Moi! Mulla olis tässä pikku ongelma. Ajoin koneen läpi f-securella ja ad-awarella. Ad-aware löysi vain jotain pieniä mainostiedostoja mutta f-secure löysi win32(piste)trojandownloader(piste)small:in mutta se ei osaa poistaa sitä. Eli miten sen saa pois? Olen ladannut HiJackThis ohjelman ja olen kuullut että sillä sais nuo sitkeimmätkin haittaohjelmat pois koneelta mutta en osaa käyttää sitä. Ja olen tässä huomannut myös semmosen jutun että /C: -asemaan tulee koko ajan jotain outoja tiedostoja eli tila loppuu sieltä kohta, vaikken lataa sinne mitään tms. Luulen että toi trojan downloaderi latailee jotain omia tiedostoja koneelleni. Nyt tarvitsisin teidän apuanne! Olisin hyvin kiitollinen jos voisitte etes jotenkin auttaa minua tässä ongelmassa! Edit: Kone skannattu AVG anti-spyware -ohjelmalla. Mutta voitteko ystävällisesti tarkistaa login siitä huolimatta, jotta sinne ei jäisi mitään ylimääräisiä "kökköjä" kummittelemaan. HJT-logi: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 19:17:27, on 4.2.2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\F-Secure\Common\FSM32.EXE C:\Program Files\Analog Devices\Core\smax4pnp.exe C:\Program Files\Analog Devices\SoundMAX\Smax4.exe C:\Program Files\DAEMON Tools\daemon.exe C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe C:\Program Files\Google\Gmail Notifier\gnotify.exe C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE C:\Program Files\NetLimiter\NetLimiter.exe C:\Program Files\Logitech\Video\LogiTray.exe F:\AVG Anti-Spyware 7.5\avgas.exe C:\Program Files\MSN Messenger\MsnMsgr.Exe C:\Program Files\Skype\Phone\Skype.exe C:\Program Files\Messenger\msmsgs.exe C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe C:\WINDOWS\system32\LVComS.exe C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe C:\PROGRA~1\COMMON~1\PCSuite\Services\SERVIC~1.EXE F:\AVG Anti-Spyware 7.5\guard.exe C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE C:\WINDOWS\system32\CTsvcCDA.EXE C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe C:\Program Files\F-Secure\BackWeb\7681197\Program\F-Secure Automatic Update.exe C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE C:\Program Files\F-Secure\Anti-Virus\fssm32.exe C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe C:\Program Files\F-Secure\Common\FSMA32.EXE C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe C:\Program Files\F-Secure\Common\FSMB32.EXE C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe C:\Program Files\F-Secure\Common\FCH32.EXE C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\PnkBstrA.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\F-Secure\Common\FAMEH32.EXE C:\Program Files\F-Secure\Anti-Virus\fsqh.exe C:\Program Files\F-Secure\Anti-Virus\fsrw.exe C:\Program Files\F-Secure\Common\FNRB32.EXE C:\Program Files\F-Secure\Anti-Virus\fsav32.exe C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe C:\Program Files\F-Secure\Common\FIH32.EXE C:\WINDOWS\system32\WgaTray.exe C:\PROGRA~1\F-Secure\ANTI-S~1\fsaw.exe C:\Program Files\F-Secure\FSGUI\fsguidll.exe C:\WINDOWS\system32\rundll32.exe C:\Program Files\MSN Messenger\usnsvc.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fi/ O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033 O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe" O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe O4 - HKLM\..\Run: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] C:\Program Files\Google\Gmail Notifier\gnotify.exe O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -onlytray O4 - HKLM\..\Run: [NetLimiter] C:\Program Files\NetLimiter\NetLimiter.exe /s O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe O4 - HKLM\..\Run: [!AVG Anti-Spyware] "F:\AVG Anti-Spyware 7.5\avgas.exe" /minimized O4 - HKLM\..\Run: [043637e3] rundll32.exe "C:\WINDOWS\system32\kyvkkqde.dll",b O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: F-Secure Automatic Update.lnk = C:\Program Files\F-Secure\BackWeb\7681197\program\F-Secure Automatic Update.exe O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe O8 - Extra context menu item: &Block this popup - C:\Program Files\F-Secure\Anti-Spyware\blockpopups.htm O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm O8 - Extra context menu item: Avaa uuteen etuvälilehteen - res://C:\Program Files\Windows Live Toolbar\Components\fi-fi\msntabres.dll.mui/230?42e34bf2d6574abb80d1d6c4bc7e0366 O8 - Extra context menu item: Avaa uuteen taustavälilehteen - res://C:\Program Files\Windows Live Toolbar\Components\fi-fi\msntabres.dll.mui/229?42e34bf2d6574abb80d1d6c4bc7e0366 O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll O9 - Extra button: IE Shield - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure\Anti-Spyware\ieshield.dll O9 - Extra 'Tools' menuitem: IE Shield... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure\Anti-Spyware\ieshield.dll O9 - Extra button: Oheistiedot - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1164648388828 O17 - HKLM\System\CCS\Services\Tcpip\..\{451EF1CD-7324-4280-B8E1-813A6094BDF4}: NameServer = 213.139.190.3 212.50.131.153 O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - (no file) O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - F:\AVG Anti-Spyware 7.5\guard.exe O23 - Service: F-Secure Automatic Update (BackWeb Plug-in - 7681197) - F-Secure Automatic Update - C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corp. - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Apache Software Foundation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe -- End of file - 9467 bytes
Lataa VundoFix.exe työpöydällesi. Tupla-klikkaa VundoFix.exe ajaaksesi sen. Klikkaa Scan for Vundo valintaa. Kun skannaus on valmis, klikkaa Remove Vundo valintaa. Sinulta kysytään haluatko poistaa filut - klikkaa YES. Kun olet klikannut yes, työpöytäsi tyhjenee kun se alkaa poistamaan Vundoa. Kun se on valmis, fiksi ilmoittaa käynnistäväsi koneesi uudelleen, klikkaa OK. Postita C:\vundofix.txt lokin sekä tuoreen HijackThis lokin sisältö. Huomaa: Se on mahdollista että VundoFix löysi tiedoston jota se ei pystynyt poistamaan. Tässä tilanteessa, VundoFix ajaa itsensä rebootissa, seuraa vain yläpuolelle olevia ohjeita alkaen kohdasta "Klikkaa Scan for Vundo valintaa." kun VundoFix ilmaantuu uudelleenkäynnistyksen yhteydessä.
Tässä on vundofix -loki: VundoFix V6.7.7 Checking Java version... Java version is 1.5.0.9 Old versions of java are exploitable and should be removed. Java version is 1.5.0.11 Scan started at 16:14:38 5.2.2008 Listing files found while scanning.... C:\windows\system32\abeeg.bak1 C:\windows\system32\abeeg.bak2 C:\windows\system32\abeeg.ini C:\windows\system32\abeeg.ini2 C:\windows\system32\accdd.bak2 C:\windows\system32\accdd.ini C:\windows\system32\accdd.ini2 C:\windows\system32\adeeg.bak1 C:\windows\system32\adeeg.bak2 C:\windows\system32\adeeg.ini C:\WINDOWS\system32\aeklchqd.dll C:\WINDOWS\system32\aermevdo.dll C:\WINDOWS\system32\aivbmfai.dll C:\WINDOWS\system32\amxgoged.dll C:\WINDOWS\system32\atfyqcax.dll C:\WINDOWS\system32\awtqn.dll C:\WINDOWS\system32\awtqo.dll C:\WINDOWS\system32\awtqr.dll C:\windows\system32\awtsp.dll C:\WINDOWS\system32\awtsr.dll C:\windows\system32\avvmaupi.ini C:\WINDOWS\system32\awvtq.dll C:\windows\system32\awvvv.dll C:\windows\system32\aycdd.bak1 C:\windows\system32\aycdd.bak2 C:\windows\system32\aycdd.ini C:\windows\system32\aynwxhsu.ini C:\windows\system32\bcsbqybp.ini C:\windows\system32\bfdenwfy.ini C:\WINDOWS\system32\bmmjyrsw.dll C:\WINDOWS\system32\bplhfdyp.dll C:\WINDOWS\system32\bqkeibwc.ini C:\WINDOWS\system32\bqoynspn.dll C:\WINDOWS\system32\btyavtax.dll C:\WINDOWS\system32\buwnwjwq.dll C:\WINDOWS\system32\bwcqmwke.dll C:\WINDOWS\system32\bvfsuhep.dll C:\windows\system32\bxdmshwn.dll C:\WINDOWS\system32\cacsvisa.dll C:\windows\system32\cfhkj.bak1 C:\windows\system32\cfhkj.bak2 C:\windows\system32\cfhkj.ini C:\WINDOWS\system32\cwbiekqb.dll C:\windows\system32\cyvxwjbt.ini C:\WINDOWS\system32\ddayy.dll C:\WINDOWS\system32\ddcca.dll C:\WINDOWS\system32\ddcya.dll C:\WINDOWS\system32\ddcyv.dll C:\WINDOWS\system32\dgtnbstu.dll C:\WINDOWS\system32\divjwdtn.dll C:\WINDOWS\system32\dixympqk.dll C:\WINDOWS\system32\dkcpwsnv.dll C:\WINDOWS\system32\dotcfpky.dll C:\WINDOWS\system32\dvjjwtjv.dll C:\WINDOWS\system32\dwkjmoif.dll C:\WINDOWS\system32\dwvluwva.dll C:\WINDOWS\system32\emlmwcmc.dll C:\WINDOWS\system32\ewsgwlpb.dll C:\windows\system32\eyeapbtv.ini C:\WINDOWS\system32\fcoqkjql.dll C:\WINDOWS\system32\ffljyjoc.dll C:\windows\system32\fhhkj.bak1 C:\windows\system32\fhhkj.ini C:\WINDOWS\system32\fmxwdixn.dll C:\WINDOWS\system32\fwgielsi.dll C:\WINDOWS\system32\fviaarcw.dll C:\WINDOWS\system32\gbfrjpgd.dll C:\WINDOWS\system32\gebca.dll C:\WINDOWS\system32\gebya.dll C:\WINDOWS\system32\geeba.dll C:\windows\system32\geeda.dll C:\WINDOWS\system32\geedd.dll C:\windows\system32\gfhkj.ini C:\windows\system32\gfhkj.ini2 C:\WINDOWS\system32\gifmsrwp.dll C:\WINDOWS\system32\giucoffi.dll C:\windows\system32\gjkmp.bak1 C:\windows\system32\gjkmp.bak2 C:\windows\system32\gjkmp.ini C:\windows\system32\gjkmp.ini2 C:\WINDOWS\system32\grrfjbkk.dll C:\WINDOWS\system32\henvravp.dll C:\windows\system32\hgjlm.bak1 C:\windows\system32\hgjlm.ini C:\WINDOWS\system32\hgjylgit.dll C:\WINDOWS\system32\hsjbcaoi.dll C:\WINDOWS\system32\iafmbvia.ini C:\WINDOWS\system32\ieibsswt.dll C:\WINDOWS\system32\ifjginpr.dll C:\windows\system32\ilkkj.bak1 C:\windows\system32\ilkkj.bak2 C:\windows\system32\ilkkj.ini C:\windows\system32\ilkkj.ini2 C:\WINDOWS\system32\ininocxh.dll C:\WINDOWS\system32\inuvtgue.dll C:\WINDOWS\system32\ipuamvva.dll C:\WINDOWS\system32\ismqggbk.dll C:\WINDOWS\system32\jamhsakc.dll C:\WINDOWS\system32\jcqshyci.dll C:\WINDOWS\system32\jibrrioe.dll C:\windows\system32\jjjlm.bak1 C:\windows\system32\jjjlm.bak2 C:\windows\system32\jjjlm.ini C:\windows\system32\jjjlm.ini2 C:\WINDOWS\system32\jkhfc.dll C:\WINDOWS\system32\jkhfd.dll C:\WINDOWS\system32\jkhfe.dll C:\WINDOWS\system32\jkhfg.dll C:\WINDOWS\system32\jkhhf.dll C:\WINDOWS\system32\jkkjg.dll C:\WINDOWS\system32\jkkjh.dll C:\WINDOWS\system32\jkkjj.dll C:\WINDOWS\system32\jkkjk.dll C:\WINDOWS\system32\jkkli.dll C:\WINDOWS\system32\jkklk.dll C:\WINDOWS\system32\jmqiccep.dll C:\WINDOWS\system32\jmwywswi.dll C:\WINDOWS\system32\jntdlgai.dll C:\WINDOWS\system32\jpudegmv.dll C:\WINDOWS\system32\jrbhuxee.dll C:\windows\system32\jvfueduk.dll C:\WINDOWS\system32\kaecpist.dll C:\WINDOWS\system32\kghpekvr.dll C:\WINDOWS\system32\kgsqrgiq.dll C:\WINDOWS\system32\khwaeyrb.dll C:\WINDOWS\system32\kqyoaqsy.dll C:\WINDOWS\system32\krmbjlvc.dll C:\WINDOWS\system32\kyvkkqde.dll C:\WINDOWS\system32\lehayuai.dll C:\WINDOWS\system32\lgixiosn.dll C:\windows\system32\ljlwhfgh.dll C:\WINDOWS\system32\lprsqilh.dll C:\WINDOWS\system32\lsnjvlua.dll C:\WINDOWS\system32\luuywyyl.dll C:\WINDOWS\system32\mhqjcvas.dll C:\WINDOWS\system32\mljgh.dll C:\WINDOWS\system32\mljjj.dll C:\WINDOWS\system32\mlljj.dll C:\WINDOWS\system32\mnqgjdar.dll C:\WINDOWS\system32\mosqivao.dll C:\WINDOWS\system32\mtfdvxbj.dll C:\WINDOWS\system32\mttmpxkn.dll C:\WINDOWS\system32\mtywkixa.dll C:\WINDOWS\system32\mugmedas.dll C:\WINDOWS\system32\mwfvpvfq.dll C:\windows\system32\nkxpmttm.ini C:\WINDOWS\system32\nnwwktxr.dll C:\WINDOWS\system32\nufhyqua.dll C:\WINDOWS\system32\nwckofve.dll C:\WINDOWS\system32\nvjkpmvf.dll C:\WINDOWS\system32\ocexipdh.dll C:\WINDOWS\system32\odvemrea.ini C:\WINDOWS\system32\oegqxooy.dll C:\WINDOWS\system32\okswwtli.dll C:\windows\system32\oqtwa.bak1 C:\windows\system32\oqtwa.bak2 C:\windows\system32\oqtwa.ini C:\WINDOWS\system32\oqxklnfg.dll C:\WINDOWS\system32\osrjjrtk.dll C:\WINDOWS\system32\pbyqbscb.dll C:\WINDOWS\system32\pehusfvb.ini C:\WINDOWS\system32\pmkjg.dll C:\WINDOWS\system32\pmkjh.dll C:\WINDOWS\system32\pmkji.dll C:\windows\system32\pmnll.dll C:\WINDOWS\system32\pmnnl.dll C:\WINDOWS\system32\pnccvdki.dll C:\WINDOWS\system32\pnwudpsx.dll C:\windows\system32\ppqss.bak1 C:\windows\system32\ppqss.ini C:\WINDOWS\system32\pqyivefi.dll C:\WINDOWS\system32\prairrjx.dll C:\windows\system32\prqss.bak1 C:\windows\system32\prqss.bak2 C:\windows\system32\prqss.ini C:\windows\system32\prqss.ini2 C:\WINDOWS\system32\prwmytjy.dll C:\WINDOWS\system32\pryixqjv.dll C:\windows\system32\pstwa.ini C:\windows\system32\pvarvneh.ini C:\WINDOWS\system32\pxcdxtuk.dll C:\WINDOWS\system32\qatolrvq.dll C:\windows\system32\qdspmtmk.dll C:\WINDOWS\system32\qemdxupw.dll C:\WINDOWS\system32\qewbpiqq.dll C:\WINDOWS\system32\qqtwennp.dll C:\windows\system32\qtstv.bak1 C:\windows\system32\qtstv.ini C:\windows\system32\qtvwa.bak1 C:\windows\system32\qtvwa.bak2 C:\windows\system32\qtvwa.ini C:\windows\system32\qvrlotaq.ini C:\WINDOWS\system32\rdchvqkc.dll C:\WINDOWS\system32\rihpenqv.dll C:\WINDOWS\system32\rqtwa.bak2 C:\WINDOWS\system32\rqtwa.ini C:\windows\system32\rvkephgk.ini C:\windows\system32\rvwhjvwk.dll C:\WINDOWS\system32\shqsssqq.dll C:\WINDOWS\system32\sivbbvlt.dll C:\WINDOWS\system32\slhlalam.dll C:\WINDOWS\system32\sqcekqoq.dll C:\WINDOWS\system32\ssqpnkk.dll C:\WINDOWS\system32\ssqpp.dll C:\WINDOWS\system32\ssqrp.dll C:\windows\system32\ssqrr.dll C:\WINDOWS\system32\ssqrs.dll C:\WINDOWS\system32\ssttq.dll C:\windows\system32\stutv.bak2 C:\windows\system32\stutv.ini C:\WINDOWS\system32\sucqmbbx.dll C:\windows\system32\swsulvev.ini C:\WINDOWS\system32\tbjwxvyc.dll C:\windows\system32\tiglyjgh.ini C:\WINDOWS\system32\tlpiuhbm.dll C:\WINDOWS\system32\tqcddcxx.dll C:\WINDOWS\system32\ttvnrjdp.dll C:\windows\system32\twssbiei.ini C:\WINDOWS\system32\uafdvsti.dll C:\WINDOWS\system32\ucjriqjr.dll C:\WINDOWS\system32\urgeyumv.dll C:\WINDOWS\system32\ushxwnya.dll C:\WINDOWS\system32\wbxtfwvr.dll C:\WINDOWS\system32\vciomqrf.dll C:\WINDOWS\system32\vevlusws.dll C:\WINDOWS\system32\vfmgcqfu.dll C:\WINDOWS\system32\whdkpohb.dll C:\windows\system32\wlmpylmv.ini C:\WINDOWS\system32\vmlypmlw.dll C:\windows\system32\vokpshjy.dll C:\WINDOWS\system32\wpbisact.dll C:\windows\system32\wpuxdmeq.ini C:\windows\system32\wsryjmmb.ini C:\WINDOWS\system32\vtbpaeye.dll C:\WINDOWS\system32\vtsqo.dll C:\WINDOWS\system32\vtstq.dll C:\WINDOWS\system32\vturp.dll C:\WINDOWS\system32\vtuts.dll C:\WINDOWS\system32\wudyenxy.dll C:\windows\system32\vvvwa.bak1 C:\WINDOWS\system32\vvvwa.ini C:\WINDOWS\system32\wvwyxfof.dll C:\WINDOWS\system32\wxpthrsr.dll C:\WINDOWS\system32\wxwflnqq.dll C:\windows\system32\vycdd.bak1 C:\windows\system32\vycdd.ini C:\WINDOWS\system32\vytgbrxv.dll C:\WINDOWS\system32\xacqyfta.ini C:\windows\system32\xjrriarp.ini C:\WINDOWS\system32\xmtojsem.dll C:\WINDOWS\system32\xrnxjqos.dll C:\WINDOWS\system32\xwxxdgns.dll C:\WINDOWS\system32\ybvfumuq.dll C:\WINDOWS\system32\ydivxnol.dll C:\WINDOWS\system32\yfwnedfb.dll C:\windows\system32\yljthxpt.dll C:\windows\system32\yxneyduw.ini Beginning removal... Attempting to delete C:\windows\system32\abeeg.bak1 C:\windows\system32\abeeg.bak1 Has been deleted! Attempting to delete C:\windows\system32\abeeg.bak2 C:\windows\system32\abeeg.bak2 Has been deleted! Attempting to delete C:\windows\system32\abeeg.ini C:\windows\system32\abeeg.ini Has been deleted! Attempting to delete C:\windows\system32\abeeg.ini2 C:\windows\system32\abeeg.ini2 Has been deleted! Attempting to delete C:\windows\system32\accdd.bak2 C:\windows\system32\accdd.bak2 Has been deleted! Attempting to delete C:\windows\system32\accdd.ini C:\windows\system32\accdd.ini Has been deleted! Attempting to delete C:\windows\system32\accdd.ini2 C:\windows\system32\accdd.ini2 Has been deleted! Attempting to delete C:\windows\system32\adeeg.bak1 C:\windows\system32\adeeg.bak1 Has been deleted! Attempting to delete C:\windows\system32\adeeg.bak2 C:\windows\system32\adeeg.bak2 Has been deleted! Attempting to delete C:\windows\system32\adeeg.ini C:\windows\system32\adeeg.ini Has been deleted! Attempting to delete C:\WINDOWS\system32\aeklchqd.dll C:\WINDOWS\system32\aeklchqd.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\aermevdo.dll C:\WINDOWS\system32\aermevdo.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\aivbmfai.dll C:\WINDOWS\system32\aivbmfai.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\amxgoged.dll C:\WINDOWS\system32\amxgoged.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\atfyqcax.dll C:\WINDOWS\system32\atfyqcax.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\awtqn.dll C:\WINDOWS\system32\awtqn.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\awtqo.dll C:\WINDOWS\system32\awtqo.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\awtqr.dll C:\WINDOWS\system32\awtqr.dll Has been deleted! Attempting to delete C:\windows\system32\awtsp.dll C:\windows\system32\awtsp.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\awtsr.dll C:\WINDOWS\system32\awtsr.dll Has been deleted! Attempting to delete C:\windows\system32\avvmaupi.ini C:\windows\system32\avvmaupi.ini Has been deleted! Attempting to delete C:\WINDOWS\system32\awvtq.dll C:\WINDOWS\system32\awvtq.dll Has been deleted! Attempting to delete C:\windows\system32\awvvv.dll C:\windows\system32\awvvv.dll Has been deleted! Attempting to delete C:\windows\system32\aycdd.bak1 C:\windows\system32\aycdd.bak1 Has been deleted! Attempting to delete C:\windows\system32\aycdd.bak2 C:\windows\system32\aycdd.bak2 Has been deleted! Attempting to delete C:\windows\system32\aycdd.ini C:\windows\system32\aycdd.ini Has been deleted! Attempting to delete C:\windows\system32\aynwxhsu.ini C:\windows\system32\aynwxhsu.ini Has been deleted! Attempting to delete C:\windows\system32\bcsbqybp.ini C:\windows\system32\bcsbqybp.ini Has been deleted! Attempting to delete C:\windows\system32\bfdenwfy.ini C:\windows\system32\bfdenwfy.ini Has been deleted! Attempting to delete C:\WINDOWS\system32\bmmjyrsw.dll C:\WINDOWS\system32\bmmjyrsw.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\bplhfdyp.dll C:\WINDOWS\system32\bplhfdyp.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\bqkeibwc.ini C:\WINDOWS\system32\bqkeibwc.ini Has been deleted! Attempting to delete C:\WINDOWS\system32\bqoynspn.dll C:\WINDOWS\system32\bqoynspn.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\btyavtax.dll C:\WINDOWS\system32\btyavtax.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\buwnwjwq.dll C:\WINDOWS\system32\buwnwjwq.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\bwcqmwke.dll C:\WINDOWS\system32\bwcqmwke.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\bvfsuhep.dll C:\WINDOWS\system32\bvfsuhep.dll Has been deleted! Attempting to delete C:\windows\system32\bxdmshwn.dll C:\windows\system32\bxdmshwn.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\cacsvisa.dll C:\WINDOWS\system32\cacsvisa.dll Has been deleted! Attempting to delete C:\windows\system32\cfhkj.bak1 C:\windows\system32\cfhkj.bak1 Has been deleted! Attempting to delete C:\windows\system32\cfhkj.bak2 C:\windows\system32\cfhkj.bak2 Has been deleted! Attempting to delete C:\windows\system32\cfhkj.ini C:\windows\system32\cfhkj.ini Has been deleted! Attempting to delete C:\WINDOWS\system32\cwbiekqb.dll C:\WINDOWS\system32\cwbiekqb.dll Has been deleted! Attempting to delete C:\windows\system32\cyvxwjbt.ini C:\windows\system32\cyvxwjbt.ini Has been deleted! Attempting to delete C:\WINDOWS\system32\ddayy.dll C:\WINDOWS\system32\ddayy.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\ddcca.dll C:\WINDOWS\system32\ddcca.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\ddcya.dll C:\WINDOWS\system32\ddcya.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\ddcyv.dll C:\WINDOWS\system32\ddcyv.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\dgtnbstu.dll C:\WINDOWS\system32\dgtnbstu.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\divjwdtn.dll C:\WINDOWS\system32\divjwdtn.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\dixympqk.dll C:\WINDOWS\system32\dixympqk.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\dkcpwsnv.dll C:\WINDOWS\system32\dkcpwsnv.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\dotcfpky.dll C:\WINDOWS\system32\dotcfpky.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\dvjjwtjv.dll C:\WINDOWS\system32\dvjjwtjv.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\dwkjmoif.dll C:\WINDOWS\system32\dwkjmoif.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\dwvluwva.dll C:\WINDOWS\system32\dwvluwva.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\emlmwcmc.dll C:\WINDOWS\system32\emlmwcmc.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\ewsgwlpb.dll C:\WINDOWS\system32\ewsgwlpb.dll Has been deleted! Attempting to delete C:\windows\system32\eyeapbtv.ini C:\windows\system32\eyeapbtv.ini Has been deleted! Attempting to delete C:\WINDOWS\system32\fcoqkjql.dll C:\WINDOWS\system32\fcoqkjql.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\ffljyjoc.dll C:\WINDOWS\system32\ffljyjoc.dll Has been deleted! Attempting to delete C:\windows\system32\fhhkj.bak1 C:\windows\system32\fhhkj.bak1 Has been deleted! Attempting to delete C:\windows\system32\fhhkj.ini C:\windows\system32\fhhkj.ini Has been deleted! Attempting to delete C:\WINDOWS\system32\fmxwdixn.dll C:\WINDOWS\system32\fmxwdixn.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\fwgielsi.dll C:\WINDOWS\system32\fwgielsi.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\fviaarcw.dll C:\WINDOWS\system32\fviaarcw.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\gbfrjpgd.dll C:\WINDOWS\system32\gbfrjpgd.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\gebca.dll C:\WINDOWS\system32\gebca.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\gebya.dll C:\WINDOWS\system32\gebya.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\geeba.dll C:\WINDOWS\system32\geeba.dll Has been deleted! Attempting to delete C:\windows\system32\geeda.dll C:\windows\system32\geeda.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\geedd.dll C:\WINDOWS\system32\geedd.dll Has been deleted! Attempting to delete C:\windows\system32\gfhkj.ini C:\windows\system32\gfhkj.ini Has been deleted! Attempting to delete C:\windows\system32\gfhkj.ini2 C:\windows\system32\gfhkj.ini2 Has been deleted! Attempting to delete C:\WINDOWS\system32\gifmsrwp.dll C:\WINDOWS\system32\gifmsrwp.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\giucoffi.dll C:\WINDOWS\system32\giucoffi.dll Has been deleted! Attempting to delete C:\windows\system32\gjkmp.bak1 C:\windows\system32\gjkmp.bak1 Has been deleted! Attempting to delete C:\windows\system32\gjkmp.bak2 C:\windows\system32\gjkmp.bak2 Has been deleted! Attempting to delete C:\windows\system32\gjkmp.ini C:\windows\system32\gjkmp.ini Has been deleted! Attempting to delete C:\windows\system32\gjkmp.ini2 C:\windows\system32\gjkmp.ini2 Has been deleted! Attempting to delete C:\WINDOWS\system32\grrfjbkk.dll C:\WINDOWS\system32\grrfjbkk.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\henvravp.dll C:\WINDOWS\system32\henvravp.dll Has been deleted! Attempting to delete C:\windows\system32\hgjlm.bak1 C:\windows\system32\hgjlm.bak1 Has been deleted! Attempting to delete C:\windows\system32\hgjlm.ini C:\windows\system32\hgjlm.ini Has been deleted! Attempting to delete C:\WINDOWS\system32\hgjylgit.dll C:\WINDOWS\system32\hgjylgit.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\hsjbcaoi.dll C:\WINDOWS\system32\hsjbcaoi.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\iafmbvia.ini C:\WINDOWS\system32\iafmbvia.ini Has been deleted! Attempting to delete C:\WINDOWS\system32\ieibsswt.dll C:\WINDOWS\system32\ieibsswt.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\ifjginpr.dll C:\WINDOWS\system32\ifjginpr.dll Has been deleted! Attempting to delete C:\windows\system32\ilkkj.bak1 C:\windows\system32\ilkkj.bak1 Has been deleted! Attempting to delete C:\windows\system32\ilkkj.bak2 C:\windows\system32\ilkkj.bak2 Has been deleted! Attempting to delete C:\windows\system32\ilkkj.ini C:\windows\system32\ilkkj.ini Has been deleted! Attempting to delete C:\windows\system32\ilkkj.ini2 C:\windows\system32\ilkkj.ini2 Has been deleted! Attempting to delete C:\WINDOWS\system32\ininocxh.dll C:\WINDOWS\system32\ininocxh.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\inuvtgue.dll C:\WINDOWS\system32\inuvtgue.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\ipuamvva.dll C:\WINDOWS\system32\ipuamvva.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\ismqggbk.dll C:\WINDOWS\system32\ismqggbk.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\jamhsakc.dll C:\WINDOWS\system32\jamhsakc.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\jcqshyci.dll C:\WINDOWS\system32\jcqshyci.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\jibrrioe.dll C:\WINDOWS\system32\jibrrioe.dll Has been deleted! Attempting to delete C:\windows\system32\jjjlm.bak1 C:\windows\system32\jjjlm.bak1 Has been deleted! Attempting to delete C:\windows\system32\jjjlm.bak2 C:\windows\system32\jjjlm.bak2 Has been deleted! Attempting to delete C:\windows\system32\jjjlm.ini C:\windows\system32\jjjlm.ini Has been deleted! Attempting to delete C:\windows\system32\jjjlm.ini2 C:\windows\system32\jjjlm.ini2 Has been deleted! Attempting to delete C:\WINDOWS\system32\jkhfc.dll C:\WINDOWS\system32\jkhfc.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\jkhfd.dll C:\WINDOWS\system32\jkhfd.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\jkhfe.dll C:\WINDOWS\system32\jkhfe.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\jkhfg.dll C:\WINDOWS\system32\jkhfg.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\jkhhf.dll C:\WINDOWS\system32\jkhhf.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\jkkjg.dll C:\WINDOWS\system32\jkkjg.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\jkkjh.dll C:\WINDOWS\system32\jkkjh.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\jkkjj.dll C:\WINDOWS\system32\jkkjj.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\jkkjk.dll C:\WINDOWS\system32\jkkjk.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\jkkli.dll C:\WINDOWS\system32\jkkli.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\jkklk.dll C:\WINDOWS\system32\jkklk.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\jmqiccep.dll C:\WINDOWS\system32\jmqiccep.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\jmwywswi.dll C:\WINDOWS\system32\jmwywswi.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\jntdlgai.dll C:\WINDOWS\system32\jntdlgai.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\jpudegmv.dll C:\WINDOWS\system32\jpudegmv.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\jrbhuxee.dll C:\WINDOWS\system32\jrbhuxee.dll Has been deleted! Attempting to delete C:\windows\system32\jvfueduk.dll C:\windows\system32\jvfueduk.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\kaecpist.dll C:\WINDOWS\system32\kaecpist.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\kghpekvr.dll C:\WINDOWS\system32\kghpekvr.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\kgsqrgiq.dll C:\WINDOWS\system32\kgsqrgiq.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\khwaeyrb.dll C:\WINDOWS\system32\khwaeyrb.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\kqyoaqsy.dll C:\WINDOWS\system32\kqyoaqsy.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\krmbjlvc.dll C:\WINDOWS\system32\krmbjlvc.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\kyvkkqde.dll C:\WINDOWS\system32\kyvkkqde.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\lehayuai.dll C:\WINDOWS\system32\lehayuai.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\lgixiosn.dll C:\WINDOWS\system32\lgixiosn.dll Has been deleted! Attempting to delete C:\windows\system32\ljlwhfgh.dll C:\windows\system32\ljlwhfgh.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\lprsqilh.dll C:\WINDOWS\system32\lprsqilh.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\lsnjvlua.dll C:\WINDOWS\system32\lsnjvlua.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\luuywyyl.dll C:\WINDOWS\system32\luuywyyl.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\mhqjcvas.dll C:\WINDOWS\system32\mhqjcvas.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\mljgh.dll C:\WINDOWS\system32\mljgh.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\mljjj.dll C:\WINDOWS\system32\mljjj.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\mlljj.dll C:\WINDOWS\system32\mlljj.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\mnqgjdar.dll C:\WINDOWS\system32\mnqgjdar.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\mosqivao.dll C:\WINDOWS\system32\mosqivao.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\mtfdvxbj.dll C:\WINDOWS\system32\mtfdvxbj.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\mttmpxkn.dll C:\WINDOWS\system32\mttmpxkn.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\mtywkixa.dll C:\WINDOWS\system32\mtywkixa.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\mugmedas.dll C:\WINDOWS\system32\mugmedas.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\mwfvpvfq.dll C:\WINDOWS\system32\mwfvpvfq.dll Has been deleted! Attempting to delete C:\windows\system32\nkxpmttm.ini C:\windows\system32\nkxpmttm.ini Has been deleted! Attempting to delete C:\WINDOWS\system32\nnwwktxr.dll C:\WINDOWS\system32\nnwwktxr.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\nufhyqua.dll C:\WINDOWS\system32\nufhyqua.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\nwckofve.dll C:\WINDOWS\system32\nwckofve.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\nvjkpmvf.dll C:\WINDOWS\system32\nvjkpmvf.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\ocexipdh.dll C:\WINDOWS\system32\ocexipdh.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\odvemrea.ini C:\WINDOWS\system32\odvemrea.ini Has been deleted! Attempting to delete C:\WINDOWS\system32\oegqxooy.dll C:\WINDOWS\system32\oegqxooy.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\okswwtli.dll C:\WINDOWS\system32\okswwtli.dll Has been deleted! Attempting to delete C:\windows\system32\oqtwa.bak1 C:\windows\system32\oqtwa.bak1 Has been deleted! Attempting to delete C:\windows\system32\oqtwa.bak2 C:\windows\system32\oqtwa.bak2 Has been deleted! Attempting to delete C:\windows\system32\oqtwa.ini C:\windows\system32\oqtwa.ini Has been deleted! Attempting to delete C:\WINDOWS\system32\oqxklnfg.dll C:\WINDOWS\system32\oqxklnfg.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\osrjjrtk.dll C:\WINDOWS\system32\osrjjrtk.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\pbyqbscb.dll C:\WINDOWS\system32\pbyqbscb.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\pehusfvb.ini C:\WINDOWS\system32\pehusfvb.ini Has been deleted! Attempting to delete C:\WINDOWS\system32\pmkjg.dll C:\WINDOWS\system32\pmkjg.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\pmkjh.dll C:\WINDOWS\system32\pmkjh.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\pmkji.dll C:\WINDOWS\system32\pmkji.dll Has been deleted! Attempting to delete C:\windows\system32\pmnll.dll C:\windows\system32\pmnll.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\pmnnl.dll C:\WINDOWS\system32\pmnnl.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\pnccvdki.dll C:\WINDOWS\system32\pnccvdki.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\pnwudpsx.dll C:\WINDOWS\system32\pnwudpsx.dll Has been deleted! Attempting to delete C:\windows\system32\ppqss.bak1 C:\windows\system32\ppqss.bak1 Has been deleted! Attempting to delete C:\windows\system32\ppqss.ini C:\windows\system32\ppqss.ini Has been deleted! Attempting to delete C:\WINDOWS\system32\pqyivefi.dll C:\WINDOWS\system32\pqyivefi.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\prairrjx.dll C:\WINDOWS\system32\prairrjx.dll Has been deleted! Attempting to delete C:\windows\system32\prqss.bak1 C:\windows\system32\prqss.bak1 Has been deleted! Attempting to delete C:\windows\system32\prqss.bak2 C:\windows\system32\prqss.bak2 Has been deleted! Attempting to delete C:\windows\system32\prqss.ini C:\windows\system32\prqss.ini Has been deleted! Attempting to delete C:\windows\system32\prqss.ini2 C:\windows\system32\prqss.ini2 Has been deleted! Attempting to delete C:\WINDOWS\system32\prwmytjy.dll C:\WINDOWS\system32\prwmytjy.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\pryixqjv.dll C:\WINDOWS\system32\pryixqjv.dll Has been deleted! Attempting to delete C:\windows\system32\pstwa.ini C:\windows\system32\pstwa.ini Has been deleted! Attempting to delete C:\windows\system32\pvarvneh.ini C:\windows\system32\pvarvneh.ini Has been deleted! Attempting to delete C:\WINDOWS\system32\pxcdxtuk.dll C:\WINDOWS\system32\pxcdxtuk.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\qatolrvq.dll C:\WINDOWS\system32\qatolrvq.dll Has been deleted! Attempting to delete C:\windows\system32\qdspmtmk.dll C:\windows\system32\qdspmtmk.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\qemdxupw.dll C:\WINDOWS\system32\qemdxupw.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\qewbpiqq.dll C:\WINDOWS\system32\qewbpiqq.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\qqtwennp.dll C:\WINDOWS\system32\qqtwennp.dll Has been deleted! Attempting to delete C:\windows\system32\qtstv.bak1 C:\windows\system32\qtstv.bak1 Has been deleted! Attempting to delete C:\windows\system32\qtstv.ini C:\windows\system32\qtstv.ini Has been deleted! Attempting to delete C:\windows\system32\qtvwa.bak1 C:\windows\system32\qtvwa.bak1 Has been deleted! Attempting to delete C:\windows\system32\qtvwa.bak2 C:\windows\system32\qtvwa.bak2 Has been deleted! Attempting to delete C:\windows\system32\qtvwa.ini C:\windows\system32\qtvwa.ini Has been deleted! Attempting to delete C:\windows\system32\qvrlotaq.ini C:\windows\system32\qvrlotaq.ini Has been deleted! Attempting to delete C:\WINDOWS\system32\rdchvqkc.dll C:\WINDOWS\system32\rdchvqkc.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\rihpenqv.dll C:\WINDOWS\system32\rihpenqv.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\rqtwa.bak2 C:\WINDOWS\system32\rqtwa.bak2 Has been deleted! Attempting to delete C:\WINDOWS\system32\rqtwa.ini C:\WINDOWS\system32\rqtwa.ini Has been deleted! Attempting to delete C:\windows\system32\rvkephgk.ini C:\windows\system32\rvkephgk.ini Has been deleted! Attempting to delete C:\windows\system32\rvwhjvwk.dll C:\windows\system32\rvwhjvwk.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\shqsssqq.dll C:\WINDOWS\system32\shqsssqq.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\sivbbvlt.dll C:\WINDOWS\system32\sivbbvlt.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\slhlalam.dll C:\WINDOWS\system32\slhlalam.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\sqcekqoq.dll C:\WINDOWS\system32\sqcekqoq.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\ssqpp.dll C:\WINDOWS\system32\ssqpp.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\ssqrp.dll C:\WINDOWS\system32\ssqrp.dll Has been deleted! Attempting to delete C:\windows\system32\ssqrr.dll C:\windows\system32\ssqrr.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\ssqrs.dll C:\WINDOWS\system32\ssqrs.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\ssttq.dll C:\WINDOWS\system32\ssttq.dll Has been deleted! Attempting to delete C:\windows\system32\stutv.bak2 C:\windows\system32\stutv.bak2 Has been deleted! Attempting to delete C:\windows\system32\stutv.ini C:\windows\system32\stutv.ini Has been deleted! Attempting to delete C:\WINDOWS\system32\sucqmbbx.dll C:\WINDOWS\system32\sucqmbbx.dll Has been deleted! Attempting to delete C:\windows\system32\swsulvev.ini C:\windows\system32\swsulvev.ini Has been deleted! Attempting to delete C:\WINDOWS\system32\tbjwxvyc.dll C:\WINDOWS\system32\tbjwxvyc.dll Has been deleted! Attempting to delete C:\windows\system32\tiglyjgh.ini C:\windows\system32\tiglyjgh.ini Has been deleted! Attempting to delete C:\WINDOWS\system32\tlpiuhbm.dll C:\WINDOWS\system32\tlpiuhbm.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\tqcddcxx.dll C:\WINDOWS\system32\tqcddcxx.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\ttvnrjdp.dll C:\WINDOWS\system32\ttvnrjdp.dll Has been deleted! Attempting to delete C:\windows\system32\twssbiei.ini C:\windows\system32\twssbiei.ini Has been deleted! Attempting to delete C:\WINDOWS\system32\uafdvsti.dll C:\WINDOWS\system32\uafdvsti.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\ucjriqjr.dll C:\WINDOWS\system32\ucjriqjr.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\urgeyumv.dll C:\WINDOWS\system32\urgeyumv.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\ushxwnya.dll C:\WINDOWS\system32\ushxwnya.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\wbxtfwvr.dll C:\WINDOWS\system32\wbxtfwvr.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\vciomqrf.dll C:\WINDOWS\system32\vciomqrf.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\vevlusws.dll C:\WINDOWS\system32\vevlusws.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\vfmgcqfu.dll C:\WINDOWS\system32\vfmgcqfu.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\whdkpohb.dll C:\WINDOWS\system32\whdkpohb.dll Has been deleted! Attempting to delete C:\windows\system32\wlmpylmv.ini C:\windows\system32\wlmpylmv.ini Has been deleted! Attempting to delete C:\WINDOWS\system32\vmlypmlw.dll C:\WINDOWS\system32\vmlypmlw.dll Has been deleted! Attempting to delete C:\windows\system32\vokpshjy.dll C:\windows\system32\vokpshjy.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\wpbisact.dll C:\WINDOWS\system32\wpbisact.dll Has been deleted! Attempting to delete C:\windows\system32\wpuxdmeq.ini C:\windows\system32\wpuxdmeq.ini Has been deleted! Attempting to delete C:\windows\system32\wsryjmmb.ini C:\windows\system32\wsryjmmb.ini Has been deleted! Attempting to delete C:\WINDOWS\system32\vtbpaeye.dll C:\WINDOWS\system32\vtbpaeye.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\vtsqo.dll C:\WINDOWS\system32\vtsqo.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\vtstq.dll C:\WINDOWS\system32\vtstq.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\vturp.dll C:\WINDOWS\system32\vturp.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\vtuts.dll C:\WINDOWS\system32\vtuts.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\wudyenxy.dll C:\WINDOWS\system32\wudyenxy.dll Has been deleted! Attempting to delete C:\windows\system32\vvvwa.bak1 C:\windows\system32\vvvwa.bak1 Has been deleted! Attempting to delete C:\WINDOWS\system32\vvvwa.ini C:\WINDOWS\system32\vvvwa.ini Has been deleted! Attempting to delete C:\WINDOWS\system32\wvwyxfof.dll C:\WINDOWS\system32\wvwyxfof.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\wxpthrsr.dll C:\WINDOWS\system32\wxpthrsr.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\wxwflnqq.dll C:\WINDOWS\system32\wxwflnqq.dll Has been deleted! Attempting to delete C:\windows\system32\vycdd.bak1 C:\windows\system32\vycdd.bak1 Has been deleted! Attempting to delete C:\windows\system32\vycdd.ini C:\windows\system32\vycdd.ini Has been deleted! Attempting to delete C:\WINDOWS\system32\vytgbrxv.dll C:\WINDOWS\system32\vytgbrxv.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\xacqyfta.ini C:\WINDOWS\system32\xacqyfta.ini Has been deleted! Attempting to delete C:\windows\system32\xjrriarp.ini C:\windows\system32\xjrriarp.ini Has been deleted! Attempting to delete C:\WINDOWS\system32\xmtojsem.dll C:\WINDOWS\system32\xmtojsem.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\xrnxjqos.dll C:\WINDOWS\system32\xrnxjqos.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\xwxxdgns.dll C:\WINDOWS\system32\xwxxdgns.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\ybvfumuq.dll C:\WINDOWS\system32\ybvfumuq.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\ydivxnol.dll C:\WINDOWS\system32\ydivxnol.dll Has been deleted! Attempting to delete C:\WINDOWS\system32\yfwnedfb.dll C:\WINDOWS\system32\yfwnedfb.dll Has been deleted! Attempting to delete C:\windows\system32\yljthxpt.dll C:\windows\system32\yljthxpt.dll Has been deleted! Attempting to delete C:\windows\system32\yxneyduw.ini C:\windows\system32\yxneyduw.ini Has been deleted! Performing Repairs to the registry. Done! ... ja tässä on HJT-loki: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 16:39:54, on 5.2.2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\F-Secure\Common\FSM32.EXE C:\Program Files\Analog Devices\Core\smax4pnp.exe C:\Program Files\Analog Devices\SoundMAX\Smax4.exe C:\Program Files\DAEMON Tools\daemon.exe C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe C:\Program Files\Google\Gmail Notifier\gnotify.exe C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE C:\Program Files\NetLimiter\NetLimiter.exe C:\Program Files\Logitech\Video\LogiTray.exe F:\AVG Anti-Spyware 7.5\avgas.exe C:\WINDOWS\system32\rundll32.exe C:\Program Files\MSN Messenger\MsnMsgr.Exe C:\Program Files\Skype\Phone\Skype.exe C:\WINDOWS\system32\LVComS.exe C:\Program Files\Messenger\msmsgs.exe C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe C:\PROGRA~1\COMMON~1\PCSuite\Services\SERVIC~1.EXE C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe F:\AVG Anti-Spyware 7.5\guard.exe C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE C:\WINDOWS\system32\CTsvcCDA.EXE C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE C:\Program Files\F-Secure\Anti-Virus\fssm32.exe C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe C:\Program Files\F-Secure\Common\FSMA32.EXE C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe C:\Program Files\F-Secure\Common\FSMB32.EXE C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\PnkBstrA.exe C:\Program Files\F-Secure\BackWeb\7681197\Program\F-Secure Automatic Update.exe C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe C:\Program Files\F-Secure\Common\FCH32.EXE C:\WINDOWS\system32\svchost.exe C:\Program Files\F-Secure\Common\FAMEH32.EXE C:\Program Files\F-Secure\Anti-Virus\fsqh.exe C:\Program Files\F-Secure\Anti-Virus\fsrw.exe C:\Program Files\F-Secure\Anti-Virus\fsav32.exe C:\Program Files\F-Secure\Common\FNRB32.EXE C:\WINDOWS\system32\WgaTray.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe C:\Program Files\F-Secure\Common\FIH32.EXE C:\PROGRA~1\F-Secure\ANTI-S~1\fsaw.exe C:\Program Files\F-Secure\FSGUI\fsguidll.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\WINDOWS\system32\NOTEPAD.EXE C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fi/ O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {0FDB01BD-856C-4306-B543-A201C69AD4E8} - (no file) O2 - BHO: (no name) - {31973DF4-4332-461B-A9BA-0F325E9C42ED} - C:\WINDOWS\system32\awvtq.dll (file missing) O2 - BHO: {113bb99a-31ff-544a-c454-52682f70c7a4} - {4a7c07f2-8625-454c-a445-ff13a99bb311} - C:\WINDOWS\system32\nnwwktxr.dll (file missing) O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: (no name) - {B6D8493E-BA75-4327-8D2E-20F0F98C549a} - (no file) O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll O2 - BHO: (no name) - {F6B7896D-B28F-4CAD-9399-AE3AC1F56265} - (no file) O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033 O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe" O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe O4 - HKLM\..\Run: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] C:\Program Files\Google\Gmail Notifier\gnotify.exe O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -onlytray O4 - HKLM\..\Run: [NetLimiter] C:\Program Files\NetLimiter\NetLimiter.exe /s O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe O4 - HKLM\..\Run: [!AVG Anti-Spyware] "F:\AVG Anti-Spyware 7.5\avgas.exe" /minimized O4 - HKLM\..\Run: [043637e3] rundll32.exe "C:\WINDOWS\system32\aabkbuco.dll",b O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: F-Secure Automatic Update.lnk = C:\Program Files\F-Secure\BackWeb\7681197\program\F-Secure Automatic Update.exe O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe O8 - Extra context menu item: &Block this popup - C:\Program Files\F-Secure\Anti-Spyware\blockpopups.htm O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm O8 - Extra context menu item: Avaa uuteen etuvälilehteen - res://C:\Program Files\Windows Live Toolbar\Components\fi-fi\msntabres.dll.mui/230?42e34bf2d6574abb80d1d6c4bc7e0366 O8 - Extra context menu item: Avaa uuteen taustavälilehteen - res://C:\Program Files\Windows Live Toolbar\Components\fi-fi\msntabres.dll.mui/229?42e34bf2d6574abb80d1d6c4bc7e0366 O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll O9 - Extra button: IE Shield - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure\Anti-Spyware\ieshield.dll O9 - Extra 'Tools' menuitem: IE Shield... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure\Anti-Spyware\ieshield.dll O9 - Extra button: Oheistiedot - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1164648388828 O17 - HKLM\System\CCS\Services\Tcpip\..\{451EF1CD-7324-4280-B8E1-813A6094BDF4}: NameServer = 213.139.190.3 212.50.131.153 O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - (no file) O20 - Winlogon Notify: ssqpnkk - ssqpnkk.dll (file missing) O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - F:\AVG Anti-Spyware 7.5\guard.exe O23 - Service: F-Secure Automatic Update (BackWeb Plug-in - 7681197) - F-Secure Automatic Update - C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corp. - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Apache Software Foundation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe -- End of file - 10658 bytes Löytyykö mitään ihmeellistä? Jos löytyy niin miten minun tulisi tässä vaiheessa toimia?
scannaa hjt:llä merkkaa paina Fix checked O2 - BHO: (no name) - {0FDB01BD-856C-4306-B543-A201C69AD4E8} - (no file) O2 - BHO: (no name) - {31973DF4-4332-461B-A9BA-0F325E9C42ED} - C:\WINDOWS\system32\awvtq.dll (file missing) O2 - BHO: {113bb99a-31ff-544a-c454-52682f70c7a4} - {4a7c07f2-8625-454c-a445-ff13a99bb311} - C:\WINDOWS\system32\nnwwktxr.dll (file missing) O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: (no name) - {B6D8493E-BA75-4327-8D2E-20F0F98C549a} - (no file) O2 - BHO: (no name) - {F6B7896D-B28F-4CAD-9399-AE3AC1F56265} - (no file) O20 - Winlogon Notify: ssqpnkk - ssqpnkk.dll (file missing) ================ Päivitä AVG Anti-Spyware 7.5 ja aja vikasiedossa. =============== Nimeä uudelleen C:\Program Files\Trend Micro\HijackThis\==> HijackThis.exe <== skanneriksi se millä scannaat uuden hjt:n lokin
sammuta ja käynnistä käynnistyksen yhteydessä hakkaa F8 nappia valitse nuolinäppäimellä vikasietotila paina enter ja enter valitse käyttäjätilisi paina kyllä Jossakin koneissa hakataan F8:sin sijasta F5:tä ================ pois pääsee käynnistä > sammuta tietokone > Käynnistä uudelleen
Kone skannattu vikasietotilassa AVG-AntiSpyware -ohjelmalla. Tässä vielä HJT-loki: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 18:02:34, on 5.2.2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\F-Secure\Common\FSM32.EXE C:\Program Files\Analog Devices\Core\smax4pnp.exe C:\Program Files\Analog Devices\SoundMAX\Smax4.exe C:\Program Files\DAEMON Tools\daemon.exe C:\Program Files\Google\Gmail Notifier\gnotify.exe C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE C:\Program Files\NetLimiter\NetLimiter.exe C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe C:\Program Files\Logitech\Video\LogiTray.exe F:\AVG Anti-Spyware 7.5\avgas.exe C:\WINDOWS\system32\rundll32.exe C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe C:\Program Files\MSN Messenger\MsnMsgr.Exe C:\Program Files\Skype\Phone\Skype.exe C:\Program Files\Messenger\msmsgs.exe C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe C:\WINDOWS\system32\LVComS.exe C:\PROGRA~1\COMMON~1\PCSuite\Services\SERVIC~1.EXE C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe F:\AVG Anti-Spyware 7.5\guard.exe C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE C:\WINDOWS\system32\CTsvcCDA.EXE C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe C:\Program Files\F-Secure\BackWeb\7681197\Program\F-Secure Automatic Update.exe C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE C:\Program Files\F-Secure\Anti-Virus\fssm32.exe C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe C:\Program Files\F-Secure\Common\FSMA32.EXE C:\Program Files\F-Secure\Common\FSMB32.EXE C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\F-Secure\Common\FCH32.EXE C:\WINDOWS\system32\PnkBstrA.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\F-Secure\Common\FAMEH32.EXE C:\Program Files\F-Secure\Anti-Virus\fsqh.exe C:\Program Files\F-Secure\Anti-Virus\fsrw.exe C:\Program Files\F-Secure\Anti-Virus\fsav32.exe C:\Program Files\F-Secure\Common\FNRB32.EXE C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe C:\Program Files\F-Secure\Common\FIH32.EXE C:\WINDOWS\system32\WgaTray.exe C:\WINDOWS\system32\wuauclt.exe C:\PROGRA~1\F-Secure\ANTI-S~1\fsaw.exe C:\Program Files\F-Secure\FSGUI\fsguidll.exe C:\Program Files\MSN Messenger\usnsvc.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fi/ O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033 O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe O4 - HKLM\..\Run: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] C:\Program Files\Google\Gmail Notifier\gnotify.exe O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -onlytray O4 - HKLM\..\Run: [NetLimiter] C:\Program Files\NetLimiter\NetLimiter.exe /s O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe O4 - HKLM\..\Run: [!AVG Anti-Spyware] "F:\AVG Anti-Spyware 7.5\avgas.exe" /minimized O4 - HKLM\..\Run: [043637e3] rundll32.exe "C:\WINDOWS\system32\aabkbuco.dll",b O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe" O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: F-Secure Automatic Update.lnk = C:\Program Files\F-Secure\BackWeb\7681197\program\F-Secure Automatic Update.exe O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe O8 - Extra context menu item: &Block this popup - C:\Program Files\F-Secure\Anti-Spyware\blockpopups.htm O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm O8 - Extra context menu item: Avaa uuteen etuvälilehteen - res://C:\Program Files\Windows Live Toolbar\Components\fi-fi\msntabres.dll.mui/230?42e34bf2d6574abb80d1d6c4bc7e0366 O8 - Extra context menu item: Avaa uuteen taustavälilehteen - res://C:\Program Files\Windows Live Toolbar\Components\fi-fi\msntabres.dll.mui/229?42e34bf2d6574abb80d1d6c4bc7e0366 O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\npjpi160_02.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\npjpi160_02.dll O9 - Extra button: IE Shield - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure\Anti-Spyware\ieshield.dll O9 - Extra 'Tools' menuitem: IE Shield... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure\Anti-Spyware\ieshield.dll O9 - Extra button: Oheistiedot - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1164648388828 O17 - HKLM\System\CCS\Services\Tcpip\..\{451EF1CD-7324-4280-B8E1-813A6094BDF4}: NameServer = 213.139.190.3 212.50.131.153 O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - (no file) O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - F:\AVG Anti-Spyware 7.5\guard.exe O23 - Service: F-Secure Automatic Update (BackWeb Plug-in - 7681197) - F-Secure Automatic Update - C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corp. - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Apache Software Foundation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe -- End of file - 10133 bytes Onko kaikki nyt OK?
Javan päivitys ja välimuistin tyhjennys: 1. Klikkaa Käynnistä -> Ohjauspaneeli ja tupla-klikkaa Lisää tai poista sovellus Ohjauspaneelissa. 2. Etsi listasta kaikki entiset Java versiosi. (J2SE Runtime Environment.... ) Niissä pitäisi olla seuraava kuva vieressä: 3. Valitse kaikki entiset Java versiosi ja valitse Poista. 4. Asenna uusin Java päivitys seuraavasta linkistä.. 5. Käynnistä kone uudelleen asennuksen jälkeen: http://java.sun.com/javase/downloads/index.jsp Rullaa alas kohteeseen Java Runtime Environment (JRE) 6u4 Paina Download Ruksaa Accept, ota offline installation, tallenna vaikka työpöydälle ja asenna se. 6. Käynnistyksen jälkeen, mene takaisin Ohjauspaneeliin ja avaa Java asetuksesi (Muita Ohjauspaneelin asetuksia -> Java kahvikuppi). 7. General Settings -osion alla, vedä liukusäädintä (Disk Space) pienemmälle, ja klikkaa Delete Files -nappia. (Jotkut javapohjaiset ohjelmat saattavat tarvita enemmän levytilaa. Jos huomaat säädön pienentämisen jälkeen koneessa hitautta, siirrä liukusäädintä isommalle). 8. Varmista että kaikki kaksi valintaa ovat rastitettuja: *Applications and Applets *Trace and Log Files Ja paina OK -nappia 9. Klikkaa OK "Temporary Files Settings" -ikkunassasi. 10. Klikkaa OK jättääksesi Java asetusikkunasi. ==== aja uudestaan tuo vundofix ==== Nimeä uudelleen C:\Program Files\Trend Micro\HijackThis\==> HijackThis.exe <== skanneriksi === lataa startuplite tallena tiedosto työpöydälle. Tuplalikkaa StartUpLitenn.exe:ä sitten voi valita mitä jätät käynnistyviin ja paina sitten continue. === Lataa: RegSeeker.zip työpöydälle: http://fileforum.betanews.com/detail/RegSeeker/1035382760/1 Pura zip C:\RegSeeker\ kansioon. Sieltä käynnistät RegSeeker.exe ohjelman. Oikeasa yläkulmassa on Languages.... linkki, josta valitset Suomenkielen. Vasemmasta alakulmasta ruksit Luo vrmuuskopio ja sitten linkki Puhdista rekisteri Ruksit kaikkiin muihin kohtiin paitsi "Käyttökelvottomat.." sitten "OK" (odotat hetken). Ruutuun ilmestyy lista epäkelvoista rekisterimerkinnöistä, jotka alapalkista Valitse kohdasta klikkaat Valitse kaikki jolloin valitut saavat keltaisen pohjavärin. Alapalkin Toiminnot linkistä klikkaat Poista valitut kohteet Ponnahdusikkunaan "Kaikki valitut kohteet poistetaan ? vastaat "OK". Seuraavaan Ponnahdusikkunaan "Varmuuskopiot" vastaat "OK". Klikaa vasemmalta Lopeta RegSeeker ja käynnistä koneesi uudelleen. ============ Oletko pistänyt skypen pois
Java päivitetty ja välimuisti tyhjennetty! Tein juuri niin kuin olit käskenyt. Kysyit tuosta Skypestä. Pitääkö se muka poistaa? Onko siitä mitään haittaa? En mielellään menis poistelemaan sitä, sillä se on tärkeä ohjelma minulle. Mutta tässä tulee vielä HJT-loki: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 19:29:03, on 5.2.2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\F-Secure\Common\FSM32.EXE C:\Program Files\Analog Devices\Core\smax4pnp.exe C:\Program Files\Analog Devices\SoundMAX\Smax4.exe C:\Program Files\DAEMON Tools\daemon.exe C:\Program Files\Google\Gmail Notifier\gnotify.exe C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE C:\Program Files\NetLimiter\NetLimiter.exe C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe C:\Program Files\Logitech\Video\LogiTray.exe F:\AVG Anti-Spyware 7.5\avgas.exe C:\WINDOWS\system32\rundll32.exe C:\Program Files\Skype\Phone\Skype.exe C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe C:\WINDOWS\system32\LVComS.exe C:\PROGRA~1\COMMON~1\PCSuite\Services\SERVIC~1.EXE C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe F:\AVG Anti-Spyware 7.5\guard.exe C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE C:\WINDOWS\system32\CTsvcCDA.EXE C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe C:\Program Files\F-Secure\BackWeb\7681197\Program\F-Secure Automatic Update.exe C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE C:\Program Files\F-Secure\Anti-Virus\fssm32.exe C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe C:\Program Files\F-Secure\Common\FSMA32.EXE C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe C:\Program Files\F-Secure\Common\FSMB32.EXE C:\Program Files\F-Secure\Common\FCH32.EXE C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe C:\Program Files\F-Secure\Anti-Virus\fsqh.exe C:\Program Files\F-Secure\Common\FAMEH32.EXE C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\F-Secure\Anti-Virus\fsrw.exe C:\WINDOWS\system32\PnkBstrA.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\F-Secure\Anti-Virus\fsav32.exe C:\Program Files\F-Secure\Common\FNRB32.EXE C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe C:\Program Files\F-Secure\Common\FIH32.EXE C:\WINDOWS\system32\WgaTray.exe C:\PROGRA~1\F-Secure\ANTI-S~1\fsaw.exe C:\Program Files\F-Secure\FSGUI\fsguidll.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Trend Micro\HijackThis.exe\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fi/ R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033 O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe O4 - HKLM\..\Run: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] C:\Program Files\Google\Gmail Notifier\gnotify.exe O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -onlytray O4 - HKLM\..\Run: [NetLimiter] C:\Program Files\NetLimiter\NetLimiter.exe /s O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe O4 - HKLM\..\Run: [!AVG Anti-Spyware] "F:\AVG Anti-Spyware 7.5\avgas.exe" /minimized O4 - HKLM\..\Run: [043637e3] rundll32.exe "C:\WINDOWS\system32\aabkbuco.dll",b O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: F-Secure Automatic Update.lnk = C:\Program Files\F-Secure\BackWeb\7681197\program\F-Secure Automatic Update.exe O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe O8 - Extra context menu item: &Block this popup - C:\Program Files\F-Secure\Anti-Spyware\blockpopups.htm O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm O8 - Extra context menu item: Avaa uuteen etuvälilehteen - res://C:\Program Files\Windows Live Toolbar\Components\fi-fi\msntabres.dll.mui/230?42e34bf2d6574abb80d1d6c4bc7e0366 O8 - Extra context menu item: Avaa uuteen taustavälilehteen - res://C:\Program Files\Windows Live Toolbar\Components\fi-fi\msntabres.dll.mui/229?42e34bf2d6574abb80d1d6c4bc7e0366 O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll O9 - Extra button: IE Shield - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure\Anti-Spyware\ieshield.dll O9 - Extra 'Tools' menuitem: IE Shield... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure\Anti-Spyware\ieshield.dll O9 - Extra button: Oheistiedot - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1164648388828 O17 - HKLM\System\CCS\Services\Tcpip\..\{451EF1CD-7324-4280-B8E1-813A6094BDF4}: NameServer = 213.139.190.3 212.50.131.153 O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - (no file) O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - F:\AVG Anti-Spyware 7.5\guard.exe O23 - Service: F-Secure Automatic Update (BackWeb Plug-in - 7681197) - F-Secure Automatic Update - C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corp. - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Apache Software Foundation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe -- End of file - 9705 bytes Miltä nyt näyttää?
ei tarvii skypee poista ============= scannaa hjt:llä merkkaa paina Fix checked R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = O4 - HKLM\..\Run: [043637e3] rundll32.exe "C:\WINDOWS\system32\aabkbuco.dll",b =========== Escan Ohjeet tuolla sivulla. http://koti.mbnet.fi/pattaya1/escanmwav.htm lataa tuosta http://www.spywareinfo.dk/download/mwav.exe päivitä tuosta http://koti.mbnet.fi/pattaya1/lataus/Mwav.bat laita täpit merkkauksien mukaan http://koti.mbnet.fi/pattaya1/eScan6.jpg scannaa jos ala luukkuun tulee jotain niin kopioi se näin: Käytä komentoa Ctrl+A. Kopioi rivit komennolla Ctrl+C. Liitä rivit komennolla Ctrl+V. Laita virus log tänne.
Kone skannattu eScan AntiVirus -ohjelmalla. Tässä on virus loki: File C:\WINDOWS\system32\aabkbuco.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\WINDOWS\system32\eribpfue.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\WINDOWS\system32\hrvqlhkj.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\WINDOWS\system32\icslnpwx.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\WINDOWS\system32\KHCPWUMO.0LL infected by "Backdoor.Win32.Agent.dlj" Virus. Action Taken: File Renamed. File C:\WINDOWS\system32\krbttukj.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\WINDOWS\system32\ooncpoof.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\WINDOWS\system32\rqrqgsml.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\WINDOWS\system32\rwovvckl.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\WINDOWS\system32\ugcagvxy.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\WINDOWS\system32\xhmjueyp.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\Documents and Settings\Mark\Desktop\Lataukset\mirc63.exe tagged as not-a-virus:Client-IRC.Win32.mIRC.63. No Action Taken. File C:\Documents and Settings\Mark\Desktop\Lataukset\mirc631.exe tagged as not-a-virus:Client-IRC.Win32.mIRC.631. No Action Taken. File C:\Documents and Settings\Mark\Incomplete\T-233472-MIRC 6.21 + KEYGEN WORKEEEEEES.0XE infected by "Trojan-Dropper.Win32.VB.lu" Virus. Action Taken: File Deleted. File C:\Documents and Settings\Mark\Local Settings\Temporary Internet Files\Content.IE5\9DNXDH3P\ptch[1] tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\Documents and Settings\Mark\Local Settings\Temporary Internet Files\Content.IE5\9S2CDEOG\hctp[1] tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\Documents and Settings\Meri\Local Settings\Temp\agukogdu.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\Documents and Settings\Meri\Local Settings\Temp\ddayv.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\Documents and Settings\Meri\Local Settings\Temp\qcvhtntt.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\05AJC1I7\CA49O5C3 tagged as not-a-virus:AdWare.Win32.Virtumonde.wl. No Action Taken. File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\05AJC1I7\CAYJUV6X tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\05AJC1I7\ybol[1].dll tagged as not-a-virus:AdWare.Win32.BHk. No Action Taken. File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\45YJOTIJ\CAEF41YR infected by "Backdoor.Win32.Hupigon.qcs" Virus. Action Taken: File Renamed. File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\45YJOTIJ\CAFEE5FN tagged as not-a-virus:AdWare.Win32.Virtumonde.atv. No Action Taken. File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\AHCZMTO1\CA2741MB tagged as not-a-virus:AdWare.Win32.Virtumonde.vq. No Action Taken. File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\AHCZMTO1\CADOYL5R tagged as not-a-virus:AdWare.Win32.Virtumonde.acg. No Action Taken. File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\AHCZMTO1\CAK1K1KF infected by "Trojan.Win32.Inject.kk" Virus. Action Taken: File Deleted. File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\AHCZMTO1\CANAQ5NJ infected by "Trojan.Win32.Inject.kk" Virus. Action Taken: File Deleted. File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\C16RWTA7\CAUN4LM3 infected by "Trojan.Win32.Inject.kk" Virus. Action Taken: File Deleted. File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\C16RWTA7\CAZESZRX tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\C16RWTA7\CAZUU53N tagged as not-a-virus:AdWare.Win32.Virtumonde.acg. No Action Taken. File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\C16RWTA7\ptch[1] tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\C5WTUFW5\CA67KD6N tagged as not-a-virus:AdWare.Win32.Virtumonde.wt. No Action Taken. File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\C5WTUFW5\CADGYL13 infected by "Trojan.Win32.Inject.kk" Virus. Action Taken: File Deleted. File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\C5WTUFW5\CAW5IZ8T tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\C5WTUFW5\i0ck[1].dll tagged as not-a-virus:AdWare.Win32.BHO.xi. No Action Taken. File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\C5WTUFW5\ptch[1] tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\C5WTUFW5\ptch[2] tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\JSKGXPR6\CAIFS5AR tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\JSKGXPR6\hctp[1] tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\JSKGXPR6\ptch[1] tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\L9PNAEF6\7uft[1].dll tagged as not-a-virus:AdWare.Win32.BHO.xw. No Action Taken. File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\L9PNAEF6\CAEN8XAZ tagged as not-a-virusSWTool.Win32.Virtumonde.ada. No Action Taken. File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\L9PNAEF6\CAPSM9DR infected by "Trojan.Win32.Inject.kk" Virus. Action Taken: File Deleted. File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\L9PNAEF6\CATWY9HF infected by "Trojan.Win32.Inject.kk" Virus. Action Taken: File Deleted. File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\L9PNAEF6\CAZYEXV7 infected by "Trojan.Win32.Inject.kk" Virus. Action Taken: File Deleted. File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\L9PNAEF6\gepj[2] tagged as not-a-virus:AdWare.Win32.Virtumonde.dcd. No Action Taken. File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\L9PNAEF6\hctp[1] tagged as not-a-virus:AdWare.Win32.Virtumonde.eec. No Action Taken. File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\L9PNAEF6\vasya[1] infected by "Trojan.Win32.Agent.bck" Virus. Action Taken: File Deleted. File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\LOP4HR2Y\CAINC9QF tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\LOP4HR2Y\CAQRKHQR infected by "Trojan.Win32.Inject.kk" Virus. Action Taken: File Deleted. File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\LOP4HR2Y\ptch[1] tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\QX8NIN0J\CAEJ8TAZ infected by "Trojan.Win32.Inject.kk" Virus. Action Taken: File Deleted. File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\QX8NIN0J\CAQ7CP2B infected by "Trojan.Win32.Inject.kk" Virus. Action Taken: File Deleted. File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\QX8NIN0J\hctp[1] tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\QX8NIN0J\ptch[1] tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\QXKR2XA5\CANEE5JN tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\QXKR2XA5\CANEUTZN tagged as not-a-virus:AdWare.Win32.Virtumonde.acz. No Action Taken. File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\QXKR2XA5\CAXGKNX5 tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\SLYR0DIJ\valera[1] infected by "Trojan.Win32.Agent.bck" Virus. Action Taken: File Deleted. File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\VJPE2E7Z\CA72IPJ3 tagged as not-a-virusSWTool.Win32.Virtumonde.ada. No Action Taken. File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\VJPE2E7Z\CAP8ETH7 infected by "Trojan.Win32.Inject.kk" Virus. Action Taken: File Deleted. File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\VJPE2E7Z\hctp[1] tagged as not-a-virus:AdWare.Win32.Virtumonde.flq. No Action Taken. File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\WL4N4J8F\CASLSDCZ tagged as not-a-virus:AdWare.Win32.Virtumonde.wt. No Action Taken. File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\WL4N4J8F\ptch[1] tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\WRXZU27H\CA5KM1L3 tagged as not-a-virus:AdWare.Win32.Virtumonde.wj. No Action Taken. File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\WRXZU27H\CAVUITBN infected by "Trojan.Win32.Inject.kk" Virus. Action Taken: File Deleted. File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\WRXZU27H\CAWLA7OD tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\WRXZU27H\nufwa[1].dll tagged as not-a-virus:AdWare.Win32.BHO.qj. No Action Taken. File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\WRXZU27H\ptch[1] tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\X8JBV140\CAO52RKP tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\X8JBV140\pochki20071106[1] infected by "Trojan.Win32.Obfuscated.kp" Virus. Action Taken: File Deleted. File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\YZYRQTUR\CAE7KD6N tagged as not-a-virus:AdWare.Win32.Virtumonde.acz. No Action Taken. File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\YZYRQTUR\CAHSIHPJ tagged as not-a-virus:AdWare.Win32.Virtumonde.wu. No Action Taken. File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\YZYRQTUR\CAZME5R3 infected by "Trojan.Win32.Inject.kk" Virus. Action Taken: File Deleted. File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\YZYRQTUR\hctp[1] tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\YZYRQTUR\hctp[2] tagged as not-a-virus:AdWare.Win32.Virtumonde.flq. No Action Taken. File C:\Documents and Settings\Meri\Local Settings\Temporary Internet Files\Content.IE5\YZYRQTUR\vasya[1] infected by "Trojan.Win32.Agent.bck" Virus. Action Taken: File Deleted. File C:\Program Files\mIRC\mirc.exe tagged as not-a-virus:Client-IRC.Win32.mIRC.631. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP349\A0035539.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP349\A0036539.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP349\A0036540.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP349\A0036697.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP349\A0036698.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP349\A0036699.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP350\A0036746.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP350\A0036765.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP350\A0036781.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP350\A0036782.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP350\A0036783.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP350\A0036802.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP351\A0036836.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP351\A0036837.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP351\A0036930.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP351\A0036931.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP351\A0036932.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP353\A0037014.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP353\A0037015.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP353\A0037016.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP354\A0037057.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP354\A0037058.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP354\A0037059.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP354\A0037141.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP355\A0038142.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP355\A0038202.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP356\A0038256.0LL infected by "Backdoor.Win32.Agent.dlj" Virus. Action Taken: File Renamed. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP356\A0038267.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP358\A0039256.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP359\A0039350.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP359\A0039351.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP359\A0039368.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP360\A0039434.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP360\A0039435.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP360\A0039436.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP361\A0039520.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP361\A0039521.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP361\A0039522.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP362\A0039579.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP362\A0039580.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP362\A0039581.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP362\A0039596.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP362\A0039615.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP362\A0039616.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP362\A0039617.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP363\A0039644.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP363\A0039683.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP363\A0039684.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP364\A0039712.0ll infected by "Trojan.Win32.Pakes.bwd" Virus. Action Taken: File Deleted. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP364\A0039713.0ll infected by "Trojan.Win32.Pakes.bwd" Virus. Action Taken: File Deleted. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP364\A0039714.0xe infected by "Trojan-Downloader.Win32.Agent.gwe" Virus. Action Taken: File Deleted. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP364\A0039715.0xe infected by "Trojan-Downloader.Win32.Agent.gwe" Virus. Action Taken: File Deleted. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP364\A0039762.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP364\A0039763.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP364\A0039764.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP364\A0039798.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP364\A0039831.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP364\A0039832.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP365\A0039898.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP365\A0039899.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP365\A0039900.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP365\A0039913.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP366\A0039966.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP366\A0039967.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP366\A0039968.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP367\A0040011.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP367\A0040032.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP368\A0040073.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP368\A0040109.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP368\A0040110.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP370\A0040226.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP370\A0041226.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP370\A0041227.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP372\A0041345.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP374\A0041425.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP374\A0041444.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP375\A0041504.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP376\A0041552.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP376\A0041553.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP376\A0041566.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP377\A0041627.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP377\A0041628.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP378\A0041665.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP378\A0041682.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP380\A0041763.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP380\A0041801.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.eby. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP380\A0041802.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP380\A0041803.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP382\A0041904.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP382\A0041905.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP382\A0041906.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP383\A0041923.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP383\A0041924.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP384\A0041976.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP385\A0043010.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP386\A0043047.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP386\A0043048.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP386\A0043049.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP388\A0043162.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP388\A0043163.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP388\A0043164.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP389\A0043197.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP389\A0043198.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP389\A0043278.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP390\A0043326.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.jp. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043375.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gip. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043400.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043401.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043402.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043403.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043404.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043407.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043408.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043409.dll tagged as not-a-virusSWTool.Win32.Virtumonde.ada. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043411.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043418.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043420.dll tagged as not-a-virus:AdWare.Win32.SuperJuan.is. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043421.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043422.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043423.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043424.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043426.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043428.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043430.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043431.dll tagged as not-a-virusSWTool.Win32.Virtumonde.ada. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043432.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043433.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.wj. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043434.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043435.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043436.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043437.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043438.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043439.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043440.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043441.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043442.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043443.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043445.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043446.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043448.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043449.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043450.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043451.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043452.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043453.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043455.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.wl. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043456.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043458.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043459.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043461.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043462.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043464.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043465.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043467.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043468.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043470.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043471.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043472.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043473.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043474.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043475.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043476.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043478.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043479.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043480.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043481.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043482.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.wj. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043483.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043484.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043485.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043486.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.acg. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043488.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043489.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043490.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043491.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043492.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043493.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043495.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043496.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043497.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043498.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043499.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043500.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043501.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043502.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043503.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043505.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043506.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043507.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043508.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043509.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.wu. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043510.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.atv. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043511.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043512.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043513.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043514.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043515.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043516.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043517.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043518.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043520.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043521.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043522.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043523.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043525.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043526.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043528.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043529.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043530.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043534.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043537.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043538.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043540.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043541.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043543.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043544.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043547.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043548.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043551.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043552.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043555.dll tagged as not-a-virus:AdWare.Win32.SuperJuan.auj. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043556.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043560.dll tagged as not-a-virus:AdWare.Win32.SuperJuan.is. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043561.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043562.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043563.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043564.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.acz. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043565.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043567.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043568.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043570.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043572.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043574.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043575.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043576.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043578.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043579.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043580.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043581.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043582.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043583.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043584.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043585.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043586.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043588.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043590.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043593.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043594.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043595.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043596.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043597.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043598.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043600.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043601.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043602.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043604.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043607.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043608.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043609.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043610.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043611.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\System Volume Information\_restore{39C99CD7-67AE-4972-9CD4-49C712EDB291}\RP391\A0043612.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\aeklchqd.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\aermevdo.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\aivbmfai.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\amxgoged.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\atfyqcax.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\awtqr.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\awtsp.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\awtsr.dll.bad tagged as not-a-virusSWTool.Win32.Virtumonde.ada. No Action Taken. File C:\VundoFix Backups\awvtq.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\bplhfdyp.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\bqoynspn.dll.bad tagged as not-a-virus:AdWare.Win32.SuperJuan.is. No Action Taken. File C:\VundoFix Backups\btyavtax.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\buwnwjwq.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\bvfsuhep.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\bwcqmwke.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\cacsvisa.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\cwbiekqb.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\ddayy.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\ddcca.dll.bad tagged as not-a-virusSWTool.Win32.Virtumonde.ada. No Action Taken. File C:\VundoFix Backups\ddcya.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\ddcyv.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.wj. No Action Taken. File C:\VundoFix Backups\dgtnbstu.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\divjwdtn.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\dixympqk.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\dkcpwsnv.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\dotcfpky.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\dvjjwtjv.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\dwkjmoif.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\dwvluwva.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\emlmwcmc.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\ewsgwlpb.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\fcoqkjql.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\ffljyjoc.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\fmxwdixn.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\fviaarcw.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\fwgielsi.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\gbfrjpgd.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\gebca.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\gebya.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\geeda.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.wl. No Action Taken. File C:\VundoFix Backups\geedd.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\gifmsrwp.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\giucoffi.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\grrfjbkk.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\henvravp.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\hgjylgit.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\hsjbcaoi.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\ieibsswt.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\ifjginpr.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\ininocxh.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\inuvtgue.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\ipuamvva.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\ismqggbk.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\jamhsakc.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\jcqshyci.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\jibrrioe.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\jkhfc.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\jkhfd.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\jkhfe.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\jkhfg.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\jkhhf.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.wj. No Action Taken. File C:\VundoFix Backups\jkkjg.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\jkkjh.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\jkkjj.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\jkkjk.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.acg. No Action Taken. File C:\VundoFix Backups\jkklk.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\jmqiccep.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\jmwywswi.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\jntdlgai.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\jpudegmv.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\jrbhuxee.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\kaecpist.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\kghpekvr.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\kgsqrgiq.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\khwaeyrb.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\kqyoaqsy.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\krmbjlvc.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\kyvkkqde.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\lehayuai.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\lgixiosn.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\lprsqilh.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\lsnjvlua.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\luuywyyl.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\mhqjcvas.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\mljgh.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.wu. No Action Taken. File C:\VundoFix Backups\mljjj.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.atv. No Action Taken. File C:\VundoFix Backups\mlljj.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\mnqgjdar.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\mosqivao.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\mtfdvxbj.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\mttmpxkn.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\mtywkixa.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\mugmedas.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\mwfvpvfq.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\nnwwktxr.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\nufhyqua.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\nvjkpmvf.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\nwckofve.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\ocexipdh.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\oegqxooy.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\okswwtli.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\oqxklnfg.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\osrjjrtk.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\pbyqbscb.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\pmkji.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\pnccvdki.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\pnwudpsx.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\pqyivefi.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\prairrjx.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\prwmytjy.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\pryixqjv.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\pxcdxtuk.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\qatolrvq.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\qewbpiqq.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\qqtwennp.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\rdchvqkc.dll.bad tagged as not-a-virus:AdWare.Win32.SuperJuan.auj. No Action Taken. File C:\VundoFix Backups\rihpenqv.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\shqsssqq.dll.bad tagged as not-a-virus:AdWare.Win32.SuperJuan.is. No Action Taken. File C:\VundoFix Backups\sivbbvlt.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\slhlalam.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\sqcekqoq.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\ssqpp.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.acz. No Action Taken. File C:\VundoFix Backups\ssqrp.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\ssqrs.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\ssttq.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\sucqmbbx.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\tbjwxvyc.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\tlpiuhbm.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\tqcddcxx.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\ttvnrjdp.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\uafdvsti.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\ucjriqjr.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\urgeyumv.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\ushxwnya.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\vciomqrf.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\vevlusws.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\vfmgcqfu.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\vmlypmlw.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\vtbpaeye.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\vtsqo.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\vtstq.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\vturp.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\vtuts.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\vytgbrxv.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\wbxtfwvr.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\whdkpohb.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\wpbisact.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\wudyenxy.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\wvwyxfof.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\wxpthrsr.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\wxwflnqq.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\xmtojsem.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\xrnxjqos.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\xwxxdgns.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\ybvfumuq.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\ydivxnol.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\VundoFix Backups\yfwnedfb.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\WINDOWS\system32\aabkbuco.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\WINDOWS\system32\eribpfue.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\WINDOWS\system32\hrvqlhkj.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\WINDOWS\system32\icslnpwx.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\WINDOWS\system32\krbttukj.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\WINDOWS\system32\ooncpoof.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\WINDOWS\system32\rqrqgsml.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\WINDOWS\system32\rwovvckl.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\WINDOWS\system32\ugcagvxy.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File C:\WINDOWS\system32\xhmjueyp.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.gen. No Action Taken. File D:\downloads-softat_ym\asennetut\MIRC616.EXE tagged as not-a-virus:Client-IRC.Win32.mIRC.616. No Action Taken.
Lataa tuolta http://www.ccleaner.com/download/builds.aspx CCleaner v2.03.532- Standard Build, ÄLÄ aseenna Yahoo toolbaria! laita asetukset näin: Valinnat --> Lisäasetukset --> Ota ruksi pois kohdasta Poista vain yli 48 tuntia vanhat tilapäistiedostot. aja Puhdistaja > tutki nappi > aja ccleaner nappi oikea alakulma aja Virheet > etsi rekisteri virheitä nappi > Korjaa rekisteri virheet. nappi ============== Lataa Atribunen ATF Cleaner Ohjeet; Tupla-klikkaa ATF-Cleaner.exe käynnistääksesi ohjelman.Main:n alla valitse: Select All Klikkaa Empty Selected valintaa. Jos käytät FireFoxia selaimenasi Klikkaa Firefox yläpuolelta ja valitse: Select All Klikkaa Empty Selected valintaa. HUOMIO: Jos haluaisit pitää tallennetut salasanasi, klikkaa No kun se sitä kysyy. Jos käytät Operaa selaimenasiKlikkaa Opera yläpuolelta ja valitse: Select All Klikkaa Empty Selected valintaa taas. HUOMIO: Jos haluaisit pitää tallennetut salasanasi, klikkaa No kun se sitä kysyy. Klikkaa Exit päävalikosta sulkeaksesi ohjelman. Teknistä tukea tulee jos tupla-klikkaat sähköpostiosoitetta joka sijaitsee jokaisen menun alapuolella kyseisessä työkalussa. (Huomatkaa että se tuki on sitten englanniksi) ============== Poista lisää poista sovelutuksesta Java version is 1.5.0.9 Java version is 1.5.0.11 ============ Tuhjennä C:\VundoFix Backups <-- sisältö ja tyhjennä roskis ================= 1. Klikkaa käynnistä > Oma tietokone oikean puoleisella hiiren napilla 2. Valitse ominaisuudet 3. Valitse järjestelmän palauttaminen välilehti 4. Ruksi eteen ¤ poista järjestelmän palauttaminen kaikissa asemissa 5. Paina Käytä 6. Paina ok 7. Sammuta ja käynnistä 8. Ota ruksi pois ¤ poista järjestelmän palauttaminen kaikissa asemissa 9. Käytä ja OK =========== aja tuo vundofix vielä uudelleen lävitse ========== Nimeä tuo uudelleen C:\Program Files\Trend Micro\HijackThis\>>> HijackThis.exe <<< skanneriksi.exe
Ccleaner asennettu ja ajettu, niin myös ATF cleaner. Vanhat javat poistettu. Vundofix backups -kansio tyhjennetty. Järjestelmän palautusjuttu tehty. Vundofix ei löytänyt enää mitään. HiJackThis uudelleennimetty Skanner.exe:ksi Oliko vielä muuta?
Tässä on HJT-loki: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 14:38:48, on 7.2.2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\F-Secure\Common\FSM32.EXE C:\Program Files\Analog Devices\Core\smax4pnp.exe C:\Program Files\Analog Devices\SoundMAX\Smax4.exe C:\Program Files\DAEMON Tools\daemon.exe C:\Program Files\Google\Gmail Notifier\gnotify.exe C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE C:\Program Files\NetLimiter\NetLimiter.exe C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe C:\Program Files\Logitech\Video\LogiTray.exe F:\AVG Anti-Spyware 7.5\avgas.exe C:\Program Files\Skype\Phone\Skype.exe C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe C:\Program Files\MSN Messenger\msnmsgr.exe C:\WINDOWS\system32\LVComS.exe C:\PROGRA~1\COMMON~1\PCSuite\Services\SERVIC~1.EXE C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe F:\AVG Anti-Spyware 7.5\guard.exe C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE C:\WINDOWS\system32\CTsvcCDA.EXE C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe C:\Program Files\F-Secure\BackWeb\7681197\Program\F-Secure Automatic Update.exe C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE C:\Program Files\F-Secure\Anti-Virus\fssm32.exe C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe C:\Program Files\F-Secure\Common\FSMA32.EXE C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe C:\Program Files\F-Secure\Common\FSMB32.EXE C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\F-Secure\Common\FCH32.EXE C:\WINDOWS\system32\PnkBstrA.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\F-Secure\Common\FAMEH32.EXE C:\Program Files\F-Secure\Anti-Virus\fsqh.exe C:\Program Files\F-Secure\Anti-Virus\fsrw.exe C:\Program Files\F-Secure\Common\FNRB32.EXE C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe C:\Program Files\F-Secure\Common\FIH32.EXE C:\Program Files\F-Secure\Anti-Virus\fsav32.exe C:\PROGRA~1\F-Secure\ANTI-S~1\fsaw.exe C:\WINDOWS\system32\WgaTray.exe C:\Program Files\F-Secure\FSGUI\fsguidll.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\MSN Messenger\usnsvc.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Trend Micro\HijackThis.exe\skanner.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fi/ R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033 O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe O4 - HKLM\..\Run: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] C:\Program Files\Google\Gmail Notifier\gnotify.exe O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -onlytray O4 - HKLM\..\Run: [NetLimiter] C:\Program Files\NetLimiter\NetLimiter.exe /s O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe O4 - HKLM\..\Run: [!AVG Anti-Spyware] "F:\AVG Anti-Spyware 7.5\avgas.exe" /minimized O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: F-Secure Automatic Update.lnk = C:\Program Files\F-Secure\BackWeb\7681197\program\F-Secure Automatic Update.exe O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe O8 - Extra context menu item: &Block this popup - C:\Program Files\F-Secure\Anti-Spyware\blockpopups.htm O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm O8 - Extra context menu item: Avaa uuteen etuvälilehteen - res://C:\Program Files\Windows Live Toolbar\Components\fi-fi\msntabres.dll.mui/230?42e34bf2d6574abb80d1d6c4bc7e0366 O8 - Extra context menu item: Avaa uuteen taustavälilehteen - res://C:\Program Files\Windows Live Toolbar\Components\fi-fi\msntabres.dll.mui/229?42e34bf2d6574abb80d1d6c4bc7e0366 O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll O9 - Extra button: IE Shield - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure\Anti-Spyware\ieshield.dll O9 - Extra 'Tools' menuitem: IE Shield... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure\Anti-Spyware\ieshield.dll O9 - Extra button: Oheistiedot - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1164648388828 O17 - HKLM\System\CCS\Services\Tcpip\..\{451EF1CD-7324-4280-B8E1-813A6094BDF4}: NameServer = 213.139.190.3 212.50.131.153 O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - (no file) O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - F:\AVG Anti-Spyware 7.5\guard.exe O23 - Service: F-Secure Automatic Update (BackWeb Plug-in - 7681197) - F-Secure Automatic Update - C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corp. - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Apache Software Foundation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe -- End of file - 9761 bytes
Lataa OTMoveIt OTMoveIt ja tallenna se työpöydällesi. Tuplaklikkaa OTMoveIt.exe. Klikkaa CleanUp!. Valitse Yes kun kysytään "Begin cleanup Process?". Jos pyydetään, että saako koneen käynnistää uudeelleen, valitse Yes.OTMoveIt poistaa itsensä kun se on valmis, jos näin ei käy poista se itse. HUOM: Jos palomuurisi tai joku muu tietoturvaohjelma varoittaa, että OTMoveIt yrittää päästä nettin, niin anna sen päästä sinne.
Kone ajettu OTmoveIt -ohjelmalla. HJT -loki näyttää nyt tältä: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 17:33:21, on 7.2.2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\F-Secure\Common\FSM32.EXE C:\Program Files\Analog Devices\Core\smax4pnp.exe C:\Program Files\Analog Devices\SoundMAX\Smax4.exe C:\Program Files\DAEMON Tools\daemon.exe C:\Program Files\Google\Gmail Notifier\gnotify.exe C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE C:\Program Files\NetLimiter\NetLimiter.exe C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe C:\Program Files\Logitech\Video\LogiTray.exe C:\WINDOWS\system32\LVComS.exe C:\PROGRA~1\COMMON~1\PCSuite\Services\SERVIC~1.EXE F:\AVG Anti-Spyware 7.5\avgas.exe C:\Program Files\Skype\Phone\Skype.exe C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe C:\Program Files\MSN Messenger\msnmsgr.exe C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe F:\AVG Anti-Spyware 7.5\guard.exe C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE C:\WINDOWS\system32\CTsvcCDA.EXE C:\Program Files\F-Secure\BackWeb\7681197\Program\F-Secure Automatic Update.exe C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE C:\Program Files\F-Secure\Anti-Virus\fssm32.exe C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe C:\Program Files\F-Secure\Common\FSMA32.EXE C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe C:\Program Files\F-Secure\Common\FSMB32.EXE C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\F-Secure\Common\FCH32.EXE C:\WINDOWS\system32\PnkBstrA.exe C:\Program Files\F-Secure\Common\FAMEH32.EXE C:\Program Files\F-Secure\Anti-Virus\fsqh.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\F-Secure\Anti-Virus\fsrw.exe C:\Program Files\F-Secure\Common\FNRB32.EXE C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe C:\Program Files\F-Secure\Common\FIH32.EXE C:\Program Files\F-Secure\Anti-Virus\fsav32.exe C:\WINDOWS\system32\WgaTray.exe C:\PROGRA~1\F-Secure\ANTI-S~1\fsaw.exe C:\Program Files\F-Secure\FSGUI\fsguidll.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Trend Micro\HijackThis.exe\skanner.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fi/ R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033 O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe O4 - HKLM\..\Run: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] C:\Program Files\Google\Gmail Notifier\gnotify.exe O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -onlytray O4 - HKLM\..\Run: [NetLimiter] C:\Program Files\NetLimiter\NetLimiter.exe /s O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe O4 - HKLM\..\Run: [!AVG Anti-Spyware] "F:\AVG Anti-Spyware 7.5\avgas.exe" /minimized O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: F-Secure Automatic Update.lnk = C:\Program Files\F-Secure\BackWeb\7681197\program\F-Secure Automatic Update.exe O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe O8 - Extra context menu item: &Block this popup - C:\Program Files\F-Secure\Anti-Spyware\blockpopups.htm O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm O8 - Extra context menu item: Avaa uuteen etuvälilehteen - res://C:\Program Files\Windows Live Toolbar\Components\fi-fi\msntabres.dll.mui/230?42e34bf2d6574abb80d1d6c4bc7e0366 O8 - Extra context menu item: Avaa uuteen taustavälilehteen - res://C:\Program Files\Windows Live Toolbar\Components\fi-fi\msntabres.dll.mui/229?42e34bf2d6574abb80d1d6c4bc7e0366 O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll O9 - Extra button: IE Shield - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure\Anti-Spyware\ieshield.dll O9 - Extra 'Tools' menuitem: IE Shield... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure\Anti-Spyware\ieshield.dll O9 - Extra button: Oheistiedot - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1164648388828 O17 - HKLM\System\CCS\Services\Tcpip\..\{451EF1CD-7324-4280-B8E1-813A6094BDF4}: NameServer = 213.139.190.3 212.50.131.153 O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - (no file) O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - F:\AVG Anti-Spyware 7.5\guard.exe O23 - Service: F-Secure Automatic Update (BackWeb Plug-in - 7681197) - F-Secure Automatic Update - C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corp. - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Apache Software Foundation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe -- End of file - 9672 bytes
C: -asemalta vapautunut n. 1 gigatavu lisää tilaa! Kone nopeutunut hieman. Kiitos vielä kerran avusta!!
