin korjauksia rekisteriin. Lopuksi se pyytää käynnistämään koneen uudelleen, "Press any key to Reboot".
    * Paina mitä tahansa näppäintä ja kone käynnistyy uudelleen.
    * Käynnistyminen kestää normaalia kauemmin sillä SDFix puhdistaa konetta.
    * Kun kone on käynnistynyt ja työpöytä latautunut, SDFix kertoo että puhdistus on suoritettu, "Finished".
    * Paina sitten mitä tahansa näppäintä sulkeaksesi skriptin ja ladataksesi pikakuvakkeet työpöydälle.
    * Lopuksi avaa SDFix kansio ja kopioi & liitä tiedoston Report.txt sisältö viestiketjuusi


    uuden HijackThis lokin kera.


     
    Auttaja, Jun 7, 2007
    #2
  3. akslei

    akslei Regular member

    Joined:
    Oct 18, 2006
    Messages:
    103
    Likes Received:
    0
    Trophy Points:
    26
    en saanut oikein toimii tota ohjelmaa ku se samantien sulki koko ohjelman ku paino y:tä. neuvoja? tässä kuitenkin hijack varmaan samanlainen ku äskeinene.

    Logfile of Trend Micro HijackThis v2.0.0 (BETA)
    Scan saved at 18:41:47, on 7.6.2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    C:\WINDOWS\eHome\ehRecvr.exe
    C:\WINDOWS\eHome\ehSched.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\WINDOWS\system32\dllhost.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\ctfmon.exe
    C:\WINDOWS\ehome\ehtray.exe
    C:\WINDOWS\eHome\ehmsas.exe
    C:\WINDOWS\SOUNDMAN.EXE
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
    C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
    C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
    C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
    C:\program files\steam\steam.exe
    C:\Program Files\MagicDisc\MagicDisc.exe
    C:\WINDOWS\BricoPacks\Vista Inspirat\ObjectDock\ObjectDock.exe
    C:\WINDOWS\BricoPacks\Vista Inspirat\YzToolbar\YzToolBar.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Documents and Settings\kumpula\Desktop\HiJackThis_v2.0.0.0.exe

    O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~3\Office12\GRA8E1~1.DLL
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
    O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
    O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
    O4 - HKLM\..\Run: [RegistrySmart] "C:\Program Files\RegistrySmart\RegistrySmart.exe" -boot
    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
    O4 - HKCU\..\Run: [Windows update loader] C:\Windows\xpupdate.exe
    O4 - HKCU\..\Run: [Windows Media Center] RunDLL32.exe C:\WINDOWS\ehome\ehuihlp.dll,BootMediaCenter
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
    O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
    O4 - Startup: MagicDisc.lnk = C:\Program Files\MagicDisc\MagicDisc.exe
    O4 - Startup: Stardock ObjectDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat\ObjectDock\ObjectDock.exe
    O4 - Startup: Y'z ToolBar.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat\YzToolbar\YzToolBar.exe
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
    O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
    O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by114fd.bay114.hotmail.msn.com/resources/MsnPUpld.cab
    O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~3\Office12\GR99D3~1.DLL
    O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
    O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
    O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: Pinnacle Systems Media Service (PinnacleSys.MediaServer) - Pinnacle Systems - c:\program files\pinnacle\shared files\programs\mediaserver\pmshost.exe
    O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

    --
    End of file - 6768 bytes
     
    akslei, Jun 7, 2007
    #3
  4. Auttaja

    Auttaja Guest

    jaaha, tällästä täll kertaa, ajoitko vikasiedossa?
     
    Last edited by a moderator: Jun 7, 2007
    Auttaja, Jun 7, 2007
    #4
  5. akslei

    akslei Regular member

    Joined:
    Oct 18, 2006
    Messages:
    103
    Likes Received:
    0
    Trophy Points:
    26
    ajoin. se vaan hyppää pois heti ku ku painaa yytä ja enteriä.
     
    akslei, Jun 7, 2007
    #5
  6. Auttaja

    Auttaja Guest

    Auttaja, Jun 7, 2007
    #6
  7. akslei

    akslei Regular member

    Joined:
    Oct 18, 2006
    Messages:
    103
    Likes Received:
    0
    Trophy Points:
    26
    "kumpula" - 2007-06-07 19:10:43 Service Pack 2 NTFS
    ComboFix 07-06-3B - Running from: "C:\Documents and Settings\kumpula\Desktop\"


    ((((((((((((((((((((((((( Files Created from 2007-05-07 to 2007-06-07 )))))))))))))))))))))))))))))))


    2007-06-07 18:23 524,288 --ah----- C:\DOCUME~1\ADMINI~1\NTUSER.DAT
    2007-06-07 17:33 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
    2007-06-07 17:25 57,344 --a------ C:\WINDOWS\WNMHINDR.EXE
    2007-06-07 17:25 24,576 --a------ C:\WINDOWS\system32\NMH040A.DLL
    2007-06-07 17:21 724,992 --a------ C:\WINDOWS\iun6002.exe
    2007-06-07 17:21 <DIR> d-------- C:\Program Files\Home Media Networks Limited
    2007-06-07 17:21 <DIR> d-------- C:\Program Files\DivX
    2007-06-06 20:55 101,888 --a------ C:\WINDOWS\system32\vb6stkit.dll
    2007-06-06 20:55 <DIR> d-------- C:\Program Files\RegistrySmart
    2007-06-06 20:50 <DIR> d-------- C:\DOCUME~1\kumpula\APPLIC~1\RegistrySmart
    2007-06-06 20:27 <DIR> d-------- C:\Program Files\RegCure
    2007-05-25 00:45 <DIR> d-------- C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\TEMP
    2007-05-25 00:34 <DIR> d-------- C:\Program Files\MalwareAlarm
    2007-05-20 15:12 271,224 --a------ C:\WINDOWS\system32\mucltui.dll
    2007-05-20 15:12 208,248 --a------ C:\WINDOWS\system32\muweb.dll
    2007-05-20 12:19 32,592 --a------ C:\WINDOWS\system32\msonpmon.dll
    2007-05-20 12:05 <DIR> d-------- C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Microsoft Help
    2007-05-20 12:02 92,160 --a------ C:\WINDOWS\system32\drivers\mcdbus.sys
    2007-05-20 11:43 57,344 --a------ C:\WINDOWS\system32\lfbmp13n.dll
    2007-05-20 11:43 462,848 --a------ C:\WINDOWS\system32\ltkrn13n.dll
    2007-05-20 11:43 450,560 --a------ C:\WINDOWS\system32\ltimg13n.dll
    2007-05-20 11:43 401,408 --a------ C:\WINDOWS\system32\lfcmp13n.dll
    2007-05-20 11:43 299,008 --a------ C:\WINDOWS\system32\ltdis13n.dll
    2007-05-20 11:43 206,336 --a------ C:\WINDOWS\system32\ltefx13n.dll
    2007-05-20 11:43 163,840 --a------ C:\WINDOWS\system32\ltfil13n.dll
    2007-05-20 11:36 <DIR> d-------- C:\DOCUME~1\kumpula\APPLIC~1\Nokia Multimedia Player
    2007-05-20 11:34 <DIR> d-------- C:\DOCUME~1\kumpula\APPLIC~1\Nokia
    2007-05-20 11:34 <DIR> d-------- C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\PC Suite
    2007-05-20 11:33 90,624 --a------ C:\WINDOWS\system32\nmwcdcls.dll
    2007-05-20 11:33 8,320 --a------ C:\WINDOWS\system32\drivers\nmwcdc.sys
    2007-05-20 11:33 65,536 --a------ C:\WINDOWS\system32\nmwcdcocls.dll
    2007-05-20 11:33 137,216 --a------ C:\WINDOWS\system32\drivers\nmwcd.sys
    2007-05-20 11:33 12,288 --a------ C:\WINDOWS\system32\drivers\nmwcdcm.sys
    2007-05-20 11:33 <DIR> d-------- C:\DOCUME~1\kumpula\APPLIC~1\PC Suite
    2007-05-20 11:33 <DIR> d-------- C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Installations
    2007-05-19 19:55 <DIR> d-------- C:\Program Files\GIF Movie Gear
    2007-05-19 19:53 <DIR> d-------- C:\Program Files\gamani
    2007-05-19 00:52 45,927 --a------ C:\WINDOWS\BricoPackUninst.cmd
    2007-05-19 00:50 2,160 --a------ C:\WINDOWS\BricoPackFoldersDelete.cmd
    2007-05-19 00:49 <DIR> d-------- C:\WINDOWS\BricoPacks
    2007-05-18 19:08 24,608 --a------ C:\WINDOWS\system32\drivers\phtvtune.sys
    2007-05-18 00:10 <DIR> d-------- C:\DOCUME~1\kumpula\Contacts
    2007-05-17 15:30 <DIR> d-------- C:\Program Files\Advanced GIF Animator
    2007-05-17 15:21 <DIR> d-------- C:\Program Files\Access Image
    2007-05-17 11:31 <DIR> d-------- C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Adobe Systems
    2007-05-17 11:27 <DIR> d-------- C:\Adobe Photoshop
    2007-05-17 03:28 221,184 --a------ C:\WINDOWS\system32\wmpns.dll
    2007-05-17 03:24 <DIR> d-------- C:\DOCUME~1\kumpula\APPLIC~1\Azureus
    2007-05-17 03:24 <DIR> d-------- C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Azureus
    2007-05-17 03:20 671 --a------ C:\WINDOWS\mozver.dat
    2007-05-17 01:52 22,752 --a------ C:\WINDOWS\system32\spupdsvc.exe
    2007-05-17 01:45 3,072 --a------ C:\WINDOWS\system32\drivers\audstub.sys
    2007-05-17 01:44 57,472 --a------ C:\WINDOWS\system32\drivers\redbook.sys
    2007-05-17 01:44 21,504 --a------ C:\WINDOWS\system32\hidserv.dll
    2007-05-17 01:43 74,240 --a------ C:\WINDOWS\system32\usbui.dll
    2007-05-17 01:43 6,400 --a------ C:\WINDOWS\system32\drivers\enum1394.sys
    2007-05-17 01:43 20,992 --a------ C:\WINDOWS\system32\drivers\RTL8139.sys
    2007-05-17 01:40 9,936 --a------ C:\WINDOWS\system\LZEXPAND.DLL
    2007-05-17 01:40 9,008 --a------ C:\WINDOWS\system\VER.DLL
    2007-05-17 01:40 85,020 --a------ C:\WINDOWS\system32\dgsetup.dll
    2007-05-17 01:40 82,944 --a------ C:\WINDOWS\system\OLECLI.DLL
    2007-05-17 01:40 8,704 --a------ C:\WINDOWS\system32\batt.dll
    2007-05-17 01:40 8,192 -ra------ C:\WINDOWS\system32\kbdhept.dll
    2007-05-17 01:40 74,752 --a------ C:\WINDOWS\system32\storprop.dll
    2007-05-17 01:40 7,168 -ra------ C:\WINDOWS\system32\kbdcz.dll
    2007-05-17 01:40 69,584 --a------ C:\WINDOWS\system\AVICAP.DLL
    2007-05-17 01:40 68,768 --a------ C:\WINDOWS\system\MMSYSTEM.DLL
    2007-05-17 01:40 61,440 --a------ C:\WINDOWS\notepad.exe
    2007-05-17 01:40 6,656 -ra------ C:\WINDOWS\system32\kbdycl.dll
    2007-05-17 01:40 6,656 -ra------ C:\WINDOWS\system32\kbdsl1.dll
    2007-05-17 01:40 6,656 -ra------ C:\WINDOWS\system32\kbdsl.dll
    2007-05-17 01:40 6,656 -ra------ C:\WINDOWS\system32\kbdpl.dll
    2007-05-17 01:40 6,656 -ra------ C:\WINDOWS\system32\kbdhu.dll
    2007-05-17 01:40 6,656 -ra------ C:\WINDOWS\system32\kbdhela3.dll
    2007-05-17 01:40 6,656 -ra------ C:\WINDOWS\system32\kbdcz2.dll
    2007-05-17 01:40 6,656 -ra------ C:\WINDOWS\system32\kbdcz1.dll
    2007-05-17 01:40 6,656 -ra------ C:\WINDOWS\system32\kbdcr.dll
    2007-05-17 01:40 6,656 -ra------ C:\WINDOWS\system32\KBDAL.DLL
    2007-05-17 01:40 6,144 -ra------ C:\WINDOWS\system32\kbdtuq.dll
    2007-05-17 01:40 6,144 -ra------ C:\WINDOWS\system32\kbdtuf.dll
    2007-05-17 01:40 6,144 -ra------ C:\WINDOWS\system32\kbdlv1.dll
    2007-05-17 01:40 6,144 -ra------ C:\WINDOWS\system32\kbdlv.dll
    2007-05-17 01:40 6,144 -ra------ C:\WINDOWS\system32\kbdhela2.dll
    2007-05-17 01:40 6,144 -ra------ C:\WINDOWS\system32\kbdgkl.dll
    2007-05-17 01:40 6,144 -ra------ C:\WINDOWS\system32\kbdest.dll
    2007-05-17 01:40 5,632 -ra------ C:\WINDOWS\system32\kbdro.dll
    2007-05-17 01:40 5,632 -ra------ C:\WINDOWS\system32\kbdpl1.dll
    2007-05-17 01:40 5,632 -ra------ C:\WINDOWS\system32\kbdmon.dll
    2007-05-17 01:40 5,632 -ra------ C:\WINDOWS\system32\kbdlt1.dll
    2007-05-17 01:40 5,632 -ra------ C:\WINDOWS\system32\kbdlt.dll
    2007-05-17 01:40 5,632 -ra------ C:\WINDOWS\system32\kbdkyr.dll
    2007-05-17 01:40 5,632 -ra------ C:\WINDOWS\system32\kbdhu1.dll
    2007-05-17 01:40 5,632 -ra------ C:\WINDOWS\system32\kbdhe319.dll
    2007-05-17 01:40 5,632 -ra------ C:\WINDOWS\system32\kbdhe220.dll
    2007-05-17 01:40 5,632 -ra------ C:\WINDOWS\system32\kbdhe.dll
    2007-05-17 01:40 5,632 -ra------ C:\WINDOWS\system32\kbdazel.dll
    2007-05-17 01:40 5,120 --a------ C:\WINDOWS\system\SHELL.DLL
    2007-05-17 01:40 32,816 --a------ C:\WINDOWS\system\COMMDLG.DLL
    2007-05-17 01:40 24,661 --a------ C:\WINDOWS\system32\spxcoins.dll
    2007-05-17 01:40 24,064 --a------ C:\WINDOWS\system\OLESVR.DLL


    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

    2007-06-07 15:56:15 -------- d-----w C:\Program Files\Steam
    2007-06-07 14:20:14 -------- d-----w C:\Program Files\DScaler
    2007-06-06 18:00:58 -------- d-----w C:\Program Files\RevConnect
    2007-06-04 08:20:02 -------- d-----w C:\Program Files\MSN Messenger
    2007-06-02 13:39:31 -------- d-----w C:\Program Files\Azureus
    2007-05-18 21:52:02 218,624 ----a-w C:\WINDOWS\system32\uxtheme.dll
    2007-05-17 14:20:26 -------- d-----w C:\Program Files\Filzip
    2007-05-17 06:50:23 -------- d-----w C:\Program Files\Messenger
    2007-05-16 19:56:57 -------- d-----w C:\Program Files\Movie Maker
    2007-05-16 19:49:48 -------- d-----w C:\Program Files\Windows NT
    2007-05-12 18:15:34 -------- d--h--w C:\Program Files\InstallShield Installation Information
    2007-05-04 10:05:24 -------- d-----w C:\Program Files\MP3 WAV Converter
    2007-05-04 10:03:10 -------- d-----w C:\Program Files\GoldLeo Auido Converter
    2007-05-04 09:39:03 -------- d-----w C:\Program Files\DIFX
    2007-05-04 09:38:50 -------- d-----w C:\Program Files\Common Files\PCSuite
    2007-05-04 09:38:45 -------- d-----w C:\Program Files\Nokia
    2007-05-04 09:38:45 -------- d-----w C:\Program Files\Common Files\Nokia
    2007-05-04 09:38:33 -------- d-----w C:\Program Files\PC Connectivity Solution
    2007-05-02 17:22:45 -------- d-----w C:\Program Files\Webteh
    2007-05-02 12:53:19 -------- d-----w C:\Program Files\iTunes
    2007-05-02 12:53:14 -------- d-----w C:\Program Files\iPod
    2007-05-02 12:53:01 -------- d-----w C:\Program Files\QuickTime
    2007-05-01 18:12:04 -------- d-----w C:\Program Files\Uusi kansio
    2007-05-01 16:19:51 -------- d-----w C:\Program Files\Common Files\xing shared
    2007-05-01 16:19:49 -------- d-----w C:\Program Files\Common Files\Real
    2007-05-01 16:19:36 -------- d-----w C:\Program Files\Real
    2007-04-29 16:42:36 -------- d-----w C:\Program Files\ATI Technologies
    2007-04-29 16:40:10 -------- d-----w C:\Program Files\Common Files\InstallShield
    2007-04-29 15:28:12 -------- d-----w C:\Program Files\Lavalys
    2007-04-29 13:34:49 -------- d-----w C:\Program Files\Common Files\ODBC
    2007-04-29 13:34:45 -------- d-----w C:\Program Files\Common Files\SpeechEngines
    2007-04-29 11:49:34 -------- d-----w C:\Program Files\Realtek
    2007-04-29 11:18:24 -------- d-----w C:\Program Files\Alwil Software
    2007-04-29 11:12:52 -------- d-----w C:\Program Files\microsoft frontpage
    2007-04-29 11:12:36 0 --sha-r C:\MSDOS.SYS
    2007-04-29 11:12:36 0 --sha-r C:\IO.SYS
    2007-04-29 11:12:36 0 ----a-w C:\CONFIG.SYS
    2007-04-29 11:12:36 0 ----a-w C:\AUTOEXEC.BAT
    2007-04-29 11:11:32 -------- d--h--w C:\Program Files\WindowsUpdate
    2007-04-29 11:11:29 -------- d-----w C:\Program Files\Online Services
    2007-04-29 11:10:41 -------- d-----w C:\Program Files\Common Files\MSSoap
    2007-04-29 11:09:12 -------- d-----w C:\Program Files\MSN Gaming Zone
    2007-04-18 16:12:23 2,854,400 ----a-w C:\WINDOWS\system32\msi.dll
    2007-04-16 19:45:28 92,504 ----a-w C:\WINDOWS\system32\cdm.dll
    2007-04-16 19:45:20 43,352 ----a-w C:\WINDOWS\system32\wups2.dll
    2007-03-17 13:43:01 431,104 ----a-w C:\WINDOWS\system32\winsrv.dll
    2007-03-08 15:36:28 577,536 ----a-w C:\WINDOWS\system32\user32.dll
    2007-03-08 15:36:28 40,960 ----a-w C:\WINDOWS\system32\mf3216.dll
    2007-03-08 15:36:28 281,600 ----a-w C:\WINDOWS\system32\gdi32.dll
    2007-03-08 13:47:48 1,843,584 ----a-w C:\WINDOWS\system32\win32k.sys


    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))


    *Note* empty entries & legit default entries are not shown

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects]
    {72853161-30C5-4D22-B7F9-0BBC1D38A37E}=C:\PROGRA~1\MICROS~3\Office12\GRA8E1~1.DLL [2006-10-27 00:48]
    {761497BB-D6F0-462C-B6EB-D4DAF1D92D43}=C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll [2007-03-14 03:43]
    {9030D464-4C02-4ABF-8ECC-5164760863C6}=C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2006-08-31 20:33]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "SoundMan"="SOUNDMAN.EXE" [2006-11-17 05:42 C:\WINDOWS\soundman.exe]
    "avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-01-15 19:28]
    "ATICCC"="C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" [2006-01-02 17:41]
    "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe" [2007-03-14 03:43]
    "PCSuiteTrayApplication"="C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe" [2007-03-23 13:20]
    "GrooveMonitor"="C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-27 00:47]
    "RegistryMechanic"="" []
    "RegistrySmart"="C:\Program Files\RegistrySmart\RegistrySmart.exe" [2006-08-25 13:01]
    "!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-05-30 15:30]

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 02:56]
    "Steam"="c:\program files\steam\steam.exe" [2007-05-31 09:58]
    "Windows Media Center"="C:\WINDOWS\ehome\ehuihlp.dll,BootMediaCenter" []

    [HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
    "Nokia.PCSync"=C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
    "InstallVisualStyle"=C:\WINDOWS\Resources\Themes\Royale\Royale.msstyles
    "InstallTheme"=C:\WINDOWS\Resources\Themes\Royale.theme

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
    "{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"="C:\PROGRA~1\MICROS~3\Office12\GRA8E1~1.DLL" [2006-10-27 00:48]
    "{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\shellexecutehook.dll" [2007-05-30 15:29]

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PinnacleDriverCheck]
    C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PMCRemote]
    C:\Program Files\Pinnacle\Shared Files\Programs\Remote\Remoterm.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PMCS]
    "C:\Program Files\Pinnacle\Shared Files\Programs\MediaCenterService\PMC.Service.Main.exe" -host -clearDebug

    HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost *netsvcs*


    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\J]
    AutoRun\command- J:\Launcher.exe


    Contents of the 'Scheduled Tasks' folder
    2007-06-06 17:27:17 C:\WINDOWS\tasks\RegCure.job

    **************************************************************************

    catchme 0.3.692 W2K/XP/Vista - userland rootkit detector by Gmer, http://www.gmer.net
    Rootkit scan 2007-06-07 19:13:03
    Windows 5.1.2600 Service Pack 2 NTFS

    scanning hidden processes ...

    scanning hidden autostart entries ...

    scanning hidden files ...

    scan completed successfully
    hidden files: 0

    **************************************************************************

    Completion time: 2007-06-07 19:13:49

    --- E O F ---
     
    akslei, Jun 7, 2007
    #7
  8. Auttaja

    Auttaja Guest

    Tallena nämä ohjeet teksitiedostoon sillä et voi lukea niitä muuten vikasietotilassa.

    ========

    Poista ohjauspaneelin lisää/poista sovelluksen kautta registryssmart

    ==========

    Avaa hijackthis merkkaa seuraavat rivi(t) ja paina fix checked, sulje muut ohjelmat siksi aikaa.

    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O4 - HKLM\..\Run: [RegistrySmart] "C:\Program Files\RegistrySmart\RegistrySmart.exe" -boot (taitaa olla roskaa)
    O4 - HKCU\..\Run: [Windows update loader] C:\Windows\xpupdate.exe


    Tässä ohje miten merkataan:
    [​IMG]


    ==========

    1. Lataa AVG Anti-Spyware 7.5 ja tallenna ohjelma työpöydällesi. Jos sinulla on jo kyseinen ohjelma siirry suoraan kohtaan 2!

    [*]Kun olet ladannut ohjelman, kaksoisklikkaa asennuohjelman pikakuvaketta työpöydälläsi, asennus alkaa.
    [*]Asennuksen jälkeen täytyy ohjelma käynnistää ja sen tunnisteet päivittää.

    2. [*]Käynnistä AVG Anti-Spyware.
    [*]Klikkaa "Update" kuvaketta päävalikossa. Sen jälkeen klikkaa "Update now" painiketta.
    [*]Sitten klikkaa "Start Update" kuvaketta jolloin päivitys alkaa.
    [*]Paina hetken kuluttua uudestaan "Start Update" , jos päivitykset eivät heti onnistu
    [*]Jos automaattipäivitys ei jostain syystä toimi, niin tunnisteet voi ladata manuaalisesti http://www.ewido.net/en/download/updates/ -linkin takaa.
    [*]Kun päivitykset on ladattu, klikkaa "Scanner" kuvaketta ikkunan ylälaidassa. Valitse sitten "Settings" välilehti.
    [*]Kun "Settings" valikko on auennut, klikkaa "Recommended actions" ja sitten valitse "Quarantine".
    [*]Sitten "Reports" valikon alta:a
    [*]Laita täppi kohtaan "Automatically generate report after every scan"
    [*]Ota täppi pois kohdasta"Only if threats were found"
    [*]Sitten klikkaa "Shield" kuvaketta ikkunan ylälaidassa
    [*]"Resident shield is", muuta tila active:sta inactive:ksi
    [*]Sulje ohjelma, ÄLÄ skannaa vielä.

    Käynnistä tietokoneesi vikasietotilaan

    Laita piilotiedostot näkyviin ja poiston jälkeen piiloon takaisin

    Poista

    C:\Windows\xpupdate.exe
    C:\WINDOWS\WNMHINDR.EXE
    C:\WINDOWS\system32\NMH040A.DLL
    C:\WINDOWS\iun6002.exe
    C:\Program Files\RegistrySmart\

    HUOM! Älä käytä muita ohjelmia AVG skannauksen aikana, tämä saattaa häiritä skannausta.
    [*]Kun vikasietotilassa, käynnistä AVG Anti-Spyware.
    [*]Klikkaa "Scanner" kuvaketta ikkunan ylälaidassa ja valitse "Scan" välilehti. Sitten klikkaa "Complete System Scan".
    [*]AVG aloittaa nyt tietokoneen skannaamisen, ole kärsivällinen sillä skannaus vie aikaa.
    Kun skannaus on valmis:
    TÄRKEÄÄ : Älä klikkaa "Save Scan Report" ennen kuin klikkaat "Apply all Actions"
    [*]Varmistu, että Set all elements to: näyttää Quarantine (1), jos ei, klikkaa linkkiä ja valitse Quarantine popup-valikosta.
    [*]Sinulta kysytään mitä tehdä jos infektioita löytyi, valitse silloin "Apply all actions"
    [​IMG]
    [*]Sitten klikkaa "Reports" kuvaketta ohjelma yläosasta.
    [*]Klikkaa "Save report as" painiketta ikkunan vasemmassa alalaidassa ja tallenna raportti työpöydälle.
    [*]Sulje ohjelma, käynnistä kone normaalisti ja lähetä AVG:n raportti viestiketjuusi.

    ==========

    Tämä jos tunnet tietokoneesi olevan hitaan puoleinen, etkä ole eheyttänyt pitkään aikaan:

    Avaa Oma tietokone
    -> Tee seuraava toimenpide kaikille Paikallisille levyille
    [​IMG]

    ==========

    Lataa CCleaner ja asenna se:
    Avaa "Options", sieltä "Language" ja valitse "Suomi (Finnish)"

    Avaa "Virheet" kohta, paina "Etsi rekisterin virheitä", paina "Korjaa valitut rekisterin virheet..". Paina "Kyllä", kun ohjelma kysyy "Haluatko varmuuskopioida muutokset rekisteriin", tallenna tiedosto esim. työpöydälle.

    Avaa "Puhdistaja", paina "Tutki" ja tämän jälkeen "Aja Ccleaner". Puhdista väliaikaistiedostot ja -kansiot ohjelmalla säännöllisesti.

    ==========

    Uusi Hijackthis logi ja onko ongelmia?
     
    Last edited by a moderator: Jun 7, 2007
    Auttaja, Jun 7, 2007
    #8
  9. akslei

    akslei Regular member

    Joined:
    Oct 18, 2006
    Messages:
    103
    Likes Received:
    0
    Trophy Points:
    26
    Sain SDFixin toimimaan ja anto tallaista tietoa:


    SDFix: Version 1.87

    Run by Administrator - to 07.06.2007 - 19:30:45,90

    Microsoft Windows XP [Version 5.1.2600]

    Running From: C:\SDFix

    Safe Mode:
    Checking Services:






    Restoring Windows Registry Values
    Restoring Windows Default Hosts File
    Restoring Missing SharedAccess Service

    Rebooting...


    Normal Mode:
    Checking Files:

    No Trojan Files Found




    Removing Temp Files...

    ADS Check:

    Checking if ADS is attached to system32 Folder
    C:\WINDOWS\system32
    No streams found.

    Checking if ADS is attached to svchost.exe
    C:\WINDOWS\system32\svchost.exe
    No streams found.

    Checking if ADS is attached to ntoskrnl.exe
    C:\WINDOWS\system32\ntoskrnl.exe
    No streams found.



    Final Check:

    Remaining Services:
    ------------------



    Authorized Application Key Export:

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
    "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:mad:xpsp2res.dll,-22019"

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
    "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:mad:xpsp2res.dll,-22019"
     
    akslei, Jun 7, 2007
    #9
  10. Auttaja

    Auttaja Guest

    jees. "Sain SDFixin toimimaan ja anto tallaista tietoa: "
    miten?

    tee noi viestissä olleet ohjeet
    ja pistä sitten "Uusi HijackThis logi ja onko ongelmia?"
     
    Auttaja, Jun 7, 2007
    #10

Share This Page