xp probleema

Discussion in 'Virukset ja haittaohjelmat - HijackThis -logit' started by berti7, Aug 10, 2006.

Thread Status:
Not open for further replies.
Page 1 of 2
  1. berti7

    berti7 Member

    Joined:
    Jun 10, 2006
    Messages:
    21
    Likes Received:
    0
    Trophy Points:
    11
    ihan outo juttu.. eilen kone toimi ihan ok, nyt temppuilee.. ei aukase mitaan ohjelmia, sanoo vaan nain.. This file does not have a program associated with it for performing this action. Create an association in the Folder Options control panel. eli ei mikaan aukea, ei selain, ei system restore, ei lisaa tai poista sovellus, ei antivirus... tosi kiva homma! mulla on avast ja sain pikatarkistajan paalle ja loysi ilmeisesti C-asemasta troijalaisen mutta en tieda poistiko sita.. osaisko kukaan neuvoa mita tehda?
     
    berti7, Aug 10, 2006
    #1
  2. Jupsu

    Jupsu Active member

    Joined:
    Dec 30, 2005
    Messages:
    1,459
    Likes Received:
    2
    Trophy Points:
    68
    kokeile painaa käynnistyksessä f8 ja paina selast et käytä edellistä toimivaa kokoonpanoa tjsp..:D

    EDIT:siis onko sulla kaikki pikakuvakkeet kelvottomia? onko ne ihan normaalin näkösiä vai onko niistä tullu sellassii valkosii mis on keskel jotain pilkkui tjsp? itsellä kerran pikakuvakkeet meni jotenki "rikki" mut en tiiä onks sul sama homma..:D kerroppas vähän lisää siis..
     
    Last edited: Aug 11, 2006
    Jupsu, Aug 10, 2006
    #2
  3. berti7

    berti7 Member

    Joined:
    Jun 10, 2006
    Messages:
    21
    Likes Received:
    0
    Trophy Points:
    11
    joo eli pikakuvakkeet ihan normaaleja, mikään ei toimi, nettiin pääsen ku meen ohjauspaneeli ja sieltä windows update.. eilen tein toisessa ketjussa olleen ohjeen mukaan eli menin rekisteri editoriin jne ja sainkin toimimaan kaiken mutta vain jotain 10min, sit taas samaa viestiä pukkaa.. avast sanoo poistaneensa troijalaisen ja poistin saastuneen ohjelman kun kone toimi.. nyt ei enää onnistu edes se rekisterin muokkaus.. hermot menee!
     
    berti7, Aug 11, 2006
    #3
  4. Jupsu

    Jupsu Active member

    Joined:
    Dec 30, 2005
    Messages:
    1,459
    Likes Received:
    2
    Trophy Points:
    68
    Jupsu, Aug 11, 2006
    #4
  5. berti7

    berti7 Member

    Joined:
    Jun 10, 2006
    Messages:
    21
    Likes Received:
    0
    Trophy Points:
    11
    laittaisin jos saisin edes avattua koko ohjelman! argh!
     
    berti7, Aug 11, 2006
    #5
  6. Jupsu

    Jupsu Active member

    Joined:
    Dec 30, 2005
    Messages:
    1,459
    Likes Received:
    2
    Trophy Points:
    68
    Last edited: Aug 11, 2006
    Jupsu, Aug 11, 2006
    #6
  7. gain

    gain Active member

    Joined:
    Aug 10, 2003
    Messages:
    1,005
    Likes Received:
    0
    Trophy Points:
    66
    gain, Aug 11, 2006
    #7
  8. berti7

    berti7 Member

    Joined:
    Jun 10, 2006
    Messages:
    21
    Likes Received:
    0
    Trophy Points:
    11
    no niin, sain hjt:n toimimaan.. tällä hetkellä ohjelmat toimii. ennen kuin windows aukenee, näytöllä on tyhjä ikkuna, siinä pelkästään ok-nappi. sitä kun painaa niin pääsee kirjautumaan windowsiin. tää tulee joka kerta ku koneen aukasee.. ? mut tässä loki..

    Logfile of HijackThis v1.99.1
    Scan saved at 14:32:19, on 12.8.2006
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\ZoneLabs\vsmon.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\WINDOWS\System32\DVDRAMSV.exe
    C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\cmd.exe
    C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
    C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
    C:\Program Files\HijackThis.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\WINDOWS\system32\ctfmon.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = pwproxy.oamk.fi:8080
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O4 - HKCU\..\Run: [AWMON] "C:\Program Files\Lavasoft\Ad-Aware SE Plus\Ad-Watch.exe"
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: ATI CATALYST System Tray.lnk = C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
    O4 - Global Startup: RAMASST.lnk = C:\WINDOWS\system32\RAMASST.exe
    O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZNfox000
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O14 - IERESET.INF: START_PAGE_URL=http://www.soneraplaza.fi
    O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/SSC/SharedContent/vc/bin/AvSniff.cab
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.c...ls/en/x86/client/wuweb_site.cab?1110634511875
    O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1144824690765
    O16 - DPF: {88D758A3-D33B-45FD-91E3-67749B4057FA} - http://dm.screensavers.com/dm/installers/si/1/sinstaller.cab
    O16 - DPF: {C5E28B9D-0A68-4B50-94E9-E8F6B4697514} (NsvPlayX Control) - http://www.nullsoft.com/nsv/embed/nsvplayx_vp3_mp3.cab
    O16 - DPF: {C5E28B9D-0A68-4B50-94E9-E8F6B4697516} (NsvPlayX Control) - http://www.nullsoft.com/nsv/embed/nsvplayx_vp6_mp3.cab
    O18 - Protocol: Festoon - (no CLSID) - (no file)
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
    O18 - Protocol: vskype - (no CLSID) - (no file)
    O18 - Filter: text/html - (no CLSID) - (no file)
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
    O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
    O23 - Service: Boonty Games - Unknown owner - C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe (file missing)
    O23 - Service: DVD-RAM_Service - Matsushita Electric Industrial Co., Ltd. - C:\WINDOWS\System32\DVDRAMSV.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
    O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
    O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
    O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
     
    berti7, Aug 12, 2006
    #8
  9. berti7

    berti7 Member

    Joined:
    Jun 10, 2006
    Messages:
    21
    Likes Received:
    0
    Trophy Points:
    11
    päiviä! kone toimii näin nyt; kun aukasee koneen, ei mikään toimi, sit ku käynnistää uudelleen ja tekee sen rekisteri editori jutun(exe association fix tai jotain) kone toimii. ihan outoo. oon tehnyt virusskannauksen, ei mitään sen jälkeen ku poistin sen ohjelman missä oli troijalainen. oisko se troija viel kuitenki konees vai mikä tässä on?
     
    berti7, Aug 14, 2006
    #9
  10. Jupsu

    Jupsu Active member

    Joined:
    Dec 30, 2005
    Messages:
    1,459
    Likes Received:
    2
    Trophy Points:
    68
    Jupsu, Aug 15, 2006
    #10
  11. Jupsu

    Jupsu Active member

    Joined:
    Dec 30, 2005
    Messages:
    1,459
    Likes Received:
    2
    Trophy Points:
    68
    lataa toi http://www.spywareinfo.dk/download/mwav.exe ja paina sitä 2 kertaa ja purat sen sinne mihin se ehdottaa eli c: asemaan sit lataa toi vaik työpöydälle http://www.spywareinfo.dk/download/mwav.exe ja painat sitä 2 kertaa niin se päivittää ja avaa ton escanin.. sit vaan asetukset kuntoon ja scannaa..

    EDIT: suurin osanoista on keksejä jotka on roskakorissa eli tyhjennäs roskis..:) ja teithän ton scannauksen vikasietotilassa?
     
    Last edited: Aug 16, 2006
    Jupsu, Aug 16, 2006
    #12
  12. Jannejt

    Jannejt Moderator Staff Member

    Joined:
    Feb 10, 2005
    Messages:
    5,045
    Likes Received:
    6
    Trophy Points:
    118
    hjt lokin takia siirtoa..
     
    Jannejt, Aug 16, 2006
    #13
  13. berti7

    berti7 Member

    Joined:
    Jun 10, 2006
    Messages:
    21
    Likes Received:
    0
    Trophy Points:
    11
    en saa kuitenkaan tota escania toimimaan. kun puran sen niin tulee joku ilmoitus et mwavscan.com on virhe tai ei toimi tai jtn.. mulle tuli joku ilmoitus et jotain ongelmia rekisteris ja aukas sit jonku nettisivun, oli joku scannausohjelma, en muista nimee, joku doctor... vakoiluohjelmako? oikeesti, mulla menee hermo koneen kanssa! niin ja kaikki kuvat mita mul koneel oli kadonnu?!

    se ilmoitus purun yhteydes oli Error 31 running command. \mwavscan.com
    ja se doctor oli systemdoctor..
     
    Last edited: Aug 17, 2006
    berti7, Aug 17, 2006
    #14
  14. Jupsu

    Jupsu Active member

    Joined:
    Dec 30, 2005
    Messages:
    1,459
    Likes Received:
    2
    Trophy Points:
    68
    hitto kun joku jaksais tarkistaa tän lokin et sult sais roskat koneelt pois..:S
     
    Jupsu, Aug 17, 2006
    #15
  15. blade81

    blade81 Active member

    Joined:
    Jul 28, 2003
    Messages:
    1,287
    Likes Received:
    0
    Trophy Points:
    66
    @berti7

    Nimeä tuo hijackthis.exe vaikka putsari.exe nimelle ja lähetä sen jälkeen tuore hjt-loki.
     
    blade81, Aug 17, 2006
    #16
  16. Jupsu

    Jupsu Active member

    Joined:
    Dec 30, 2005
    Messages:
    1,459
    Likes Received:
    2
    Trophy Points:
    68
    pitikö tuo nimetä uusiksi siksi, koska jotkin virukset aivät näy jos tuo nimi on HiJack this.exe?
     
    Jupsu, Aug 18, 2006
    #17
  17. blade81

    blade81 Active member

    Joined:
    Jul 28, 2003
    Messages:
    1,287
    Likes Received:
    0
    Trophy Points:
    66
    Kyllä, juuri siksi. :)
     
    blade81, Aug 18, 2006
    #18
  18. berti7

    berti7 Member

    Joined:
    Jun 10, 2006
    Messages:
    21
    Likes Received:
    0
    Trophy Points:
    11
    no niin, tässä uusi loki.

    Logfile of HijackThis v1.99.1
    Scan saved at 13:17:07, on 19.8.2006
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\ZoneLabs\vsmon.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\WINDOWS\System32\DVDRAMSV.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\Program Files\ewido anti-spyware 4.0\guard.exe
    C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\cmd.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\WINDOWS\regedit.exe
    C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\WINDOWS\system32\NOTEPAD.EXE
    C:\Program Files\putsari.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = pwproxy.oamk.fi:8080
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O4 - HKCU\..\Run: [AWMON] "C:\Program Files\Lavasoft\Ad-Aware SE Plus\Ad-Watch.exe"
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: ATI CATALYST System Tray.lnk = C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
    O4 - Global Startup: RAMASST.lnk = C:\WINDOWS\system32\RAMASST.exe
    O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZNfox000
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O14 - IERESET.INF: START_PAGE_URL=http://www.soneraplaza.fi
    O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/SSC/SharedContent/vc/bin/AvSniff.cab
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.c...ls/en/x86/client/wuweb_site.cab?1110634511875
    O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1144824690765
    O16 - DPF: {88D758A3-D33B-45FD-91E3-67749B4057FA} - http://dm.screensavers.com/dm/installers/si/1/sinstaller.cab
    O16 - DPF: {C5E28B9D-0A68-4B50-94E9-E8F6B4697514} (NsvPlayX Control) - http://www.nullsoft.com/nsv/embed/nsvplayx_vp3_mp3.cab
    O16 - DPF: {C5E28B9D-0A68-4B50-94E9-E8F6B4697516} (NsvPlayX Control) - http://www.nullsoft.com/nsv/embed/nsvplayx_vp6_mp3.cab
    O18 - Protocol: Festoon - (no CLSID) - (no file)
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
    O18 - Protocol: vskype - (no CLSID) - (no file)
    O18 - Filter: text/html - (no CLSID) - (no file)
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
    O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
    O23 - Service: Boonty Games - Unknown owner - C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe (file missing)
    O23 - Service: DVD-RAM_Service - Matsushita Electric Industrial Co., Ltd. - C:\WINDOWS\System32\DVDRAMSV.exe
    O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
    O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
    O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
    O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

     
    berti7, Aug 19, 2006
    #19
  19. blade81

    blade81 Active member

    Joined:
    Jul 28, 2003
    Messages:
    1,287
    Likes Received:
    0
    Trophy Points:
    66
    Ota varalta Ad-awaren Ad-watch pois päältä operaation ajaksi (saattaa päällä ollessaan estää rivien fixauksen).

    Käynnistä hjt, klikkaa do a system scan only, merkkaa:
    [bold]O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZNfox000
    O16 - DPF: {88D758A3-D33B-45FD-91E3-67749B4057FA} - http://dm.screensavers.com/dm/installers/si/1/sinstaller.cab
    O18 - Protocol: Festoon - (no CLSID) - (no file)
    O18 - Protocol: vskype - (no CLSID) - (no file)
    O18 - Filter: text/html - (no CLSID) - (no file)
    O23 - Service: Boonty Games - Unknown owner - C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe (file missing)
    O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
    [/bold]
    Sulje kaikki muut ikkunat ja klikkaa fix checked.

    Avaa muistio ja tallenna seuraavat rivit nimellä poista.bat (tallennusmuoto kaikki tiedostot) työpöydälle:
    [bold]@echo off
    sc stop "Boonty Games"
    sc stop "Symantec Network Drivers Service"
    sc delete "Boonty Games"
    sc delete "Symantec Network Drivers Service"
    [/bold]
    Tuplaklikkaa poista.batia ajaaksesi sen. Ja käynnistä tämän jälkeen kone vikasietotilaan (F8ia koneen käynnistyessä ja listalta vikasietotila).

    Poista:
    C:\Program Files\Common Files\[bold]BOONTY Shared[/bold]
    C:\Program Files\Common Files\[bold]Symantec Shared[/bold]

    Palaa normaalitilaan ja lähetä uusi hjt-loki.
     
    Last edited: Aug 20, 2006
    blade81, Aug 20, 2006
    #20
Page 1 of 2
Thread Status:
Not open for further replies.

Share This Page