Kuinka poistaa W32.Myzor.Fk@yf

Hei!

Minulla on ongelma juuri tuon otsikossa olevan viiruksen kanssa (W32.Myzor.Fk@yf)ja siittä olisi kiva päästä eroon, koska se häiritsee paljon... Auttakaa kiitos... ja teen kaiken ohjeidenne mukaan (ainakin yritän). En nyt tähän keksi mitä muuta kirjoittaa... kysykää jos tarvitsette lisää informaatota

 

scannaa kone läpi avg anti-spywarella ja escanilla! tulokset tänne ja lue ohjeet tarkkaan! http://aaxxeell.googlepages.com/ewido4 http://koti.mbnet.fi/pattaya1/escanmwav.htm

 

Nyt on asia niin, että eScannilla skannatessa tietokone käynnisti itsensä uudelleen (tämä kävi siis sillä kerralla millä kokeilin), koska en "uskalla" tehdä mitään muuta ennen kuin saan tietää joltain "ammattilaiselta" miksi se käynnisti itsensä uudelleen...
AVG llä alan nyt skannaamaan Editoin sen tähän viestiin kohta...

Tässä AVG:n reportti:

---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at: 16:03:26 26.10.2006

+ Scan result:



HKU\S-1-5-21-343818398-1659004503-725345543-1004\Software\Classes\CLSID\{8dc1f789-e073-4363-b40d-07376bc5ecc5} -> Adware.Generic : Cleaned with backup (quarantined).
HKU\S-1-5-21-343818398-1659004503-725345543-1004_Classes\CLSID\{8dc1f789-e073-4363-b40d-07376bc5ecc5} -> Adware.Generic : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Internet Security Add-On -> Adware.IntCodec : Cleaned with backup (quarantined).
HKU\S-1-5-21-343818398-1659004503-725345543-1004\Software\Internet Security -> Adware.IntCodec : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Classes\CLSID\{dfa61db1-388e-4c87-8d56-540fa229bcb4} -> Adware.VirusBurst : Cleaned with backup (quarantined).
C:\Documents and Settings\Windows\Local Settings\Temp\laf13.tmp -> Not-A-Virus.Hoax.Win32.Renos.dv : Cleaned with backup (quarantined).
:mozilla.112:C:\Documents and Settings\Windows\Application Data\Mozilla\Firefox\Profiles\o7fyb3ky.default\cookies-1.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.58:C:\Documents and Settings\Windows\Application Data\Mozilla\Firefox\Profiles\o7fyb3ky.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\Windows\Cookies\windows@metacafe.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\Windows\Cookies\windows@msnaccountservices.112.2o7[2].txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\Windows\Cookies\windows@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.79:C:\Documents and Settings\Windows\Application Data\Mozilla\Firefox\Profiles\o7fyb3ky.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.80:C:\Documents and Settings\Windows\Application Data\Mozilla\Firefox\Profiles\o7fyb3ky.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
C:\Documents and Settings\Windows\Cookies\windows@adbrite[2].txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.100:C:\Documents and Settings\Windows\Application Data\Mozilla\Firefox\Profiles\o7fyb3ky.default\cookies-1.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.101:C:\Documents and Settings\Windows\Application Data\Mozilla\Firefox\Profiles\o7fyb3ky.default\cookies-1.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.102:C:\Documents and Settings\Windows\Application Data\Mozilla\Firefox\Profiles\o7fyb3ky.default\cookies-1.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.104:C:\Documents and Settings\Windows\Application Data\Mozilla\Firefox\Profiles\o7fyb3ky.default\cookies-1.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.106:C:\Documents and Settings\Windows\Application Data\Mozilla\Firefox\Profiles\o7fyb3ky.default\cookies-1.txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.87:C:\Documents and Settings\Windows\Application Data\Mozilla\Firefox\Profiles\o7fyb3ky.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.
:mozilla.88:C:\Documents and Settings\Windows\Application Data\Mozilla\Firefox\Profiles\o7fyb3ky.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.
:mozilla.39:C:\Documents and Settings\Windows\Application Data\Mozilla\Firefox\Profiles\o7fyb3ky.default\cookies-1.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.40:C:\Documents and Settings\Windows\Application Data\Mozilla\Firefox\Profiles\o7fyb3ky.default\cookies-1.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.41:C:\Documents and Settings\Windows\Application Data\Mozilla\Firefox\Profiles\o7fyb3ky.default\cookies-1.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.42:C:\Documents and Settings\Windows\Application Data\Mozilla\Firefox\Profiles\o7fyb3ky.default\cookies-1.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.43:C:\Documents and Settings\Windows\Application Data\Mozilla\Firefox\Profiles\o7fyb3ky.default\cookies-1.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.56:C:\Documents and Settings\Windows\Application Data\Mozilla\Firefox\Profiles\o7fyb3ky.default\cookies-1.txt -> TrackingCookie.Atdmt : Cleaned.
C:\Documents and Settings\Windows\Cookies\windows@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.45:C:\Documents and Settings\Windows\Application Data\Mozilla\Firefox\Profiles\o7fyb3ky.default\cookies-1.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.46:C:\Documents and Settings\Windows\Application Data\Mozilla\Firefox\Profiles\o7fyb3ky.default\cookies-1.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.47:C:\Documents and Settings\Windows\Application Data\Mozilla\Firefox\Profiles\o7fyb3ky.default\cookies-1.txt -> TrackingCookie.Burstnet : Cleaned.
C:\Documents and Settings\Windows\Cookies\windows@www.burstnet[2].txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.105:C:\Documents and Settings\Windows\Application Data\Mozilla\Firefox\Profiles\o7fyb3ky.default\cookies-1.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.107:C:\Documents and Settings\Windows\Application Data\Mozilla\Firefox\Profiles\o7fyb3ky.default\cookies-1.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.108:C:\Documents and Settings\Windows\Application Data\Mozilla\Firefox\Profiles\o7fyb3ky.default\cookies-1.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.55:C:\Documents and Settings\Windows\Application Data\Mozilla\Firefox\Profiles\o7fyb3ky.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.97:C:\Documents and Settings\Windows\Application Data\Mozilla\Firefox\Profiles\o7fyb3ky.default\cookies-1.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.98:C:\Documents and Settings\Windows\Application Data\Mozilla\Firefox\Profiles\o7fyb3ky.default\cookies-1.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.99:C:\Documents and Settings\Windows\Application Data\Mozilla\Firefox\Profiles\o7fyb3ky.default\cookies-1.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.47:C:\Documents and Settings\Windows\Application Data\Mozilla\Firefox\Profiles\o7fyb3ky.default\cookies.txt -> TrackingCookie.Clickbank : Cleaned.
C:\Documents and Settings\Windows\Cookies\windows@cz7.clickzs[2].txt -> TrackingCookie.Clickzs : Cleaned.
:mozilla.30:C:\Documents and Settings\Windows\Application Data\Mozilla\Firefox\Profiles\o7fyb3ky.default\cookies.txt -> TrackingCookie.Com : Cleaned.
C:\Documents and Settings\Windows\Cookies\windows@com[1].txt -> TrackingCookie.Com : Cleaned.
:mozilla.17:C:\Documents and Settings\Windows\Application Data\Mozilla\Firefox\Profiles\o7fyb3ky.default\cookies-1.txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.103:C:\Documents and Settings\Windows\Application Data\Mozilla\Firefox\Profiles\o7fyb3ky.default\cookies-1.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.21:C:\Documents and Settings\Windows\Application Data\Mozilla\Firefox\Profiles\o7fyb3ky.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.48:C:\Documents and Settings\Windows\Application Data\Mozilla\Firefox\Profiles\o7fyb3ky.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.51:C:\Documents and Settings\Windows\Application Data\Mozilla\Firefox\Profiles\o7fyb3ky.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.33:C:\Documents and Settings\Windows\Application Data\Mozilla\Firefox\Profiles\o7fyb3ky.default\cookies-1.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.34:C:\Documents and Settings\Windows\Application Data\Mozilla\Firefox\Profiles\o7fyb3ky.default\cookies-1.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.36:C:\Documents and Settings\Windows\Application Data\Mozilla\Firefox\Profiles\o7fyb3ky.default\cookies-1.txt -> TrackingCookie.Hitbox : Cleaned.
C:\Documents and Settings\Windows\Cookies\windows@image.masterstats[1].txt -> TrackingCookie.Masterstats : Cleaned.
:mozilla.19:C:\Documents and Settings\Windows\Application Data\Mozilla\Firefox\Profiles\o7fyb3ky.default\cookies.txt -> TrackingCookie.Overture : Cleaned.
:mozilla.20:C:\Documents and Settings\Windows\Application Data\Mozilla\Firefox\Profiles\o7fyb3ky.default\cookies.txt -> TrackingCookie.Overture : Cleaned.
C:\Documents and Settings\Windows\Cookies\windows@data3.perf.overture[2].txt -> TrackingCookie.Overture : Cleaned.
:mozilla.51:C:\Documents and Settings\Windows\Application Data\Mozilla\Firefox\Profiles\o7fyb3ky.default\cookies-1.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.52:C:\Documents and Settings\Windows\Application Data\Mozilla\Firefox\Profiles\o7fyb3ky.default\cookies-1.txt -> TrackingCookie.Questionmarket : Cleaned.
C:\Documents and Settings\Windows\Cookies\windows@stats1.reliablestats[1].txt -> TrackingCookie.Reliablestats : Cleaned.
C:\Documents and Settings\Windows\Cookies\windows@ads1.revenue[1].txt -> TrackingCookie.Revenue : Cleaned.
:mozilla.53:C:\Documents and Settings\Windows\Application Data\Mozilla\Firefox\Profiles\o7fyb3ky.default\cookies-1.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.54:C:\Documents and Settings\Windows\Application Data\Mozilla\Firefox\Profiles\o7fyb3ky.default\cookies-1.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.68:C:\Documents and Settings\Windows\Application Data\Mozilla\Firefox\Profiles\o7fyb3ky.default\cookies-1.txt -> TrackingCookie.Targetnet : Cleaned.
:mozilla.30:C:\Documents and Settings\Windows\Application Data\Mozilla\Firefox\Profiles\o7fyb3ky.default\cookies-1.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.31:C:\Documents and Settings\Windows\Application Data\Mozilla\Firefox\Profiles\o7fyb3ky.default\cookies-1.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.89:C:\Documents and Settings\Windows\Application Data\Mozilla\Firefox\Profiles\o7fyb3ky.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.90:C:\Documents and Settings\Windows\Application Data\Mozilla\Firefox\Profiles\o7fyb3ky.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
C:\Documents and Settings\Windows\Cookies\windows@yadro[1].txt -> TrackingCookie.Yadro : Cleaned.
:mozilla.62:C:\Documents and Settings\Windows\Application Data\Mozilla\Firefox\Profiles\o7fyb3ky.default\cookies-1.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.63:C:\Documents and Settings\Windows\Application Data\Mozilla\Firefox\Profiles\o7fyb3ky.default\cookies-1.txt -> TrackingCookie.Yieldmanager : Cleaned.
C:\Documents and Settings\Windows\Cookies\windows@ad.yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Cleaned.


::Report end

 

kokeile vaa sitä escania uudellee jos toimis! sit laita tänne hjt loki ohje: http://aaxxeell.googlepages.com/koneenpuhdistaminen.hijackthis-ohje!

 

Tässä on HJT:n loki:

Logfile of HijackThis v1.99.1
Scan saved at 14:18:51, on 27.10.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\VTTimer.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Yahoo!\Yahoo! Widget Engine\YahooWidgetEngine.exe
C:\Program Files\OpenOffice.org 2.0\program\soffice.exe
C:\Program Files\OpenOffice.org 2.0\program\soffice.BIN
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
C:\Documents and Settings\Windows\Työpöytä\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.neti.ee/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.neti.ee/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {7b4d79df-9ef0-429d-a0e9-d9b138c6a53b} - C:\Program Files\VideoCompressionCodec\isaddon.dll (file missing)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: OpenOffice.org 2.0.lnk = C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe
O4 - Startup: Yahoo! Widget Engine.lnk = C:\Program Files\Yahoo!\Yahoo! Widget Engine\YahooWidgetEngine.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {288C5F13-7E52-4ADA-A32E-F5BF9D125F98} - http://www.miniclip.com/puzzlepirates/miniclipGameLoader.dll
O16 - DPF: {288C5F13-7E52-4ADA-A32E-F5BF9D125F99} (CR64Loader Object) - http://www.miniclip.com/puzzlepirates/miniclipGameLoader.dll
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe

lisään vielä myöhemmin eScannin lokin... Ja se myöhemmin on aikasintaan Sunnuntaina koska menen nyt viikonlopuksi pois koneen luota ja en skannannut nyt koska siihen menisi noin 7,5h!!! vaikka sivulla sanotaankin, että menee noin 2 h!

 

Siis... eScannin lokia en pysty lähettämään kun se on niin pitkä, että ei sivulle varmaan mahdu :S

 

siin ohjees luki miten ne löydot olis saannu otettuu jo siin skannaus vaihees. kokeile löytää sieltä lokista se kohta mis on ne löydetyt tiedostot ja kokeile laittaa pelkästää se.

 

Ööh... ei löydy e'scannin lokia sitä missä näyttää viirukset, mutta oletan, että se poisti sen viiruksen koska internetissä ei enää vilku sitä varoitusta... sanokaas mitä mieltä olette...

 

jotai tosa lokissa viel on jäänteitä mutta ootetaan ammattilaista..

 

Ekkö sää ookkaan amattilainen :O?

 

en oo.. ainakaan hjt lokien kanssa.. siihen on oma kurssinsa jota en oo viel käynny.. mutta jonossa olen kuhan siihen pääsen.. ei sul hätää ole ei sun konees ainakaan pahempaan malliin oo menny..

 

Hyvä juttu... Ja kiitos avusta...