Mulla on tällainen logi. Joku omituinen juttu tuolla on, osaako joku sanoa tarkemmin?
Logfile of HijackThis v1.97.7
Scan saved at 0:59:59, on 9.10.2004
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\htpatch.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\ltmoh\Ltmoh.exe
C:\Program Files\Launch Manager\LaunchAp.exe
C:\Program Files\Launch Manager\PowerKey.exe
C:\Program Files\Launch Manager\HotkeyApp.exe
C:\Program Files\Launch Manager\CtrlVol.exe
C:\Program Files\Launch Manager\Wbutton.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
C:\Program Files\Tweak-XP\blads.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\NMain.exe
C:\PROGRA~1\NORTON~1\navw32.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Messenger\msmsgs.exe
D:\98temp\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yle.fi/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://global.acer.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,Shellnext = http://global.acer.com/
O1 - Hosts: „†„„†„ÿÿÿ„†„„†„„†„„„„„„„„„„„„„„„„„„„„„„„„„„„„„„„BB„„„„„„„„„„„„„„„„„„„„„„„„„„„„„„„„„„ssss{{„„„„„„„„„„JJ„„„„„„ssZZ„„„„„„„„„„„„„„„„kk„„„„„„„„„„„„11„„„„„„„„„„„„11„„„„„„„„„„„„11„„„„„„„„„„„„BB„„„„„„„„„„„„„„kk„„„„„„kk„„„„„„JJ!!„„„„„„„„„„„„„„„„„„1111kk„„„„„„„„„„))„„„„„„„„„„„„„„„„„„„„„„„„))„„„„„„„„„„„„„„„„„„„„„„BB„„„„„„JJBBBBBBÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ)Bss¥µ9µï”œï¥ÿÿ½µZÎkiÿÿÿ)(ÿÿµÿ”–ÿ¥¦ÿ! ÿ½!÷ÿÞJIïÿÿÿkiÿ)(ÿÎÏÿœžÿÿÿ{yÿÿÿÿÿÿÿµ¶ÿ! ÷ççÿÿÿÿ„†ÿZYÿÿÿÿsqÿ10ÿ÷÷ÿççÿÿµÿ÷÷ÿÿÿÿÿÿÿµ¶ÿççÿÿÿÿ”–ÿcaÿÿÿÿsqÿ10ÿ÷÷ÿççÿÿsµœžÿ÷÷ÿÿÿÿÿÿÿ”–ÿŒŽÿÿRQÿÿÿÿsqÿBAÿïïÿÖ×ÿÿc÷”–ÿ÷÷ÿÿÿÿœžÿ! ÿÿZYÿÿÿÿsqÿÿ”–ÿRQÿÿcµÿŒŽÿÿÿÿÿÿÿ÷÷ÿ÷÷ÿÿÿÿ÷÷ÿ÷÷ÿ÷÷ÿïïÿcaÿkÿ÷÷ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ{yÿkµ”–ÿ½¾ÿ½¾ÿ½¾ÿ½¾ÿ½¾ÿ½¾ÿ½¾ÿ”–ÿÿc÷ÿÿÿÿÿÿÿ÷½ï¦¥ï¦¥ÎŽŒï¦¥ÎŽŒï¦¥ï¦¥ï¦¥ÎŽŒï¦¥ÎŽŒï¦¥ï¦¥ÎŽŒï¦¥ÎŽŒRURRURRURcac殮ΎŒï¦¥ÎŽŒRURœžœª®ÆÃÆRUR殮ΎŒï¦¥RUR{y{ªÆÇÆÎËή½¾½RUR殮殮RURkecRABRABœšœÎÏή„†„cac殮殮sacRQRRAB„qsœusZ]Zµ¶µÆÇƵ¶µRURk
Logfile of HijackThis v1.97.7
Scan saved at 0:59:59, on 9.10.2004
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\htpatch.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\ltmoh\Ltmoh.exe
C:\Program Files\Launch Manager\LaunchAp.exe
C:\Program Files\Launch Manager\PowerKey.exe
C:\Program Files\Launch Manager\HotkeyApp.exe
C:\Program Files\Launch Manager\CtrlVol.exe
C:\Program Files\Launch Manager\Wbutton.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
C:\Program Files\Tweak-XP\blads.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\NMain.exe
C:\PROGRA~1\NORTON~1\navw32.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Messenger\msmsgs.exe
D:\98temp\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yle.fi/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://global.acer.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,Shellnext = http://global.acer.com/
O1 - Hosts: „†„„†„ÿÿÿ„†„„†„„†„„„„„„„„„„„„„„„„„„„„„„„„„„„„„„„BB„„„„„„„„„„„„„„„„„„„„„„„„„„„„„„„„„„ssss{{„„„„„„„„„„JJ„„„„„„ssZZ„„„„„„„„„„„„„„„„kk„„„„„„„„„„„„11„„„„„„„„„„„„11„„„„„„„„„„„„11„„„„„„„„„„„„BB„„„„„„„„„„„„„„kk„„„„„„kk„„„„„„JJ!!„„„„„„„„„„„„„„„„„„1111kk„„„„„„„„„„))„„„„„„„„„„„„„„„„„„„„„„„„))„„„„„„„„„„„„„„„„„„„„„„BB„„„„„„JJBBBBBBÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ)Bss¥µ9µï”œï¥ÿÿ½µZÎkiÿÿÿ)(ÿÿµÿ”–ÿ¥¦ÿ! ÿ½!÷ÿÞJIïÿÿÿkiÿ)(ÿÎÏÿœžÿÿÿ{yÿÿÿÿÿÿÿµ¶ÿ! ÷ççÿÿÿÿ„†ÿZYÿÿÿÿsqÿ10ÿ÷÷ÿççÿÿµÿ÷÷ÿÿÿÿÿÿÿµ¶ÿççÿÿÿÿ”–ÿcaÿÿÿÿsqÿ10ÿ÷÷ÿççÿÿsµœžÿ÷÷ÿÿÿÿÿÿÿ”–ÿŒŽÿÿRQÿÿÿÿsqÿBAÿïïÿÖ×ÿÿc÷”–ÿ÷÷ÿÿÿÿœžÿ! ÿÿZYÿÿÿÿsqÿÿ”–ÿRQÿÿcµÿŒŽÿÿÿÿÿÿÿ÷÷ÿ÷÷ÿÿÿÿ÷÷ÿ÷÷ÿ÷÷ÿïïÿcaÿkÿ÷÷ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ{yÿkµ”–ÿ½¾ÿ½¾ÿ½¾ÿ½¾ÿ½¾ÿ½¾ÿ½¾ÿ”–ÿÿc÷ÿÿÿÿÿÿÿ÷½ï¦¥ï¦¥ÎŽŒï¦¥ÎŽŒï¦¥ï¦¥ï¦¥ÎŽŒï¦¥ÎŽŒï¦¥ï¦¥ÎŽŒï¦¥ÎŽŒRURRURRURcac殮ΎŒï¦¥ÎŽŒRURœžœª®ÆÃÆRUR殮ΎŒï¦¥RUR{y{ªÆÇÆÎËή½¾½RUR殮殮RURkecRABRABœšœÎÏή„†„cac殮殮sacRQRRAB„qsœusZ]Zµ¶µÆÇƵ¶µRURk
Vastaukset 3
Vanhimmat
Putsaa kone tolla ohjelmalla
http://koti.mbnet.fi/pattaya1/cwshredder.htm
Pistä sen jälkeen uus Hijack logi tolla uusimmalla versiolla
http://koti.mbnet.fi/pattaya1/HijackThis.exe
Tehty, CwShredder ei löytänyt mitään. Ihmettelen vaan sitämikä tuo O1 oikien on?
Logfile of HijackThis v1.98.2
Scan saved at 10:07:56, on 9.10.2004
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\htpatch.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\ltmoh\Ltmoh.exe
C:\Program Files\Launch Manager\LaunchAp.exe
C:\Program Files\Launch Manager\PowerKey.exe
C:\Program Files\Launch Manager\HotkeyApp.exe
C:\Program Files\Launch Manager\CtrlVol.exe
C:\Program Files\Launch Manager\Wbutton.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
C:\WINDOWS\System32\msiexec.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Messenger\msmsgs.exe
D:\98temp\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yle.fi/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://global.acer.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://global.acer.com/
O1 - Hosts: „†„„†„ÿÿÿ„†„„†„„†„„„„„„„„„„„„„„„„„„„„„„„„„„„„„„„BB„„„„„„„„„„„„„„„„„„„„„„„„„„„„„„„„„„ssss{{„„„„„„„„„„JJ„„„„„„ssZZ„„„„„„„„„„„„„„„„kk„„„„„„„„„„„„11„„„„„„„„„„„„11„„„„„„„„„„„„11„„„„„„„„„„„„BB„„„„„„„„„„„„„„kk„„„„„„kk„„„„„„JJ!!„„„„„„„„„„„„„„„„„„1111kk„„„„„„„„„„))„„„„„„„„„„„„„„„„„„„„„„„„))„„„„„„„„„„„„„„„„„„„„„„BB„„„„„„JJBBBBBBÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ)Bss¥µ9µï”œï¥ÿÿ½µZÎkiÿÿÿ)(ÿÿµÿ”–ÿ¥¦ÿ! ÿ½!÷ÿÞJIïÿÿÿkiÿ)(ÿÎÏÿœžÿÿÿ{yÿÿÿÿÿÿÿµ¶ÿ! ÷ççÿÿÿÿ„†ÿZYÿÿÿÿsqÿ10ÿ÷÷ÿççÿÿµÿ÷÷ÿÿÿÿÿÿÿµ¶ÿççÿÿÿÿ”–ÿcaÿÿÿÿsqÿ10ÿ÷÷ÿççÿÿsµœžÿ÷÷ÿÿÿÿÿÿÿ”–ÿŒŽÿÿRQÿÿÿÿsqÿBAÿïïÿÖ×ÿÿc÷”–ÿ÷÷ÿÿÿÿœžÿ! ÿÿZYÿÿÿÿsqÿÿ”–ÿRQÿÿcµÿŒŽÿÿÿÿÿÿÿ÷÷ÿ÷÷ÿÿÿÿ÷÷ÿ÷÷ÿ÷÷ÿïïÿcaÿkÿ÷÷ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ{yÿkµ”–ÿ½¾ÿ½¾ÿ½¾ÿ½¾ÿ½¾ÿ½¾ÿ½¾ÿ”–ÿÿc÷ÿÿÿÿÿÿÿ÷½ï¦¥ï¦¥ÎŽŒï¦¥ÎŽŒï¦¥ï¦¥ï¦¥ÎŽŒï¦¥ÎŽŒï¦¥ï¦¥ÎŽŒï¦¥ÎŽŒRURRURRURcac殮ΎŒï¦¥ÎŽŒRURœžœª®ÆÃÆRUR殮ΎŒï¦¥RUR{y{ªÆÇÆÎËή½¾½RUR殮殮RURkecRABRABœšœÎÏή„†„cac殮殮sacRQRRAB„qsœusZ]Zµ¶µÆÇƵ¶µRURk
Siirrä se HijackThis.exe omaan kansioon tonne
C:/HjT/HijackThis.exe
Sitte scannaat ja pistä logi tänne.