Logfile of HijackThis v1.98.2
Scan saved at 13:44:59, on 13.9.2004
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\spoolsv.exe
D:\WINDOWS\Explorer.EXE
D:\Program Files\Winamp\winampa.exe
D:\Program Files\Common\FSM32.EXE
D:\Ohjelmat\MsgPlus.exe
D:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe
D:\Program Files\Microsoft Hardware\Keyboard\type32.exe
D:\PROGRA~1\ELISAT~1\4119343\Program\SERVIC~1.EXE
D:\Program Files\Anti-Virus\fsgk32st.exe
D:\Program Files\Logitech\MouseWare\system\em_exec.exe
D:\Program Files\Elisa Tietoturvapalvelu\4119343\program\fsbwsys.exe
D:\Program Files\Anti-Virus\FSGK32.EXE
D:\Program Files\Anti-Virus\fssm32.exe
D:\WINDOWS\System32\svchost.exe
D:\Program Files\Common\FSMA32.EXE
D:\Program Files\Common\FSMB32.EXE
D:\Program Files\Common\FCH32.EXE
D:\Program Files\Elisa Tietoturvapalvelu\4119343\Program\BackWeb-4119343.exe
D:\Program Files\Common\FAMEH32.EXE
D:\Program Files\Anti-Virus\fsav32.exe
D:\Program Files\DFW\Program\fsdfwd.exe
D:\Ohjelmat\opera.exe
D:\Program Files\MSN Messenger\msnmsgr.exe
D:\Program Files\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.telkku.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
R3 - Default URLSearchHook is missing
O2 - BHO: (no name) - {FFFFFEF0-5B30-21D4-945D-000000000000} - D:\Ohjelmat\STARDO~1\SDIEInt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - D:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [WinampAgent] D:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [F-Secure Manager] "D:\Program Files\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "D:\Program Files\TNB\TNBUtil.exe" /CHECKALL
O4 - HKLM\..\Run: [MessengerPlus3] "D:\Ohjelmat\MsgPlus.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] D:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [NeroCheck] D:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] D:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [IntelliType] "D:\Program Files\Microsoft Hardware\Keyboard\type32.exe"
O8 - Extra context menu item: Download with Star Downloader - D:\Ohjelmat\Star Downloader\sdie.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\MSMSGS.EXE
O16 - DPF: {3AF4DACE-36ED-42EF-9DFC-ADC34DA30CFF} (PatchInstaller.Installer) - file://E:\content\include\XPPatchInstaller.CAB
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
Ja jos tuossa on jotain outoa niin voisiko asian selittää silleen että tämä aloittelijakin ymmärtäisi mitä pitäisi tehdä/korjata.
Kiitoksia etukäteen!!
Scan saved at 13:44:59, on 13.9.2004
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\spoolsv.exe
D:\WINDOWS\Explorer.EXE
D:\Program Files\Winamp\winampa.exe
D:\Program Files\Common\FSM32.EXE
D:\Ohjelmat\MsgPlus.exe
D:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe
D:\Program Files\Microsoft Hardware\Keyboard\type32.exe
D:\PROGRA~1\ELISAT~1\4119343\Program\SERVIC~1.EXE
D:\Program Files\Anti-Virus\fsgk32st.exe
D:\Program Files\Logitech\MouseWare\system\em_exec.exe
D:\Program Files\Elisa Tietoturvapalvelu\4119343\program\fsbwsys.exe
D:\Program Files\Anti-Virus\FSGK32.EXE
D:\Program Files\Anti-Virus\fssm32.exe
D:\WINDOWS\System32\svchost.exe
D:\Program Files\Common\FSMA32.EXE
D:\Program Files\Common\FSMB32.EXE
D:\Program Files\Common\FCH32.EXE
D:\Program Files\Elisa Tietoturvapalvelu\4119343\Program\BackWeb-4119343.exe
D:\Program Files\Common\FAMEH32.EXE
D:\Program Files\Anti-Virus\fsav32.exe
D:\Program Files\DFW\Program\fsdfwd.exe
D:\Ohjelmat\opera.exe
D:\Program Files\MSN Messenger\msnmsgr.exe
D:\Program Files\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.telkku.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
R3 - Default URLSearchHook is missing
O2 - BHO: (no name) - {FFFFFEF0-5B30-21D4-945D-000000000000} - D:\Ohjelmat\STARDO~1\SDIEInt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - D:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [WinampAgent] D:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [F-Secure Manager] "D:\Program Files\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "D:\Program Files\TNB\TNBUtil.exe" /CHECKALL
O4 - HKLM\..\Run: [MessengerPlus3] "D:\Ohjelmat\MsgPlus.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] D:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [NeroCheck] D:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] D:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [IntelliType] "D:\Program Files\Microsoft Hardware\Keyboard\type32.exe"
O8 - Extra context menu item: Download with Star Downloader - D:\Ohjelmat\Star Downloader\sdie.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\MSMSGS.EXE
O16 - DPF: {3AF4DACE-36ED-42EF-9DFC-ADC34DA30CFF} (PatchInstaller.Installer) - file://E:\content\include\XPPatchInstaller.CAB
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
Ja jos tuossa on jotain outoa niin voisiko asian selittää silleen että tämä aloittelijakin ymmärtäisi mitä pitäisi tehdä/korjata.
Kiitoksia etukäteen!!
Vastaukset 2
Vanhimmat
Poista ensin tuo MessengerPlus3 sieltä Lisää/Poista paneelista.
Jos välttämättä haluat sen konelle,niin asenna se sitte uudestaan tän operaation jälkeen,mutta asenna se ilman sitä sponsoriohjelmaa.
Pistä se HijackThis.exe omaan kansioon
Merkkaa nuo sulje selain ja muut avoimet ikkunat ja paina FIX checked
R3 - Default URLSearchHook is missing
O4 - HKLM\..\Run: [MessengerPlus3] "D:\Ohjelmat\MsgPlus.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O16 - DPF: {3AF4DACE-36ED-42EF-9DFC-ADC34DA30CFF} (PatchInstaller.Installer) - file://E:\content\include\XPPatchInstaller.CAB
Hae myös kaikki tärkeät päivitykset Windows Updatesta
..paljon neuvoista!!!