Tässä toisesta koneestani, ei dialereita..toistaiseksi :)
Tännekään ei menty jotilla: The file you uploaded is 0 bytes. It is very likely a firewall or a piece of malware is prohibiting you from uploading this file?
Log File: C:\KASPER~1\mwav.log
File C:\WINNT\_MSRSTRT.EXE
Thu Feb 17 16:33:09 2005 => Total Number of Files Scanned: 53023
Thu Feb 17 16:33:09 2005 => Total Number of Virus(es) Found: 1
Thu Feb 17 16:33:09 2005 => Total Number of Disinfected Files: 0
Thu Feb 17 16:33:09 2005 => Total Number of Files Renamed: 0
Thu Feb 17 16:33:09 2005 => Total Number of Deleted Files: 0
Thu Feb 17 16:33:09 2005 => Total Number of Errors: 5
Thu Feb 17 16:33:09 2005 => Time Elapsed: 00:53:12
Thu Feb 17 16:33:09 2005 => Virus Database Date: 2005/02/17
Thu Feb 17 16:33:09 2005 => Virus Database Count: 118604
Thu Feb 17 16:33:09 2005 => Scan Completed.
Trend Micro HouseCall, ei mitään.
Logfile of HijackThis v1.99.1
Scan saved at 18:19:13, on 17.2.2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
E:\WINDOWS\System32\smss.exe
E:\WINDOWS\system32\winlogon.exe
E:\WINDOWS\system32\services.exe
E:\WINDOWS\system32\lsass.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\System32\svchost.exe
E:\Program Files\AVPersonal\AVWUPSRV.EXE
E:\WINDOWS\System32\ZoneLabs\vsmon.exe
E:\WINDOWS\Explorer.EXE
E:\Program Files\Java\jre1.5.0\bin\jusched.exe
D:\Program Files\Zone Alarm\ZoneAlarm\zlclient.exe
E:\Program Files\AVPersonal\AVGNT.EXE
E:\WINDOWS\system32\ctfmon.exe
E:\WINDOWS\system32\wuauclt.exe
E:\Program Files\AVPersonal\AVGUARD.EXE
E:\Program Files\Mozilla Firefox\firefox.exe
E:\WINDOWS\Explorer.EXE
C:\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.yahoo.com/search/ie.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://search.yahoo.com/search?p=%s
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] E:\Program Files\Java\jre1.5.0\bin\jusched.exe
O4 - HKLM\..\Run: [Zone Labs Client] "D:\Program Files\Zone Alarm\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [AVGCtrl] E:\Program Files\AVPersonal\AVGNT.EXE /min
O4 - HKCU\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\ctfmon.exe
O8 - Extra context menu item: Download with Go!Zilla - file://D:\Program Files\Go!Zilla\download-with-gozilla.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra button: Pardon - {302172A1-A2B4-4402-B1D0-F5D54C3E83C6} - D:\Program Files\Pardon 2\Pardon.exe (file missing)
O9 - Extra 'Tools' menuitem: Pardon - {302172A1-A2B4-4402-B1D0-F5D54C3E83C6} - D:\Program Files\Pardon 2\Pardon.exe (file missing)
O12 - Plugin for .spop: E:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab28177.cab
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/images/nocache/funwebproducts/ei/SmileyCentralInitialSetup1.0.0.8.cab
O16 - DPF: {2359626E-7524-4F87-B04E-22CD38A0C88C} (ICSScannerLight Class) - http://download.zonelabs.com/bin/free/cm/ICSCM.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab28177.cab
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52/20021205/qtinstall.info.apple.com/borris/us/win/QuickTimeInstaller.exe
O16 - DPF: {5BDBD95C-1E7F-4FB1-8497-20AF879F8B68} (FileSharingCtrl Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/FileSharing/fi/filesharingctrl.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1094068342828
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab28177.cab
O16 - DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} (YAddBook Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/suite/autocomplete.cab
O16 - DPF: {F04A8AE2-A59D-11D2-8792-00C04F8EF29D} (Hotmail Attachments Control) - http://lw14fd.law14.hotmail.msn.com/activex/HMAtchmt.ocx
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab28177.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{728C383A-9C10-4A75-BC29-C2B53B5718A5}: Domain = kotiportti.fi
O23 - Service: AntiVir Service (AntiVirService) - H BEDV Datentechnik GmbH - E:\Program Files\AVPersonal\AVGUARD.EXE
O23 - Service: AntiVir Update (AVWUpSrv) - H BEDV Datentechnik GmbH, Germany - E:\Program Files\AVPersonal\AVWUPSRV.EXE
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs LLC - E:\WINDOWS\System32\ZoneLabs\vsmon.exe
Tännekään ei menty jotilla: The file you uploaded is 0 bytes. It is very likely a firewall or a piece of malware is prohibiting you from uploading this file?
Log File: C:\KASPER~1\mwav.log
File C:\WINNT\_MSRSTRT.EXE
Thu Feb 17 16:33:09 2005 => Total Number of Files Scanned: 53023
Thu Feb 17 16:33:09 2005 => Total Number of Virus(es) Found: 1
Thu Feb 17 16:33:09 2005 => Total Number of Disinfected Files: 0
Thu Feb 17 16:33:09 2005 => Total Number of Files Renamed: 0
Thu Feb 17 16:33:09 2005 => Total Number of Deleted Files: 0
Thu Feb 17 16:33:09 2005 => Total Number of Errors: 5
Thu Feb 17 16:33:09 2005 => Time Elapsed: 00:53:12
Thu Feb 17 16:33:09 2005 => Virus Database Date: 2005/02/17
Thu Feb 17 16:33:09 2005 => Virus Database Count: 118604
Thu Feb 17 16:33:09 2005 => Scan Completed.
Trend Micro HouseCall, ei mitään.
Logfile of HijackThis v1.99.1
Scan saved at 18:19:13, on 17.2.2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
E:\WINDOWS\System32\smss.exe
E:\WINDOWS\system32\winlogon.exe
E:\WINDOWS\system32\services.exe
E:\WINDOWS\system32\lsass.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\System32\svchost.exe
E:\Program Files\AVPersonal\AVWUPSRV.EXE
E:\WINDOWS\System32\ZoneLabs\vsmon.exe
E:\WINDOWS\Explorer.EXE
E:\Program Files\Java\jre1.5.0\bin\jusched.exe
D:\Program Files\Zone Alarm\ZoneAlarm\zlclient.exe
E:\Program Files\AVPersonal\AVGNT.EXE
E:\WINDOWS\system32\ctfmon.exe
E:\WINDOWS\system32\wuauclt.exe
E:\Program Files\AVPersonal\AVGUARD.EXE
E:\Program Files\Mozilla Firefox\firefox.exe
E:\WINDOWS\Explorer.EXE
C:\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.yahoo.com/search/ie.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://search.yahoo.com/search?p=%s
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] E:\Program Files\Java\jre1.5.0\bin\jusched.exe
O4 - HKLM\..\Run: [Zone Labs Client] "D:\Program Files\Zone Alarm\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [AVGCtrl] E:\Program Files\AVPersonal\AVGNT.EXE /min
O4 - HKCU\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\ctfmon.exe
O8 - Extra context menu item: Download with Go!Zilla - file://D:\Program Files\Go!Zilla\download-with-gozilla.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra button: Pardon - {302172A1-A2B4-4402-B1D0-F5D54C3E83C6} - D:\Program Files\Pardon 2\Pardon.exe (file missing)
O9 - Extra 'Tools' menuitem: Pardon - {302172A1-A2B4-4402-B1D0-F5D54C3E83C6} - D:\Program Files\Pardon 2\Pardon.exe (file missing)
O12 - Plugin for .spop: E:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab28177.cab
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/images/nocache/funwebproducts/ei/SmileyCentralInitialSetup1.0.0.8.cab
O16 - DPF: {2359626E-7524-4F87-B04E-22CD38A0C88C} (ICSScannerLight Class) - http://download.zonelabs.com/bin/free/cm/ICSCM.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab28177.cab
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52/20021205/qtinstall.info.apple.com/borris/us/win/QuickTimeInstaller.exe
O16 - DPF: {5BDBD95C-1E7F-4FB1-8497-20AF879F8B68} (FileSharingCtrl Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/FileSharing/fi/filesharingctrl.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1094068342828
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab28177.cab
O16 - DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} (YAddBook Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/suite/autocomplete.cab
O16 - DPF: {F04A8AE2-A59D-11D2-8792-00C04F8EF29D} (Hotmail Attachments Control) - http://lw14fd.law14.hotmail.msn.com/activex/HMAtchmt.ocx
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab28177.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{728C383A-9C10-4A75-BC29-C2B53B5718A5}: Domain = kotiportti.fi
O23 - Service: AntiVir Service (AntiVirService) - H BEDV Datentechnik GmbH - E:\Program Files\AVPersonal\AVGUARD.EXE
O23 - Service: AntiVir Update (AVWUpSrv) - H BEDV Datentechnik GmbH, Germany - E:\Program Files\AVPersonal\AVWUPSRV.EXE
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs LLC - E:\WINDOWS\System32\ZoneLabs\vsmon.exe
Vastaukset 8
Vanhimmat
Merkkaa ja FIX:saa
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/images/nocache/funwebproducts/ei/SmileyCentralInitialSetup1.0.0.8.cab
> The file you uploaded is 0 bytes. It is very likely a firewall or a piece of malware is prohibiting you from uploading this file? <
Mitä tiedostoo scannaat ku tulee tuo ilmoitus?
ja kun avasin selaimen, tuli herja Firefox-valitse käyttäjätili, oletuksena default. En saanut sitä pois ennen kuin uudelleenkäynnistyksellä (kyseli avaamaan uuden tilin tai nimeämään uudelleen entisen?!)
Yritin aikaisemmin jottiin kokeilemaan niin kone jumitti, kun yritin sitä kirjanmerkkeihin, sekin jämähti paikalleen.
Nyt uudelleenkännistyksen jälkeen jotti toimii niinkuin pitääkin, elikkä saan auki sillä mitä vain. Mitä tämä temppuilee?
Mikä tuo _MSRSTRT.EXE oli?
> Mikä tuo _MSRSTRT.EXE oli <
En tiiä scannaa se siellä jotilla.
INFECTED/MALWARE (Note: only non-destructive malware has been found. Considering the non-destructive nature of samples like these - although they can be a pain in the ass -, results will not be stored in the database.)
Kyllä se siellä tuntuukin..:D
Oliko tuo mikä sen aukaisun esti? Mitä teen nyt?
No kato nyt vielä varalta,että mikä se on ennenku poistat.
mistään tietoa tuosta, vaikka kirjanmerkeissä on tallella miljoonia paikkoja. Tai sit en vain tajua
Poistanko vain kylmästi sen?
No pistä se roskiin,mutta älä tyhjennä.
Anna sen olla siellä jonku aikaa ja jos kaikki pelaa normaalisti,niin sitte vasta tyhjennä.
kauempaa..:D
Roskis on tyhjä, kone puhdas ötököistä ja toimii. Kiitos avusta!