Koneen käynnistyminen vie ikuisuuden, sen jälkeen kun winamp jumiutui ja tein kylmän bootin. Skannasin trendmicro housecallilla - ei löytänyt mitään. Tässä HJ-logi: Logfile of HijackThis v1.99.1 Scan saved at 13:29:10, on 5.8.2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16473) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Norman\Npm\bin\ELOGSVC.EXE C:\Program Files\Norman\Npm\Bin\Zanda.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Executive Software\DiskeeperLite\DKService.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Norman\Npm\bin\NJEEVES.EXE C:\Program Files\Norman\Nvc\BIN\NVCSCHED.EXE C:\Program Files\Norman\Nvc\bin\nvcoas.exe C:\WINDOWS\System32\alg.exe C:\WINDOWS\system32\wbem\wmiprvse.exe C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe C:\WINDOWS\SOUNDMAN.EXE C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Launch Manager\LaunchAp.exe C:\Launch Manager\HotkeyApp.exe C:\Launch Manager\OSD.exe C:\Launch Manager\OSDCtrl.exe C:\Launch Manager\Wbutton.exe C:\Program Files\Norman\Npm\bin\ZLH.EXE C:\Program Files\Logitech\MouseWare\system\em_exec.exe C:\Program Files\Norman\Nvc\BIN\NIP.EXE C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe C:\Program Files\Norman\Nvc\bin\cclaw.exe C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Free Download Manager\fdm.exe C:\Program Files\Rainlendar2\Rainlendar2.exe C:\WINDOWS\system32\hphmon03.exe C:\Program Files\VCOM\PowerDesk\pddlghlp.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\VCOM\PowerDesk\PDExplo.exe C:\Documents and Settings\Margus\Omat tiedostot\HijackThis_v1.99.1.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fi/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [LaunchAp] C:\Launch Manager\LaunchAp.exe O4 - HKLM\..\Run: [HotkeyApp] C:\Launch Manager\HotkeyApp.exe O4 - HKLM\..\Run: [LMgrVolOSD] C:\Launch Manager\OSD.exe O4 - HKLM\..\Run: [LMgrOSD] C:\Launch Manager\OSDCtrl.exe O4 - HKLM\..\Run: [Wbutton] "C:\Launch Manager\Wbutton.exe" O4 - HKLM\..\Run: [CtrlVol] C:\Launch Manager\CtrlVol.exe O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe O4 - HKLM\..\Run: [Norman ZANDA] C:\Program Files\Norman\Npm\bin\ZLH.EXE /LOAD /SPLASH O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [StartupDelayer] "C:\Program Files\r2 Studios\Startup Delayer\Startup Launcher.exe" O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe" O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [Free Download Manager] "C:\Program Files\Free Download Manager\fdm.exe" -autorun O4 - HKCU\..\Run: [Rainlendar2] C:\Program Files\Rainlendar2\Rainlendar2.exe O8 - Extra context menu item: Download all with Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm O8 - Extra context menu item: Download selected with Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm O8 - Extra context menu item: Download web site with Free Download Manager - file://C:\Program Files\Free Download Manager\dlpage.htm O8 - Extra context menu item: Download with Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll O9 - Extra button: Oheistiedot - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O9 - Extra button: @c:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: @c:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\Program Files\Messenger\msmsgs.exe O11 - Options group: [INTERNATIONAL] International* O16 - DPF: {029FDBA6-3547-11D7-AA4C-0050BF051A00} (Rawflow ICD Client) - http://rotterdam.rawflow.com/clients/5.1.2.0/Rawflow.cab O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab O16 - DPF: {3EA4FA88-E0BE-419A-A732-9B79B87A6ED0} (CTVUAxCtrl Object) - http://dl.tvunetworks.com/TVUAx.cab O16 - DPF: {5CD4310E-88FB-43C1-BE24-5F3FA9C5C9D1} (KooPlayer Control) - http://www.tvlution.com/KooPlayer.ocx O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab O16 - DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} (a-squared Scanner) - http://ax.emsisoft.com/asquared.cab O16 - DPF: {D821DC4A-0814-435E-9820-661C543A4679} (CRLDownloadWrapper Class) - http://drmlicense.one.microsoft.com/crlupdate/en/crlocx.ocx O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: Diskeeper - Executive Software International, Inc. - C:\Program Files\Executive Software\DiskeeperLite\DKService.exe O23 - Service: Norman eLogger service 6 (eLoggerSvc6) - Norman ASA - C:\Program Files\Norman\Npm\bin\ELOGSVC.EXE O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Norman NJeeves - Unknown owner - C:\Program Files\Norman\Npm\bin\NJEEVES.EXE O23 - Service: Norman ZANDA - Norman ASA - C:\Program Files\Norman\Npm\Bin\Zanda.exe O23 - Service: Norman Virus Control on-access component (nvcoas) - Norman ASA - C:\Program Files\Norman\Nvc\bin\nvcoas.exe O23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Norman ASA - C:\Program Files\Norman\Nvc\BIN\NVCSCHED.EXE O23 - Service: Pml Driver - HP - C:\WINDOWS\system32\HPHipm09.exe O23 - Service: Sandra Data Service (SandraDataSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2007\Win32\RpcDataSrv.exe O23 - Service: Sandra Service (SandraTheSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2007\RpcSandraSrv.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
aloitas tuosta Ohje AVG:n Anti-Spyware 7.5:n käyttöön Huom! Tässä ohjeessa sammutetaan tuo reaaliaikasuojaus (Shield). Näin vältetään tilanteet joissa suojaus estäisi esim HijackThis:n työkalun toimintaa. Tallenna nämä ohjeet tekstitiedostoon tai tulosta nämä, muuten et pääse niihin käsiksi vikasietotilasta Lataa AVG:n Anti-Spyware 7.5:n ja tallenna ohjelma työpöydällesi. o Kun olet ladannut ohjelman, kaksoisklikkaa asennuohjelman pikakuvaketta työpöydälläsi, asennus alkaa. o Asennuksen jälkeen täytyy ohjelma käynnistää ja sen tunnisteet päivittää. o Käynnistä AVG:n Anti-Spyware. o Klikkaa "Update" kuvaketta päävalikossa. Sen jälkeen klikkaa "Update now" painiketta. o Sitten klikkaa "Start Update" kuvaketta jolloin päivitys alkaa. o Kun päivitykset on ladattu, klikkaa "Scanner" kuvaketta ikkunan ylälaidassa. Valitse sitten "Settings" välilehti. o Kun "Settings" valikko on auennut, klikkaa "Recommended actions" ja sitten valitse "Quarantine". o Sitten "Reports" valikon alta: o Laita täppi kohtaan "Automatically generate report after every scan" o Ota täppi pois kohdasta"Only if threats were found" o Sitten klikkaa "Shield" kuvaketta ikkunan ylälaidassa o "Resident shield is", muuta tila active:sta inactive:ksi o Sulje ohjelma, ÄLÄ skannaa vielä. Käynnistä koneesi vikasietotilaan, sammuta ja käynnistä käynnistyksen yhteydessä naputtele F8 valitse nuoli näppäimellä vikasietotila paina enter ja enter HUOM! Älä käytä muita ohjelmia AVG:n skannauksen aikana, tämä saattaa häiritä skannausta. o Kun vikasietotilassa, käynnistä AVG:n Anti-Spyware. o Klikkaa "Scanner" kuvaketta ikkunan ylälaidassa ja valitse "Scan" välilehti. Sitten klikkaa "Complete System Scan". o Ewido aloittaa nyt tietokoneen skannaamisen, ole kärsivällinen sillä skannaus vie aikaa. Kun skannaus on valmis: TÄRKEÄÄ : Älä klikkaa "Save Scan Report" ennen kuin klikkaat "Apply all Actions" o Varmistu, että Set all elements to: näyttää Quarantine (1), jos ei, klikkaa linkkiä ja valitse Quarantine popup-valikosta. o Sinulta kysytään mitä tehdä jos infektioita löytyi, valitse silloin "Apply all actions" o Sitten klikkaa "Reports" kuvaketta ohjelma yläosasta. o Klikkaa "Save report as" painiketta ikkunan vasemmassa alalaidassa ja tallenna raportti työpöydälle. o Sulje ohjelma, käynnistä kone normaalisti ja lähetä AVG:n raportti viestikejuusi. =============== Lataa tuolta http://www.ccleaner.com/download/builds.aspx CCleaner v1.41.544 - Basic, ÄLÄ aseenna Yahoo toolbaria! laita asetukset näin: Valinnat --> Lisäasetukset --> Ota ruksi pois kohdasta Poista vain yli 48 tuntia vanhat tilapäistiedostot. aja Puhdistaja > tutki nappi > aja ccleaner nappi oikea alakulma aja Virheet > etsi rekisteri virheitä nappi > Korjaa rekisteri virheet. nappi =================== Lataa Dr.Web CureIt työpöydälle: Tuplaklikkaa drweb-cureit.exe ja anna sen tehdä express scan Se skannaa käynnissä olevat ohjelmat ja jos jotain löytyy, klikkaa yes kun se kysyy haluatko poistaa sen. Tämä on vain lyhyt scan. Kun scan on valmis, merkkaa asemat, jotka haluat scannata. Valitse kaikki asemat. Punainen piste osoittaa, mitkä asemat on valittu. Klikaa vihreää nuolta oikealla ja scan alkaa. Klikkaa 'Yes to all', jos kysytään haluatko poistaa/siirtää tiedoston. Kun scan on valmis, katso voitko klikata next-kuvaketta löytyneiden tiedostojen vieressä: Jos asia on niin, klikkaa sitä ja sitten klikkaa next-kuvaketta oikealla alhaalla ja valitse Move incurable kuten alla olevalla kuvassa: Tämä siirtää sen %userprofile%\DoctorWeb\quarantine-hakemistoon. Tämän jälkeen klikkaa Dr.Web CureIt-valikossa file ja valitse save report list Tallenna raportti työpöydälle. Raportin nimi on DrWeb.csv Sulje Dr.Web Cureit. Käynnistä kone uudelleen !! Tämä siksi, että käytössä olevat tiedostot poistetaan/siirretään käynnistyksen yhteydessä. Käynnistyksen jälkeen liitä Dr.Web-lokin, jonka tallensit aiemmin, sisältö seuraavaan vastaukseesi.
No tehty, mut eipä juuri auttanut. Ajasin myös avgn antirootkitin. Olen käyttänyt aikaisemmin mm. ad-awarea ja spyware blasteria. Virustutkana on norman ja palomuuri zonealarm (käynnistys takkuile pahasti). Täs logit: --------------------------------------------------------- AVG Anti-Spyware - Scan Report --------------------------------------------------------- + Created at: 20:02:49 5.8.2007 + Scan result: :mozilla.750:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned. :mozilla.232:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.2o7 : Cleaned. :mozilla.584:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.2o7 : Cleaned. :mozilla.640:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.2o7 : Cleaned. C:\Documents and Settings\Margus\Cookies\margus@112.2o7[2].txt -> TrackingCookie.2o7 : Cleaned. C:\Documents and Settings\Margus\Cookies\margus@ford.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned. C:\Documents and Settings\Margus\Cookies\margus@microsofteup.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned. C:\Documents and Settings\Margus\Cookies\margus@primediabusiness.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned. :mozilla.173:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned. :mozilla.174:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned. :mozilla.175:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned. :mozilla.19:C:\Documents and Settings\Margus\Omat tiedostot\FEBE 2006 10-18 17.32.34\profile{default}.fbu/cookies.txt -> TrackingCookie.Adbrite : Error during cleaning. :mozilla.20:C:\Documents and Settings\Margus\Omat tiedostot\FEBE 2006 10-18 17.32.34\profile{default}.fbu/cookies.txt -> TrackingCookie.Adbrite : Error during cleaning. :mozilla.21:C:\Documents and Settings\Margus\Omat tiedostot\FEBE 2006 10-18 17.32.34\profile{default}.fbu/cookies.txt -> TrackingCookie.Adbrite : Error during cleaning. :mozilla.22:C:\Documents and Settings\Margus\Omat tiedostot\FEBE 2006 10-18 17.32.34\profile{default}.fbu/cookies.txt -> TrackingCookie.Adbrite : Error during cleaning. :mozilla.23:C:\Documents and Settings\Margus\Omat tiedostot\FEBE 2006 10-18 17.32.34\profile{default}.fbu/cookies.txt -> TrackingCookie.Adbrite : Error during cleaning. :mozilla.29:C:\Documents and Settings\Margus\Omat tiedostot\FEBE 2006 10-18 17.32.34\profile{default}.fbu/cookies.txt -> TrackingCookie.Adbrite : Error during cleaning. C:\Documents and Settings\Margus\Cookies\margus@adbrite[2].txt -> TrackingCookie.Adbrite : Cleaned. C:\Documents and Settings\Margus\Cookies\margus@ads.adbrite[2].txt -> TrackingCookie.Adbrite : Cleaned. :mozilla.512:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Adjuggler : Cleaned. :mozilla.513:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Adjuggler : Cleaned. :mozilla.330:C:\Documents and Settings\Margus\Omat tiedostot\FEBE 2006 10-18 17.32.34\profile{default}.fbu/cookies.txt -> TrackingCookie.Adobe : Error during cleaning. C:\Documents and Settings\Margus\Cookies\margus@www.adobe[1].txt -> TrackingCookie.Adobe : Cleaned. :mozilla.211:C:\Documents and Settings\Margus\Omat tiedostot\FEBE 2006 10-18 17.32.34\profile{default}.fbu/cookies.txt -> TrackingCookie.Adserver : Error during cleaning. :mozilla.212:C:\Documents and Settings\Margus\Omat tiedostot\FEBE 2006 10-18 17.32.34\profile{default}.fbu/cookies.txt -> TrackingCookie.Adserver : Error during cleaning. :mozilla.213:C:\Documents and Settings\Margus\Omat tiedostot\FEBE 2006 10-18 17.32.34\profile{default}.fbu/cookies.txt -> TrackingCookie.Adserver : Error during cleaning. :mozilla.135:C:\Documents and Settings\Margus\Omat tiedostot\FEBE 2006 10-18 17.32.34\profile{default}.fbu/cookies.txt -> TrackingCookie.Adtech : Error during cleaning. :mozilla.136:C:\Documents and Settings\Margus\Omat tiedostot\FEBE 2006 10-18 17.32.34\profile{default}.fbu/cookies.txt -> TrackingCookie.Adtech : Error during cleaning. :mozilla.49:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Adtech : Cleaned. :mozilla.50:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Adtech : Cleaned. :mozilla.227:C:\Documents and Settings\Margus\Omat tiedostot\FEBE 2006 10-18 17.32.34\profile{default}.fbu/cookies.txt -> TrackingCookie.Advertising : Error during cleaning. :mozilla.229:C:\Documents and Settings\Margus\Omat tiedostot\FEBE 2006 10-18 17.32.34\profile{default}.fbu/cookies.txt -> TrackingCookie.Advertising : Error during cleaning. :mozilla.230:C:\Documents and Settings\Margus\Omat tiedostot\FEBE 2006 10-18 17.32.34\profile{default}.fbu/cookies.txt -> TrackingCookie.Advertising : Error during cleaning. :mozilla.248:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Advertising : Cleaned. :mozilla.249:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Advertising : Cleaned. :mozilla.250:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Advertising : Cleaned. :mozilla.251:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Advertising : Cleaned. :mozilla.449:C:\Documents and Settings\Margus\Omat tiedostot\FEBE 2006 10-18 17.32.34\profile{default}.fbu/cookies.txt -> TrackingCookie.Adviva : Error during cleaning. :mozilla.231:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned. :mozilla.66:C:\Documents and Settings\Margus\Omat tiedostot\FEBE 2006 10-18 17.32.34\profile{default}.fbu/cookies.txt -> TrackingCookie.Atdmt : Error during cleaning. :mozilla.234:C:\Documents and Settings\Margus\Omat tiedostot\FEBE 2006 10-18 17.32.34\profile{default}.fbu/cookies.txt -> TrackingCookie.Casalemedia : Error during cleaning. :mozilla.235:C:\Documents and Settings\Margus\Omat tiedostot\FEBE 2006 10-18 17.32.34\profile{default}.fbu/cookies.txt -> TrackingCookie.Casalemedia : Error during cleaning. :mozilla.236:C:\Documents and Settings\Margus\Omat tiedostot\FEBE 2006 10-18 17.32.34\profile{default}.fbu/cookies.txt -> TrackingCookie.Casalemedia : Error during cleaning. :mozilla.523:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned. :mozilla.279:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Clickhype : Cleaned. :mozilla.466:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Clickzs : Cleaned. :mozilla.805:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Clickzs : Cleaned. :mozilla.226:C:\Documents and Settings\Margus\Omat tiedostot\FEBE 2006 10-18 17.32.34\profile{default}.fbu/cookies.txt -> TrackingCookie.Cnn : Error during cleaning. :mozilla.255:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Cnn : Cleaned. :mozilla.305:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Com : Cleaned. :mozilla.10:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned. :mozilla.114:C:\Documents and Settings\Margus\Omat tiedostot\FEBE 2006 10-18 17.32.34\profile{default}.fbu/cookies.txt -> TrackingCookie.Doubleclick : Error during cleaning. :mozilla.137:C:\Documents and Settings\Margus\Omat tiedostot\FEBE 2006 10-18 17.32.34\profile{default}.fbu/cookies.txt -> TrackingCookie.Falkag : Error during cleaning. :mozilla.138:C:\Documents and Settings\Margus\Omat tiedostot\FEBE 2006 10-18 17.32.34\profile{default}.fbu/cookies.txt -> TrackingCookie.Falkag : Error during cleaning. :mozilla.139:C:\Documents and Settings\Margus\Omat tiedostot\FEBE 2006 10-18 17.32.34\profile{default}.fbu/cookies.txt -> TrackingCookie.Falkag : Error during cleaning. :mozilla.140:C:\Documents and Settings\Margus\Omat tiedostot\FEBE 2006 10-18 17.32.34\profile{default}.fbu/cookies.txt -> TrackingCookie.Falkag : Error during cleaning. :mozilla.141:C:\Documents and Settings\Margus\Omat tiedostot\FEBE 2006 10-18 17.32.34\profile{default}.fbu/cookies.txt -> TrackingCookie.Falkag : Error during cleaning. :mozilla.148:C:\Documents and Settings\Margus\Omat tiedostot\FEBE 2006 10-18 17.32.34\profile{default}.fbu/cookies.txt -> TrackingCookie.Fastclick : Error during cleaning. :mozilla.151:C:\Documents and Settings\Margus\Omat tiedostot\FEBE 2006 10-18 17.32.34\profile{default}.fbu/cookies.txt -> TrackingCookie.Fastclick : Error during cleaning. :mozilla.260:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned. :mozilla.425:C:\Documents and Settings\Margus\Omat tiedostot\FEBE 2006 10-18 17.32.34\profile{default}.fbu/cookies.txt -> TrackingCookie.Fortunecity : Error during cleaning. :mozilla.426:C:\Documents and Settings\Margus\Omat tiedostot\FEBE 2006 10-18 17.32.34\profile{default}.fbu/cookies.txt -> TrackingCookie.Fortunecity : Error during cleaning. :mozilla.133:C:\Documents and Settings\Margus\Omat tiedostot\FEBE 2006 10-18 17.32.34\profile{default}.fbu/cookies.txt -> TrackingCookie.Googleadservices : Error during cleaning. :mozilla.156:C:\Documents and Settings\Margus\Omat tiedostot\FEBE 2006 10-18 17.32.34\profile{default}.fbu/cookies.txt -> TrackingCookie.Googleadservices : Error during cleaning. C:\Documents and Settings\Margus\Cookies\margus@ehg-qualcomm.hitbox[1].txt -> TrackingCookie.Hitbox : Cleaned. :mozilla.160:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Imrworldwide : Cleaned. :mozilla.161:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Imrworldwide : Cleaned. :mozilla.397:C:\Documents and Settings\Margus\Omat tiedostot\FEBE 2006 10-18 17.32.34\profile{default}.fbu/cookies.txt -> TrackingCookie.Imrworldwide : Error during cleaning. :mozilla.398:C:\Documents and Settings\Margus\Omat tiedostot\FEBE 2006 10-18 17.32.34\profile{default}.fbu/cookies.txt -> TrackingCookie.Imrworldwide : Error during cleaning. :mozilla.560:C:\Documents and Settings\Margus\Omat tiedostot\FEBE 2006 10-18 17.32.34\profile{default}.fbu/cookies.txt -> TrackingCookie.Information : Error during cleaning. :mozilla.356:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned. :mozilla.357:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned. :mozilla.302:C:\Documents and Settings\Margus\Omat tiedostot\FEBE 2006 10-18 17.32.34\profile{default}.fbu/cookies.txt -> TrackingCookie.Mediaplex : Error during cleaning. :mozilla.601:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned. :mozilla.13:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Netflame : Cleaned. :mozilla.14:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Netflame : Cleaned. :mozilla.15:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Netflame : Cleaned. C:\Documents and Settings\Margus\Cookies\margus@ssl-hints.netflame[2].txt -> TrackingCookie.Netflame : Cleaned. :mozilla.313:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Overture : Cleaned. :mozilla.314:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Overture : Cleaned. :mozilla.315:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Overture : Cleaned. :mozilla.606:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Overture : Cleaned. :mozilla.641:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned. :mozilla.642:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned. :mozilla.643:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned. :mozilla.644:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned. :mozilla.592:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned. :mozilla.593:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned. :mozilla.435:C:\Documents and Settings\Margus\Omat tiedostot\FEBE 2006 10-18 17.32.34\profile{default}.fbu/cookies.txt -> TrackingCookie.Real : Error during cleaning. :mozilla.610:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned. :mozilla.611:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned. :mozilla.529:C:\Documents and Settings\Margus\Omat tiedostot\FEBE 2006 10-18 17.32.34\profile{default}.fbu/cookies.txt -> TrackingCookie.Revenue : Error during cleaning. :mozilla.153:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.154:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.36:C:\Documents and Settings\Margus\Omat tiedostot\FEBE 2006 10-18 17.32.34\profile{default}.fbu/cookies.txt -> TrackingCookie.Revsci : Error during cleaning. :mozilla.609:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.253:C:\Documents and Settings\Margus\Omat tiedostot\FEBE 2006 10-18 17.32.34\profile{default}.fbu/cookies.txt -> TrackingCookie.Serving-sys : Error during cleaning. :mozilla.254:C:\Documents and Settings\Margus\Omat tiedostot\FEBE 2006 10-18 17.32.34\profile{default}.fbu/cookies.txt -> TrackingCookie.Serving-sys : Error during cleaning. :mozilla.255:C:\Documents and Settings\Margus\Omat tiedostot\FEBE 2006 10-18 17.32.34\profile{default}.fbu/cookies.txt -> TrackingCookie.Serving-sys : Error during cleaning. :mozilla.256:C:\Documents and Settings\Margus\Omat tiedostot\FEBE 2006 10-18 17.32.34\profile{default}.fbu/cookies.txt -> TrackingCookie.Serving-sys : Error during cleaning. :mozilla.257:C:\Documents and Settings\Margus\Omat tiedostot\FEBE 2006 10-18 17.32.34\profile{default}.fbu/cookies.txt -> TrackingCookie.Serving-sys : Error during cleaning. :mozilla.343:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned. :mozilla.344:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned. :mozilla.345:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned. :mozilla.346:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned. :mozilla.347:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned. :mozilla.348:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned. :mozilla.328:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Skype : Cleaned. :mozilla.329:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Skype : Cleaned. :mozilla.330:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Skype : Cleaned. :mozilla.331:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Skype : Cleaned. :mozilla.302:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned. :mozilla.303:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned. :mozilla.304:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned. :mozilla.767:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned. :mozilla.768:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned. :mozilla.155:C:\Documents and Settings\Margus\Omat tiedostot\FEBE 2006 10-18 17.32.34\profile{default}.fbu/cookies.txt -> TrackingCookie.Statcounter : Error during cleaning. :mozilla.380:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned. C:\Documents and Settings\Margus\Cookies\margus@statistik-gallup[1].txt -> TrackingCookie.Statistik-gallup : Cleaned. :mozilla.261:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned. :mozilla.262:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned. :mozilla.263:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned. :mozilla.399:C:\Documents and Settings\Margus\Omat tiedostot\FEBE 2006 10-18 17.32.34\profile{default}.fbu/cookies.txt -> TrackingCookie.Tacoda : Error during cleaning. :mozilla.400:C:\Documents and Settings\Margus\Omat tiedostot\FEBE 2006 10-18 17.32.34\profile{default}.fbu/cookies.txt -> TrackingCookie.Tacoda : Error during cleaning. :mozilla.615:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Targetnet : Cleaned. :mozilla.244:C:\Documents and Settings\Margus\Omat tiedostot\FEBE 2006 10-18 17.32.34\profile{default}.fbu/cookies.txt -> TrackingCookie.Tradedoubler : Error during cleaning. :mozilla.245:C:\Documents and Settings\Margus\Omat tiedostot\FEBE 2006 10-18 17.32.34\profile{default}.fbu/cookies.txt -> TrackingCookie.Tradedoubler : Error during cleaning. :mozilla.246:C:\Documents and Settings\Margus\Omat tiedostot\FEBE 2006 10-18 17.32.34\profile{default}.fbu/cookies.txt -> TrackingCookie.Tradedoubler : Error during cleaning. :mozilla.283:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned. :mozilla.284:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned. :mozilla.285:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned. :mozilla.325:C:\Documents and Settings\Margus\Omat tiedostot\FEBE 2006 10-18 17.32.34\profile{default}.fbu/cookies.txt -> TrackingCookie.Trafic : Error during cleaning. :mozilla.368:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Trafic : Cleaned. :mozilla.11:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned. :mozilla.205:C:\Documents and Settings\Margus\Omat tiedostot\FEBE 2006 10-18 17.32.34\profile{default}.fbu/cookies.txt -> TrackingCookie.Tribalfusion : Error during cleaning. :mozilla.502:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned. :mozilla.481:C:\Documents and Settings\Margus\Omat tiedostot\FEBE 2006 10-18 17.32.34\profile{default}.fbu/cookies.txt -> TrackingCookie.Valueclick : Error during cleaning. :mozilla.811:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Valueclick : Cleaned. C:\Documents and Settings\Margus\Cookies\margus@m.webtrends[2].txt -> TrackingCookie.Webtrends : Cleaned. C:\Documents and Settings\Margus\Cookies\margus@statse.webtrendslive[2].txt -> TrackingCookie.Webtrendslive : Cleaned. :mozilla.264:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned. :mozilla.265:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned. :mozilla.266:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned. :mozilla.49:C:\Documents and Settings\Margus\Omat tiedostot\FEBE 2006 10-18 17.32.34\profile{default}.fbu/cookies.txt -> TrackingCookie.Yieldmanager : Error during cleaning. :mozilla.306:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Zedo : Cleaned. :mozilla.307:C:\Documents and Settings\Margus\Application Data\Mozilla\Firefox\Profiles\ye1f92af.default\cookies.txt -> TrackingCookie.Zedo : Cleaned. ####################> Edit, tämä on oma tekele <############################ C:\Documents and Settings\Margus\Omat tiedostot\w98shutdown.bat -> Trojan.ExitWindows.e : Ignored. ::Report end ------------------------------ DrWeb: ------------------------------ A0033201.exe;C:\System Volume Information\_restore{197AFCC0-EF41-4AEE-AAF3-1A048F3B4596}\RP250;Probably DLOADER.Trojan;Incurable.Moved.; ------------------------------ Logfile of HijackThis v1.99.1 Scan saved at 5:41:40, on 6.8.2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16473) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Norman\Npm\bin\ELOGSVC.EXE C:\Program Files\Norman\Npm\Bin\Zanda.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe C:\Program Files\Executive Software\DiskeeperLite\DKService.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Norman\Npm\bin\NJEEVES.EXE C:\Program Files\Norman\Nvc\BIN\NVCSCHED.EXE C:\Program Files\Norman\Nvc\bin\nvcoas.exe C:\WINDOWS\system32\wscntfy.exe C:\WINDOWS\system32\wbem\wmiprvse.exe C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe C:\WINDOWS\SOUNDMAN.EXE C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Launch Manager\LaunchAp.exe C:\Launch Manager\HotkeyApp.exe C:\WINDOWS\System32\alg.exe C:\Launch Manager\OSD.exe C:\Launch Manager\OSDCtrl.exe C:\Launch Manager\Wbutton.exe C:\Program Files\Norman\Npm\bin\ZLH.EXE C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe C:\Program Files\Logitech\MouseWare\system\em_exec.exe C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Free Download Manager\fdm.exe C:\Program Files\Rainlendar2\Rainlendar2.exe C:\Program Files\Norman\Nvc\BIN\NIP.EXE C:\Program Files\Norman\Nvc\bin\cclaw.exe C:\WINDOWS\system32\hphmon03.exe C:\Program Files\VCOM\PowerDesk\pddlghlp.exe C:\Program Files\JGsoft\EditPadLite\EditPadLite.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Documents and Settings\Margus\Omat tiedostot\HijackThis_v1.99.1.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fi/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [LaunchAp] C:\Launch Manager\LaunchAp.exe O4 - HKLM\..\Run: [HotkeyApp] C:\Launch Manager\HotkeyApp.exe O4 - HKLM\..\Run: [LMgrVolOSD] C:\Launch Manager\OSD.exe O4 - HKLM\..\Run: [LMgrOSD] C:\Launch Manager\OSDCtrl.exe O4 - HKLM\..\Run: [Wbutton] "C:\Launch Manager\Wbutton.exe" O4 - HKLM\..\Run: [CtrlVol] C:\Launch Manager\CtrlVol.exe O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe O4 - HKLM\..\Run: [Norman ZANDA] C:\Program Files\Norman\Npm\bin\ZLH.EXE /LOAD /SPLASH O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [StartupDelayer] "C:\Program Files\r2 Studios\Startup Delayer\Startup Launcher.exe" O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe" O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [Free Download Manager] "C:\Program Files\Free Download Manager\fdm.exe" -autorun O4 - HKCU\..\Run: [Rainlendar2] C:\Program Files\Rainlendar2\Rainlendar2.exe O8 - Extra context menu item: Download all with Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm O8 - Extra context menu item: Download selected with Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm O8 - Extra context menu item: Download web site with Free Download Manager - file://C:\Program Files\Free Download Manager\dlpage.htm O8 - Extra context menu item: Download with Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll O9 - Extra button: Oheistiedot - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O9 - Extra button: @c:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: @c:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\Program Files\Messenger\msmsgs.exe O11 - Options group: [INTERNATIONAL] International* O16 - DPF: {029FDBA6-3547-11D7-AA4C-0050BF051A00} (Rawflow ICD Client) - http://rotterdam.rawflow.com/clients/5.1.2.0/Rawflow.cab O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab O16 - DPF: {3EA4FA88-E0BE-419A-A732-9B79B87A6ED0} (CTVUAxCtrl Object) - http://dl.tvunetworks.com/TVUAx.cab O16 - DPF: {5CD4310E-88FB-43C1-BE24-5F3FA9C5C9D1} (KooPlayer Control) - http://www.tvlution.com/KooPlayer.ocx O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab O16 - DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} (a-squared Scanner) - http://ax.emsisoft.com/asquared.cab O16 - DPF: {D821DC4A-0814-435E-9820-661C543A4679} (CRLDownloadWrapper Class) - http://drmlicense.one.microsoft.com/crlupdate/en/crlocx.ocx O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: Diskeeper - Executive Software International, Inc. - C:\Program Files\Executive Software\DiskeeperLite\DKService.exe O23 - Service: Norman eLogger service 6 (eLoggerSvc6) - Norman ASA - C:\Program Files\Norman\Npm\bin\ELOGSVC.EXE O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Norman NJeeves - Unknown owner - C:\Program Files\Norman\Npm\bin\NJEEVES.EXE O23 - Service: Norman ZANDA - Norman ASA - C:\Program Files\Norman\Npm\Bin\Zanda.exe O23 - Service: Norman Virus Control on-access component (nvcoas) - Norman ASA - C:\Program Files\Norman\Nvc\bin\nvcoas.exe O23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Norman ASA - C:\Program Files\Norman\Nvc\BIN\NVCSCHED.EXE O23 - Service: Pml Driver - HP - C:\WINDOWS\system32\HPHipm09.exe O23 - Service: Sandra Data Service (SandraDataSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2007\Win32\RpcDataSrv.exe O23 - Service: Sandra Service (SandraTheSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2007\RpcSandraSrv.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
fixaa tää O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) nää nopeuttaa jos fixaat O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe" O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe ======= Loistava ohje tietokoneeen nopeuttamiseksi http://neko.1g.fi/ohje/hidastelua.html
Fixasin nämäkin - ei apua. Kokeilin myös asentaa Zonealarmin uudetsaan. Pahoin pelkään, että jotain on fyysisesti tapahtunut.
Lataa Atribunen ATF Cleaner Ohjeet; Tupla-klikkaa ATF-Cleaner.exe käynnistääksesi ohjelman.Main:n alla valitse: Select All Klikkaa Empty Selected valintaa. Jos käytät FireFoxia selaimenasi Klikkaa Firefox yläpuolelta ja valitse: Select All Klikkaa Empty Selected valintaa. HUOMIO: Jos haluaisit pitää tallennetut salasanasi, klikkaa No kun se sitä kysyy. Jos käytät Operaa selaimenasiKlikkaa Opera yläpuolelta ja valitse: Select All Klikkaa Empty Selected valintaa taas. HUOMIO: Jos haluaisit pitää tallennetut salasanasi, klikkaa No kun se sitä kysyy. Klikkaa Exit päävalikosta sulkeaksesi ohjelman. Teknistä tukea tulee jos tupla-klikkaat sähköpostiosoitetta joka sijaitsee jokaisen menun alapuolella kyseisessä työkalussa. (Huomatkaa että se tuki on sitten englanniksi)
Joo tein (ja 99% Firefox) - ei vaikuta. Nyt "tietoturvakeskus" ilmoittaa, että ZA ei ole käytössä - vaikka ohjelma toimii. Ennen kesti käynnistys noin 3-4 min ja nyt saa venää 10-15 min. PS! Fragmentit olen hoitanut Diskkeeper litella.
laita tuosta escan pyörimään Ohjeet tuolla sivulla. http://koti.mbnet.fi/pattaya1/escanmwav.htm lataa tuosta http://www.spywareinfo.dk/download/mwav.exe päivitä tuosta http://koti.mbnet.fi/pattaya1/lataus/Mwav.bat laita täpit merkkauksien mukaan http://koti.mbnet.fi/pattaya1/eScan6.jpg scannaa jos ala luukkuun tulee jotain niin kopioi se näin: Käytä komentoa Ctrl+A. Kopioi rivit komennolla Ctrl+C. Liitä rivit komennolla Ctrl+V. Laita virus log tänne.
no kesti noin 4 tuntia ja alalaatikossa näkyi vain se mun oma tekele jonka se nyt sit kiltisti poisti (voi kiitos): File C:\Documents and Settings\Margus\Omat tiedostot\w98shutdown.bat infected by "Trojan.BAT.ExitWindows.e" Virus. Action Taken: File Deleted. se oli vain mun vanhan konen työpöytä ikoni samuttusta varten. logissa näkyi jotain erroreita sun muita, mut se on kyllä mielettömän pitkä tänne lähetettäväksi (any suggestions).
Heips, kiitos teille vaivan näösta. Ongelma kuitenkin selvis vähän googletamalla: xptips Ensisijaisen ide-kanavan DMA oli pois päältä. Lisäksi rukkasin joitakin palveluita pois päältä yms. Ja johan skulaa taas, niin käynnistys (alle 4 min), ZA, norman kuin kaikki muutkin. Ja tulihan kerrankin kone tarkistettua ja putsattua kunnolla.
