Kone on ihan sairaan hidas ja sekasin

Discussion in 'Virukset ja haittaohjelmat - HijackThis -logit' started by blizzz_it, Dec 24, 2007.

  1. blizzz_it

    blizzz_it Member

    Joined:
    Dec 23, 2007
    Messages:
    30
    Likes Received:
    0
    Trophy Points:
    16
    Siina Hijackthis logi


    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 12:45:49, on 24.12.2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16574)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\SOUNDMAN.EXE
    C:\Program Files\F-Secure\Common\FSM32.EXE
    C:\Program Files\Winamp\winampa.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Winamp Remote\bin\OrbTray.exe
    C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
    C:\Program Files\F-Secure\Common\FSMA32.EXE
    C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
    C:\Program Files\F-Secure\Common\FSMB32.EXE
    C:\WINDOWS\system32\slserv.exe
    C:\Program Files\F-Secure\Common\FCH32.EXE
    C:\Program Files\F-Secure\Common\FAMEH32.EXE
    C:\Program Files\F-Secure\Anti-Virus\fsqh.exe
    C:\Program Files\F-Secure\FSPC\fspc.exe
    C:\Program Files\F-Secure\FSAUA\program\fsaua.exe
    C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
    C:\WINDOWS\system32\wscntfy.exe
    C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
    C:\Program Files\F-Secure\FSAUA\program\fsus.exe
    C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
    C:\Program Files\F-Secure\FSGUI\fsguidll.exe
    C:\Program Files\F-Secure\FSGUI\SETUPGUIMNGR.EXE
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dnainternet.fi/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [NetLimiter] C:\Program Files\NetLimiter\NetLimiter.exe /s
    O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
    O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
    O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [Orb] "C:\Program Files\Winamp Remote\bin\OrbTray.exe" /background
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Paikallinen palve')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Verkkopalve')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
    O9 - Extra button: Lapsilukko... - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure\FSPC\fspcmsie.dll
    O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\F-Secure\FSPC\fspcmsie.dll
    O9 - Extra 'Tools' menuitem: Lapsilukko... - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\F-Secure\FSPC\fspcmsie.dll
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O15 - Trusted Zone: http://asia.msi.com.tw
    O15 - Trusted Zone: http://global.msi.com.tw
    O15 - Trusted Zone: http://www.msi.com.tw
    O16 - DPF: {8167C273-DF59-4416-B647-C8BB2C7EE83E} (WebSDev Control) - http://liveupdate.msi.com.tw/autobios/LOnline/install.cab
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
    O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - C:\Program Files\F-Secure\FSAUA\program\fsaua.exe
    O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
    O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
    O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe

    --
    End of file - 5173 bytes
     
  2. Hujo

    Hujo Guest

    Lataa VundoFix.exe työpöydällesi.

    Tupla-klikkaa VundoFix.exe ajaaksesi sen.
    Klikkaa Scan for Vundo valintaa.
    Kun skannaus on valmis, klikkaa Remove Vundo valintaa.
    Sinulta kysytään haluatko poistaa filut - klikkaa YES.
    Kun olet klikannut yes, työpöytäsi tyhjenee kun se alkaa poistamaan Vundoa.
    Kun se on valmis, fiksi ilmoittaa käynnistäväsi koneesi uudelleen, klikkaa OK.
    Postita C:\vundofix.txt lokin sekä tuoreen HijackThis lokin sisältö.

    Huomaa: Se on mahdollista että VundoFix löysi tiedoston jota se ei pystynyt poistamaan.
    Tässä tilanteessa, VundoFix ajaa itsensä rebootissa, seuraa vain yläpuolelle olevia ohjeita alkaen kohdasta "Klikkaa Scan for Vundo valintaa." kun VundoFix ilmaantuu uudelleenkäynnistyksen yhteydessä.

    ===============

    Lataa Atribunen ATF Cleaner

    Ohjeet;

    Tupla-klikkaa ATF-Cleaner.exe käynnistääksesi ohjelman.Main:n alla valitse: Select All
    Klikkaa Empty Selected valintaa.
    Jos käytät FireFoxia selaimenasi Klikkaa Firefox yläpuolelta ja valitse: Select All
    Klikkaa Empty Selected valintaa.
    HUOMIO: Jos haluaisit pitää tallennetut salasanasi, klikkaa No kun se sitä kysyy.
    Jos käytät Operaa selaimenasiKlikkaa Opera yläpuolelta ja valitse: Select All
    Klikkaa Empty Selected valintaa taas.
    HUOMIO: Jos haluaisit pitää tallennetut salasanasi, klikkaa No kun se sitä kysyy.
    Klikkaa Exit päävalikosta sulkeaksesi ohjelman.
    Teknistä tukea tulee jos tupla-klikkaat sähköpostiosoitetta joka sijaitsee jokaisen menun alapuolella kyseisessä työkalussa. (Huomatkaa että se tuki on sitten englanniksi)
     
  3. blizzz_it

    blizzz_it Member

    Joined:
    Dec 23, 2007
    Messages:
    30
    Likes Received:
    0
    Trophy Points:
    16
    siin on hijack loki

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 15:14:49, on 24.12.2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16574)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\SOUNDMAN.EXE
    C:\Program Files\F-Secure\Common\FSM32.EXE
    C:\Program Files\Winamp\winampa.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Winamp Remote\bin\OrbTray.exe
    C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
    C:\Program Files\F-Secure\Common\FSMA32.EXE
    C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
    C:\Program Files\F-Secure\Common\FSMB32.EXE
    C:\WINDOWS\system32\slserv.exe
    C:\Program Files\F-Secure\Common\FCH32.EXE
    C:\Program Files\F-Secure\Common\FAMEH32.EXE
    C:\Program Files\F-Secure\Anti-Virus\fsqh.exe
    C:\Program Files\F-Secure\FSPC\fspc.exe
    C:\Program Files\F-Secure\FSAUA\program\fsaua.exe
    C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
    C:\WINDOWS\system32\wscntfy.exe
    C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
    C:\Program Files\F-Secure\FSAUA\program\fsus.exe
    C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
    C:\Program Files\F-Secure\FSGUI\fsguidll.exe
    C:\Program Files\F-Secure\FSGUI\SETUPGUIMNGR.EXE
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dnainternet.fi/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [NetLimiter] C:\Program Files\NetLimiter\NetLimiter.exe /s
    O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
    O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
    O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [Orb] "C:\Program Files\Winamp Remote\bin\OrbTray.exe" /background
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Paikallinen palve')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Verkkopalve')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
    O9 - Extra button: Lapsilukko... - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure\FSPC\fspcmsie.dll
    O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\F-Secure\FSPC\fspcmsie.dll
    O9 - Extra 'Tools' menuitem: Lapsilukko... - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\F-Secure\FSPC\fspcmsie.dll
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O15 - Trusted Zone: http://asia.msi.com.tw
    O15 - Trusted Zone: http://global.msi.com.tw
    O15 - Trusted Zone: http://www.msi.com.tw
    O16 - DPF: {8167C273-DF59-4416-B647-C8BB2C7EE83E} (WebSDev Control) - http://liveupdate.msi.com.tw/autobios/LOnline/install.cab
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
    O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - C:\Program Files\F-Secure\FSAUA\program\fsaua.exe
    O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
    O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
    O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe

    --
    End of file - 5091 bytes


    ja täs on vundo loki

    VundoFix V6.7.7

    Checking Java version...

    Scan started at 13:43:39 24.12.2007

    Listing files found while scanning....

    No infected files were found.


    Beginning removal...

    VundoFix V6.7.7

    Checking Java version...

    Scan started at 14:29:16 24.12.2007

    Listing files found while scanning....

    No infected files were found.


    Beginning removal...

     
  4. Hujo

    Hujo Guest

    scannaa hjt:llä merkkaa paina Fix checked

    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

    ==================

    Escan
    Ohjeet tuolla sivulla.
    http://koti.mbnet.fi/pattaya1/escanmwav.htm
    lataa tuosta
    http://www.spywareinfo.dk/download/mwav.exe
    päivitä tuosta
    http://koti.mbnet.fi/pattaya1/lataus/Mwav.bat
    laita täpit merkkauksien mukaan
    http://koti.mbnet.fi/pattaya1/eScan6.jpg

    scannaa

    jos ala luukkuun tulee jotain niin kopioi se näin:
    Käytä komentoa Ctrl+A.
    Kopioi rivit komennolla Ctrl+C.
    Liitä rivit komennolla Ctrl+V.

    Laita virus log tänne.
     
  5. blizzz_it

    blizzz_it Member

    Joined:
    Dec 23, 2007
    Messages:
    30
    Likes Received:
    0
    Trophy Points:
    16
    File C:\Documents and Settings\Vesa Elo\Application Data\Sun\Java\Deployment\cache\6.0\21\5ac853d5-732b511e infected by "Trojan-Downloader.Java.OpenConnection.ao" Virus. Action Taken: File Deleted.
    File C:\Documents and Settings\Vesa Elo\Local Settings\Temp\4793119.exe infected by "Backdoor.Win32.VB.bco" Virus. Action Taken: File Renamed.
    File C:\Documents and Settings\Vesa Elo\Local Settings\Temp\5053537.exe infected by "Backdoor.Win32.VB.bco" Virus. Action Taken: File Renamed.
    File C:\Documents and Settings\Vesa Elo\Local Settings\Temp\6610091.exe infected by "Backdoor.Win32.VB.bco" Virus. Action Taken: File Renamed.
    File C:\Documents and Settings\Vesa Elo\Local Settings\Temp\6662404.exe infected by "Backdoor.Win32.VB.bco" Virus. Action Taken: File Renamed.
    File C:\Documents and Settings\Vesa Elo\Local Settings\Temp\6690476.exe infected by "Backdoor.Win32.VB.bco" Virus. Action Taken: File Renamed.
    File C:\Documents and Settings\Vesa Elo\Local Settings\Temp\7170139.exe infected by "Backdoor.Win32.VB.bco" Virus. Action Taken: File Renamed.
    File C:\Documents and Settings\Vesa Elo\Local Settings\Temp\7236726.exe infected by "Backdoor.Win32.VB.bco" Virus. Action Taken: File Renamed.
    File C:\Documents and Settings\Vesa Elo\Local Settings\Temp\7419136.exe infected by "Backdoor.Win32.VB.bco" Virus. Action Taken: File Renamed.
    File C:\Documents and Settings\Vesa Elo\Local Settings\Temp\8751859.exe infected by "Backdoor.Win32.VB.bco" Virus. Action Taken: File Renamed.
    File C:\Documents and Settings\Vesa Elo\Local Settings\Temp\8900643.exe infected by "Backdoor.Win32.VB.bco" Virus. Action Taken: File Renamed.
    File C:\Documents and Settings\Vesa Elo\Local Settings\Temp\9791135.exe infected by "Backdoor.Win32.VB.bco" Virus. Action Taken: File Renamed.
    File C:\My own\Games\Tomb Raider IV (The last revelution)\Crack\Download Tomb Raider IV Crack Faster with BitTorrent downloader.zip infected by "Trojan.Win32.Inject.ba" Virus. Action Taken: File Deleted.
    File C:\My own\Programs\Imutetut\Adobe Photoshop CS3 Extended Keygen.exe infected by "Trojan-Dropper.Win32.Delf.ajd" Virus. Action Taken: File Deleted.
    File C:\System Volume Information\_restore{4D1B97D3-FFDB-4FDD-959D-5A7F5BE284E3}\RP132\A0011981.exe infected by "Trojan-Clicker.Win32.Agent.iq" Virus. Action Taken: File Deleted.
    File C:\System Volume Information\_restore{4D1B97D3-FFDB-4FDD-959D-5A7F5BE284E3}\RP132\A0011986.exe infected by "Trojan-Clicker.Win32.Agent.iq" Virus. Action Taken: File Deleted.
    File C:\System Volume Information\_restore{4D1B97D3-FFDB-4FDD-959D-5A7F5BE284E3}\RP132\A0012024.exe infected by "Trojan-Downloader.Win32.PurityScan.cr" Virus. Action Taken: File Deleted.
    File C:\System Volume Information\_restore{4D1B97D3-FFDB-4FDD-959D-5A7F5BE284E3}\RP133\A0012089.exe infected by "Backdoor.Win32.VB.bco" Virus. Action Taken: File Renamed.
    File C:\System Volume Information\_restore{4D1B97D3-FFDB-4FDD-959D-5A7F5BE284E3}\RP133\A0012090.exe infected by "Backdoor.Win32.VB.bco" Virus. Action Taken: File Renamed.
    File C:\System Volume Information\_restore{4D1B97D3-FFDB-4FDD-959D-5A7F5BE284E3}\RP133\A0012091.exe infected by "Backdoor.Win32.VB.bco" Virus. Action Taken: File Renamed.
    File C:\System Volume Information\_restore{4D1B97D3-FFDB-4FDD-959D-5A7F5BE284E3}\RP133\A0012092.exe infected by "Backdoor.Win32.VB.bco" Virus. Action Taken: File Renamed.
    File C:\System Volume Information\_restore{4D1B97D3-FFDB-4FDD-959D-5A7F5BE284E3}\RP133\A0012093.exe infected by "Backdoor.Win32.VB.bco" Virus. Action Taken: File Renamed.
    File C:\System Volume Information\_restore{4D1B97D3-FFDB-4FDD-959D-5A7F5BE284E3}\RP133\A0012094.exe infected by "Backdoor.Win32.VB.bco" Virus. Action Taken: File Renamed.
    File C:\System Volume Information\_restore{4D1B97D3-FFDB-4FDD-959D-5A7F5BE284E3}\RP133\A0012095.exe infected by "Backdoor.Win32.VB.bco" Virus. Action Taken: File Renamed.
    File C:\System Volume Information\_restore{4D1B97D3-FFDB-4FDD-959D-5A7F5BE284E3}\RP133\A0012096.exe infected by "Backdoor.Win32.VB.bco" Virus. Action Taken: File Renamed.
    File C:\System Volume Information\_restore{4D1B97D3-FFDB-4FDD-959D-5A7F5BE284E3}\RP133\A0012097.exe infected by "Backdoor.Win32.VB.bco" Virus. Action Taken: File Renamed.
    File C:\System Volume Information\_restore{4D1B97D3-FFDB-4FDD-959D-5A7F5BE284E3}\RP133\A0012098.exe infected by "Backdoor.Win32.VB.bco" Virus. Action Taken: File Renamed.
    File C:\System Volume Information\_restore{4D1B97D3-FFDB-4FDD-959D-5A7F5BE284E3}\RP133\A0012099.exe infected by "Backdoor.Win32.VB.bco" Virus. Action Taken: File Renamed.
    File C:\System Volume Information\_restore{4D1B97D3-FFDB-4FDD-959D-5A7F5BE284E3}\RP133\A0012100.exe infected by "Trojan-Dropper.Win32.Delf.ajd" Virus. Action Taken: File Deleted.
    File C:\System Volume Information\_restore{682ED5E4-3174-4C96-91E2-98DE8CB1394B}\RP58\A0020816.exe infected by "Trojan-Dropper.Win32.Delf.ajd" Virus. Action Taken: File Deleted.
    File C:\System Volume Information\_restore{682ED5E4-3174-4C96-91E2-98DE8CB1394B}\RP60\A0021897.exe infected by "Backdoor.Win32.VB.bco" Virus. Action Taken: File Renamed.
    File C:\System Volume Information\_restore{682ED5E4-3174-4C96-91E2-98DE8CB1394B}\RP61\A0021992.exe infected by "Backdoor.Win32.VB.bco" Virus. Action Taken: File Renamed.
    File C:\System Volume Information\_restore{682ED5E4-3174-4C96-91E2-98DE8CB1394B}\RP61\A0022027.dll tagged as not-a-virus:AdWare.Win32.Shopper.q. No Action Taken.
    File C:\System Volume Information\_restore{682ED5E4-3174-4C96-91E2-98DE8CB1394B}\RP69\A0023402.exe infected by "Trojan-Downloader.Win32.Zlob.edj" Virus. Action Taken: File Deleted.
    File C:\System Volume Information\_restore{682ED5E4-3174-4C96-91E2-98DE8CB1394B}\RP70\A0023430.exe infected by "Trojan-Downloader.Win32.Zlob.eed" Virus. Action Taken: File Deleted.
    File C:\System Volume Information\_restore{682ED5E4-3174-4C96-91E2-98DE8CB1394B}\RP70\A0023431.exe infected by "Trojan-Downloader.Win32.Zlob.eec" Virus. Action Taken: File Deleted.
    File C:\System Volume Information\_restore{682ED5E4-3174-4C96-91E2-98DE8CB1394B}\RP70\A0023432.dll infected by "Trojan-Downloader.Win32.Zlob.eee" Virus. Action Taken: File Deleted.
    File C:\System Volume Information\_restore{682ED5E4-3174-4C96-91E2-98DE8CB1394B}\RP70\A0023433.exe infected by "Trojan-Downloader.Win32.Zlob.eef" Virus. Action Taken: File Deleted.
    File C:\System Volume Information\_restore{682ED5E4-3174-4C96-91E2-98DE8CB1394B}\RP70\A0023434.exe infected by "Trojan-Downloader.Win32.Zlob.eeg" Virus. Action Taken: File Deleted.
    File C:\System Volume Information\_restore{682ED5E4-3174-4C96-91E2-98DE8CB1394B}\RP70\A0023435.dll infected by "Trojan-Downloader.Win32.Zlob.eeh" Virus. Action Taken: File Deleted.
    File C:\System Volume Information\_restore{682ED5E4-3174-4C96-91E2-98DE8CB1394B}\RP70\A0023436.exe infected by "Trojan-Downloader.Win32.Zlob.eei" Virus. Action Taken: File Deleted.
    File C:\System Volume Information\_restore{682ED5E4-3174-4C96-91E2-98DE8CB1394B}\RP70\A0023437.exe infected by "Trojan-Downloader.Win32.Zlob.eej" Virus. Action Taken: File Deleted.
    File C:\System Volume Information\_restore{682ED5E4-3174-4C96-91E2-98DE8CB1394B}\RP70\A0023511.exe tagged as not-a-virus:FraudTool.Win32.AntiVirGear.e. No Action Taken.
    File C:\System Volume Information\_restore{682ED5E4-3174-4C96-91E2-98DE8CB1394B}\RP72\A0023670.EXE infected by "Trojan.Win32.Inject.ba" Virus. Action Taken: File Deleted.
    File C:\System Volume Information\_restore{682ED5E4-3174-4C96-91E2-98DE8CB1394B}\RP97\A0026811.exe infected by "Backdoor.Win32.VB.bco" Virus. Action Taken: File Renamed.


    tässä
     
  6. Hujo

    Hujo Guest

    1. Klikkaa käynnistä > Oma tietokone oikean puoleisella hiiren napilla
    2. Valitse ominaisuudet
    3. Valitse järjestelmän palauttaminen välilehti
    4. Ruksi eteen ¤ poista järjestelmän palauttaminen kaikissa asemissa
    5. Paina Käytä
    6. Paina ok
    7. Sammuta ja käynnistä
    8. Ota ruksi pois ¤ poista järjestelmän palauttaminen kaikissa asemissa
    9. Käytä ja OK
     
  7. blizzz_it

    blizzz_it Member

    Joined:
    Dec 23, 2007
    Messages:
    30
    Likes Received:
    0
    Trophy Points:
    16
    kiitos.....

    ihan kysyisin vaan et mikä sun mielest on paras virustorjunta ohjelma noin yleisesti? sitä ei taida saada kunnolla muutaku osatamalla ku ainaku imuttaa sellasen jostai ni sen serial numberi kaa on ongelmii vaik kui kaua koittaa jollai keygenil tai vastaavil ni ain o väärä...sellanen pitää varmaa vaa ostaa..
     
  8. Hujo

    Hujo Guest

    Kyllä mä ainakin pistäsin tuon F-securen pois ja ottaisin tilalle avastin ja sille palomuurin
    avast pitää rekisteröidä

    Lataus
    avast linkki

    rekisteröinti
    Rekisteröinti linkki


     
  9. blizzz_it

    blizzz_it Member

    Joined:
    Dec 23, 2007
    Messages:
    30
    Likes Received:
    0
    Trophy Points:
    16
    mul o windowsin palomuuri...onko se ihan paska....oon vaa kuullu puhetta..
     
  10. Hujo

    Hujo Guest

    joo olis hyvä olla palomuuri softa oikeen
     

Share This Page