virus

Discussion in 'Virukset ja haittaohjelmat' started by aj55, Nov 21, 2005.

Thread Status:
Not open for further replies.
  1. aj55

    aj55 Member

    Joined:
    Oct 27, 2005
    Messages:
    46
    Likes Received:
    0
    Trophy Points:
    16
    millähä sais tämmösen poijes ja tekeekö se tuhoja paljoki...?
    W32.Spybot.Worm
     
    aj55, Nov 21, 2005
    #1
  2. gurkku

    gurkku Guest

    Tärkeät tiedot heti otsikkoon ,ei vain virus.
     
    gurkku, Nov 21, 2005
    #2
  3. aj55

    aj55 Member

    Joined:
    Oct 27, 2005
    Messages:
    46
    Likes Received:
    0
    Trophy Points:
    16
    eli jouduin asentaan uusiks xp:n ja mul ei ollu ku norton antivirus 2003...sit ku päivittelin ni ilmotti et löyti tommosen eli mitäs pitäs tehä?
     
    aj55, Nov 21, 2005
    #3
  4. jokke70

    jokke70 Regular member

    Joined:
    Jan 20, 2005
    Messages:
    380
    Likes Received:
    0
    Trophy Points:
    26
    http://www.ewido.net/en/?section=download <- lataa toi ewido.
    * Latauslinkistä tulee paketti mikä sisältää molemmat versiot ( Plus ja Free ). Asennuksen jälkeen voit kokeilla niitä Plus-version ominaisuuksia 14 pv ajan , jonka jälkeen ohjelma muuttuu Free -versioksi. Ohjelma on tarkoitettu toimimaan ainoastaan käyttöjärjestelmissä Windows 2000 / XP . Ohjelma on keskittynyt troijalaisiin, keyloggereihin ja muuhun spywareen

    * Uusi versio 3.5 ilmestynyt 05.07.2005.

    * Asennuksen ja päivityksen jälkeen valitse vasemmalta scanner => Settings => tarkista,että jokaisessa kohdassa on ruksi paikallaan ja muuta kohdassa What to scan? täppi kohtaan Scan every file.Paina OK.

    * Tämän jälkeen vasta valitse kohta Complete System Scan ja scannaus alkaa. Jos tulee ilmoitus Infected object found! Tarkista,että kohdassa Create encrypted backup in the quarantine on ruksi ja laita ruksi itse kohtaan Perform action with all infections. Kohdassa Perform action: on oletuksena Remove. Suosittelen jättämään sen paikalleen vaikka sieltä voi myös valita None. Paina OK. Scannauksen päätyttyä voit tallentaa raportin teksti muodossa
    (Teksti lainattu: http://koti.mbnet.fi/pattaya1/muut_ilmaisohjelmat.htm)
    Pitäisi tehota.

    http://koti.mbnet.fi/pattaya1/escanmwav.htm <- sitten aja toi eScan jos sekin viel jotain löytää.
     
    jokke70, Nov 21, 2005
    #4
  5. aj55

    aj55 Member

    Joined:
    Oct 27, 2005
    Messages:
    46
    Likes Received:
    0
    Trophy Points:
    16
    Okei! kiitti jo etukäteen...
     
    aj55, Nov 21, 2005
    #5
  6. -kemisti-

    -kemisti- Active member

    Joined:
    Jun 6, 2005
    Messages:
    6,305
    Likes Received:
    0
    Trophy Points:
    96
    Ja ewidon/eScani jälkeen laita vielä HjT-loki, ohjelman saat täältä -> http://koti.mbnet.fi/pattaya1/HijackThis.exe . Tallenna hakemistoon c:\hjt, käynnistä, klikkaa do a system scan and save a logfile ja lähetä loki tänne.
     
    -kemisti-, Nov 21, 2005
    #6
  7. aj55

    aj55 Member

    Joined:
    Oct 27, 2005
    Messages:
    46
    Likes Received:
    0
    Trophy Points:
    16
    nonii! tää e-scan löys tämmösii...
    File C:\WINDOWS\System32\i infected by "Trojan-Downloader.BAT.Ftp.ab" Virus. Action Taken: File Deleted.
    File C:\Program Files\Norton AntiVirus\Quarantine\0ADB0D98.exe infected by "Backdoor.Win32.Rbot.gen" Virus. Action Taken: File Renamed.
    File C:\Program Files\Norton AntiVirus\Quarantine\0DEB6A39 infected by "Backdoor.Win32.PoeBot.d" Virus. Action Taken: File Renamed.
    File C:\Program Files\Norton AntiVirus\Quarantine\1970038C.exe infected by "Backdoor.Win32.Rbot.ahp" Virus. Action Taken: File Renamed.
    File C:\Program Files\Norton AntiVirus\Quarantine\19D84319.exe infected by "Backdoor.Win32.PoeBot.d" Virus. Action Taken: File Renamed.
    File C:\Program Files\Norton AntiVirus\Quarantine\1D922700.exe infected by "Backdoor.Win32.Rbot.ahp" Virus. Action Taken: File Renamed.
    File C:\Program Files\Norton AntiVirus\Quarantine\28352852.exe infected by "Trojan.Win32.Crypt.d" Virus. Action Taken: File Deleted.
    File C:\Program Files\Norton AntiVirus\Quarantine\348433BF.exe infected by "Backdoor.Win32.Rbot.ahp" Virus. Action Taken: File Renamed.
    File C:\Program Files\Norton AntiVirus\Quarantine\379E0E56.exe infected by "Trojan.Win32.Crypt.d" Virus. Action Taken: File Deleted.
    File C:\Program Files\Norton AntiVirus\Quarantine\3F6943C2.exe infected by "Backdoor.Win32.PoeBot.d" Virus. Action Taken: File Renamed.
    File C:\Program Files\Norton AntiVirus\Quarantine\424256A1.exe infected by "Backdoor.Win32.Rbot.ahp" Virus. Action Taken: File Renamed.
     
    aj55, Nov 21, 2005
    #7
  8. jokke70

    jokke70 Regular member

    Joined:
    Jan 20, 2005
    Messages:
    380
    Likes Received:
    0
    Trophy Points:
    26
    yhden uuden löysi ja poisti mitä norton ei ollut löytänyt. Aja viel toi hjt niinkuin -kemisti- neuvoi.
     
    jokke70, Nov 21, 2005
    #8
  9. aj55

    aj55 Member

    Joined:
    Oct 27, 2005
    Messages:
    46
    Likes Received:
    0
    Trophy Points:
    16
    Logfile of HijackThis v1.99.1
    Scan saved at 20:22:17, on 21.11.2005
    Platform: Windows XP SP1 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    C:\Program Files\ewido\security suite\ewidoctrl.exe
    C:\Program Files\ewido\security suite\ewidoguard.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Norton AntiVirus\navapsvc.exe
    C:\WINDOWS\System32\RunDll32.exe
    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    C:\Program Files\Common Files\Symantec Shared\ccApp.exe
    C:\Program Files\TeleWell TW-IA300C ADSL\CnxDslTb.exe
    C:\WINDOWS\System32\ctfmon.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\Program Files\Outlook Express\msimn.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Kaspersky\mwavscan.com
    C:\Kaspersky\kavss.exe
    C:\WINDOWS\System32\wuauclt.exe
    C:\WINDOWS\System32\wuauclt.exe
    C:\Documents and Settings\arska\Local Settings\Temporary Internet Files\Content.IE5\KT670DEF\HijackThis[1].exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
    O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
    O4 - HKLM\..\Run: [CnxDslTaskBar] C:\Program Files\TeleWell TW-IA300C ADSL\CnxDslTb.exe
    O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
    O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
    O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    O23 - Service: Symantec Password Validation Service (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
    O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
    O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido\security suite\ewidoguard.exe
    O23 - Service: Norton AntiVirus -ohjelman automaattinen suojaus (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
    O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
    O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
    O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
     
    aj55, Nov 21, 2005
    #9
  10. jokke70

    jokke70 Regular member

    Joined:
    Jan 20, 2005
    Messages:
    380
    Likes Received:
    0
    Trophy Points:
    26
    ite en ymmärrä ton hjt login päälle mitään, mut kehottaisin asentamaan sp2 päivityksen xp:lle. Onko sulla mitään palomuuria koneella?

    Mut kohta joku minua viisaampi neuvoo ton login kanssa.
     
    Last edited: Nov 21, 2005
    jokke70, Nov 21, 2005
    #10
  11. aj55

    aj55 Member

    Joined:
    Oct 27, 2005
    Messages:
    46
    Likes Received:
    0
    Trophy Points:
    16
    juu kokoajan lataan sp2:sta ja siinhä on palomuuri...
     
    aj55, Nov 21, 2005
    #11
  12. -kemisti-

    -kemisti- Active member

    Joined:
    Jun 6, 2005
    Messages:
    6,305
    Likes Received:
    0
    Trophy Points:
    96
    Loki on kunnossa.
     
    -kemisti-, Nov 21, 2005
    #12
  13. aj55

    aj55 Member

    Joined:
    Oct 27, 2005
    Messages:
    46
    Likes Received:
    0
    Trophy Points:
    16
    hieno homma!kiitokset!
     
    aj55, Nov 21, 2005
    #13
Thread Status:
Not open for further replies.

Share This Page