Kone kaatuilee jatkuvasti

Joo, eli viime perjantaina ilmeni tuo, että kone alkoi kaatuilemaan jatkuvasti, ehkä selaimen tai muuta saa auki, mutta sitten jymähtää. Silloin ajoin Vikasietotilassa kaikki ad-awaret, virus-softat, lopuksi vielä eheytin C-aseman, ja vika poistui.
Kunnes taas tänään ilmeni sama vika..! Sain juuri ja juuri ajettua tuon HjT:n, kun taas jymähti, mutta login kerkesi tallentamaan.

Ja mainittakoon että tätä viestiä kirjottelen vikasietotilassa ja nyt ei ole ongelmia.

Tässä logi, apua kiitos!

Logfile of HijackThis v1.99.1
Scan saved at 19:13:55, on 9.3.2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\system32\taskswitch.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\SanDisk\Sansa Updater\SansaSvr.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
C:\WINDOWS\system32\WgaTray.exe
C:\HJt\HijackThis.exe
C:\PROGRA~1\MOZILL~2\FIREFOX.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
R3 - Default URLSearchHook is missing
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)
O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [CoolSwitch] C:\WINDOWS\system32\taskswitch.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - Global Startup: Adobe Gamma Loader.lnk = ?
O4 - Global Startup: hp psc 1000 series.lnk = ?
O4 - Global Startup: hpoddt01.exe.lnk = ?
O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: EmpirePoker - {77E68763-4284-41d6-B7E7-B6E1F053A9E7} - C:\Program Files\EmpirePoker\EmpirePoker.exe (file missing)
O9 - Extra 'Tools' menuitem: EmpirePoker - {77E68763-4284-41d6-B7E7-B6E1F053A9E7} - C:\Program Files\EmpirePoker\EmpirePoker.exe (file missing)
O9 - Extra button: Oheistiedot - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab53083.cab
O16 - DPF: {C5E28B9D-0A68-4B50-94E9-E8F6B4697514} (NsvPlayX Control) - http://www.nullsoft.com/nsv/embed/nsvplayx_vp3_mp3.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\system32\NavLogon.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Kerio Personal Firewall 4 (KPF4) - Kerio Technologies - C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Sansa Updater Service (SansaService) - Unknown owner - C:\Program Files\SanDisk\Sansa Updater\SansaSvr.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe

 

Terve!

Ei tuossa lokissa mitään kuoleman vakavaa näy, avaa HijackThis merkkaa ja fixaa (fix checked) seuraavat rivit:

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)

Jos et tunnista tätä pokeriohjelmaa niin fixaa

O9 - Extra button: EmpirePoker - {77E68763-4284-41d6-B7E7-B6E1F053A9E7} - C:\Program Files\EmpirePoker\EmpirePoker.exe (file missing)
O9 - Extra 'Tools' menuitem: EmpirePoker - {77E68763-4284-41d6-B7E7-B6E1F053A9E7} - C:\Program Files\EmpirePoker\EmpirePoker.exe (file missing)

*******************************

lataa ATF Cleaner
http://www.atribune.org/ccount/click.php?id=1

Tupla-klikkaa ATF-Cleaner.exe käynnistääksesi ohjelman. Main:n alla valitse: Select All
Klikkaa Empty Selected valintaa.
Jos käytät FireFoxia selaimenasi Klikkaa Firefox yläpuolelta ja valitse: Select All
Klikkaa Empty Selected valintaa.
HUOMIO: Jos haluaisit pitää tallennetut salasanasi, klikkaa No kun se sitä kysyy.
Jos käytät Operaa selaimenasi Klikkaa Opera yläpuolelta ja valitse: Select All
Klikkaa Empty Selected valintaa taas.
HUOMIO: Jos haluaisit pitää tallennetut salasanasi, klikkaa No kun se sitä kysyy.
Klikkaa Exit päävalikosta sulkeaksesi ohjelman.
Teknistä tukea tulee jos tupla-klikkaat sähköpostiosoitetta joka sijaitsee jokaisen menun alapuolella kyseisessä työkalussa. (Huomatkaa että se tuki on sitten englanniksi)

**************************
Eriskummalliset ongelmat on, ajetaan combofixikin:

1. Lataa combofix.exe työpöydällesi jommastakummasta linkistä:
http://www.techsupportforum.com/sectools/sUBs/ComboFix.exe
http://download.bleepingcomputer.com/sUBs/ComboFix.exe

2. Tuplaklikkaa combofix.exe tiedostoa ja seuraa ohjeistuksia.
3. Kun työkalu on valmis, se tuottaa lokin. (C:\ComboFix.txt) Lähetä tämä loki viesti ketjuusi.
Huom! Älä klikkaile combofixin ikkunaa käytön aikana. Tämä saattaa aiheuttaa ohjelman jumiutumisen.

**************************

Lataa AVG Anti-Spyware 7.5 ja tallenna ohjelma työpöydällesi.

[*]Kun olet ladannut ohjelman, kaksoisklikkaa asennuohjelman pikakuvaketta työpöydälläsi, asennus alkaa.
[*]Asennuksen jälkeen täytyy ohjelma käynnistää ja sen tunnisteet päivittää.
[*]Käynnistä AVG Anti-Spyware.
[*]Klikkaa "Update" kuvaketta päävalikossa. Sen jälkeen klikkaa "Update now" painiketta.
[*]Sitten klikkaa "Start Update" kuvaketta jolloin päivitys alkaa.
[*]Kun päivitykset on ladattu, klikkaa "Scanner" kuvaketta ikkunan ylälaidassa. Valitse sitten "Settings" välilehti.
[*]Kun "Settings" valikko on auennut, klikkaa "Recommended actions" ja sitten valitse "Quarantine".
[*]Sitten "Reports" valikon alta:
[*]Laita täppi kohtaan "Automatically generate report after every scan"
[*]Ota täppi pois kohdasta"Only if threats were found"


10. Klikkaa OK jättääksesi Java asetusikkunasi.
[*]Sitten klikkaa "Shield" kuvaketta ikkunan ylälaidassa
[*]"Resident shield is", muuta tila active:sta inactive:ksi
[*]Sulje ohjelma, ÄLÄ skannaa vielä.

Käynnistä tietokone vikasietotilaan:
1. Käynnistä tietokone uudelleen.
2. Kun tietokone käynnistyy, paina F8-näppäintä.
3. Näyttöön tulee erilaisia käynnistysvaihtoehtoja.
4. Valitse näppäimistön nuolinäppäinten avulla Vikasietotila.
5. Paina ENTER-näppäintä.

HUOM! Älä käytä muita ohjelmia AVG skannauksen aikana, tämä saattaa häiritä skannausta.
[*]Kun vikasietotilassa, käynnistä AVG Anti-Spyware.
[*]Klikkaa "Scanner" kuvaketta ikkunan ylälaidassa ja valitse "Scan" välilehti. Sitten klikkaa "Complete System Scan".
[*]AVG aloittaa nyt tietokoneen skannaamisen, ole kärsivällinen sillä skannaus vie aikaa.
Kun skannaus on valmis:
TÄRKEÄÄ : Älä klikkaa "Save Scan Report" ennen kuin klikkaat "Apply all Actions"
[*]Varmistu, että Set all elements to: näyttää Quarantine (1), jos ei, klikkaa linkkiä ja valitse Quarantine popup-valikosta.
[*]Sinulta kysytään mitä tehdä jos infektioita löytyi, valitse silloin "Apply all actions"

[*]Sitten klikkaa "Reports" kuvaketta ohjelma yläosasta.
[*]Klikkaa "Save report as" painiketta ikkunan vasemmassa alalaidassa ja tallenna raportti työpöydälle.
[*]Sulje ohjelma, käynnistä kone normaalisti ja lähetä AVG:n raportti viestiketjuusi.

******************

Aja Lataa ja suorita Norton-poistotyökalu

Ei noista muista kohdista tartte välittää

*****************

Laita uusin HJT-logi

 

Tuossa nyt tuo lokitiedosto, mutta softien ajaminen ei auttanut yhtikäs mitään, kone takkuaa edelleen ja pahasti, en pääse edes tuota Norton Removalia ajamaan, hyvä kun kirjauduttua saan normaalitilassa.

Loki:

---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at: 21:38:51 9.3.2007

+ Scan result:



C:\Program Files\TopText\CHCON.dll -> Adware.EZula : Cleaned with backup (quarantined).
C:\Program Files\TopText\CHPON.dll -> Adware.EZula : Cleaned with backup (quarantined).
HKU\S-1-5-21-725345543-1647877149-2146946837-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{5929CD6E-2062-44A4-B2C5-2C7E78FBAB38} -> Adware.Generic : Cleaned with backup (quarantined).
C:\Program Files\MyEmoticons\VVSNI_S3_MYEM_Inst.exe -> Adware.SaveNow : Cleaned with backup (quarantined).
C:\WINDOWS\system32\winscr32.exe -> Backdoor.Pakes : Cleaned with backup (quarantined).
D:\System Volume Information\_restore{A3271FB7-2BED-4212-837F-BD5DB34EE816}\RP137\A0019343.exe -> Backdoor.Small : Cleaned with backup (quarantined).
D:\Documents and Settings\Ville\Local Settings\Temp\MsgPlusSetup.exe/Sponsor.exe -> Downloader.Swizzor.bt : Cleaned with backup (quarantined).
:mozilla.171:C:\Documents and Settings\Kirsi\Application Data\Mozilla\Firefox\Profiles\9ydjeo25.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.199:C:\Documents and Settings\Kirsi\Application Data\Mozilla\Firefox\Profiles\9ydjeo25.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.497:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.498:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.499:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.500:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.501:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.502:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.503:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.504:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.505:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.506:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.507:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.508:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.509:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.510:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.511:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.512:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.513:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.514:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.515:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.516:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.517:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.518:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.519:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.520:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.521:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.522:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.523:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.524:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.525:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.526:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.527:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.528:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.529:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.530:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.531:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.532:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.533:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.534:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.535:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.536:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.537:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.538:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.539:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.540:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.541:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.542:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.543:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.544:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.545:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.546:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.612:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.194:C:\Documents and Settings\Kirsi\Application Data\Mozilla\Firefox\Profiles\9ydjeo25.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.195:C:\Documents and Settings\Kirsi\Application Data\Mozilla\Firefox\Profiles\9ydjeo25.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.606:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.607:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.608:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
D:\Documents and Settings\Suvi\Cookies\suvi@ad.adition[2].txt -> TrackingCookie.Adition : Cleaned.
:mozilla.602:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Adocean : Cleaned.
:mozilla.603:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Adocean : Cleaned.
:mozilla.279:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.280:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.284:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.285:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.286:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.103:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.
:mozilla.104:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.
:mozilla.6:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\6w647vp8.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.
:mozilla.7:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Firefox\Profiles\6w647vp8.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.
:mozilla.86:C:\Documents and Settings\Kirsi\Application Data\Mozilla\Firefox\Profiles\9ydjeo25.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.
:mozilla.87:C:\Documents and Settings\Kirsi\Application Data\Mozilla\Firefox\Profiles\9ydjeo25.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.
:mozilla.73:C:\Documents and Settings\Kirsi\Application Data\Mozilla\Firefox\Profiles\9ydjeo25.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.74:C:\Documents and Settings\Kirsi\Application Data\Mozilla\Firefox\Profiles\9ydjeo25.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.75:C:\Documents and Settings\Kirsi\Application Data\Mozilla\Firefox\Profiles\9ydjeo25.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.76:C:\Documents and Settings\Kirsi\Application Data\Mozilla\Firefox\Profiles\9ydjeo25.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.79:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.80:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.81:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.82:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.231:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.93:C:\Documents and Settings\Kirsi\Application Data\Mozilla\Firefox\Profiles\9ydjeo25.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.168:C:\Documents and Settings\Kirsi\Application Data\Mozilla\Firefox\Profiles\9ydjeo25.default\cookies.txt -> TrackingCookie.Bfast : Cleaned.
:mozilla.395:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.396:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.397:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.281:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.282:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.283:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.287:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.288:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.289:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.290:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.291:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.292:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.890:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Comclick : Cleaned.
:mozilla.891:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Comclick : Cleaned.
:mozilla.892:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Comclick : Cleaned.
:mozilla.14:C:\Documents and Settings\Kirsi\Application Data\Mozilla\Firefox\Profiles\9ydjeo25.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.78:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.653:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Estat : Cleaned.
:mozilla.265:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.266:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.267:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.268:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.269:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.304:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.319:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.320:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.321:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.370:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.371:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.72:C:\Documents and Settings\Kirsi\Application Data\Mozilla\Firefox\Profiles\9ydjeo25.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.79:C:\Documents and Settings\Kirsi\Application Data\Mozilla\Firefox\Profiles\9ydjeo25.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.81:C:\Documents and Settings\Kirsi\Application Data\Mozilla\Firefox\Profiles\9ydjeo25.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.906:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Information : Cleaned.
D:\Documents and Settings\Suvi\Cookies\suvi@ivwbox[1].txt -> TrackingCookie.Ivwbox : Cleaned.
:mozilla.895:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Masterstats : Cleaned.
:mozilla.234:C:\Documents and Settings\Kirsi\Application Data\Mozilla\Firefox\Profiles\9ydjeo25.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.755:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Overture : Cleaned.
:mozilla.760:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Overture : Cleaned.
:mozilla.766:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.767:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
D:\Documents and Settings\Suvi\Cookies\suvi@guide.real[1].txt -> TrackingCookie.Real : Cleaned.
D:\Documents and Settings\Suvi\Cookies\suvi@www.realcastmedia[1].txt -> TrackingCookie.Realcastmedia : Cleaned.
:mozilla.175:C:\Documents and Settings\Kirsi\Application Data\Mozilla\Firefox\Profiles\9ydjeo25.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.177:C:\Documents and Settings\Kirsi\Application Data\Mozilla\Firefox\Profiles\9ydjeo25.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.781:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.782:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.783:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.784:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.192:C:\Documents and Settings\Kirsi\Application Data\Mozilla\Firefox\Profiles\9ydjeo25.default\cookies.txt -> TrackingCookie.Revenue : Cleaned.
:mozilla.787:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Revenue : Cleaned.
:mozilla.788:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.789:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.790:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.791:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.876:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.88:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Spylog : Cleaned.
:mozilla.331:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.332:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.333:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.334:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.335:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.336:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.337:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.339:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.53:C:\Documents and Settings\Kirsi\Application Data\Mozilla\Firefox\Profiles\9ydjeo25.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.54:C:\Documents and Settings\Kirsi\Application Data\Mozilla\Firefox\Profiles\9ydjeo25.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.55:C:\Documents and Settings\Kirsi\Application Data\Mozilla\Firefox\Profiles\9ydjeo25.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.56:C:\Documents and Settings\Kirsi\Application Data\Mozilla\Firefox\Profiles\9ydjeo25.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.57:C:\Documents and Settings\Kirsi\Application Data\Mozilla\Firefox\Profiles\9ydjeo25.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.58:C:\Documents and Settings\Kirsi\Application Data\Mozilla\Firefox\Profiles\9ydjeo25.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.59:C:\Documents and Settings\Kirsi\Application Data\Mozilla\Firefox\Profiles\9ydjeo25.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.60:C:\Documents and Settings\Kirsi\Application Data\Mozilla\Firefox\Profiles\9ydjeo25.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.390:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.392:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.393:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.209:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.210:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.211:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.212:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.23:C:\Documents and Settings\Kirsi\Application Data\Mozilla\Firefox\Profiles\9ydjeo25.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.24:C:\Documents and Settings\Kirsi\Application Data\Mozilla\Firefox\Profiles\9ydjeo25.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.25:C:\Documents and Settings\Kirsi\Application Data\Mozilla\Firefox\Profiles\9ydjeo25.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.26:C:\Documents and Settings\Kirsi\Application Data\Mozilla\Firefox\Profiles\9ydjeo25.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.27:C:\Documents and Settings\Kirsi\Application Data\Mozilla\Firefox\Profiles\9ydjeo25.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.292:C:\Documents and Settings\Kirsi\Application Data\Mozilla\Firefox\Profiles\9ydjeo25.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.387:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.293:C:\Documents and Settings\Kirsi\Application Data\Mozilla\Firefox\Profiles\9ydjeo25.default\cookies.txt -> TrackingCookie.Valueclick : Cleaned.
:mozilla.821:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Weborama : Cleaned.
:mozilla.406:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned.
:mozilla.78:C:\Documents and Settings\Kirsi\Application Data\Mozilla\Firefox\Profiles\9ydjeo25.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned.
:mozilla.564:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Yadro : Cleaned.
:mozilla.565:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Yadro : Cleaned.
D:\Documents and Settings\Suvi\Cookies\suvi@yadro[1].txt -> TrackingCookie.Yadro : Cleaned.
:mozilla.193:C:\Documents and Settings\Kirsi\Application Data\Mozilla\Firefox\Profiles\9ydjeo25.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.260:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.261:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.262:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.263:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.264:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.179:C:\Documents and Settings\Kirsi\Application Data\Mozilla\Firefox\Profiles\9ydjeo25.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.180:C:\Documents and Settings\Kirsi\Application Data\Mozilla\Firefox\Profiles\9ydjeo25.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.316:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.317:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.318:C:\Documents and Settings\Suvi\Application Data\Mozilla\Firefox\Profiles\ohrad2fh.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.


::Report end

Mikäs tässä nyt oikeen mättää?? Windows uusiksi? Itsellä ei oo mitään käsitystä mistä toi on edes alkanut, käytän konettakin kuitenkin kohtuu vähän.

 

Terve, siula onkin sielä paha pöpö, sitä ei näkynytkään muissa lokeissa, nyt tälläinen ohje: (älä menetä toivoa vielä)

*****************

Lataa fixwareout.exe täältä > http://downloads.subratam.org/Fixwareout.exe
tai täältä >
http://www.bleepingcomputer.com/files/lonny/Fixwareout.exe
ja tallenna se työpöydälle. Tuplaklikkaa sitä ja seuraa ohjeita. Klikkaa Next, sitten Install ja varmistu, että "Run fixit" on valittu. Sinun pitää käynnistää kone uudelleen, kun niin käsketään.

*******************

1. Lataa combofix.exe työpöydällesi jommastakummasta linkistä:
http://www.techsupportforum.com/sectools/sUBs/ComboFix.exe
http://download.bleepingcomputer.com/sUBs/ComboFix.exe

2. Tuplaklikkaa combofix.exe tiedostoa ja seuraa ohjeistuksia.
3. Kun työkalu on valmis, se tuottaa lokin. (C:\ComboFix.txt) Lähetä tämä loki viesti ketjuusi.
Huom! Älä klikkaile combofixin ikkunaa käytön aikana. Tämä saattaa aiheuttaa ohjelman jumiutumisen.

**********************

Lähetä uusi HjT-loki ja c:\fixwareout\report.txt sisältö ja combofixin reportti, uskon että nyt tulee huomattavaa edistystä!

 

Katos lämmöt

EVEREST Free Edition 2.20

on siellä kyllä muutakin
esim, kaksi virusohjelmaa poista toinen lisää poista sovelutuksesta
Fixsatavaakin löytyy vielä.

Nyt vain mua kiinostaa ne koneen lämmöt.

Laita myös uusi hjt loki.

 

Nonni, softat ajettu, poisluettuna ComboFix, joka antaa koko ajan virheen, ja ei suostu toimimaan. Toivottavasti näistä nyt on edes jotain apua, alkaa tämä 640x480 resoluutio ja vikasietotila ketuttamaan.


HjT-logi:

Logfile of HijackThis v1.99.1
Scan saved at 13:34:40, on 10.3.2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\WgaTray.exe
C:\PROGRA~1\MOZILL~2\FIREFOX.EXE
C:\WINDOWS\Explorer.EXE
C:\HJt\HijackThis_v1.99.1.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

Linkit
R3 - Default URLSearchHook is missing
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -

C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -

C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA

Corporation\NvMixer\NVMixerTray.exe"
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control

Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [CoolSwitch] C:\WINDOWS\system32\taskswitch.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec

Shared\ccApp.exe"
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - Global Startup: Adobe Gamma Loader.lnk = ?
O4 - Global Startup: hp psc 1000 series.lnk = ?
O4 - Global Startup: hpoddt01.exe.lnk = ?
O8 - Extra context menu item: Vie Microsoft E&xceliin -

res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -

C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console -

{08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program

Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: Oheistiedot - {92780B25-18CC-41C8-B9BE-3C9C571A8263} -

C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} -

C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger -

{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program

Files\Messenger\msmsgs.exe
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient

Class) -

http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) -

http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient

Class) -

http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) -

http://messenger.zone.msn.com/binary/ZIntro.cab53083.cab
O16 - DPF: {C5E28B9D-0A68-4B50-94E9-E8F6B4697514} (NsvPlayX Control) -

http://www.nullsoft.com/nsv/embed/nsvplayx_vp3_mp3.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} -

C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} -

C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\system32\NavLogon.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. -

C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. -

C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. -

C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. -

C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation -

C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation

- C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation -

C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd -

C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec

Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision

Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel

32\IDriverT.exe
O23 - Service: Kerio Personal Firewall 4 (KPF4) - Kerio Technologies -

C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Sansa Updater Service (SansaService) - Unknown owner -

C:\Program Files\SanDisk\Sansa Updater\SansaSvr.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec

AntiVirus\SavRoam.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec

Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program

Files\Symantec AntiVirus\Rtvscan.exe



Fixwareout -logi:


Fixwareout Last edited 2/11/2007
Post this report in the forums please
...
»»»»»Prerun check

»»»»» System restarted

»»»»» Postrun check
HKLM\SOFTWARE\~\Winlogon\ "System"=""
....
....
»»»»» Misc files.
....
»»»»» Checking for older varients.
....

Search five digit cs, dm, kd, jb, other, files.
The following files NEED TO BE SUBMITTED to one of the following URL'S for further inspection.



Click browse, find the file then click submit.
http://www.virustotal.com/flash/index_en.html
Or http://virusscan.jotti.org/

»»»»» Other



»»»»» Current runs
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NVMixerTray"="\"C:\\Program Files\\NVIDIA Corporation\\NvMixer\\NVMixerTray.exe\""
"ATIPTA"="\"C:\\Program Files\\ATI Technologies\\ATI Control Panel\\atiptaxx.exe\""
"CoolSwitch"="C:\\WINDOWS\\system32\\taskswitch.exe"
"ccApp"="\"C:\\Program Files\\Common Files\\Symantec Shared\\ccApp.exe\""
"AVG7_CC"="C:\\PROGRA~1\\Grisoft\\AVG7\\avgcc.exe /STARTUP"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
....
Hosts file was reset, If you use a custom hosts file please replace it
»»»»» End report »»»»»

EVEREST -lämmöt:
Anturit:
Tyyppi HDD

Lämpötilat:
Suoritin 45 °C (113 °F)
Seagate ST340810A 32 °C (90 °F)
SAMSUNG SP1213C 32 °C (90 °F)

 

Lämmöt on ok

otas toi loki normaalissa tilassa

kumpis virusohjelma on käytössä
Norton vai avg?

 

AVG on käytössä, Nortonin oon olevinaan poistanut, mutta jostain syystä on jäänyt kummittelemaan tonne.

Tässä HjT-logi normaalitilassa otettuna:

Logfile of HijackThis v1.99.1
Scan saved at 11:35:17, on 11.3.2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\WINDOWS\system32\taskswitch.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\Program Files\Symantec AntiVirus\DefWatch.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
C:\Program Files\SanDisk\Sansa Updater\SansaSvr.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
C:\PROGRA~1\Grisoft\AVG7\avgw.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
C:\WINDOWS\Explorer.EXE
C:\HJt\HijackThis_v1.99.1.exe
C:\WINDOWS\system32\WgaTray.exe
C:\PROGRA~1\MOZILL~2\FIREFOX.EXE
C:\WINDOWS\system32\wuauclt.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
R3 - Default URLSearchHook is missing
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [CoolSwitch] C:\WINDOWS\system32\taskswitch.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - Global Startup: Adobe Gamma Loader.lnk = ?
O4 - Global Startup: hp psc 1000 series.lnk = ?
O4 - Global Startup: hpoddt01.exe.lnk = ?
O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: Oheistiedot - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab53083.cab
O16 - DPF: {C5E28B9D-0A68-4B50-94E9-E8F6B4697514} (NsvPlayX Control) - http://www.nullsoft.com/nsv/embed/nsvplayx_vp3_mp3.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\system32\NavLogon.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Kerio Personal Firewall 4 (KPF4) - Kerio Technologies - C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Sansa Updater Service (SansaService) - Unknown owner - C:\Program Files\SanDisk\Sansa Updater\SansaSvr.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe

 

tuosta sitten
Linkki

ja uusi hjt loki

 

Ja taas uusi:

Logfile of HijackThis v1.99.1
Scan saved at 13:00:51, on 11.3.2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\system32\taskswitch.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
C:\Program Files\SanDisk\Sansa Updater\SansaSvr.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
C:\WINDOWS\system32\WgaTray.exe
C:\HJt\HijackThis_v1.99.1.exe
C:\WINDOWS\system32\wuauclt.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
R3 - Default URLSearchHook is missing
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [CoolSwitch] C:\WINDOWS\system32\taskswitch.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - Global Startup: Adobe Gamma Loader.lnk = ?
O4 - Global Startup: hp psc 1000 series.lnk = ?
O4 - Global Startup: hpoddt01.exe.lnk = ?
O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: Oheistiedot - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab53083.cab
O16 - DPF: {C5E28B9D-0A68-4B50-94E9-E8F6B4697514} (NsvPlayX Control) - http://www.nullsoft.com/nsv/embed/nsvplayx_vp3_mp3.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Kerio Personal Firewall 4 (KPF4) - Kerio Technologies - C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Sansa Updater Service (SansaService) - Unknown owner - C:\Program Files\SanDisk\Sansa Updater\SansaSvr.exe

 

Scannaa hjt:llä merkkaa paina Fix checked

R3 - Default URLSearchHook is missing
O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)

aja vielä

Atf cleaner

 

Logfile of HijackThis v1.99.1
Scan saved at 13:19:59, on 11.3.2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
C:\Program Files\SanDisk\Sansa Updater\SansaSvr.exe
C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\system32\taskswitch.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
C:\WINDOWS\system32\WgaTray.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\HJt\HijackThis_v1.99.1.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [CoolSwitch] C:\WINDOWS\system32\taskswitch.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - Global Startup: Adobe Gamma Loader.lnk = ?
O4 - Global Startup: hp psc 1000 series.lnk = ?
O4 - Global Startup: hpoddt01.exe.lnk = ?
O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: Oheistiedot - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab53083.cab
O16 - DPF: {C5E28B9D-0A68-4B50-94E9-E8F6B4697514} (NsvPlayX Control) - http://www.nullsoft.com/nsv/embed/nsvplayx_vp3_mp3.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Kerio Personal Firewall 4 (KPF4) - Kerio Technologies - C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Sansa Updater Service (SansaService) - Unknown owner - C:\Program Files\SanDisk\Sansa Updater\SansaSvr.exe

 

Tää on vikasiedon loki mutta hyvältä näyttää loki

 

Joo, tuli vahingossa väärä loki, mutta muokkasin viestiä ja nyt on normaalitilan.

Kone takkuilee silti, mikä tässä oikeen voi olla kun mikään ei tunnu auttavan?

 

Kerros mikä siinä takkuilee?

ajas tuosta escan
Ohjeet tuolla sivulla.
http://koti.mbnet.fi/pattaya1/escanmwav.htm
lataa tuosta
http://www.spywareinfo.dk/download/mwav.exe
päivitä tuosta
http://koti.mbnet.fi/pattaya1/lataus/Mwav.bat
laita täpit merkkauksien mukaan
http://koti.mbnet.fi/pattaya1/eScan6.jpg

scannaa

jos ala luukkuun tulee jotain niin kopioi se näin:
Käytä komentoa Ctrl+A.
Kopioi rivit komennolla Ctrl+C.
Liitä rivit komennolla Ctrl+V.

Laita virus log tänne.

 

Nää vois auttaa:

Avaa oma tietokone
napsauta oikealla napilla c:levyä
ominaisuudet
työkalut
aja "levyn eheytys" ja sen jälkeen "etsi virheitä asemasta"- toiminta

kerro helpottiko

 

• Avaa HiJackThis
• Klikkaa "Configure" valintaa oikealla alhaalla
• Klikkaa "Misc Tools"
• Klikkaa boxia joka sanoo "Uninstall Manager"
• Klikkaa valintaa "Save list"
• Kopioi ja liitä kyseinen lista muistiosta postiisi

 

eScan raportti, mitäs noille tehdään?

File C:\WINDOWS\woinstall.exe tagged as not-a-virus:AdWare.Win32.EZula.ak. No Action Taken.
File C:\WINDOWS\system32\winscr32.exe infected by "Backdoor.Win32.Pakes" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\Suvi\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\javainstaller.jar-3c936701-20236417.zip infected by "Trojan-Downloader.Java.OpenStream.w" Virus. Action Taken: File Deleted.
File C:\Documents and Settings\Ville\Työpöytä\ohje.htm infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\Ville\Työpöytä\Report-Scan-20070309-213851.txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
File C:\Program Files\MyEmoticons\VVSNI_S3_MYEM_Inst.exe tagged as not-a-virus:AdTool.Win32.WhenU.a. No Action Taken.
File C:\Program Files\TopText\CHCON.dll tagged as not-a-virus:AdWare.Win32.EZula.ae. No Action Taken.
File C:\Program Files\TopText\CHPON.dll tagged as not-a-virus:AdWare.Win32.EZula.ae. No Action Taken.
File C:\System Volume Information\_restore{F3E5752D-820C-4261-9447-CEB381A95613}\RP645\A0109636.exe infected by "Backdoor.Win32.Pakes" Virus. Action Taken: File Renamed.
File C:\System Volume Information\_restore{F3E5752D-820C-4261-9447-CEB381A95613}\RP645\A0109638.exe tagged as not-a-virus:AdTool.Win32.WhenU.a. No Action Taken.
File C:\System Volume Information\_restore{F3E5752D-820C-4261-9447-CEB381A95613}\RP645\A0109639.dll tagged as not-a-virus:AdWare.Win32.EZula.ae. No Action Taken.
File C:\System Volume Information\_restore{F3E5752D-820C-4261-9447-CEB381A95613}\RP645\A0109640.dll tagged as not-a-virus:AdWare.Win32.EZula.ae. No Action Taken.
File C:\System Volume Information\_restore{F3E5752D-820C-4261-9447-CEB381A95613}\RP647\A0122138.exe infected by "Backdoor.Win32.Pakes" Virus. Action Taken: File Renamed.
File C:\WINDOWS\woinstall.exe tagged as not-a-virus:AdWare.Win32.EZula.ak. No Action Taken.
File D:\Documents and Settings\Suvi\Local Settings\Temporary Internet Files\Content.IE5\6J0HI38B\dancingbaby04[1].exe tagged as not-a-virus:AdWare.Win32.SaveNow.z. No Action Taken.

 

Onkos sulla lisää poista sovelutuksesa

TopText
EZula
MyEmoticons

Poista vikasiedossa Kansio

C:\Program Files\TopText
D:\Documents and Settings\Suvi\Local Settings\Temporary Internet Files\Content.IE5\6J0HI38B\dancingbaby04[1].exe
C:\Program Files\MyEmoticons
C:\WINDOWS\woinstall.exe

 

Ei löytynyt mitään noista softista Lisää/Poista valikosta.
Poistin kansiot, ajattelin vielä ajaa eheytyksen ja sitten kokeilla miten käynnistyy.