mitä v****a?!

Siis aina kun laitan explorerin auki aloitussivu on about:blank joka näyttää olevan jonkunnäköinen hakukone. Aloitussivu on aina sama, vaikka muuttas asetuksista. Aluks se ei haitannu juuri yhtään, mutta nyt alkaa jo pänniä. Neuvokaa joku että pääsen eroon tosta pirun about:blank:ista!
7679
Äänestä

Muut lukivat myös

Vastaukset 7

Vanhimmat
  • Tämmöstä:

    Logfile of HijackThis v1.97.7
    Scan saved at 20:39:19, on 1.9.2004
    Platform: Windows XP (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 (6.00.2600.0000)

    Running processes:
    D:\WINDOWS\System32\smss.exe
    D:\WINDOWS\system32\winlogon.exe
    D:\WINDOWS\system32\services.exe
    D:\WINDOWS\system32\lsass.exe
    D:\WINDOWS\system32\svchost.exe
    D:\WINDOWS\System32\svchost.exe
    D:\WINDOWS\Explorer.EXE
    D:\WINDOWS\system32\spoolsv.exe
    D:\Program Files\AVPersonal\AVGUARD.EXE
    D:\Program Files\AVPersonal\AVWUPSRV.EXE
    D:\WINDOWS\System32\CTsvcCDA.EXE
    D:\WINDOWS\System32\nvsvc32.exe
    D:\WINDOWS\system32\ZoneLabs\vsmon.exe
    D:\WINDOWS\System32\MsPMSPSv.exe
    D:\Program Files\Logitech\iTouch\iTouch.exe
    D:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
    D:\Program Files\Desktop Messenger\8876480\Program\backWeb-8876480.exe
    D:\WINDOWS\TBPanel.exe
    D:\Program Files\ahead\InCD\InCD.exe
    D:\Program Files\Creative\ShareDLL\CtNotify.exe
    D:\Program Files\Creative\SBLive\AudioHQ\AHQTB.EXE
    D:\Program Files\Creative\SBLive\Program\CTAvTray.EXE
    D:\Program Files\SlySoft\CloneCD\CloneCDTray.exe
    D:\Program Files\Winamp\winampa.exe
    D:\Program Files\AVPersonal\AVGNT.EXE
    D:\Program Files\Creative\ShareDLL\MediaDet.Exe
    D:\WINDOWS\System32\RUNDLL32.EXE
    D:\WINDOWS\System32\ctfmon.exe
    D:\Program Files\Messenger\msmsgs.exe
    D:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
    D:\Program Files\Zone Labs\ZoneAlarm\zonealarm.exe
    D:\Program Files\Logitech\iTouch\kbdtray.exe
    D:\Documents and Settings\Minä\Työpöytä\Pelit\HIJA1977\HijackThis.exe
    D:\Program Files\Lavasoft\Ad-aware 6\Ad-aware.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = file://D:\DOCUME~1\MIN~1\LOCALS~1\Temp\sp.html
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = file://D:\DOCUME~1\MIN~1\LOCALS~1\Temp\sp.html
    R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = file://D:\DOCUME~1\MIN~1\LOCALS~1\Temp\sp.html
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = file://D:\DOCUME~1\MIN~1\LOCALS~1\Temp\sp.html
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = file://D:\DOCUME~1\MIN~1\LOCALS~1\Temp\sp.html
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = file://D:\DOCUME~1\MIN~1\LOCALS~1\Temp\sp.html
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
    O2 - BHO: (no name) - {334E4A12-62DF-4E36-8FE2-84203ED12ED8} - D:\WINDOWS\System32\jcnm.dll
    O4 - HKLM\..\Run: [zBrowser Launcher] D:\Program Files\Logitech\iTouch\iTouch.exe
    O4 - HKLM\..\Run: [Gainward] D:\WINDOWS\TBPanel.exe /A
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE D:\WINDOWS\System32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [NeroCheck] D:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [InCD] D:\Program Files\ahead\InCD\InCD.exe
    O4 - HKLM\..\Run: [Disc Detector] D:\Program Files\Creative\ShareDLL\CtNotify.exe
    O4 - HKLM\..\Run: [AHQInit] D:\Program Files\Creative\SBLive\Program\AHQInit.exe
    O4 - HKLM\..\Run: [AudioHQ] D:\Program Files\Creative\SBLive\AudioHQ\AHQTB.EXE
    O4 - HKLM\..\Run: [CTAvTray] D:\Program Files\Creative\SBLive\Program\CTAvTray.EXE
    O4 - HKLM\..\Run: [CloneCDTray] "D:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
    O4 - HKLM\..\Run: [WinampAgent] D:\Program Files\Winamp\winampa.exe
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE D:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [CTRegRun] D:\WINDOWS\CTRegRun.EXE
    O4 - HKLM\..\Run: [AVGCtrl] D:\Program Files\AVPersonal\AVGNT.EXE /min
    O4 - HKLM\..\Run: [EM_EXEC] D:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
    O4 - HKCU\..\Run: [CTFMON.EXE] D:\WINDOWS\System32\ctfmon.exe
    O4 - HKCU\..\Run: [LDM] D:\Program Files\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
    O4 - HKLM\..\RunOnce: [CTAVTray] D:\Program Files\Creative\SBLive\Program\CTAvStub.EXE EAX.AVI
    O4 - Global Startup: InterVideo WinCinema Manager.lnk = D:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
    O4 - Global Startup: Logitech Desktop Messenger.lnk = D:\Program Files\Desktop Messenger\8876480\Program\LDMConf.exe
    O4 - Global Startup: ZoneAlarm.lnk = D:\Program Files\Zone Labs\ZoneAlarm\zonealarm.exe
    O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://fpdownload.macromedia.com/get/shockwave/cabs/director/sw.cab
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

    Äänestä

  • Simppa kirjoitti:

    Tämmöstä:

    Logfile of HijackThis v1.97.7
    Scan saved at 20:39:19, on 1.9.2004
    Platform: Windows XP (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 (6.00.2600.0000)

    Running processes:
    D:\WINDOWS\System32\smss.exe
    D:\WINDOWS\system32\winlogon.exe
    D:\WINDOWS\system32\services.exe
    D:\WINDOWS\system32\lsass.exe
    D:\WINDOWS\system32\svchost.exe
    D:\WINDOWS\System32\svchost.exe
    D:\WINDOWS\Explorer.EXE
    D:\WINDOWS\system32\spoolsv.exe
    D:\Program Files\AVPersonal\AVGUARD.EXE
    D:\Program Files\AVPersonal\AVWUPSRV.EXE
    D:\WINDOWS\System32\CTsvcCDA.EXE
    D:\WINDOWS\System32\nvsvc32.exe
    D:\WINDOWS\system32\ZoneLabs\vsmon.exe
    D:\WINDOWS\System32\MsPMSPSv.exe
    D:\Program Files\Logitech\iTouch\iTouch.exe
    D:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
    D:\Program Files\Desktop Messenger\8876480\Program\backWeb-8876480.exe
    D:\WINDOWS\TBPanel.exe
    D:\Program Files\ahead\InCD\InCD.exe
    D:\Program Files\Creative\ShareDLL\CtNotify.exe
    D:\Program Files\Creative\SBLive\AudioHQ\AHQTB.EXE
    D:\Program Files\Creative\SBLive\Program\CTAvTray.EXE
    D:\Program Files\SlySoft\CloneCD\CloneCDTray.exe
    D:\Program Files\Winamp\winampa.exe
    D:\Program Files\AVPersonal\AVGNT.EXE
    D:\Program Files\Creative\ShareDLL\MediaDet.Exe
    D:\WINDOWS\System32\RUNDLL32.EXE
    D:\WINDOWS\System32\ctfmon.exe
    D:\Program Files\Messenger\msmsgs.exe
    D:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
    D:\Program Files\Zone Labs\ZoneAlarm\zonealarm.exe
    D:\Program Files\Logitech\iTouch\kbdtray.exe
    D:\Documents and Settings\Minä\Työpöytä\Pelit\HIJA1977\HijackThis.exe
    D:\Program Files\Lavasoft\Ad-aware 6\Ad-aware.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = file://D:\DOCUME~1\MIN~1\LOCALS~1\Temp\sp.html
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = file://D:\DOCUME~1\MIN~1\LOCALS~1\Temp\sp.html
    R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = file://D:\DOCUME~1\MIN~1\LOCALS~1\Temp\sp.html
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = file://D:\DOCUME~1\MIN~1\LOCALS~1\Temp\sp.html
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = file://D:\DOCUME~1\MIN~1\LOCALS~1\Temp\sp.html
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = file://D:\DOCUME~1\MIN~1\LOCALS~1\Temp\sp.html
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
    O2 - BHO: (no name) - {334E4A12-62DF-4E36-8FE2-84203ED12ED8} - D:\WINDOWS\System32\jcnm.dll
    O4 - HKLM\..\Run: [zBrowser Launcher] D:\Program Files\Logitech\iTouch\iTouch.exe
    O4 - HKLM\..\Run: [Gainward] D:\WINDOWS\TBPanel.exe /A
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE D:\WINDOWS\System32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [NeroCheck] D:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [InCD] D:\Program Files\ahead\InCD\InCD.exe
    O4 - HKLM\..\Run: [Disc Detector] D:\Program Files\Creative\ShareDLL\CtNotify.exe
    O4 - HKLM\..\Run: [AHQInit] D:\Program Files\Creative\SBLive\Program\AHQInit.exe
    O4 - HKLM\..\Run: [AudioHQ] D:\Program Files\Creative\SBLive\AudioHQ\AHQTB.EXE
    O4 - HKLM\..\Run: [CTAvTray] D:\Program Files\Creative\SBLive\Program\CTAvTray.EXE
    O4 - HKLM\..\Run: [CloneCDTray] "D:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
    O4 - HKLM\..\Run: [WinampAgent] D:\Program Files\Winamp\winampa.exe
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE D:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [CTRegRun] D:\WINDOWS\CTRegRun.EXE
    O4 - HKLM\..\Run: [AVGCtrl] D:\Program Files\AVPersonal\AVGNT.EXE /min
    O4 - HKLM\..\Run: [EM_EXEC] D:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
    O4 - HKCU\..\Run: [CTFMON.EXE] D:\WINDOWS\System32\ctfmon.exe
    O4 - HKCU\..\Run: [LDM] D:\Program Files\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
    O4 - HKLM\..\RunOnce: [CTAVTray] D:\Program Files\Creative\SBLive\Program\CTAvStub.EXE EAX.AVI
    O4 - Global Startup: InterVideo WinCinema Manager.lnk = D:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
    O4 - Global Startup: Logitech Desktop Messenger.lnk = D:\Program Files\Desktop Messenger\8876480\Program\LDMConf.exe
    O4 - Global Startup: ZoneAlarm.lnk = D:\Program Files\Zone Labs\ZoneAlarm\zonealarm.exe
    O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://fpdownload.macromedia.com/get/shockwave/cabs/director/sw.cab
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab

    Jaahas täälä oli tämmönen tapaus,mutta pistä uus logi tolla uudella HijackThis versiolla.

    http://koti.mbnet.fi/pattaya1/HijackThis.exe

    Äänestä

  • Tässä on logi uuella versiolla:
    Logfile of HijackThis v1.98.2
    Scan saved at 15:17:01, on 2.9.2004
    Platform: Windows XP (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 (6.00.2600.0000)

    Running processes:
    D:\WINDOWS\System32\smss.exe
    D:\WINDOWS\system32\winlogon.exe
    D:\WINDOWS\system32\services.exe
    D:\WINDOWS\system32\lsass.exe
    D:\WINDOWS\system32\svchost.exe
    D:\WINDOWS\System32\svchost.exe
    D:\WINDOWS\system32\logonui.exe
    D:\WINDOWS\Explorer.EXE
    D:\WINDOWS\system32\spoolsv.exe
    D:\Program Files\AVPersonal\AVGUARD.EXE
    D:\Program Files\AVPersonal\AVWUPSRV.EXE
    D:\WINDOWS\System32\CTsvcCDA.EXE
    D:\WINDOWS\System32\nvsvc32.exe
    D:\WINDOWS\system32\ZoneLabs\vsmon.exe
    D:\WINDOWS\System32\MsPMSPSv.exe
    D:\Program Files\Logitech\iTouch\iTouch.exe
    D:\WINDOWS\TBPanel.exe
    D:\Program Files\ahead\InCD\InCD.exe
    D:\Program Files\Creative\ShareDLL\CtNotify.exe
    D:\Program Files\Creative\SBLive\AudioHQ\AHQTB.EXE
    D:\Program Files\Creative\SBLive\Program\CTAvTray.EXE
    D:\Program Files\SlySoft\CloneCD\CloneCDTray.exe
    D:\Program Files\Winamp\winampa.exe
    D:\Program Files\Creative\ShareDLL\MediaDet.Exe
    D:\WINDOWS\System32\RUNDLL32.EXE
    D:\Program Files\AVPersonal\AVGNT.EXE
    D:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
    D:\WINDOWS\System32\ctfmon.exe
    D:\Program Files\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
    D:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
    D:\Program Files\Zone Labs\ZoneAlarm\zonealarm.exe
    D:\Program Files\Logitech\iTouch\kbdtray.exe
    D:\Program Files\Internet Explorer\iexplore.exe
    D:\Documents and Settings\Minä\Työpöytä\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = file://D:\DOCUME~1\MIN~1\LOCALS~1\Temp\sp.html
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = file://D:\DOCUME~1\MIN~1\LOCALS~1\Temp\sp.html
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = file://D:\DOCUME~1\MIN~1\LOCALS~1\Temp\sp.html
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = file://D:\DOCUME~1\MIN~1\LOCALS~1\Temp\sp.html
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
    R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = file://D:\DOCUME~1\MIN~1\LOCALS~1\Temp\sp.html
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = file://D:\DOCUME~1\MIN~1\LOCALS~1\Temp\sp.html
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
    O2 - BHO: (no name) - {334E4A12-62DF-4E36-8FE2-84203ED12ED8} - D:\WINDOWS\System32\jcnm.dll
    O4 - HKLM\..\Run: [zBrowser Launcher] D:\Program Files\Logitech\iTouch\iTouch.exe
    O4 - HKLM\..\Run: [Gainward] D:\WINDOWS\TBPanel.exe /A
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE D:\WINDOWS\System32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [NeroCheck] D:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [InCD] D:\Program Files\ahead\InCD\InCD.exe
    O4 - HKLM\..\Run: [Disc Detector] D:\Program Files\Creative\ShareDLL\CtNotify.exe
    O4 - HKLM\..\Run: [AHQInit] D:\Program Files\Creative\SBLive\Program\AHQInit.exe
    O4 - HKLM\..\Run: [AudioHQ] D:\Program Files\Creative\SBLive\AudioHQ\AHQTB.EXE
    O4 - HKLM\..\Run: [CTAvTray] D:\Program Files\Creative\SBLive\Program\CTAvTray.EXE
    O4 - HKLM\..\Run: [CloneCDTray] "D:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
    O4 - HKLM\..\Run: [WinampAgent] D:\Program Files\Winamp\winampa.exe
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE D:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [CTRegRun] D:\WINDOWS\CTRegRun.EXE
    O4 - HKLM\..\Run: [AVGCtrl] D:\Program Files\AVPersonal\AVGNT.EXE /min
    O4 - HKLM\..\Run: [EM_EXEC] D:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
    O4 - HKLM\..\RunOnce: [CTAVTray] D:\Program Files\Creative\SBLive\Program\CTAvStub.EXE EAX.AVI
    O4 - HKCU\..\Run: [CTFMON.EXE] D:\WINDOWS\System32\ctfmon.exe
    O4 - HKCU\..\Run: [LDM] D:\Program Files\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
    O4 - Global Startup: InterVideo WinCinema Manager.lnk = D:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
    O4 - Global Startup: Logitech Desktop Messenger.lnk = D:\Program Files\Desktop Messenger\8876480\Program\LDMConf.exe
    O4 - Global Startup: ZoneAlarm.lnk = D:\Program Files\Zone Labs\ZoneAlarm\zonealarm.exe
    O17 - HKLM\System\CCS\Services\Tcpip\..\{027258E7-20CE-41A8-8696-5B02E45B2A07}: NameServer = 62.236.224.129 194.215.205.32
    O17 - HKLM\System\CS2\Services\Tcpip\..\{027258E7-20CE-41A8-8696-5B02E45B2A07}: NameServer = 62.236.224.129 194.215.205.32
    O18 - Filter: text/html - {45E6D393-E790-44BE-9956-C99DECF6C26D} - D:\WINDOWS\System32\jcnm.dll
    O18 - Filter: text/plain - {45E6D393-E790-44BE-9956-C99DECF6C26D} - D:\WINDOWS\System32\jcnm.dll

    Äänestä

  • Kiitti tuosta linkistä, sain tuolla shredderillä örkin poistettua ja kaikki toimii niinkuin pitääkin.

    Äänestä

  • Simppa kirjoitti:

    Tässä on logi uuella versiolla:
    Logfile of HijackThis v1.98.2
    Scan saved at 15:17:01, on 2.9.2004
    Platform: Windows XP (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 (6.00.2600.0000)

    Running processes:
    D:\WINDOWS\System32\smss.exe
    D:\WINDOWS\system32\winlogon.exe
    D:\WINDOWS\system32\services.exe
    D:\WINDOWS\system32\lsass.exe
    D:\WINDOWS\system32\svchost.exe
    D:\WINDOWS\System32\svchost.exe
    D:\WINDOWS\system32\logonui.exe
    D:\WINDOWS\Explorer.EXE
    D:\WINDOWS\system32\spoolsv.exe
    D:\Program Files\AVPersonal\AVGUARD.EXE
    D:\Program Files\AVPersonal\AVWUPSRV.EXE
    D:\WINDOWS\System32\CTsvcCDA.EXE
    D:\WINDOWS\System32\nvsvc32.exe
    D:\WINDOWS\system32\ZoneLabs\vsmon.exe
    D:\WINDOWS\System32\MsPMSPSv.exe
    D:\Program Files\Logitech\iTouch\iTouch.exe
    D:\WINDOWS\TBPanel.exe
    D:\Program Files\ahead\InCD\InCD.exe
    D:\Program Files\Creative\ShareDLL\CtNotify.exe
    D:\Program Files\Creative\SBLive\AudioHQ\AHQTB.EXE
    D:\Program Files\Creative\SBLive\Program\CTAvTray.EXE
    D:\Program Files\SlySoft\CloneCD\CloneCDTray.exe
    D:\Program Files\Winamp\winampa.exe
    D:\Program Files\Creative\ShareDLL\MediaDet.Exe
    D:\WINDOWS\System32\RUNDLL32.EXE
    D:\Program Files\AVPersonal\AVGNT.EXE
    D:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
    D:\WINDOWS\System32\ctfmon.exe
    D:\Program Files\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
    D:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
    D:\Program Files\Zone Labs\ZoneAlarm\zonealarm.exe
    D:\Program Files\Logitech\iTouch\kbdtray.exe
    D:\Program Files\Internet Explorer\iexplore.exe
    D:\Documents and Settings\Minä\Työpöytä\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = file://D:\DOCUME~1\MIN~1\LOCALS~1\Temp\sp.html
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = file://D:\DOCUME~1\MIN~1\LOCALS~1\Temp\sp.html
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = file://D:\DOCUME~1\MIN~1\LOCALS~1\Temp\sp.html
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = file://D:\DOCUME~1\MIN~1\LOCALS~1\Temp\sp.html
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
    R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = file://D:\DOCUME~1\MIN~1\LOCALS~1\Temp\sp.html
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = file://D:\DOCUME~1\MIN~1\LOCALS~1\Temp\sp.html
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
    O2 - BHO: (no name) - {334E4A12-62DF-4E36-8FE2-84203ED12ED8} - D:\WINDOWS\System32\jcnm.dll
    O4 - HKLM\..\Run: [zBrowser Launcher] D:\Program Files\Logitech\iTouch\iTouch.exe
    O4 - HKLM\..\Run: [Gainward] D:\WINDOWS\TBPanel.exe /A
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE D:\WINDOWS\System32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [NeroCheck] D:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [InCD] D:\Program Files\ahead\InCD\InCD.exe
    O4 - HKLM\..\Run: [Disc Detector] D:\Program Files\Creative\ShareDLL\CtNotify.exe
    O4 - HKLM\..\Run: [AHQInit] D:\Program Files\Creative\SBLive\Program\AHQInit.exe
    O4 - HKLM\..\Run: [AudioHQ] D:\Program Files\Creative\SBLive\AudioHQ\AHQTB.EXE
    O4 - HKLM\..\Run: [CTAvTray] D:\Program Files\Creative\SBLive\Program\CTAvTray.EXE
    O4 - HKLM\..\Run: [CloneCDTray] "D:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
    O4 - HKLM\..\Run: [WinampAgent] D:\Program Files\Winamp\winampa.exe
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE D:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [CTRegRun] D:\WINDOWS\CTRegRun.EXE
    O4 - HKLM\..\Run: [AVGCtrl] D:\Program Files\AVPersonal\AVGNT.EXE /min
    O4 - HKLM\..\Run: [EM_EXEC] D:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
    O4 - HKLM\..\RunOnce: [CTAVTray] D:\Program Files\Creative\SBLive\Program\CTAvStub.EXE EAX.AVI
    O4 - HKCU\..\Run: [CTFMON.EXE] D:\WINDOWS\System32\ctfmon.exe
    O4 - HKCU\..\Run: [LDM] D:\Program Files\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
    O4 - Global Startup: InterVideo WinCinema Manager.lnk = D:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
    O4 - Global Startup: Logitech Desktop Messenger.lnk = D:\Program Files\Desktop Messenger\8876480\Program\LDMConf.exe
    O4 - Global Startup: ZoneAlarm.lnk = D:\Program Files\Zone Labs\ZoneAlarm\zonealarm.exe
    O17 - HKLM\System\CCS\Services\Tcpip\..\{027258E7-20CE-41A8-8696-5B02E45B2A07}: NameServer = 62.236.224.129 194.215.205.32
    O17 - HKLM\System\CS2\Services\Tcpip\..\{027258E7-20CE-41A8-8696-5B02E45B2A07}: NameServer = 62.236.224.129 194.215.205.32
    O18 - Filter: text/html - {45E6D393-E790-44BE-9956-C99DECF6C26D} - D:\WINDOWS\System32\jcnm.dll
    O18 - Filter: text/plain - {45E6D393-E790-44BE-9956-C99DECF6C26D} - D:\WINDOWS\System32\jcnm.dll

    Siirrä ensin se HijackThis.exe omaan kansioon tonne D:/HjT/HijackThis.exe

    Ota tosta APM

    http://www.diamondcs.com.au/index.php?page=apm


    Merkkaa nuo sulje selain ja muut avoimet ikkunat ja paina FIX checked

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = file://D:\DOCUME~1\MIN~1\LOCALS~1\Temp\sp.html
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = file://D:\DOCUME~1\MIN~1\LOCALS~1\Temp\sp.html
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = file://D:\DOCUME~1\MIN~1\LOCALS~1\Temp\sp.html
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = file://D:\DOCUME~1\MIN~1\LOCALS~1\Temp\sp.html
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
    R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = file://D:\DOCUME~1\MIN~1\LOCALS~1\Temp\sp.html
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = file://D:\DOCUME~1\MIN~1\LOCALS~1\Temp\sp.html
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
    O2 - BHO: (no name) - {334E4A12-62DF-4E36-8FE2-84203ED12ED8} - D:\WINDOWS\System32\jcnm.dll
    O18 - Filter: text/html - {45E6D393-E790-44BE-9956-C99DECF6C26D} - D:\WINDOWS\System32\jcnm.dll
    O18 - Filter: text/plain - {45E6D393-E790-44BE-9956-C99DECF6C26D} - D:\WINDOWS\System32\jcnm.dll


    Sitte avaa se APM ja yläikkunasta valitse
    C:/Windows/explorer.exe

    Alaikkunasta valitse tämä jos se näkyy siellä,klikkaa sitä ja valikosta Unload Dll. ja Ok
    D:\WINDOWS\System32\jcnm.dll


    Kirjoita sitte suorita kohtaan cleanmgr ja Ok
    Sieltä merkkaa nuo ja putsaa pois ne

    Temporary Files
    Temporary Internet Files
    Recycle Bin


    Käynnistä sitte kone uudestaan ja putsaa Cwshredderillä.

    Pistä sen jälkeen uus Hijack logi tänne,niin nähään tuliko se puhtaaksi.

    Äänestä

Kommentoi aloitusta


Simppa kirjoitti:

Siis aina kun laitan explorerin auki aloitussivu on about:blank joka näyttää olevan jonkunnäköinen hakukone. Aloitussivu on aina sama, vaikka muuttas asetuksista. Aluks se ei haitannu juuri yhtään, mutta nyt alkaa jo pänniä. Neuvokaa joku että pääsen eroon tosta pirun about:blank:ista!

Anonyymi
5000

Ilmoita asiaton sisältö

  • Sisältää materiaalia, joka on loukkaavaa, herjaavaa, rasistista, uhkailevaa tai ahdistelevaa.

  • Materiaali sisältää nimiä, yhteystietoja tai muita henkilökohtaisia tietoja. Julkisuuden henkilöistä, julkisissa viroissa toimivista ihmisistä sekä yritysten vastuuhenkilöistä saa keskustella työhön liittyen. Myös yksityiselämään liittyvistä asioista voi keskustella siltä osin, kuin niistä on julkisesti kerrottu.

  • Sisältää lapsille haitallista tai heiltä kiellettyä materiaalia. Seksuaalinen sisältö on sallittua aiheeseen tarkoitetuilla palstoilla, joiden ikäraja on 18 vuotta.

  • Lainvastaista sisältöä voi olla mm. yksityiselämää loukkaavan tiedon levitys, kiihottaminen kansanryhmää vastaan, laiton uhkaaminen, alaikäisiin liittyvä seksuaalinen sisältö/grooming, petokset, identiteettivarkaudet, kunnianloukkaukset ja tekijänoikeusrikkomukset.

  • Sisältö ei liity palstan tai keskusteluketjun aiheeseen.

  • Viesti ei ole suomea tai ruotsia (pl. International Forums), se sisältää mainontaa, se sisältää tekijänoikeuksin suojattua materiaalia, se on massapostitus tai jokin muu syy.

Jaa keskustelu