Onko koneeni kaapattu

Discussion in 'Virukset ja haittaohjelmat - HijackThis -logit' started by Tumpeloko, Jan 21, 2007.

  1. Tumpeloko

    Tumpeloko Member

    Joined:
    Jan 21, 2007
    Messages:
    4
    Likes Received:
    0
    Trophy Points:
    11
    Koneelle on ilmestynyt Internetyhteys joka käynnistyy kun avaan selaimen.Yhteys pätkii ja jumiutuu aikaajoin.IPconfig ilmoittaa että Domaininvalid.panda,AVG ja Spybot ei löydä mitään.Logfile of HijackThis v1.99.1
    Scan saved at 15:44:45, on 21.1.2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Ahead\InCD\InCDsrv.exe
    c:\program files\panda software\panda internet security 2007\firewall\PNMSRV.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
    C:\WINDOWS\System32\CTSvcCDA.exe
    C:\WINDOWS\System32\nvsvc32.exe
    C:\Program Files\Panda Software\Panda Internet Security 2007\PavFnSvr.exe
    C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe
    C:\Program Files\Panda Software\Panda Internet Security 2007\pavsrv51.exe
    C:\Program Files\Panda Software\Panda Internet Security 2007\AVENGINE.EXE
    C:\Program Files\Panda Software\Panda Internet Security 2007\AntiSpam\pskmssvc.exe
    C:\Program Files\Panda Software\Panda Internet Security 2007\PsImSvc.exe
    C:\Program Files\Panda Software\Panda Internet Security 2007\TPSrv.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Panda Software\Panda Internet Security 2007\apvxdwin.exe
    C:\WINDOWS\system32\RunDLL32.exe
    C:\Program Files\Creative\ShareDLL\CtNotify.exe
    C:\Program Files\Creative\Audio\PROGRAM\CTMIX32.EXE
    C:\Program Files\CyberLink DVD Solution\PowerDVD\PDVDServ.exe
    C:\Program Files\Ahead\InCD\InCD.exe
    C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Panda Software\Panda Internet Security 2007\SRVLOAD.EXE
    c:\program files\panda software\panda internet security 2007\WebProxy.exe
    C:\Program Files\Creative\ShareDLL\MediaDet.Exe
    C:\WINDOWS\System32\svchost.exe
    C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
    C:\Program Files\HijackThis\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.pandasoftware.com/redirector/?prod=206&app=Register&lang=fin
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [Disc Detector] C:\Program Files\Creative\ShareDLL\CtNotify.exe
    O4 - HKLM\..\Run: [CreativeMixer] C:\Program Files\Creative\Audio\PROGRAM\CTMIX32.EXE /t
    O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink DVD Solution\PowerDVD\PDVDServ.exe"
    O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [APVXDWIN] "C:\Program Files\Panda Software\Panda Internet Security 2007\APVXDWIN.EXE" /s
    O4 - HKLM\..\Run: [SCANINICIO] "C:\Program Files\Panda Software\Panda Internet Security 2007\Inicio.exe"
    O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O20 - Winlogon Notify: avldr - C:\WINDOWS\SYSTEM32\avldr.dll
    O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
    O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
    O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
    O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTSvcCDA.exe
    O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Ahead\InCD\InCDsrv.exe
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
    O23 - Service: Panda Function Service (PAVFNSVR) - Panda Software International - C:\Program Files\Panda Software\Panda Internet Security 2007\PavFnSvr.exe
    O23 - Service: Panda Process Protection Service (PavPrSrv) - Panda Software - C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe
    O23 - Service: Panda anti-virus service (PAVSRV) - Panda Software International - C:\Program Files\Panda Software\Panda Internet Security 2007\pavsrv51.exe
    O23 - Service: Panda Antispam Engine (pmshellsrv) - Panda Software International - C:\Program Files\Panda Software\Panda Internet Security 2007\AntiSpam\pskmssvc.exe
    O23 - Service: Panda Network Manager (PNMSRV) - Panda Software International - c:\program files\panda software\panda internet security 2007\firewall\PNMSRV.EXE
    O23 - Service: Panda IManager Service (PSIMSVC) - Panda Software - C:\Program Files\Panda Software\Panda Internet Security 2007\PsImSvc.exe
    O23 - Service: Panda TPSrv (TPSrv) - Panda Software - C:\Program Files\Panda Software\Panda Internet Security 2007\TPSrv.exe
     
  2. greenie

    greenie Regular member

    Joined:
    Jan 20, 2005
    Messages:
    978
    Likes Received:
    0
    Trophy Points:
    26
    Sulla taitaa olla 2 virus softaa päällekkäin, Panda ja AVG?
     
  3. Tumpeloko

    Tumpeloko Member

    Joined:
    Jan 21, 2007
    Messages:
    4
    Likes Received:
    0
    Trophy Points:
    11
    Pitää paikkansa, mutta se ei selitä sitä että kun avaan netin kone ottaa yhteyksiä outoihin osoitteisiin.Oman hakuni kanssa samaan aikaan on muita hakuja päällä.
     
  4. greenie

    greenie Regular member

    Joined:
    Jan 20, 2005
    Messages:
    978
    Likes Received:
    0
    Trophy Points:
    26
    Ei välttämättä selitä, mutta kahta virussoftaa ei missää nimessä suositella kätettäväksi samanaikaisesti, sekoittaa konetta pahimmassa tapauksessa todella kiitettävästi, joten lähtisin nyt ainakin liikkeelle korjaamalla tämän ongelman.
     
  5. Tumpeloko

    Tumpeloko Member

    Joined:
    Jan 21, 2007
    Messages:
    4
    Likes Received:
    0
    Trophy Points:
    11
    Ongelmat alkoivat ennen AVG:tä. Entä sitten Domain häiriö ja kiinteäksi muuttunut IP?
     

Share This Page