Rekisteröidy

Ilmoitukset

Ladataan…

    Näytä kaikki

    netti sekoilee

    kun pidän konetta vähän aikaa päällä alkaa netti tukkeutumaan jostai syystä eikä suostu enää näyttämään sivuja kunnolla vaan explorer herjaa "Sivua ei voitu näyttää" ja opera herjaa "etäpalvelin katkaisi yhteyden". mutta kun käynnistän koneen uusiksi toimii taas netti vähän aikaa kunnolla. windows updatesta olen kaikki päivittänyt ja joskus aikoinaan olen formatoinut kovon saman ongelman takia, mutta sekään ei auttanu. siis mikä neuvoksi?
    9393
    Äänestä

    Muut lukivat myös

    Vastaukset 9

    Vanhimmat

    • Logfile of HijackThis v1.98.2
      Scan saved at 16:54:00, on 7.10.2004
      Platform: Windows XP SP1 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\System32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\ewido\security suite\ewidoguard.exe
      C:\Program Files\McAfee\McAfee AntiSpyware\Msssrv.exe
      c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
      C:\WINDOWS\system32\svchost.exe
      c:\PROGRA~1\mcafee.com\vso\mcshield.exe
      C:\WINDOWS\System32\systems.exe
      C:\WINDOWS\System32\setver32.exe
      C:\Program Files\Logitech\iTouch\iTouch.exe
      C:\Program Files\Messenger Plus! 3\MsgPlus.exe
      C:\Program Files\Motherboard Monitor 5\MBM5.EXE
      C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
      C:\WINDOWS\System32\CTHELPER.EXE
      C:\Program Files\NetLimiter\NetLimiter.exe
      C:\Program Files\Logitech\MouseWare\system\em_exec.exe
      C:\PROGRA~1\McAfee.com\Agent\McRegWiz.exe
      C:\PROGRA~1\mcafee.com\vso\mcvsshld.exe
      C:\PROGRA~1\mcafee.com\agent\mcagent.exe
      C:\Program Files\McAfee\McAfee AntiSpyware\MssCli.exe
      c:\progra~1\mcafee.com\vso\mcvsescn.exe
      C:\Program Files\MSN Messenger\msnmsgr.exe
      C:\Program Files\GetRight\getright.exe
      C:\Program Files\GetRight\getright.exe
      c:\progra~1\mcafee.com\vso\mcvsftsn.exe
      C:\Program Files\Messenger\msmsgs.exe
      C:\WINDOWS\System32\taskmgr.exe
      C:\Documents and Settings\Niko Kirves\Työpöytä\HijackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.suomi24.fi/
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
      O2 - BHO: bho2gr Class - {31FF080D-12A3-439A-A2EF-4BA95A3148E8} - C:\Program Files\GetRight\xx2gr.dll
      O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
      O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
      O4 - HKLM\..\Run: [WindowsRegKeys update] winsysi.exe
      O4 - HKLM\..\Run: [System Service] systems.exe
      O4 - HKLM\..\Run: [Microsoft WinUpdate] svh0st.exe
      O4 - HKLM\..\Run: [Windows Registry Scan] regscan.exe
      O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
      O4 - HKLM\..\Run: [zBrowser Launcher] C:\Program Files\Logitech\iTouch\iTouch.exe
      O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"
      O4 - HKLM\..\Run: [MBM 5] "C:\Program Files\Motherboard Monitor 5\MBM5.EXE"
      O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
      O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
      O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
      O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
      O4 - HKLM\..\Run: [Jet Detection] "C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe"
      O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
      O4 - HKLM\..\Run: [NvMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
      O4 - HKLM\..\Run: [NetLimiter] C:\Program Files\NetLimiter\NetLimiter.exe /s
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [Windows secure] setver32.exe
      O4 - HKLM\..\Run: [McRegWiz] C:\PROGRA~1\McAfee.com\Agent\McRegWiz.exe /autorun
      O4 - HKLM\..\Run: [VSOCheckTask] "c:\PROGRA~1\mcafee.com\vso\mcmnhdlr.exe" /checktask
      O4 - HKLM\..\Run: [VirusScan Online] "c:\PROGRA~1\mcafee.com\vso\mcvsshld.exe"
      O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
      O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\mcupdate.exe
      O4 - HKLM\..\Run: [_AntiSpyware] C:\Program Files\McAfee\McAfee AntiSpyware\MssCli.exe
      O4 - HKLM\..\RunServices: [WindowsRegKeys update] winsysi.exe
      O4 - HKLM\..\RunServices: [System Service] systems.exe
      O4 - HKLM\..\RunServices: [Microsoft WinUpdate] svh0st.exe
      O4 - HKLM\..\RunServices: [Windows Registry Scan] regscan.exe
      O4 - HKLM\..\RunServices: [Windows secure] setver32.exe
      O4 - HKLM\..\RunOnce: [System Service] systems.exe
      O4 - HKLM\..\RunOnce: [Windows secure] setver32.exe
      O4 - HKCU\..\Run: [System Service] systems.exe
      O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe" /WinStart
      O4 - HKCU\..\Run: [Windows secure] setver32.exe
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - HKCU\..\RunOnce: [System Service] systems.exe
      O4 - HKCU\..\RunOnce: [Windows secure] setver32.exe
      O4 - Global Startup: GetRight - Tray Icon.lnk = C:\Program Files\GetRight\getright.exe
      O8 - Extra context menu item: Download with GetRight - C:\Program Files\GetRight\GRdownload.htm
      O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
      O8 - Extra context menu item: Open with GetRight Browser - C:\Program Files\GetRight\GRbrowse.htm
      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
      O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1093982194983
      O16 - DPF: {F04A8AE2-A59D-11D2-8792-00C04F8EF29D} (Hotmail Attachments Control) - http://by2fd.bay2.hotmail.msn.com/activex/HMAtchmt.ocx

      Äänestä

    • keijo kirjoitti:

      Logfile of HijackThis v1.98.2
      Scan saved at 16:54:00, on 7.10.2004
      Platform: Windows XP SP1 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\System32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\ewido\security suite\ewidoguard.exe
      C:\Program Files\McAfee\McAfee AntiSpyware\Msssrv.exe
      c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
      C:\WINDOWS\system32\svchost.exe
      c:\PROGRA~1\mcafee.com\vso\mcshield.exe
      C:\WINDOWS\System32\systems.exe
      C:\WINDOWS\System32\setver32.exe
      C:\Program Files\Logitech\iTouch\iTouch.exe
      C:\Program Files\Messenger Plus! 3\MsgPlus.exe
      C:\Program Files\Motherboard Monitor 5\MBM5.EXE
      C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
      C:\WINDOWS\System32\CTHELPER.EXE
      C:\Program Files\NetLimiter\NetLimiter.exe
      C:\Program Files\Logitech\MouseWare\system\em_exec.exe
      C:\PROGRA~1\McAfee.com\Agent\McRegWiz.exe
      C:\PROGRA~1\mcafee.com\vso\mcvsshld.exe
      C:\PROGRA~1\mcafee.com\agent\mcagent.exe
      C:\Program Files\McAfee\McAfee AntiSpyware\MssCli.exe
      c:\progra~1\mcafee.com\vso\mcvsescn.exe
      C:\Program Files\MSN Messenger\msnmsgr.exe
      C:\Program Files\GetRight\getright.exe
      C:\Program Files\GetRight\getright.exe
      c:\progra~1\mcafee.com\vso\mcvsftsn.exe
      C:\Program Files\Messenger\msmsgs.exe
      C:\WINDOWS\System32\taskmgr.exe
      C:\Documents and Settings\Niko Kirves\Työpöytä\HijackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.suomi24.fi/
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
      O2 - BHO: bho2gr Class - {31FF080D-12A3-439A-A2EF-4BA95A3148E8} - C:\Program Files\GetRight\xx2gr.dll
      O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
      O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
      O4 - HKLM\..\Run: [WindowsRegKeys update] winsysi.exe
      O4 - HKLM\..\Run: [System Service] systems.exe
      O4 - HKLM\..\Run: [Microsoft WinUpdate] svh0st.exe
      O4 - HKLM\..\Run: [Windows Registry Scan] regscan.exe
      O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
      O4 - HKLM\..\Run: [zBrowser Launcher] C:\Program Files\Logitech\iTouch\iTouch.exe
      O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"
      O4 - HKLM\..\Run: [MBM 5] "C:\Program Files\Motherboard Monitor 5\MBM5.EXE"
      O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
      O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
      O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
      O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
      O4 - HKLM\..\Run: [Jet Detection] "C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe"
      O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
      O4 - HKLM\..\Run: [NvMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
      O4 - HKLM\..\Run: [NetLimiter] C:\Program Files\NetLimiter\NetLimiter.exe /s
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [Windows secure] setver32.exe
      O4 - HKLM\..\Run: [McRegWiz] C:\PROGRA~1\McAfee.com\Agent\McRegWiz.exe /autorun
      O4 - HKLM\..\Run: [VSOCheckTask] "c:\PROGRA~1\mcafee.com\vso\mcmnhdlr.exe" /checktask
      O4 - HKLM\..\Run: [VirusScan Online] "c:\PROGRA~1\mcafee.com\vso\mcvsshld.exe"
      O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
      O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\mcupdate.exe
      O4 - HKLM\..\Run: [_AntiSpyware] C:\Program Files\McAfee\McAfee AntiSpyware\MssCli.exe
      O4 - HKLM\..\RunServices: [WindowsRegKeys update] winsysi.exe
      O4 - HKLM\..\RunServices: [System Service] systems.exe
      O4 - HKLM\..\RunServices: [Microsoft WinUpdate] svh0st.exe
      O4 - HKLM\..\RunServices: [Windows Registry Scan] regscan.exe
      O4 - HKLM\..\RunServices: [Windows secure] setver32.exe
      O4 - HKLM\..\RunOnce: [System Service] systems.exe
      O4 - HKLM\..\RunOnce: [Windows secure] setver32.exe
      O4 - HKCU\..\Run: [System Service] systems.exe
      O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe" /WinStart
      O4 - HKCU\..\Run: [Windows secure] setver32.exe
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - HKCU\..\RunOnce: [System Service] systems.exe
      O4 - HKCU\..\RunOnce: [Windows secure] setver32.exe
      O4 - Global Startup: GetRight - Tray Icon.lnk = C:\Program Files\GetRight\getright.exe
      O8 - Extra context menu item: Download with GetRight - C:\Program Files\GetRight\GRdownload.htm
      O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
      O8 - Extra context menu item: Open with GetRight Browser - C:\Program Files\GetRight\GRbrowse.htm
      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
      O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1093982194983
      O16 - DPF: {F04A8AE2-A59D-11D2-8792-00C04F8EF29D} (Hotmail Attachments Control) - http://by2fd.bay2.hotmail.msn.com/activex/HMAtchmt.ocx

      Sammuta System Restore

      Sammuta nuo prosessit

      C:\WINDOWS\System32\systems.exe
      C:\WINDOWS\System32\setver32.exe

      Sitte scannaa kone tuolla ja poista löydöt

      http://housecall.trendmicro.com/


      Pistä uus Hijack logi sen jälkeen.

      Äänestä

    • Juu kirjoitti:

      Sammuta System Restore

      Sammuta nuo prosessit

      C:\WINDOWS\System32\systems.exe
      C:\WINDOWS\System32\setver32.exe

      Sitte scannaa kone tuolla ja poista löydöt

      http://housecall.trendmicro.com/


      Pistä uus Hijack logi sen jälkeen.

      Logfile of HijackThis v1.98.2
      Scan saved at 18:13:12, on 7.10.2004
      Platform: Windows XP SP1 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\System32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\ewido\security suite\ewidoguard.exe
      C:\Program Files\McAfee\McAfee AntiSpyware\Msssrv.exe
      c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
      C:\WINDOWS\system32\svchost.exe
      c:\PROGRA~1\mcafee.com\vso\mcshield.exe
      C:\Program Files\Logitech\iTouch\iTouch.exe
      C:\Program Files\Messenger Plus! 3\MsgPlus.exe
      C:\Program Files\Motherboard Monitor 5\MBM5.EXE
      C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
      C:\WINDOWS\System32\CTHELPER.EXE
      C:\Program Files\Logitech\MouseWare\system\em_exec.exe
      C:\PROGRA~1\McAfee.com\Agent\McRegWiz.exe
      C:\PROGRA~1\mcafee.com\vso\mcvsshld.exe
      C:\PROGRA~1\mcafee.com\agent\mcagent.exe
      C:\Program Files\McAfee\McAfee AntiSpyware\MssCli.exe
      c:\progra~1\mcafee.com\vso\mcvsescn.exe
      C:\Program Files\MSN Messenger\msnmsgr.exe
      C:\Program Files\GetRight\getright.exe
      C:\Program Files\GetRight\getright.exe
      c:\progra~1\mcafee.com\vso\mcvsftsn.exe
      C:\Program Files\Messenger\msmsgs.exe
      C:\WINDOWS\System32\taskmgr.exe
      C:\Documents and Settings\Niko Kirves\Työpöytä\HijackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.suomi24.fi/
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
      O2 - BHO: bho2gr Class - {31FF080D-12A3-439A-A2EF-4BA95A3148E8} - C:\Program Files\GetRight\xx2gr.dll
      O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
      O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
      O4 - HKLM\..\Run: [System Service] systems.exe
      O4 - HKLM\..\Run: [Microsoft WinUpdate] svh0st.exe
      O4 - HKLM\..\Run: [Windows Registry Scan] regscan.exe
      O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
      O4 - HKLM\..\Run: [zBrowser Launcher] C:\Program Files\Logitech\iTouch\iTouch.exe
      O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"
      O4 - HKLM\..\Run: [MBM 5] "C:\Program Files\Motherboard Monitor 5\MBM5.EXE"
      O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
      O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
      O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
      O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
      O4 - HKLM\..\Run: [Jet Detection] "C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe"
      O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
      O4 - HKLM\..\Run: [NvMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
      O4 - HKLM\..\Run: [NetLimiter] C:\Program Files\NetLimiter\NetLimiter.exe /s
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [Windows secure] setver32.exe
      O4 - HKLM\..\Run: [McRegWiz] C:\PROGRA~1\McAfee.com\Agent\McRegWiz.exe /autorun
      O4 - HKLM\..\Run: [VSOCheckTask] "c:\PROGRA~1\mcafee.com\vso\mcmnhdlr.exe" /checktask
      O4 - HKLM\..\Run: [VirusScan Online] "c:\PROGRA~1\mcafee.com\vso\mcvsshld.exe"
      O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
      O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\mcupdate.exe
      O4 - HKLM\..\Run: [_AntiSpyware] C:\Program Files\McAfee\McAfee AntiSpyware\MssCli.exe
      O4 - HKLM\..\RunServices: [System Service] systems.exe
      O4 - HKLM\..\RunServices: [Microsoft WinUpdate] svh0st.exe
      O4 - HKLM\..\RunServices: [Windows Registry Scan] regscan.exe
      O4 - HKLM\..\RunServices: [Windows secure] setver32.exe
      O4 - HKLM\..\RunOnce: [System Service] systems.exe
      O4 - HKLM\..\RunOnce: [Windows secure] setver32.exe
      O4 - HKCU\..\Run: [System Service] systems.exe
      O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe" /WinStart
      O4 - HKCU\..\Run: [Windows secure] setver32.exe
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - HKCU\..\RunOnce: [System Service] systems.exe
      O4 - HKCU\..\RunOnce: [Windows secure] setver32.exe
      O4 - Global Startup: GetRight - Tray Icon.lnk = C:\Program Files\GetRight\getright.exe
      O8 - Extra context menu item: Download with GetRight - C:\Program Files\GetRight\GRdownload.htm
      O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
      O8 - Extra context menu item: Open with GetRight Browser - C:\Program Files\GetRight\GRbrowse.htm
      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
      O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1093982194983
      O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cab
      O16 - DPF: {F04A8AE2-A59D-11D2-8792-00C04F8EF29D} (Hotmail Attachments Control) - http://by2fd.bay2.hotmail.msn.com/activex/HMAtchmt.ocx

      Äänestä

    • keijo kirjoitti:

      Logfile of HijackThis v1.98.2
      Scan saved at 18:13:12, on 7.10.2004
      Platform: Windows XP SP1 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\System32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\ewido\security suite\ewidoguard.exe
      C:\Program Files\McAfee\McAfee AntiSpyware\Msssrv.exe
      c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
      C:\WINDOWS\system32\svchost.exe
      c:\PROGRA~1\mcafee.com\vso\mcshield.exe
      C:\Program Files\Logitech\iTouch\iTouch.exe
      C:\Program Files\Messenger Plus! 3\MsgPlus.exe
      C:\Program Files\Motherboard Monitor 5\MBM5.EXE
      C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
      C:\WINDOWS\System32\CTHELPER.EXE
      C:\Program Files\Logitech\MouseWare\system\em_exec.exe
      C:\PROGRA~1\McAfee.com\Agent\McRegWiz.exe
      C:\PROGRA~1\mcafee.com\vso\mcvsshld.exe
      C:\PROGRA~1\mcafee.com\agent\mcagent.exe
      C:\Program Files\McAfee\McAfee AntiSpyware\MssCli.exe
      c:\progra~1\mcafee.com\vso\mcvsescn.exe
      C:\Program Files\MSN Messenger\msnmsgr.exe
      C:\Program Files\GetRight\getright.exe
      C:\Program Files\GetRight\getright.exe
      c:\progra~1\mcafee.com\vso\mcvsftsn.exe
      C:\Program Files\Messenger\msmsgs.exe
      C:\WINDOWS\System32\taskmgr.exe
      C:\Documents and Settings\Niko Kirves\Työpöytä\HijackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.suomi24.fi/
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
      O2 - BHO: bho2gr Class - {31FF080D-12A3-439A-A2EF-4BA95A3148E8} - C:\Program Files\GetRight\xx2gr.dll
      O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
      O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
      O4 - HKLM\..\Run: [System Service] systems.exe
      O4 - HKLM\..\Run: [Microsoft WinUpdate] svh0st.exe
      O4 - HKLM\..\Run: [Windows Registry Scan] regscan.exe
      O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
      O4 - HKLM\..\Run: [zBrowser Launcher] C:\Program Files\Logitech\iTouch\iTouch.exe
      O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"
      O4 - HKLM\..\Run: [MBM 5] "C:\Program Files\Motherboard Monitor 5\MBM5.EXE"
      O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
      O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
      O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
      O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
      O4 - HKLM\..\Run: [Jet Detection] "C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe"
      O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
      O4 - HKLM\..\Run: [NvMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
      O4 - HKLM\..\Run: [NetLimiter] C:\Program Files\NetLimiter\NetLimiter.exe /s
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [Windows secure] setver32.exe
      O4 - HKLM\..\Run: [McRegWiz] C:\PROGRA~1\McAfee.com\Agent\McRegWiz.exe /autorun
      O4 - HKLM\..\Run: [VSOCheckTask] "c:\PROGRA~1\mcafee.com\vso\mcmnhdlr.exe" /checktask
      O4 - HKLM\..\Run: [VirusScan Online] "c:\PROGRA~1\mcafee.com\vso\mcvsshld.exe"
      O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
      O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\mcupdate.exe
      O4 - HKLM\..\Run: [_AntiSpyware] C:\Program Files\McAfee\McAfee AntiSpyware\MssCli.exe
      O4 - HKLM\..\RunServices: [System Service] systems.exe
      O4 - HKLM\..\RunServices: [Microsoft WinUpdate] svh0st.exe
      O4 - HKLM\..\RunServices: [Windows Registry Scan] regscan.exe
      O4 - HKLM\..\RunServices: [Windows secure] setver32.exe
      O4 - HKLM\..\RunOnce: [System Service] systems.exe
      O4 - HKLM\..\RunOnce: [Windows secure] setver32.exe
      O4 - HKCU\..\Run: [System Service] systems.exe
      O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe" /WinStart
      O4 - HKCU\..\Run: [Windows secure] setver32.exe
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - HKCU\..\RunOnce: [System Service] systems.exe
      O4 - HKCU\..\RunOnce: [Windows secure] setver32.exe
      O4 - Global Startup: GetRight - Tray Icon.lnk = C:\Program Files\GetRight\getright.exe
      O8 - Extra context menu item: Download with GetRight - C:\Program Files\GetRight\GRdownload.htm
      O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
      O8 - Extra context menu item: Open with GetRight Browser - C:\Program Files\GetRight\GRbrowse.htm
      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
      O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1093982194983
      O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cab
      O16 - DPF: {F04A8AE2-A59D-11D2-8792-00C04F8EF29D} (Hotmail Attachments Control) - http://by2fd.bay2.hotmail.msn.com/activex/HMAtchmt.ocx

      joo nyt lähti netti pelittämään, kiitos

      Äänestä

    • keijo kirjoitti:

      joo nyt lähti netti pelittämään, kiitos

      sori, että heittelen tänne väliin,mutta näyttäis vielä jotain jääneen siivouksen jäljiltä.

      esim.
         O4 - HKLM\..\Run: [System Service] systems.exe
         O4 - HKLM\..\Run: [Microsoft WinUpdate] svh0st.exe
         O4 - HKLM\..\Run: [Windows secure] setver32.exe
      O4 - HKLM\..\RunServices: [System Service] systems.exe
         O4 - HKLM\..\RunServices: [Microsoft WinUpdate] svh0st.exe
         O4 - HKLM\..\RunServices: [Windows secure] setver32.exe
         O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus!
      3\MsgPlus.exe" /WinStart
      O4 - HKCU\..\Run: [Windows secure] setver32.exe
         O4 - HKCU\..\RunOnce: [System Service] systems.exe
         O4 - HKCU\..\RunOnce: [Windows secure] setver32.exe

      Noistakin saattoi vielä jäädä joku tupla pois.
      Mitä mieltä asiantuntijat?

      Äänestä

    • keijo kirjoitti:

      Logfile of HijackThis v1.98.2
      Scan saved at 18:13:12, on 7.10.2004
      Platform: Windows XP SP1 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\System32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\ewido\security suite\ewidoguard.exe
      C:\Program Files\McAfee\McAfee AntiSpyware\Msssrv.exe
      c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
      C:\WINDOWS\system32\svchost.exe
      c:\PROGRA~1\mcafee.com\vso\mcshield.exe
      C:\Program Files\Logitech\iTouch\iTouch.exe
      C:\Program Files\Messenger Plus! 3\MsgPlus.exe
      C:\Program Files\Motherboard Monitor 5\MBM5.EXE
      C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
      C:\WINDOWS\System32\CTHELPER.EXE
      C:\Program Files\Logitech\MouseWare\system\em_exec.exe
      C:\PROGRA~1\McAfee.com\Agent\McRegWiz.exe
      C:\PROGRA~1\mcafee.com\vso\mcvsshld.exe
      C:\PROGRA~1\mcafee.com\agent\mcagent.exe
      C:\Program Files\McAfee\McAfee AntiSpyware\MssCli.exe
      c:\progra~1\mcafee.com\vso\mcvsescn.exe
      C:\Program Files\MSN Messenger\msnmsgr.exe
      C:\Program Files\GetRight\getright.exe
      C:\Program Files\GetRight\getright.exe
      c:\progra~1\mcafee.com\vso\mcvsftsn.exe
      C:\Program Files\Messenger\msmsgs.exe
      C:\WINDOWS\System32\taskmgr.exe
      C:\Documents and Settings\Niko Kirves\Työpöytä\HijackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.suomi24.fi/
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
      O2 - BHO: bho2gr Class - {31FF080D-12A3-439A-A2EF-4BA95A3148E8} - C:\Program Files\GetRight\xx2gr.dll
      O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
      O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
      O4 - HKLM\..\Run: [System Service] systems.exe
      O4 - HKLM\..\Run: [Microsoft WinUpdate] svh0st.exe
      O4 - HKLM\..\Run: [Windows Registry Scan] regscan.exe
      O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
      O4 - HKLM\..\Run: [zBrowser Launcher] C:\Program Files\Logitech\iTouch\iTouch.exe
      O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"
      O4 - HKLM\..\Run: [MBM 5] "C:\Program Files\Motherboard Monitor 5\MBM5.EXE"
      O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
      O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
      O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
      O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
      O4 - HKLM\..\Run: [Jet Detection] "C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe"
      O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
      O4 - HKLM\..\Run: [NvMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
      O4 - HKLM\..\Run: [NetLimiter] C:\Program Files\NetLimiter\NetLimiter.exe /s
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [Windows secure] setver32.exe
      O4 - HKLM\..\Run: [McRegWiz] C:\PROGRA~1\McAfee.com\Agent\McRegWiz.exe /autorun
      O4 - HKLM\..\Run: [VSOCheckTask] "c:\PROGRA~1\mcafee.com\vso\mcmnhdlr.exe" /checktask
      O4 - HKLM\..\Run: [VirusScan Online] "c:\PROGRA~1\mcafee.com\vso\mcvsshld.exe"
      O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
      O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\mcupdate.exe
      O4 - HKLM\..\Run: [_AntiSpyware] C:\Program Files\McAfee\McAfee AntiSpyware\MssCli.exe
      O4 - HKLM\..\RunServices: [System Service] systems.exe
      O4 - HKLM\..\RunServices: [Microsoft WinUpdate] svh0st.exe
      O4 - HKLM\..\RunServices: [Windows Registry Scan] regscan.exe
      O4 - HKLM\..\RunServices: [Windows secure] setver32.exe
      O4 - HKLM\..\RunOnce: [System Service] systems.exe
      O4 - HKLM\..\RunOnce: [Windows secure] setver32.exe
      O4 - HKCU\..\Run: [System Service] systems.exe
      O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe" /WinStart
      O4 - HKCU\..\Run: [Windows secure] setver32.exe
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - HKCU\..\RunOnce: [System Service] systems.exe
      O4 - HKCU\..\RunOnce: [Windows secure] setver32.exe
      O4 - Global Startup: GetRight - Tray Icon.lnk = C:\Program Files\GetRight\getright.exe
      O8 - Extra context menu item: Download with GetRight - C:\Program Files\GetRight\GRdownload.htm
      O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
      O8 - Extra context menu item: Open with GetRight Browser - C:\Program Files\GetRight\GRbrowse.htm
      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
      O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1093982194983
      O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cab
      O16 - DPF: {F04A8AE2-A59D-11D2-8792-00C04F8EF29D} (Hotmail Attachments Control) - http://by2fd.bay2.hotmail.msn.com/activex/HMAtchmt.ocx

      Siirrä se HijackThis.exe omaan kansioon tonne
      C:/HjT/HijackThis.exe

      Piilotiedostot näkyviin,ohje tuolla

      http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2002092715262339


      Merkkaa nuo sulje selain ja muut avoimet ikkunat ja paina FIX checked

      O4 - HKLM\..\Run: [System Service] systems.exe
      O4 - HKLM\..\Run: [Microsoft WinUpdate] svh0st.exe
      O4 - HKLM\..\Run: [Windows Registry Scan] regscan.exe
      O4 - HKLM\..\Run: [Windows secure] setver32.exe
      O4 - HKLM\..\RunServices: [System Service] systems.exe
      O4 - HKLM\..\RunServices: [Microsoft WinUpdate] svh0st.exe
      O4 - HKLM\..\RunServices: [Windows Registry Scan] regscan.exe
      O4 - HKLM\..\RunServices: [Windows secure] setver32.exe
      O4 - HKLM\..\RunOnce: [System Service] systems.exe
      O4 - HKLM\..\RunOnce: [Windows secure] setver32.exe
      O4 - HKCU\..\Run: [System Service] systems.exe
      O4 - HKCU\..\Run: [Windows secure] setver32.exe
      O4 - HKCU\..\RunOnce: [System Service] systems.exe
      O4 - HKCU\..\RunOnce: [Windows secure] setver32.exe


      Käynnista sitte vikasietotilassa etsi ja poista jos löytyy

      systems.exe
      svh0st.exe
      regscan.exe
      setver32.exe

      Käynnistä sitte normaalisti ja pistä uus Hijack logi tänne.

      Jos tuo MessengerPlus3 on asennettu sillä sponsoriohjelmalla,niin poista se ja asenna uudestaan ilman sitä.

      Äänestä

    • Juu kirjoitti:

      Siirrä se HijackThis.exe omaan kansioon tonne
      C:/HjT/HijackThis.exe

      Piilotiedostot näkyviin,ohje tuolla

      http://service1.symantec.com/SUPPORT/tsgeninfo.nsf/docid/2002092715262339


      Merkkaa nuo sulje selain ja muut avoimet ikkunat ja paina FIX checked

      O4 - HKLM\..\Run: [System Service] systems.exe
      O4 - HKLM\..\Run: [Microsoft WinUpdate] svh0st.exe
      O4 - HKLM\..\Run: [Windows Registry Scan] regscan.exe
      O4 - HKLM\..\Run: [Windows secure] setver32.exe
      O4 - HKLM\..\RunServices: [System Service] systems.exe
      O4 - HKLM\..\RunServices: [Microsoft WinUpdate] svh0st.exe
      O4 - HKLM\..\RunServices: [Windows Registry Scan] regscan.exe
      O4 - HKLM\..\RunServices: [Windows secure] setver32.exe
      O4 - HKLM\..\RunOnce: [System Service] systems.exe
      O4 - HKLM\..\RunOnce: [Windows secure] setver32.exe
      O4 - HKCU\..\Run: [System Service] systems.exe
      O4 - HKCU\..\Run: [Windows secure] setver32.exe
      O4 - HKCU\..\RunOnce: [System Service] systems.exe
      O4 - HKCU\..\RunOnce: [Windows secure] setver32.exe


      Käynnista sitte vikasietotilassa etsi ja poista jos löytyy

      systems.exe
      svh0st.exe
      regscan.exe
      setver32.exe

      Käynnistä sitte normaalisti ja pistä uus Hijack logi tänne.

      Jos tuo MessengerPlus3 on asennettu sillä sponsoriohjelmalla,niin poista se ja asenna uudestaan ilman sitä.

      Logfile of HijackThis v1.98.2
      Scan saved at 19:18:42, on 7.10.2004
      Platform: Windows XP SP1 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\System32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\Logitech\iTouch\iTouch.exe
      C:\Program Files\Messenger Plus! 3\MsgPlus.exe
      C:\Program Files\Motherboard Monitor 5\MBM5.EXE
      C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
      C:\WINDOWS\System32\CTHELPER.EXE
      C:\Program Files\NetLimiter\NetLimiter.exe
      C:\Program Files\Logitech\MouseWare\system\em_exec.exe
      C:\PROGRA~1\McAfee.com\Agent\McRegWiz.exe
      C:\PROGRA~1\mcafee.com\vso\mcvsshld.exe
      c:\progra~1\mcafee.com\vso\mcvsescn.exe
      C:\PROGRA~1\mcafee.com\agent\mcagent.exe
      C:\Program Files\McAfee\McAfee AntiSpyware\MssCli.exe
      C:\Program Files\GetRight\getright.exe
      C:\Program Files\GetRight\getright.exe
      C:\Program Files\ewido\security suite\ewidoguard.exe
      C:\Program Files\MSN Messenger\msnmsgr.exe
      C:\Program Files\McAfee\McAfee AntiSpyware\Msssrv.exe
      c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
      c:\progra~1\mcafee.com\vso\mcvsftsn.exe
      C:\Program Files\Messenger\msmsgs.exe
      C:\WINDOWS\system32\svchost.exe
      c:\PROGRA~1\mcafee.com\vso\mcshield.exe
      C:\Hjt\HijackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.suomi24.fi/
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
      O2 - BHO: bho2gr Class - {31FF080D-12A3-439A-A2EF-4BA95A3148E8} - C:\Program Files\GetRight\xx2gr.dll
      O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
      O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
      O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
      O4 - HKLM\..\Run: [zBrowser Launcher] C:\Program Files\Logitech\iTouch\iTouch.exe
      O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"
      O4 - HKLM\..\Run: [MBM 5] "C:\Program Files\Motherboard Monitor 5\MBM5.EXE"
      O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
      O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
      O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
      O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
      O4 - HKLM\..\Run: [Jet Detection] "C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe"
      O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
      O4 - HKLM\..\Run: [NvMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
      O4 - HKLM\..\Run: [NetLimiter] C:\Program Files\NetLimiter\NetLimiter.exe /s
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [McRegWiz] C:\PROGRA~1\McAfee.com\Agent\McRegWiz.exe /autorun
      O4 - HKLM\..\Run: [VSOCheckTask] "c:\PROGRA~1\mcafee.com\vso\mcmnhdlr.exe" /checktask
      O4 - HKLM\..\Run: [VirusScan Online] "c:\PROGRA~1\mcafee.com\vso\mcvsshld.exe"
      O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
      O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\mcupdate.exe
      O4 - HKLM\..\Run: [_AntiSpyware] C:\Program Files\McAfee\McAfee AntiSpyware\MssCli.exe
      O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe" /WinStart
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - Global Startup: GetRight - Tray Icon.lnk = C:\Program Files\GetRight\getright.exe
      O8 - Extra context menu item: Download with GetRight - C:\Program Files\GetRight\GRdownload.htm
      O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
      O8 - Extra context menu item: Open with GetRight Browser - C:\Program Files\GetRight\GRbrowse.htm
      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
      O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1093982194983
      O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cab
      O16 - DPF: {F04A8AE2-A59D-11D2-8792-00C04F8EF29D} (Hotmail Attachments Control) - http://by2fd.bay2.hotmail.msn.com/activex/HMAtchmt.ocx

      Äänestä

    • keijo kirjoitti:

      Logfile of HijackThis v1.98.2
      Scan saved at 19:18:42, on 7.10.2004
      Platform: Windows XP SP1 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\System32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\Logitech\iTouch\iTouch.exe
      C:\Program Files\Messenger Plus! 3\MsgPlus.exe
      C:\Program Files\Motherboard Monitor 5\MBM5.EXE
      C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
      C:\WINDOWS\System32\CTHELPER.EXE
      C:\Program Files\NetLimiter\NetLimiter.exe
      C:\Program Files\Logitech\MouseWare\system\em_exec.exe
      C:\PROGRA~1\McAfee.com\Agent\McRegWiz.exe
      C:\PROGRA~1\mcafee.com\vso\mcvsshld.exe
      c:\progra~1\mcafee.com\vso\mcvsescn.exe
      C:\PROGRA~1\mcafee.com\agent\mcagent.exe
      C:\Program Files\McAfee\McAfee AntiSpyware\MssCli.exe
      C:\Program Files\GetRight\getright.exe
      C:\Program Files\GetRight\getright.exe
      C:\Program Files\ewido\security suite\ewidoguard.exe
      C:\Program Files\MSN Messenger\msnmsgr.exe
      C:\Program Files\McAfee\McAfee AntiSpyware\Msssrv.exe
      c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
      c:\progra~1\mcafee.com\vso\mcvsftsn.exe
      C:\Program Files\Messenger\msmsgs.exe
      C:\WINDOWS\system32\svchost.exe
      c:\PROGRA~1\mcafee.com\vso\mcshield.exe
      C:\Hjt\HijackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.suomi24.fi/
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
      O2 - BHO: bho2gr Class - {31FF080D-12A3-439A-A2EF-4BA95A3148E8} - C:\Program Files\GetRight\xx2gr.dll
      O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
      O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
      O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
      O4 - HKLM\..\Run: [zBrowser Launcher] C:\Program Files\Logitech\iTouch\iTouch.exe
      O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"
      O4 - HKLM\..\Run: [MBM 5] "C:\Program Files\Motherboard Monitor 5\MBM5.EXE"
      O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
      O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
      O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
      O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
      O4 - HKLM\..\Run: [Jet Detection] "C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe"
      O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
      O4 - HKLM\..\Run: [NvMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
      O4 - HKLM\..\Run: [NetLimiter] C:\Program Files\NetLimiter\NetLimiter.exe /s
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [McRegWiz] C:\PROGRA~1\McAfee.com\Agent\McRegWiz.exe /autorun
      O4 - HKLM\..\Run: [VSOCheckTask] "c:\PROGRA~1\mcafee.com\vso\mcmnhdlr.exe" /checktask
      O4 - HKLM\..\Run: [VirusScan Online] "c:\PROGRA~1\mcafee.com\vso\mcvsshld.exe"
      O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
      O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\mcupdate.exe
      O4 - HKLM\..\Run: [_AntiSpyware] C:\Program Files\McAfee\McAfee AntiSpyware\MssCli.exe
      O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe" /WinStart
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - Global Startup: GetRight - Tray Icon.lnk = C:\Program Files\GetRight\getright.exe
      O8 - Extra context menu item: Download with GetRight - C:\Program Files\GetRight\GRdownload.htm
      O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
      O8 - Extra context menu item: Open with GetRight Browser - C:\Program Files\GetRight\GRbrowse.htm
      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
      O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1093982194983
      O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cab
      O16 - DPF: {F04A8AE2-A59D-11D2-8792-00C04F8EF29D} (Hotmail Attachments Control) - http://by2fd.bay2.hotmail.msn.com/activex/HMAtchmt.ocx

      Nyt on ok,jos tuo MessengerPlus3 on asennettu ilman sitä sponsoriohjelmaa.

      Äänestä

    Odottaa vastausta

    Näihin keskusteluihin ei ole vielä vastattu. Ole ensimmäinen.

    Luetuimmat keskustelut

    Kommentoi aloitusta

    keijo kirjoitti:

    kun pidän konetta vähän aikaa päällä alkaa netti tukkeutumaan jostai syystä eikä suostu enää näyttämään sivuja kunnolla vaan explorer herjaa "Sivua ei voitu näyttää" ja opera herjaa "etäpalvelin katkaisi yhteyden". mutta kun käynnistän koneen uusiksi toimii taas netti vähän aikaa kunnolla. windows updatesta olen kaikki päivittänyt ja joskus aikoinaan olen formatoinut kovon saman ongelman takia, mutta sekään ei auttanu. siis mikä neuvoksi?

    Anonyymi
    5000

    Ilmoita asiaton sisältö

    • Sisältää materiaalia, joka on loukkaavaa, herjaavaa, rasistista, uhkailevaa tai ahdistelevaa.

    • Materiaali sisältää nimiä, yhteystietoja tai muita henkilökohtaisia tietoja. Julkisuuden henkilöistä, julkisissa viroissa toimivista ihmisistä sekä yritysten vastuuhenkilöistä saa keskustella työhön liittyen. Myös yksityiselämään liittyvistä asioista voi keskustella siltä osin, kuin niistä on julkisesti kerrottu.

    • Sisältää lapsille haitallista tai heiltä kiellettyä materiaalia. Seksuaalinen sisältö on sallittua aiheeseen tarkoitetuilla palstoilla, joiden ikäraja on 18 vuotta.

    • Lainvastaista sisältöä voi olla mm. yksityiselämää loukkaavan tiedon levitys, kiihottaminen kansanryhmää vastaan, laiton uhkaaminen, alaikäisiin liittyvä seksuaalinen sisältö/grooming, petokset, identiteettivarkaudet, kunnianloukkaukset ja tekijänoikeusrikkomukset.

    • Sisältö ei liity palstan tai keskusteluketjun aiheeseen.

    • Viesti ei ole suomea tai ruotsia (pl. International Forums), se sisältää mainontaa, se sisältää tekijänoikeuksin suojattua materiaalia, se on massapostitus tai jokin muu syy.

    Jaa keskustelu