Protection bar ??

Discussion in 'Virukset ja haittaohjelmat - HijackThis -logit' started by mara67, Aug 29, 2006.

Thread Status:
Not open for further replies.
  1. mara67

    mara67 Member

    Joined:
    May 25, 2005
    Messages:
    4
    Likes Received:
    0
    Trophy Points:
    11
    Tällainen baari ilmestyi IE- selaimeen, eikä sitä saa millään pois. Samalla ilmestyi vaiva, että kotisivulle mentäessä sivu vaihtuu itsestään tänne:

    http://www.safetyhomepage.net/

    Mikä neuvoksi??
     
    mara67, Aug 29, 2006
    #1
  2. NUIJJA

    NUIJJA Active member

    Joined:
    Jan 12, 2005
    Messages:
    4,410
    Likes Received:
    0
    Trophy Points:
    66
    NUIJJA, Aug 29, 2006
    #2
  3. mara67

    mara67 Member

    Joined:
    May 25, 2005
    Messages:
    4
    Likes Received:
    0
    Trophy Points:
    11
    No tässä tämä:

    Logfile of HijackThis v1.99.1
    Scan saved at 6:42:18, on 30.8.2006
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\OHJELM~1\f-SECURE\backweb\4476822\Program\SERVIC~1.EXE
    C:\WINDOWS\System32\drivers\CDAC11BA.EXE
    C:\Ohjelmatiedostot\f-SECURE\Anti-Virus\fsgk32st.exe
    C:\Ohjelmatiedostot\f-SECURE\backweb\4476822\program\fsbwsys.exe
    C:\Ohjelmatiedostot\f-SECURE\Anti-Virus\FSGK32.EXE
    C:\Ohjelmatiedostot\f-SECURE\Common\FSMA32.EXE
    C:\Ohjelmatiedostot\f-SECURE\Anti-Virus\fssm32.exe
    C:\Ohjelmatiedostot\f-SECURE\Common\FSMB32.EXE
    C:\WINDOWS\System32\svchost.exe
    C:\Ohjelmatiedostot\f-SECURE\Common\FCH32.EXE
    C:\Ohjelmatiedostot\f-SECURE\Common\FAMEH32.EXE
    C:\Ohjelmatiedostot\f-SECURE\Anti-Virus\fsqh.exe
    C:\Ohjelmatiedostot\f-SECURE\Anti-Virus\fsrw.exe
    C:\Ohjelmatiedostot\f-SECURE\FWES\Program\fsdfwd.exe
    C:\Ohjelmatiedostot\f-SECURE\FSPC\fspc.exe
    C:\Ohjelmatiedostot\f-SECURE\Anti-Virus\fsav32.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\TW-IA300C ADSL\CnxDslTb.exe
    C:\Program Files\ahead\InCD\InCD.exe
    C:\Program Files\Common Files\Real\Update_OB\realsched.exe
    C:\WINDOWS\SOUNDMAN.EXE
    C:\Ohjelmatiedostot\f-SECURE\Common\FSM32.EXE
    C:\Ohjelmatiedostot\f-SECURE\FSGUI\ispnews.exe
    C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
    C:\Program Files\Real\RealPlayer\RealPlay.exe
    C:\OHJELM~1\f-SECURE\ANTI-S~1\fsaw.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Skype\Phone\Skype.exe
    C:\Ohjelmatiedostot\f-SECURE\FSGUI\fsguidll.exe
    C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
    C:\PROGRA~1\COMMON~1\PCSuite\Services\SERVIC~1.EXE
    C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe
    C:\Ohjelmatiedostot\f-SECURE\backweb\4476822\Program\fspex.exe
    C:\Program Files\Internet Explorer\IEXPLORE.EXE
    C:\Documents and Settings\Esiasennettu\Työpöytä\Download\Hijackthis\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.dial.inet.fi:800
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = ;localhost;<local>
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    R3 - URLSearchHook: (no name) - {9BE56225-C1EE-7169-EF7D-B3FCA280B48C} - C:\WINDOWS\Nstvmfqk.dll (file missing)
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {202a961f-23ae-42b1-9505-ffe3c818d717} - C:\Program Files\PCODEC\isaddon.dll
    O2 - BHO: (no name) - {3053FB20-A2BA-0C46-A8D6-65392D26022D} - C:\WINDOWS\Nstvmfqk.dll (file missing)
    O2 - BHO: (no name) - {81326221-1B6F-4AB7-8630-04ECB34C1FD8} - C:\WINDOWS\System32\kcofbb.dll (file missing)
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
    O3 - Toolbar: Search - {9132C47A-75F8-8978-EBA1-0A5CFF765DE2} - C:\WINDOWS\Nstvmfqk.dll (file missing)
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
    O3 - Toolbar: Protection Bar - {fe2d25c1-c1db-4b5e-9390-af1cb5302f32} - C:\Program Files\PCODEC\iesplugin.dll
    O4 - HKLM\..\Run: [PRONoMgr.exe] C:\Program Files\Intel\NCS\PROSet\PRONoMgr.exe
    O4 - HKLM\..\Run: [CnxDslTaskBar] "C:\Program Files\\TW-IA300C ADSL\CnxDslTb.exe"
    O4 - HKLM\..\Run: [InCD] C:\Program Files\ahead\InCD\InCD.exe
    O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\NeroCheck.exe
    O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
    O4 - HKLM\..\Run: [AltnetPointsManager] c:\program files\altnet\points manager\points manager.exe -s
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [cfgmgr52] RunDLL32.EXE C:\WINDOWS\cfgmgr52.dll,DllRun
    O4 - HKLM\..\Run: [F-Secure Manager] "C:\Ohjelmatiedostot\f-SECURE\Common\FSM32.EXE" /splash
    O4 - HKLM\..\Run: [F-Secure TNB] "C:\Ohjelmatiedostot\f-SECURE\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
    O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Ohjelmatiedostot\f-SECURE\FSGUI\FSSW.EXE" /reboot
    O4 - HKLM\..\Run: [News Service] "C:\Ohjelmatiedostot\f-SECURE\FSGUI\ispnews.exe"
    O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -onlytray
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [prxtect] C:\WINDOWS\System32\prxtect.exe
    O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
    O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
    O4 - Global Startup: F-Secure 2006.lnk = C:\Ohjelmatiedostot\f-SECURE\backweb\4476822\Program\fspex.exe
    O8 - Extra context menu item: &Estä tämä kohoikkuna - C:\Ohjelmatiedostot\f-SECURE\Anti-Spyware\blockpopups.htm
    O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
    O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
    O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
    O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
    O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
    O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar1.dll/cmtrans.html
    O9 - Extra button: Web-suodatin - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Ohjelmatiedostot\f-SECURE\FSPC\fspcmsie.dll
    O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Ohjelmatiedostot\f-SECURE\FSPC\fspcmsie.dll
    O9 - Extra 'Tools' menuitem: Web-suodatin - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Ohjelmatiedostot\f-SECURE\FSPC\fspcmsie.dll
    O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Ohjelmatiedostot\f-SECURE\Anti-Spyware\ieshield.dll
    O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Ohjelmatiedostot\f-SECURE\Anti-Spyware\ieshield.dll
    O9 - Extra button: Oheistiedot - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O10 - Broken Internet access because of LSP provider 'winsflt.dll' missing
    O16 - DPF: Genimap Esc Map Applet - http://www.genimap.com/Esc/applet/esc/objects1322/GenimapEscApplet.cab
    O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/30f9ddb0f35a56e6cd21/netzip/RdxIE601.cab
    O16 - DPF: {745395C8-D0E1-4227-8586-624CA9A10A8D} (AxisMediaControl Class) - http://skiaker.dynalias.net/activex/AMC.cab
    O17 - HKLM\System\CCS\Services\Tcpip\..\{081C197A-F345-44AB-A1FF-A24F048B7560}: NameServer = 193.210.18.18
    O18 - Filter: text/html - {94571225-66DE-4E5E-B539-49809616164B} - C:\WINDOWS\System32\kcofbb.dll
    O18 - Filter: text/plain - {94571225-66DE-4E5E-B539-49809616164B} - C:\WINDOWS\System32\kcofbb.dll
    O23 - Service: F-Secure 2006 (BackWeb Plug-in - 4476822) - F-Secure Internet Security 2005 - C:\OHJELM~1\f-SECURE\backweb\4476822\Program\SERVIC~1.EXE
    O23 - Service: C-DillaCdaC11BA - C-Dilla Ltd - C:\WINDOWS\System32\drivers\CDAC11BA.EXE
    O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Ohjelmatiedostot\f-SECURE\Anti-Virus\fsgk32st.exe
    O23 - Service: fsbwsys - F-Secure Corp. - C:\Ohjelmatiedostot\f-SECURE\backweb\4476822\program\fsbwsys.exe
    O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Ohjelmatiedostot\f-SECURE\FWES\Program\fsdfwd.exe
    O23 - Service: F-Secure HTTP Server (fshttps) - F-Secure Corporation - C:\Ohjelmatiedostot\f-SECURE\FSPC\fshttps\fshttps.exe
    O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Ohjelmatiedostot\f-SECURE\Common\FSMA32.EXE
    O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\NCS\Sync\NetSvc.exe

     
    mara67, Aug 29, 2006
    #3
  4. kairis

    kairis Regular member

    Joined:
    Jun 1, 2003
    Messages:
    277
    Likes Received:
    0
    Trophy Points:
    26
    Moro. Sorry kun kesti...
    Aloitetaan tällä:
    Lataa SmitfraudFix
    http://siri.urz.free.fr/Fix/SmitfraudFix.zip
    Pura sisältö (kansio nimeltä SmitfraudFix) työpöydällesi:

    Avaa SmitfraudFix kansio ja tupla-klikkaa smitfraudfix.cmd
    Valitse optio #1 - [bold]Search[/bold] kirjoittamalla 1 ja painamalla [bold]"Enter"[/bold]; tekstitiedosto avautuu, joka listaa tarttuneet tiedostot (jos olemassa).
    [bold]Postita tämän tekstitiedoston sisältö viestiketjuusi.[/bold]
     
    kairis, Aug 31, 2006
    #4
Thread Status:
Not open for further replies.

Share This Page