Kone tökkii ja on TOSI hidas! Virus? Vista! Hjt-logi

Morjens ja kiitoks jo näin etukäteen! Kone tosiaan tökkii ja jo pelkästään kansion avaaminen vie tuhottoman kauan. Tässä tämä hjt-logi:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:13:36, on 4.2.2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16575)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Huawei technologies\Mobile Connect\Mobile Connect.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\OpenOffice.org 2.3\program\soffice.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\OpenOffice.org 2.3\program\soffice.BIN
C:\Windows\system32\taskeng.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.daemon-search.com/startpage

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [HuaWeiEVDO.exe] "C:\Program Files\Huawei technologies\Mobile Connect\Mobile Connect.exe"
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe"
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Paikallinen palvelu')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'Paikallinen palvelu')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Verkkopalvelu')
O4 - Startup: OpenOffice.org 2.3.lnk = C:\Program Files\OpenOffice.org 2.3\program\quickstart.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O13 - Gopher Prefix:
O17 - HKLM\System\CCS\Services\Tcpip\..\{EF551798-CAD1-4655-AF47-468E8E1F8C26}: NameServer = 195.197.54.100 195.74.0.47
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe

--
End of file - 5010 bytes

 

Toimenpiteet Vistassa suoritetaan Järjestelmänvalvojana
(tarkista älä oleta)

En tunnistanut palomuuria koneeltasi.

Asenna koneellesi YKSI palomuuriohjelma NYT:

1) ZoneAlarm
2) Agnitum
3) Sunbelt/Kerio
4) Comodo

Jos käytät sisäänrakennettua Windowsin palomuuria, se ei ole suositeltua sillä se ei estä koneelta ulosmeneviä yhteyksiä.
Muista käyttää vain yhtä palomuuria kerrallaan.
----------------------------------------------------------------------------------------------
Sulla on koneella AVG Anti-Spyware
* Käynnistä AVG Anti-Spyware.
* Klikkaa "Update" kuvaketta päävalikossa. Sen jälkeen klikkaa "Update now" painiketta.
* Sitten klikkaa "Start Update" kuvaketta jolloin päivitys alkaa.
* Kun päivitykset on ladattu, klikkaa "Scanner" kuvaketta ikkunan ylälaidassa. Valitse sitten "Settings" välilehti.
* Kun "Settings" valikko on auennut, klikkaa "Recommended actions" ja sitten valitse "Quarantine".
* Sitten "Reports" valikon alta:
* Laita täppi kohtaan "Do not Automatically generate report"
* Ota täppi pois kohdasta"Only if threats were found"
* Sitten klikkaa "Shield" kuvaketta ikkunan ylälaidassa
* "Resident shield is", muuta tila active:sta inactive:ksi
* Sulje ohjelma, ÄLÄ skannaa vielä.
---------------------
Lataa Atribunen ATF Cleaner
Ohjeet;
Tupla-klikkaa ATF-Cleaner.exe käynnistääksesi ohjelman.Main:n alla valitse: Select All
Klikkaa Empty Selected valintaa.
Jos käytät FireFoxia selaimenasiKlikkaa Firefox yläpuolelta ja valitse: Select All
Klikkaa Empty Selected valintaa.
HUOMIO: Jos haluaisit pitää tallennetut salasanasi, klikkaa No kun se sitä kysyy.
Jos käytät Operaa selaimenasiKlikkaa Opera yläpuolelta ja valitse: Select All
Klikkaa Empty Selected valintaa taas.
HUOMIO: Jos haluaisit pitää tallennetut salasanasi, klikkaa No kun se sitä kysyy.
Klikkaa Exit päävalikosta sulkeaksesi ohjelman.
Teknistä tukea tulee jos tupla-klikkaat sähköpostiosoitetta joka sijaitsee jokaisen menun alapuolella kyseisessä työkalussa. (Huomatkaa että se tuki on sitten englanniksi)
------------------------
Sammuta selain ja muut ohjelmat Fixin ajaksi. (ei virustorjuntaa)
Käynnistä HijackThis:Scan ja ruksaa seuraavat punaisella listatut tiedostot sekä poista ne.(fix Chekked)

O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'Paikallinen palvelu')
O13 - Gopher Prefix:

--------------
Tallenna nämä ohjeet tekstitiedostoon tai tulosta nämä, muuten et pääse niihin käsiksi vikasietotilasta
Käynnistä kone vikasietotilaan => OHJE
JOS AVG ei toimi vikasietotilassa ja valittaa "..reinstall .." niin tällä patchilla ohjelman pitäisi alkaa toimia.

HUOM! Älä käytä muita ohjelmia AVG skannauksen aikana, tämä saattaa häiritä skannausta.
* Kun vikasietotilassa, käynnistä AVG Anti-Spyware.
* Klikkaa "Scanner" kuvaketta ikkunan ylälaidassa ja valitse "Scan" välilehti. Sitten klikkaa "Complete System Scan".
* Ewido aloittaa nyt tietokoneen skannaamisen, ole kärsivällinen sillä skannaus vie aikaa.

Kun skannaus on valmis:
TÄRKEÄÄ : Älä klikkaa "Save Scan Report" ennen kuin klikkaat "Apply all Actions"
* Varmistu, että Set all elements to: näyttää Quarantine (1), jos ei, klikkaa linkkiä ja valitse Quarantine popup-valikosta.
* Sinulta kysytään mitä tehdä jos infektioita löytyi, valitse silloin "Apply all actions"

* Sitten klikkaa "Reports" palkkia ruudun ala-osasta.
* Klikkaa "Save report as" painiketta ikkunan vasemmassa alalaidassa ja tallenna raportti työpöydälle.
* Sulje ohjelma, käynnistä kone normaalitilaan.

Tyhjennä roskakori.

Postita tänne seuraavat lokit:
* Tuore HijackThis loki (Otetaan viimeisenä ennen postitusta)
* AVG:n raportti
*

 

Tuossa kun sanoit että "resident shield inactiviseksi" niin siinä kylläkin lukee et "not available in free version"... teen kuitenki loppuun ton mitä kehotit!

 

Tässä avg raportti:

---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at: 18:18:40 4.2.2008

+ Scan result:



:mozilla.194:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.195:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.196:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.197:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.537:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.732:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.148:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.149:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.150:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.151:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.278:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.663:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
C:\Users\Tommi\AppData\Roaming\Microsoft\Windows\Cookies\Low\tommi@3.adbrite[1].txt -> TrackingCookie.Adbrite : Cleaned.
C:\Users\Tommi\AppData\Roaming\Microsoft\Windows\Cookies\Low\tommi@adbrite[1].txt -> TrackingCookie.Adbrite : Cleaned.
C:\Users\Tommi\AppData\Roaming\Microsoft\Windows\Cookies\Low\tommi@ads.adbrite[2].txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.715:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Adrenaline : Cleaned.
C:\Users\Tommi\AppData\Roaming\Microsoft\Windows\Cookies\Low\tommi@adrevolver[1].txt -> TrackingCookie.Adrevolver : Cleaned.
C:\Users\Tommi\AppData\Roaming\Microsoft\Windows\Cookies\Low\tommi@media.adrevolver[3].txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.119:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.
:mozilla.39:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.40:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.41:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.42:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.15:C:\Users\Timo\AppData\Roaming\Mozilla\Firefox\Profiles\a6w9ztif.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.70:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
C:\Users\Tommi\AppData\Roaming\Microsoft\Windows\Cookies\Low\tommi@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.557:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Bfast : Cleaned.
:mozilla.183:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.184:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.185:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.33:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.34:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.35:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.36:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.37:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.38:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.705:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Clickhype : Cleaned.
:mozilla.442:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Clickzs : Cleaned.
:mozilla.443:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Clickzs : Cleaned.
:mozilla.444:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Clickzs : Cleaned.
:mozilla.445:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Clickzs : Cleaned.
:mozilla.643:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Clickzs : Cleaned.
:mozilla.644:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Clickzs : Cleaned.
:mozilla.516:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Cqcounter : Cleaned.
:mozilla.330:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Dealtime : Cleaned.
:mozilla.24:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
C:\Users\Tommi\AppData\Roaming\Microsoft\Windows\Cookies\Low\tommi@doubleclick[2].txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.218:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned.
:mozilla.227:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned.
:mozilla.228:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned.
:mozilla.229:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned.
:mozilla.200:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.201:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.202:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.622:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.759:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.562:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.563:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.564:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.565:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.568:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.593:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.595:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.601:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Imrworldwide : Cleaned.
:mozilla.602:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Imrworldwide : Cleaned.
:mozilla.528:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.529:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.125:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Masterstats : Cleaned.
:mozilla.472:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.
C:\Users\Tommi\AppData\Roaming\Microsoft\Windows\Cookies\Low\tommi@mediaplex[1].txt -> TrackingCookie.Mediaplex : Cleaned.
C:\Users\Tommi\AppData\Roaming\Microsoft\Windows\Cookies\Low\tommi@questionmarket[2].txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.830:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Real : Cleaned.
:mozilla.831:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Real : Cleaned.
:mozilla.832:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Real : Cleaned.
:mozilla.833:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Real : Cleaned.
:mozilla.834:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Real : Cleaned.
:mozilla.835:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Real : Cleaned.
:mozilla.836:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Real : Cleaned.
C:\Users\Tommi\AppData\Roaming\Microsoft\Windows\Cookies\Low\tommi@real[1].txt -> TrackingCookie.Real : Cleaned.
:mozilla.272:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.273:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.274:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.275:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.276:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.277:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.300:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.301:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.307:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.308:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.309:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.310:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.311:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.645:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Sexlist : Cleaned.
:mozilla.175:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Sextracker : Cleaned.
:mozilla.176:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Sextracker : Cleaned.
:mozilla.400:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned.
:mozilla.287:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Spylog : Cleaned.
:mozilla.392:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.393:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.394:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.395:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.17:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Statistik-gallup : Cleaned.
:mozilla.279:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.280:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.281:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.282:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.283:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.585:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.841:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Trafic : Cleaned.
:mozilla.187:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.188:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.189:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.190:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.10:C:\Users\Timo\AppData\Roaming\Mozilla\Firefox\Profiles\a6w9ztif.default\cookies.txt -> TrackingCookie.Webtrends : Cleaned.
:mozilla.614:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Webtrends : Cleaned.
:mozilla.533:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned.
:mozilla.735:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Yadro : Cleaned.
:mozilla.141:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.142:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.143:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.144:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.145:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.146:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.147:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
C:\Users\Tommi\AppData\Roaming\Microsoft\Windows\Cookies\Low\tommi@ad.yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.152:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.153:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.154:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.155:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.156:C:\Users\Tommi\AppData\Roaming\Mozilla\Firefox\Profiles\qkv1vl14.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
C:\Users\Tommi\AppData\Roaming\Microsoft\Windows\Cookies\Low\tommi@zedo[1].txt -> TrackingCookie.Zedo : Cleaned.


::Report end

ja tässä hjt-logi:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:28:24, on 4.2.2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16575)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\OpenOffice.org 2.3\program\soffice.exe
C:\Program Files\OpenOffice.org 2.3\program\soffice.BIN
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.daemon-search.com/startpage

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [HuaWeiEVDO.exe] "C:\Program Files\Huawei technologies\Mobile Connect\Mobile Connect.exe"
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Paikallinen palvelu')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Verkkopalvelu')
O4 - Startup: OpenOffice.org 2.3.lnk = C:\Program Files\OpenOffice.org 2.3\program\quickstart.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\Windows\System32\ZoneLabs\vsmon.exe

--
End of file - 4461 bytes

MUUTEN! Toi avast sanoo koko ajan et päivitykset mahdollisia mut sit ku yritän asentaa ne niin sit se ei kuitenkaan voi? Mistä voi johtua?

 

Eipä täällä viruksia näy.
ATF:n ajo olis tehnyt saman kuin AVG
Tarpeeton Java UpDater olisi poistunut, jos selain olisi ollut sammutettuna Fixin aikana.
--------------------------------------------------------
Tämä service ilmeisesti syö sun koneesta tehot:
searchfilterhost.exe

Tuolla on kirjoitettu aiheesta:
http://forums.microsoft.com/MSDN/ShowPost.aspx?PostID=1671817&SiteID=1&mode=1

Ongelmat kasvaa mitä enemmän on virustutkia päällä.
Saattaa riittä jos asennat Avastin uudelleen ???