Rekisteröidy

Ilmoitukset

Ladataan…

    Näytä kaikki

    tänne neuvoivat laittaa login

    Logfile of HijackThis v1.99.1
    Scan saved at 10:10:37, on 03/31/2005
    Platform: Windows XP SP1 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\AVPersonal\AVGUARD.EXE
    C:\Program Files\AVPersonal\AVWUPSRV.EXE
    C:\WINDOWS\system32\ZoneLabs\vsmon.exe
    C:\WINDOWS\System32\RunDll32.exe
    C:\WINDOWS\System32\sistray.EXE
    C:\WINDOWS\System32\keyhook.exe
    C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
    C:\Program Files\AVPersonal\AVGNT.EXE
    C:\Program Files\MSN Apps\Updater\01.02.3000.1001\fi\msnappau.exe
    C:\Program Files\Winamp\winampa.exe
    C:\program files\powerstrip\pstrip.exe
    C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
    C:\WINDOWS\System32\cmd32.exe
    C:\WINDOWS\isrvs\desktop.exe
    C:\Program Files\Media Access\MediaAccK.exe
    C:\Program Files\Media Access\MediaAccess.exe
    C:\WINDOWS\System32\Services\{DB39A8A3-80BC-44B8-8D10-BFD146E83AEB}\SVCHOST.EXE
    C:\WINDOWS\System32\ctfmon.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\WINDOWS\System32\izxczxcr.exe
    C:\WINDOWS\System32\intrcxzcxzcon.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Documents and Settings\1\Desktop\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fi/0SEFIFI/SAOS01
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.suomi24.fi/
    O2 - BHO: CeresObj Class - {00000049-8F91-4D9C-9573-F016E7626484} - C:\WINDOWS\ceres.dll
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
    O2 - BHO: IE Update Class - {5B4AB8E2-6DC5-477A-B637-BF3C1A2E5993} - C:\WINDOWS\isrvs\sysupd.dll
    O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.02.3000.1002\en-xu\stmain.dll
    O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fi\msntb.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
    O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fi\msntb.dll
    O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
    O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
    O4 - HKLM\..\Run: [SiS Tray] C:\WINDOWS\System32\sistray.EXE
    O4 - HKLM\..\Run: [SiS Windows KeyHook] C:\WINDOWS\System32\keyhook.exe
    O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
    O4 - HKLM\..\Run: [AVGCtrl] C:\Program Files\AVPersonal\AVGNT.EXE /min
    O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.02.3000.1001\fi\msnappau.exe"
    O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
    O4 - HKLM\..\Run: [PowerStrip] c:\program files\powerstrip\pstrip.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
    O4 - HKLM\..\Run: [ControlPanel] C:\WINDOWS\System32\cmd32.exe internat.dll,LoadKeyboardProfile
    O4 - HKLM\..\Run: [Desktop Search] C:\WINDOWS\isrvs\desktop.exe
    O4 - HKLM\..\Run: [ffis] C:\WINDOWS\isrvs\ffisearch.exe
    O4 - HKLM\..\Run: [Media Access] C:\Program Files\Media Access\MediaAccK.exe
    O4 - HKLM\..\Run: [Security iGuard] C:\Program Files\Security iGuard\Security iGuard.exe
    O4 - HKLM\..\Run: [Service Host] C:\WINDOWS\System32\Services\{DB39A8A3-80BC-44B8-8D10-BFD146E83AEB}\SVCHOST.EXE
    O4 - HKLM\..\Run: [gah95on6] C:\WINDOWS\System32\gah95on6.exe
    O4 - HKLM\..\Run: [SpySpotter] C:\PROGRA~1\SPYSPO~1\SpySpotter.exe -onreboot
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
    O4 - HKCU\..\Run: [Steam] E:\steam\Steam.exe -silent
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: Microsoft AntiSpyware helper - {9111E61B-4403-4B66-BC1B-AA69A834FEE1} - (no file) (HKCU)
    O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {9111E61B-4403-4B66-BC1B-AA69A834FEE1} - (no file) (HKCU)
    O9 - Extra button: Microsoft AntiSpyware helper - {A207DDB9-10D0-4440-84FA-6C94FA52CADA} - (no file) (HKCU)
    O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {A207DDB9-10D0-4440-84FA-6C94FA52CADA} - (no file) (HKCU)
    O9 - Extra button: Microsoft AntiSpyware helper - {C70C123F-AE95-4A0E-B009-62DE72A14EFE} - (no file) (HKCU)
    O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {C70C123F-AE95-4A0E-B009-62DE72A14EFE} - (no file) (HKCU)
    O9 - Extra button: Microsoft AntiSpyware helper - {F5A788F0-FDB1-471D-83C7-F969E8C9786B} - (no file) (HKCU)
    O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {F5A788F0-FDB1-471D-83C7-F969E8C9786B} - (no file) (HKCU)
    O15 - Trusted Zone: *.blazefind.com
    O15 - Trusted Zone: *.clickspring.net
    O15 - Trusted Zone: *.flingstone.com
    O15 - Trusted Zone: *.mt-download.com
    O15 - Trusted Zone: *.my-internet.info
    O15 - Trusted Zone: *.searchbarcash.com
    O15 - Trusted Zone: *.searchmiracle.com
    O15 - Trusted Zone: *.skoobidoo.com
    O15 - Trusted Zone: *.slotch.com
    O15 - Trusted Zone: *.slotchbar.com
    O15 - Trusted Zone: *.windupdates.com
    O15 - Trusted Zone: *.xxxtoolbar.com
    O15 - Trusted Zone: *.ysbweb.com
    O15 - Trusted Zone: *.blazefind.com (HKLM)
    O15 - Trusted Zone: *.clickspring.net (HKLM)
    O15 - Trusted Zone: *.flingstone.com (HKLM)
    O15 - Trusted Zone: *.mt-download.com (HKLM)
    O15 - Trusted Zone: *.my-internet.info (HKLM)
    O15 - Trusted Zone: *.searchbarcash.com (HKLM)
    O15 - Trusted Zone: *.searchmiracle.com (HKLM)
    O15 - Trusted Zone: *.skoobidoo.com (HKLM)
    O15 - Trusted Zone: *.slotch.com (HKLM)
    O15 - Trusted Zone: *.slotchbar.com (HKLM)
    O15 - Trusted Zone: *.windupdates.com (HKLM)
    O15 - Trusted Zone: *.xxxtoolbar.com (HKLM)
    O15 - Trusted Zone: *.ysbweb.com (HKLM)
    O15 - Trusted IP range: 67.19.185.246
    O15 - Trusted IP range: 67.19.185.246 (HKLM)
    O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
    O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/6247971CanadaInc/ie/bridge-c7.cab
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1111498353686
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
    O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
    O18 - Filter: text/html - {950238FB-C706-4791-8674-4D429F85897E} - C:\WINDOWS\isrvs\mfiltis.dll
    O23 - Service: AntiVir Service (AntiVirService) - H BEDV Datentechnik GmbH - C:\Program Files\AVPersonal\AVGUARD.EXE
    O23 - Service: AntiVir Update (AVWUpSrv) - H BEDV Datentechnik GmbH, Germany - C:\Program Files\AVPersonal\AVWUPSRV.EXE
    O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
    321828
    Äänestä

    Muut lukivat myös

    Vastaukset 32

    Vanhimmat

    oletko sama henkilö täällä
    http://keskustelu.suomi24.fi/show.fcgi?category=108&conference=4500000000000301&posting=22000000007586415&view_mode=threaded

    Odottele kun Juu tai joku muu asiantuntija tulee paikalle.

    Voisit sillä välin scannata nämä tiedostot tuolla ja ilmoittaa niistä tuloksen
    http://virusscan.jotti.org/

    C:\WINDOWS\ceres.dll
    C:\WINDOWS\System32\Services\{DB39A8A3-80BC-44B8-8D10-BFD146E83AEB}\SVCHOST.EXE
    C:\WINDOWS\System32\gah95on6.exe

    Muut epäilyttävät ovat ihan selviä tapauksia.

    Äänestä

    • mä luulen et nyt on joku virus koneella ja ei uskalla poistaa mitään ja tossa kellon ylä puolella on on joku 1.5cm x 10cm haku palkki mikä menee piiloon ja tulee sitten esiin siinä lukee "search in web" onko se sitten kyttääjä joka lähettää salasanoja eteen päin/estää pääsemästä tietyille sivuille josta vois ladata sen poistoon soveltuvan ohjelman.

      C:\WINDOWS\ceres.dll
      C:\WINDOWS\System32\Services\{DB39A8A3-80BC-44B8-8D10-BFD146E83AEB}\SVCHOST.EXE
      C:\WINDOWS\System32\gah95on6.exe

      laitoit noi klme kohtaa tarkoitit et ne voi poistaa

      Äänestä

    • mä vaan kirjoitti:

      mä luulen et nyt on joku virus koneella ja ei uskalla poistaa mitään ja tossa kellon ylä puolella on on joku 1.5cm x 10cm haku palkki mikä menee piiloon ja tulee sitten esiin siinä lukee "search in web" onko se sitten kyttääjä joka lähettää salasanoja eteen päin/estää pääsemästä tietyille sivuille josta vois ladata sen poistoon soveltuvan ohjelman.

      C:\WINDOWS\ceres.dll
      C:\WINDOWS\System32\Services\{DB39A8A3-80BC-44B8-8D10-BFD146E83AEB}\SVCHOST.EXE
      C:\WINDOWS\System32\gah95on6.exe

      laitoit noi klme kohtaa tarkoitit et ne voi poistaa

      työkalu palkin search the web pois toiminnasta ctrl alt delete ja sieltä sammutin sen "desktop search" systeemin

      Äänestä

    Siirrä se HijackThis.exe omaan kansioon tonne
    C:\HjT\HijackThis.exe

    Poista Lisää/Poista paneelista jos näkyy

    Media Access
    Security iGuard
    SpySpotter

    Piilotiedostot näkyviin,ohje tuolla

    http://www.xtra.co.nz/help/0,,4155-1916458,00.html

    Merkkaa nuo sulje selain ja muut avoimet ikkunat ja paina Fix checked

    O2 - BHO: CeresObj Class - {00000049-8F91-4D9C-9573-F016E7626484} - C:\WINDOWS\ceres.dll
    O2 - BHO: IE Update Class - {5B4AB8E2-6DC5-477A-B637-BF3C1A2E5993} - C:\WINDOWS\isrvs\sysupd.dll
    O4 - HKLM\..\Run: [ControlPanel] C:\WINDOWS\System32\cmd32.exe internat.dll,LoadKeyboardProfile
    O4 - HKLM\..\Run: [Desktop Search] C:\WINDOWS\isrvs\desktop.exe
    O4 - HKLM\..\Run: [ffis] C:\WINDOWS\isrvs\ffisearch.exe
    O4 - HKLM\..\Run: [Media Access] C:\Program Files\Media Access\MediaAccK.exe
    O4 - HKLM\..\Run: [Security iGuard] C:\Program Files\Security iGuard\Security iGuard.exe
    O4 - HKLM\..\Run: [Service Host] C:\WINDOWS\System32\Services\{DB39A8A3-80BC-44B8-8D10-BFD146E83AEB}\SVCHOST.EXE
    O4 - HKLM\..\Run: [gah95on6] C:\WINDOWS\System32\gah95on6.exe
    O4 - HKLM\..\Run: [SpySpotter] C:\PROGRA~1\SPYSPO~1\SpySpotter.exe -onreboot
    O15 - Trusted Zone: *.blazefind.com
    O15 - Trusted Zone: *.clickspring.net
    O15 - Trusted Zone: *.flingstone.com
    O15 - Trusted Zone: *.mt-download.com
    O15 - Trusted Zone: *.my-internet.info
    O15 - Trusted Zone: *.searchbarcash.com
    O15 - Trusted Zone: *.searchmiracle.com
    O15 - Trusted Zone: *.skoobidoo.com
    O15 - Trusted Zone: *.slotch.com
    O15 - Trusted Zone: *.slotchbar.com
    O15 - Trusted Zone: *.windupdates.com
    O15 - Trusted Zone: *.xxxtoolbar.com
    O15 - Trusted Zone: *.ysbweb.com
    O15 - Trusted Zone: *.blazefind.com (HKLM)
    O15 - Trusted Zone: *.clickspring.net (HKLM)
    O15 - Trusted Zone: *.flingstone.com (HKLM)
    O15 - Trusted Zone: *.mt-download.com (HKLM)
    O15 - Trusted Zone: *.my-internet.info (HKLM)
    O15 - Trusted Zone: *.searchbarcash.com (HKLM)
    O15 - Trusted Zone: *.searchmiracle.com (HKLM)
    O15 - Trusted Zone: *.skoobidoo.com (HKLM)
    O15 - Trusted Zone: *.slotch.com (HKLM)
    O15 - Trusted Zone: *.slotchbar.com (HKLM)
    O15 - Trusted Zone: *.windupdates.com (HKLM)
    O15 - Trusted Zone: *.xxxtoolbar.com (HKLM)
    O15 - Trusted Zone: *.ysbweb.com (HKLM)
    O15 - Trusted IP range: 67.19.185.246
    O15 - Trusted IP range: 67.19.185.246 (HKLM)
    O18 - Filter: text/html - {950238FB-C706-4791-8674-4D429F85897E} - C:\WINDOWS\isrvs\mfiltis.dll


    Käynnistä sitte vikasietotilassa etsi ja poista jos löytyy

    C:\WINDOWS\ceres.dll
    C:\WINDOWS\System32\cmd32.exe
    C:\WINDOWS\System32\gah95on6.exe

    C:\WINDOWS\System32\Services\{DB39A8A3-80BC-44B8-8D10-BFD146E83AEB}\SVCHOST.EXE
    - älä sitte sekoile tän kanssa,seuraa tota polkua ja poista {DB39A8A3-80BC-44B8-8D10-BFD146E83AEB}\SVCHOST.EXE

    C:\WINDOWS\isrvs\ < kansio

    C:\Program Files\Media Access\ < kansio

    C:\Program Files\Security iGuard\ < kansio

    C:\PROGRA~1\SPYSPO~1\ < kansio

    Käynnistä sitte normaalisti ja uus Hijack logi.

    Äänestä

    • joitain kohtia viitsitkö katsoa uudestaan. oli monta kohta jotka käskit merkata ja niitä ei ollut siinä mun uudessa listassa.
      Logfile of HijackThis v1.99.1
      Scan saved at 13:14:57, on 03/31/2005
      Platform: Windows XP SP1 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\csrss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\AVPersonal\AVGUARD.EXE
      C:\Program Files\AVPersonal\AVWUPSRV.EXE
      C:\WINDOWS\system32\ZoneLabs\vsmon.exe
      C:\WINDOWS\System32\RunDll32.exe
      C:\WINDOWS\System32\sistray.EXE
      C:\WINDOWS\System32\keyhook.exe
      C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
      C:\Program Files\AVPersonal\AVGNT.EXE
      C:\Program Files\MSN Apps\Updater\01.02.3000.1001\fi\msnappau.exe
      C:\Program Files\Winamp\winampa.exe
      C:\program files\powerstrip\pstrip.exe
      C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
      C:\WINDOWS\System32\ctfmon.exe
      C:\Program Files\MSN Messenger\msnmsgr.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Documents and Settings\1\Desktop\HijackThis.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fi/0SEFIFI/SAOS01
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.suomi24.fi/
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
      O2 - BHO: IE Update Class - {5B4AB8E2-6DC5-477A-B637-BF3C1A2E5993} - C:\WINDOWS\isrvs\sysupd.dll
      O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.02.3000.1002\en-xu\stmain.dll
      O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fi\msntb.dll
      O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
      O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fi\msntb.dll
      O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
      O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
      O4 - HKLM\..\Run: [SiS Tray] C:\WINDOWS\System32\sistray.EXE
      O4 - HKLM\..\Run: [SiS Windows KeyHook] C:\WINDOWS\System32\keyhook.exe
      O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
      O4 - HKLM\..\Run: [AVGCtrl] C:\Program Files\AVPersonal\AVGNT.EXE /min
      O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.02.3000.1001\fi\msnappau.exe"
      O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
      O4 - HKLM\..\Run: [PowerStrip] c:\program files\powerstrip\pstrip.exe
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
      O4 - HKLM\..\Run: [Desktop Search] C:\WINDOWS\isrvs\desktop.exe
      O4 - HKLM\..\Run: [ffis] C:\WINDOWS\isrvs\ffisearch.exe
      O4 - HKLM\..\Run: [THGuard] "C:\Program Files\TrojanHunter 4.2\THGuard.exe"
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
      O4 - HKCU\..\Run: [Steam] E:\steam\Steam.exe -silent
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
      O9 - Extra button: Microsoft AntiSpyware helper - {9111E61B-4403-4B66-BC1B-AA69A834FEE1} - (no file) (HKCU)
      O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {9111E61B-4403-4B66-BC1B-AA69A834FEE1} - (no file) (HKCU)
      O9 - Extra button: Microsoft AntiSpyware helper - {A207DDB9-10D0-4440-84FA-6C94FA52CADA} - (no file) (HKCU)
      O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {A207DDB9-10D0-4440-84FA-6C94FA52CADA} - (no file) (HKCU)
      O9 - Extra button: Microsoft AntiSpyware helper - {C70C123F-AE95-4A0E-B009-62DE72A14EFE} - (no file) (HKCU)
      O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {C70C123F-AE95-4A0E-B009-62DE72A14EFE} - (no file) (HKCU)
      O9 - Extra button: Microsoft AntiSpyware helper - {F5A788F0-FDB1-471D-83C7-F969E8C9786B} - (no file) (HKCU)
      O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {F5A788F0-FDB1-471D-83C7-F969E8C9786B} - (no file) (HKCU)
      O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
      O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/6247971CanadaInc/ie/bridge-c7.cab
      O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1111498353686
      O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
      O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
      O23 - Service: AntiVir Service (AntiVirService) - H BEDV Datentechnik GmbH - C:\Program Files\AVPersonal\AVGUARD.EXE
      O23 - Service: AntiVir Update (AVWUpSrv) - H BEDV Datentechnik GmbH, Germany - C:\Program Files\AVPersonal\AVWUPSRV.EXE
      O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

      Äänestä

    • ohjaus paneelista

      SpySpotter
      sano et "could not open INSTALL.LOG.file"

      Äänestä

    • mä vaan kirjoitti:

      joitain kohtia viitsitkö katsoa uudestaan. oli monta kohta jotka käskit merkata ja niitä ei ollut siinä mun uudessa listassa.
      Logfile of HijackThis v1.99.1
      Scan saved at 13:14:57, on 03/31/2005
      Platform: Windows XP SP1 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\csrss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\AVPersonal\AVGUARD.EXE
      C:\Program Files\AVPersonal\AVWUPSRV.EXE
      C:\WINDOWS\system32\ZoneLabs\vsmon.exe
      C:\WINDOWS\System32\RunDll32.exe
      C:\WINDOWS\System32\sistray.EXE
      C:\WINDOWS\System32\keyhook.exe
      C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
      C:\Program Files\AVPersonal\AVGNT.EXE
      C:\Program Files\MSN Apps\Updater\01.02.3000.1001\fi\msnappau.exe
      C:\Program Files\Winamp\winampa.exe
      C:\program files\powerstrip\pstrip.exe
      C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
      C:\WINDOWS\System32\ctfmon.exe
      C:\Program Files\MSN Messenger\msnmsgr.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Documents and Settings\1\Desktop\HijackThis.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fi/0SEFIFI/SAOS01
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.suomi24.fi/
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
      O2 - BHO: IE Update Class - {5B4AB8E2-6DC5-477A-B637-BF3C1A2E5993} - C:\WINDOWS\isrvs\sysupd.dll
      O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.02.3000.1002\en-xu\stmain.dll
      O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fi\msntb.dll
      O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
      O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fi\msntb.dll
      O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
      O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
      O4 - HKLM\..\Run: [SiS Tray] C:\WINDOWS\System32\sistray.EXE
      O4 - HKLM\..\Run: [SiS Windows KeyHook] C:\WINDOWS\System32\keyhook.exe
      O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
      O4 - HKLM\..\Run: [AVGCtrl] C:\Program Files\AVPersonal\AVGNT.EXE /min
      O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.02.3000.1001\fi\msnappau.exe"
      O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
      O4 - HKLM\..\Run: [PowerStrip] c:\program files\powerstrip\pstrip.exe
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
      O4 - HKLM\..\Run: [Desktop Search] C:\WINDOWS\isrvs\desktop.exe
      O4 - HKLM\..\Run: [ffis] C:\WINDOWS\isrvs\ffisearch.exe
      O4 - HKLM\..\Run: [THGuard] "C:\Program Files\TrojanHunter 4.2\THGuard.exe"
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
      O4 - HKCU\..\Run: [Steam] E:\steam\Steam.exe -silent
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
      O9 - Extra button: Microsoft AntiSpyware helper - {9111E61B-4403-4B66-BC1B-AA69A834FEE1} - (no file) (HKCU)
      O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {9111E61B-4403-4B66-BC1B-AA69A834FEE1} - (no file) (HKCU)
      O9 - Extra button: Microsoft AntiSpyware helper - {A207DDB9-10D0-4440-84FA-6C94FA52CADA} - (no file) (HKCU)
      O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {A207DDB9-10D0-4440-84FA-6C94FA52CADA} - (no file) (HKCU)
      O9 - Extra button: Microsoft AntiSpyware helper - {C70C123F-AE95-4A0E-B009-62DE72A14EFE} - (no file) (HKCU)
      O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {C70C123F-AE95-4A0E-B009-62DE72A14EFE} - (no file) (HKCU)
      O9 - Extra button: Microsoft AntiSpyware helper - {F5A788F0-FDB1-471D-83C7-F969E8C9786B} - (no file) (HKCU)
      O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {F5A788F0-FDB1-471D-83C7-F969E8C9786B} - (no file) (HKCU)
      O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
      O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/6247971CanadaInc/ie/bridge-c7.cab
      O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1111498353686
      O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
      O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
      O23 - Service: AntiVir Service (AntiVirService) - H BEDV Datentechnik GmbH - C:\Program Files\AVPersonal\AVGUARD.EXE
      O23 - Service: AntiVir Update (AVWUpSrv) - H BEDV Datentechnik GmbH, Germany - C:\Program Files\AVPersonal\AVWUPSRV.EXE
      O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

      > sain poistettua joitain kohtia <

      Jaa..oisit ny kertonnu mitä,koska sillon on helpomi autta ku tietää mitä on poistetu ja mitä ei

      Se sun Hijackki on vieläki tuolla

      C:\Documents and Settings\1\Desktop\HijackThis.exe

      Siirrä se omaan knasioon tonne
      C:\HjT\HijackThis.exe

      Merkkaa nuo sulje selain ja muut avoimet ikkunat ja paina Fix checked

      O2 - BHO: IE Update Class - {5B4AB8E2-6DC5-477A-B637-BF3C1A2E5993} - C:\WINDOWS\isrvs\sysupd.dll
      O4 - HKLM\..\Run: [Desktop Search] C:\WINDOWS\isrvs\desktop.exe
      O4 - HKLM\..\Run: [ffis] C:\WINDOWS\isrvs\ffisearch.exe
      O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/6247971CanadaInc/ie/bridge-c7.cab


      Käynnistä sitte vikasietotilassa ja poista

      C:\WINDOWS\isrvs\ < kansio

      Käynnistä normaalisi ja uus logi.

      Jos tuo on poistettu koneelta

      Microsoft AntiSpyware

      niin merkkaa nuo myös

      O9 - Extra button: Microsoft AntiSpyware helper - {9111E61B-4403-4B66-BC1B-AA69A834FEE1} - (no file) (HKCU)
      O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {9111E61B-4403-4B66-BC1B-AA69A834FEE1} - (no file) (HKCU)
      O9 - Extra button: Microsoft AntiSpyware helper - {A207DDB9-10D0-4440-84FA-6C94FA52CADA} - (no file) (HKCU)
      O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {A207DDB9-10D0-4440-84FA-6C94FA52CADA} - (no file) (HKCU)
      O9 - Extra button: Microsoft AntiSpyware helper - {C70C123F-AE95-4A0E-B009-62DE72A14EFE} - (no file) (HKCU)
      O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {C70C123F-AE95-4A0E-B009-62DE72A14EFE} - (no file) (HKCU)
      O9 - Extra button: Microsoft AntiSpyware helper - {F5A788F0-FDB1-471D-83C7-F969E8C9786B} - (no file) (HKCU)
      O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {F5A788F0-FDB1-471D-83C7-F969E8C9786B} - (no file) (HKCU)

      Äänestä

    • Juu kirjoitti:

      > sain poistettua joitain kohtia <

      Jaa..oisit ny kertonnu mitä,koska sillon on helpomi autta ku tietää mitä on poistetu ja mitä ei

      Se sun Hijackki on vieläki tuolla

      C:\Documents and Settings\1\Desktop\HijackThis.exe

      Siirrä se omaan knasioon tonne
      C:\HjT\HijackThis.exe

      Merkkaa nuo sulje selain ja muut avoimet ikkunat ja paina Fix checked

      O2 - BHO: IE Update Class - {5B4AB8E2-6DC5-477A-B637-BF3C1A2E5993} - C:\WINDOWS\isrvs\sysupd.dll
      O4 - HKLM\..\Run: [Desktop Search] C:\WINDOWS\isrvs\desktop.exe
      O4 - HKLM\..\Run: [ffis] C:\WINDOWS\isrvs\ffisearch.exe
      O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/6247971CanadaInc/ie/bridge-c7.cab


      Käynnistä sitte vikasietotilassa ja poista

      C:\WINDOWS\isrvs\ < kansio

      Käynnistä normaalisi ja uus logi.

      Jos tuo on poistettu koneelta

      Microsoft AntiSpyware

      niin merkkaa nuo myös

      O9 - Extra button: Microsoft AntiSpyware helper - {9111E61B-4403-4B66-BC1B-AA69A834FEE1} - (no file) (HKCU)
      O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {9111E61B-4403-4B66-BC1B-AA69A834FEE1} - (no file) (HKCU)
      O9 - Extra button: Microsoft AntiSpyware helper - {A207DDB9-10D0-4440-84FA-6C94FA52CADA} - (no file) (HKCU)
      O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {A207DDB9-10D0-4440-84FA-6C94FA52CADA} - (no file) (HKCU)
      O9 - Extra button: Microsoft AntiSpyware helper - {C70C123F-AE95-4A0E-B009-62DE72A14EFE} - (no file) (HKCU)
      O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {C70C123F-AE95-4A0E-B009-62DE72A14EFE} - (no file) (HKCU)
      O9 - Extra button: Microsoft AntiSpyware helper - {F5A788F0-FDB1-471D-83C7-F969E8C9786B} - (no file) (HKCU)
      O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {F5A788F0-FDB1-471D-83C7-F969E8C9786B} - (no file) (HKCU)

      nämä poistin
      O2 - BHO: IE Update Class - {5B4AB8E2-6DC5-477A-B637-BF3C1A2E5993} - C:\WINDOWS\isrvs\sysupd.dll
      O4 - HKLM\..\Run: [Desktop Search] C:\WINDOWS\isrvs\desktop.exe
      O4 - HKLM\..\Run: [ffis] C:\WINDOWS\isrvs\ffisearch.exe
      O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/6247971CanadaInc/ie/bridge-c7.cab

      ja tämän kansion vikasietotilassa
      C:\WINDOWS\isrvs\ < kansio

      ja nämä sen jälkeen
      O9 - Extra button: Microsoft AntiSpyware helper - {9111E61B-4403-4B66-BC1B-AA69A834FEE1} - (no file) (HKCU)
      O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {9111E61B-4403-4B66-BC1B-AA69A834FEE1} - (no file) (HKCU)
      O9 - Extra button: Microsoft AntiSpyware helper - {A207DDB9-10D0-4440-84FA-6C94FA52CADA} - (no file) (HKCU)
      O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {A207DDB9-10D0-4440-84FA-6C94FA52CADA} - (no file) (HKCU)
      O9 - Extra button: Microsoft AntiSpyware helper - {C70C123F-AE95-4A0E-B009-62DE72A14EFE} - (no file) (HKCU)
      O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {C70C123F-AE95-4A0E-B009-62DE72A14EFE} - (no file) (HKCU)
      O9 - Extra button: Microsoft AntiSpyware helper - {F5A788F0-FDB1-471D-83C7-F969E8C9786B} - (no file) (HKCU)
      O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {F5A788F0-FDB1-471D-83C7-F969E8C9786B} - (no file) (HKCU)

      ja en ehkä saanut sitä kansiota oikeen paikkaan vieläkään.
      Microsoft AntiSpyware tätä en ole poistanut nimen mukaisesti mistään. oliko tarkoitus?

      ja tässä uus logi:

      Logfile of HijackThis v1.99.1
      Scan saved at 14:39:05, on 03/31/2005
      Platform: Windows XP SP1 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\csrss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\AVPersonal\AVGUARD.EXE
      C:\Program Files\AVPersonal\AVWUPSRV.EXE
      C:\WINDOWS\system32\ZoneLabs\vsmon.exe
      C:\WINDOWS\System32\RunDll32.exe
      C:\WINDOWS\System32\sistray.EXE
      C:\WINDOWS\System32\keyhook.exe
      C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
      C:\Program Files\AVPersonal\AVGNT.EXE
      C:\Program Files\MSN Apps\Updater\01.02.3000.1001\fi\msnappau.exe
      C:\Program Files\Winamp\winampa.exe
      C:\program files\powerstrip\pstrip.exe
      C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
      C:\WINDOWS\System32\ctfmon.exe
      C:\Program Files\MSN Messenger\msnmsgr.exe
      C:\Documents and Settings\1\Desktop\hijackthis\HijackThis.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fi/0SEFIFI/SAOS01
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.suomi24.fi/
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
      O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.02.3000.1002\en-xu\stmain.dll
      O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fi\msntb.dll
      O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
      O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fi\msntb.dll
      O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
      O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
      O4 - HKLM\..\Run: [SiS Tray] C:\WINDOWS\System32\sistray.EXE
      O4 - HKLM\..\Run: [SiS Windows KeyHook] C:\WINDOWS\System32\keyhook.exe
      O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
      O4 - HKLM\..\Run: [AVGCtrl] C:\Program Files\AVPersonal\AVGNT.EXE /min
      O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.02.3000.1001\fi\msnappau.exe"
      O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
      O4 - HKLM\..\Run: [PowerStrip] c:\program files\powerstrip\pstrip.exe
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
      O4 - HKLM\..\Run: [Desktop Search] C:\WINDOWS\isrvs\desktop.exe
      O4 - HKLM\..\Run: [ffis] C:\WINDOWS\isrvs\ffisearch.exe
      O4 - HKLM\..\Run: [THGuard] "C:\Program Files\TrojanHunter 4.2\THGuard.exe"
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
      O4 - HKCU\..\Run: [Steam] E:\steam\Steam.exe -silent
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
      O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
      O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1111498353686
      O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
      O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
      O23 - Service: AntiVir Service (AntiVirService) - H BEDV Datentechnik GmbH - C:\Program Files\AVPersonal\AVGUARD.EXE
      O23 - Service: AntiVir Update (AVWUpSrv) - H BEDV Datentechnik GmbH, Germany - C:\Program Files\AVPersonal\AVWUPSRV.EXE
      O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

      Äänestä

    • mä vaan kirjoitti:

      nämä poistin
      O2 - BHO: IE Update Class - {5B4AB8E2-6DC5-477A-B637-BF3C1A2E5993} - C:\WINDOWS\isrvs\sysupd.dll
      O4 - HKLM\..\Run: [Desktop Search] C:\WINDOWS\isrvs\desktop.exe
      O4 - HKLM\..\Run: [ffis] C:\WINDOWS\isrvs\ffisearch.exe
      O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/6247971CanadaInc/ie/bridge-c7.cab

      ja tämän kansion vikasietotilassa
      C:\WINDOWS\isrvs\ < kansio

      ja nämä sen jälkeen
      O9 - Extra button: Microsoft AntiSpyware helper - {9111E61B-4403-4B66-BC1B-AA69A834FEE1} - (no file) (HKCU)
      O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {9111E61B-4403-4B66-BC1B-AA69A834FEE1} - (no file) (HKCU)
      O9 - Extra button: Microsoft AntiSpyware helper - {A207DDB9-10D0-4440-84FA-6C94FA52CADA} - (no file) (HKCU)
      O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {A207DDB9-10D0-4440-84FA-6C94FA52CADA} - (no file) (HKCU)
      O9 - Extra button: Microsoft AntiSpyware helper - {C70C123F-AE95-4A0E-B009-62DE72A14EFE} - (no file) (HKCU)
      O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {C70C123F-AE95-4A0E-B009-62DE72A14EFE} - (no file) (HKCU)
      O9 - Extra button: Microsoft AntiSpyware helper - {F5A788F0-FDB1-471D-83C7-F969E8C9786B} - (no file) (HKCU)
      O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {F5A788F0-FDB1-471D-83C7-F969E8C9786B} - (no file) (HKCU)

      ja en ehkä saanut sitä kansiota oikeen paikkaan vieläkään.
      Microsoft AntiSpyware tätä en ole poistanut nimen mukaisesti mistään. oliko tarkoitus?

      ja tässä uus logi:

      Logfile of HijackThis v1.99.1
      Scan saved at 14:39:05, on 03/31/2005
      Platform: Windows XP SP1 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\csrss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\AVPersonal\AVGUARD.EXE
      C:\Program Files\AVPersonal\AVWUPSRV.EXE
      C:\WINDOWS\system32\ZoneLabs\vsmon.exe
      C:\WINDOWS\System32\RunDll32.exe
      C:\WINDOWS\System32\sistray.EXE
      C:\WINDOWS\System32\keyhook.exe
      C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
      C:\Program Files\AVPersonal\AVGNT.EXE
      C:\Program Files\MSN Apps\Updater\01.02.3000.1001\fi\msnappau.exe
      C:\Program Files\Winamp\winampa.exe
      C:\program files\powerstrip\pstrip.exe
      C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
      C:\WINDOWS\System32\ctfmon.exe
      C:\Program Files\MSN Messenger\msnmsgr.exe
      C:\Documents and Settings\1\Desktop\hijackthis\HijackThis.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fi/0SEFIFI/SAOS01
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.suomi24.fi/
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
      O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.02.3000.1002\en-xu\stmain.dll
      O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fi\msntb.dll
      O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
      O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fi\msntb.dll
      O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
      O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
      O4 - HKLM\..\Run: [SiS Tray] C:\WINDOWS\System32\sistray.EXE
      O4 - HKLM\..\Run: [SiS Windows KeyHook] C:\WINDOWS\System32\keyhook.exe
      O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
      O4 - HKLM\..\Run: [AVGCtrl] C:\Program Files\AVPersonal\AVGNT.EXE /min
      O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.02.3000.1001\fi\msnappau.exe"
      O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
      O4 - HKLM\..\Run: [PowerStrip] c:\program files\powerstrip\pstrip.exe
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
      O4 - HKLM\..\Run: [Desktop Search] C:\WINDOWS\isrvs\desktop.exe
      O4 - HKLM\..\Run: [ffis] C:\WINDOWS\isrvs\ffisearch.exe
      O4 - HKLM\..\Run: [THGuard] "C:\Program Files\TrojanHunter 4.2\THGuard.exe"
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
      O4 - HKCU\..\Run: [Steam] E:\steam\Steam.exe -silent
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
      O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
      O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1111498353686
      O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
      O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
      O23 - Service: AntiVir Service (AntiVirService) - H BEDV Datentechnik GmbH - C:\Program Files\AVPersonal\AVGUARD.EXE
      O23 - Service: AntiVir Update (AVWUpSrv) - H BEDV Datentechnik GmbH, Germany - C:\Program Files\AVPersonal\AVWUPSRV.EXE
      O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

      > en ehkä saanut sitä kansiota oikeen paikkaan vieläkään. <

      Ei niin

      > Microsoft AntiSpyware tätä en ole poistanut nimen mukaisesti mistään oliko tarkoitus? <

      Ei se on OK ohjelma mutta jos se on poistettu koneelta,niin nuo 09 rivit joutaa myös pois.

      Merkkaa ja Fix:saa nuo

      O4 - HKLM\..\Run: [Desktop Search] C:\WINDOWS\isrvs\desktop.exe
      O4 - HKLM\..\Run: [ffis] C:\WINDOWS\isrvs\ffisearch.exe

      Käynnistä sitte kone uudestan ja uus logi,niin nähään joko ne on poissa.

      Äänestä

    • mä vaan kirjoitti:

      ohjaus paneelista

      SpySpotter
      sano et "could not open INSTALL.LOG.file"

      Koita vaikka asentaa se uudestaan samaan paikkaan ja sitte koita poistaa se.(kansio myös jos se jää sinne)

      Äänestä

    • Juu kirjoitti:

      > en ehkä saanut sitä kansiota oikeen paikkaan vieläkään. <

      Ei niin

      > Microsoft AntiSpyware tätä en ole poistanut nimen mukaisesti mistään oliko tarkoitus? <

      Ei se on OK ohjelma mutta jos se on poistettu koneelta,niin nuo 09 rivit joutaa myös pois.

      Merkkaa ja Fix:saa nuo

      O4 - HKLM\..\Run: [Desktop Search] C:\WINDOWS\isrvs\desktop.exe
      O4 - HKLM\..\Run: [ffis] C:\WINDOWS\isrvs\ffisearch.exe

      Käynnistä sitte kone uudestan ja uus logi,niin nähään joko ne on poissa.

      Logfile of HijackThis v1.99.1
      Scan saved at 15:04:45, on 03/31/2005
      Platform: Windows XP SP1 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\csrss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\AVPersonal\AVGUARD.EXE
      C:\Program Files\AVPersonal\AVWUPSRV.EXE
      C:\WINDOWS\system32\ZoneLabs\vsmon.exe
      C:\WINDOWS\System32\RunDll32.exe
      C:\WINDOWS\System32\sistray.EXE
      C:\WINDOWS\System32\keyhook.exe
      C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
      C:\Program Files\AVPersonal\AVGNT.EXE
      C:\Program Files\MSN Apps\Updater\01.02.3000.1001\fi\msnappau.exe
      C:\Program Files\Winamp\winampa.exe
      C:\program files\powerstrip\pstrip.exe
      C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
      C:\WINDOWS\System32\ctfmon.exe
      E:\steam\Steam.exe
      C:\Program Files\MSN Messenger\msnmsgr.exe
      C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      C:\WINDOWS\System32\wuauclt.exe
      C:\Documents and Settings\1\Desktop\hijackthis\HijackThis.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fi/0SEFIFI/SAOS01
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.suomi24.fi/
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
      O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.02.3000.1002\en-xu\stmain.dll
      O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fi\msntb.dll
      O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
      O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fi\msntb.dll
      O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
      O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
      O4 - HKLM\..\Run: [SiS Tray] C:\WINDOWS\System32\sistray.EXE
      O4 - HKLM\..\Run: [SiS Windows KeyHook] C:\WINDOWS\System32\keyhook.exe
      O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
      O4 - HKLM\..\Run: [AVGCtrl] C:\Program Files\AVPersonal\AVGNT.EXE /min
      O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.02.3000.1001\fi\msnappau.exe"
      O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
      O4 - HKLM\..\Run: [PowerStrip] c:\program files\powerstrip\pstrip.exe
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
      O4 - HKLM\..\Run: [Desktop Search] C:\WINDOWS\isrvs\desktop.exe
      O4 - HKLM\..\Run: [ffis] C:\WINDOWS\isrvs\ffisearch.exe
      O4 - HKLM\..\Run: [THGuard] "C:\Program Files\TrojanHunter 4.2\THGuard.exe"
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
      O4 - HKCU\..\Run: [Steam] E:\steam\Steam.exe -silent
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
      O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
      O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1111498353686
      O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
      O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
      O23 - Service: AntiVir Service (AntiVirService) - H BEDV Datentechnik GmbH - C:\Program Files\AVPersonal\AVGUARD.EXE
      O23 - Service: AntiVir Update (AVWUpSrv) - H BEDV Datentechnik GmbH, Germany - C:\Program Files\AVPersonal\AVWUPSRV.EXE
      O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

      Äänestä

    • mä vaan kirjoitti:

      Logfile of HijackThis v1.99.1
      Scan saved at 15:04:45, on 03/31/2005
      Platform: Windows XP SP1 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\csrss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\AVPersonal\AVGUARD.EXE
      C:\Program Files\AVPersonal\AVWUPSRV.EXE
      C:\WINDOWS\system32\ZoneLabs\vsmon.exe
      C:\WINDOWS\System32\RunDll32.exe
      C:\WINDOWS\System32\sistray.EXE
      C:\WINDOWS\System32\keyhook.exe
      C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
      C:\Program Files\AVPersonal\AVGNT.EXE
      C:\Program Files\MSN Apps\Updater\01.02.3000.1001\fi\msnappau.exe
      C:\Program Files\Winamp\winampa.exe
      C:\program files\powerstrip\pstrip.exe
      C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
      C:\WINDOWS\System32\ctfmon.exe
      E:\steam\Steam.exe
      C:\Program Files\MSN Messenger\msnmsgr.exe
      C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      C:\WINDOWS\System32\wuauclt.exe
      C:\Documents and Settings\1\Desktop\hijackthis\HijackThis.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fi/0SEFIFI/SAOS01
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.suomi24.fi/
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
      O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.02.3000.1002\en-xu\stmain.dll
      O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fi\msntb.dll
      O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
      O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fi\msntb.dll
      O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
      O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
      O4 - HKLM\..\Run: [SiS Tray] C:\WINDOWS\System32\sistray.EXE
      O4 - HKLM\..\Run: [SiS Windows KeyHook] C:\WINDOWS\System32\keyhook.exe
      O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
      O4 - HKLM\..\Run: [AVGCtrl] C:\Program Files\AVPersonal\AVGNT.EXE /min
      O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.02.3000.1001\fi\msnappau.exe"
      O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
      O4 - HKLM\..\Run: [PowerStrip] c:\program files\powerstrip\pstrip.exe
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
      O4 - HKLM\..\Run: [Desktop Search] C:\WINDOWS\isrvs\desktop.exe
      O4 - HKLM\..\Run: [ffis] C:\WINDOWS\isrvs\ffisearch.exe
      O4 - HKLM\..\Run: [THGuard] "C:\Program Files\TrojanHunter 4.2\THGuard.exe"
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
      O4 - HKCU\..\Run: [Steam] E:\steam\Steam.exe -silent
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
      O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
      O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1111498353686
      O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
      O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
      O23 - Service: AntiVir Service (AntiVirService) - H BEDV Datentechnik GmbH - C:\Program Files\AVPersonal\AVGUARD.EXE
      O23 - Service: AntiVir Update (AVWUpSrv) - H BEDV Datentechnik GmbH, Germany - C:\Program Files\AVPersonal\AVWUPSRV.EXE
      O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

      No täälä ne roikkuu vieläki,vaikka sanoit poistanees ton kansion

      C:\WINDOWS\isrvs\

      Merkkaa ja Fix:saa nuo vikasietotilassa

      O4 - HKLM\..\Run: [Desktop Search] C:\WINDOWS\isrvs\desktop.exe
      O4 - HKLM\..\Run: [ffis] C:\WINDOWS\isrvs\ffisearch.exe

      Käynnistä sitte normaalisti ja uus logi.

      Äänestä

    • Juu kirjoitti:

      > en ehkä saanut sitä kansiota oikeen paikkaan vieläkään. <

      Ei niin

      > Microsoft AntiSpyware tätä en ole poistanut nimen mukaisesti mistään oliko tarkoitus? <

      Ei se on OK ohjelma mutta jos se on poistettu koneelta,niin nuo 09 rivit joutaa myös pois.

      Merkkaa ja Fix:saa nuo

      O4 - HKLM\..\Run: [Desktop Search] C:\WINDOWS\isrvs\desktop.exe
      O4 - HKLM\..\Run: [ffis] C:\WINDOWS\isrvs\ffisearch.exe

      Käynnistä sitte kone uudestan ja uus logi,niin nähään joko ne on poissa.

      tuollainen kansio mikä tyhjä:
      C:\Documents and Settings\1\My Documents\wsInspector\Quick Profiles

      ja tämä kansio vaikuttaa epäilyttävältä
      C:\Documents and Settings\Default User
      sisältää tämmöisiä:
      -Appilicaation Data
      -coocies
      -desktop
      -favorites
      -local settings
      -my documents
      -net hood
      -print hood
      -recent
      -send to
      -start menu
      -templates
      ne oli kansioita
      NTUSER DAT file 224KB
      ntuser.dat text document 1 KB

      Äänestä

    • Juu kirjoitti:

      No täälä ne roikkuu vieläki,vaikka sanoit poistanees ton kansion

      C:\WINDOWS\isrvs\

      Merkkaa ja Fix:saa nuo vikasietotilassa

      O4 - HKLM\..\Run: [Desktop Search] C:\WINDOWS\isrvs\desktop.exe
      O4 - HKLM\..\Run: [ffis] C:\WINDOWS\isrvs\ffisearch.exe

      Käynnistä sitte normaalisti ja uus logi.

      kun tarkistin. siellä on valtavasti kansioita ja osa on vaalean keltaisi ja lukee ihme juttuja esim:
      $Ntunistal... lukee sinisellä ja niitä on 18 kpl.
      eri kokoisia.
      koitan vikasieto tilassa

      Äänestä

    • mä vaan kirjoitti:

      tuollainen kansio mikä tyhjä:
      C:\Documents and Settings\1\My Documents\wsInspector\Quick Profiles

      ja tämä kansio vaikuttaa epäilyttävältä
      C:\Documents and Settings\Default User
      sisältää tämmöisiä:
      -Appilicaation Data
      -coocies
      -desktop
      -favorites
      -local settings
      -my documents
      -net hood
      -print hood
      -recent
      -send to
      -start menu
      -templates
      ne oli kansioita
      NTUSER DAT file 224KB
      ntuser.dat text document 1 KB

      No ehkä sen tyhjän voi poistaa,mutta anna sen toisen olla.

      Äänestä

    • Juu kirjoitti:

      No ehkä sen tyhjän voi poistaa,mutta anna sen toisen olla.

      Logfile of HijackThis v1.99.1
      Scan saved at 15:31:56, on 03/31/2005
      Platform: Windows XP SP1 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\csrss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\AVPersonal\AVGUARD.EXE
      C:\Program Files\AVPersonal\AVWUPSRV.EXE
      C:\WINDOWS\system32\ZoneLabs\vsmon.exe
      C:\WINDOWS\System32\RunDll32.exe
      C:\WINDOWS\System32\sistray.EXE
      C:\WINDOWS\System32\keyhook.exe
      C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
      C:\Program Files\AVPersonal\AVGNT.EXE
      C:\Program Files\MSN Apps\Updater\01.02.3000.1001\fi\msnappau.exe
      C:\Program Files\Winamp\winampa.exe
      C:\program files\powerstrip\pstrip.exe
      C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
      C:\WINDOWS\System32\ctfmon.exe
      E:\steam\Steam.exe
      C:\Program Files\MSN Messenger\msnmsgr.exe
      C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      C:\Documents and Settings\1\Desktop\hijackthis\HijackThis.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fi/0SEFIFI/SAOS01
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.suomi24.fi/
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
      O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.02.3000.1002\en-xu\stmain.dll
      O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fi\msntb.dll
      O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
      O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fi\msntb.dll
      O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
      O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
      O4 - HKLM\..\Run: [SiS Tray] C:\WINDOWS\System32\sistray.EXE
      O4 - HKLM\..\Run: [SiS Windows KeyHook] C:\WINDOWS\System32\keyhook.exe
      O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
      O4 - HKLM\..\Run: [AVGCtrl] C:\Program Files\AVPersonal\AVGNT.EXE /min
      O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.02.3000.1001\fi\msnappau.exe"
      O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
      O4 - HKLM\..\Run: [PowerStrip] c:\program files\powerstrip\pstrip.exe
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
      O4 - HKLM\..\Run: [THGuard] "C:\Program Files\TrojanHunter 4.2\THGuard.exe"
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
      O4 - HKCU\..\Run: [Steam] E:\steam\Steam.exe -silent
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
      O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
      O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1111498353686
      O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
      O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
      O23 - Service: AntiVir Service (AntiVirService) - H BEDV Datentechnik GmbH - C:\Program Files\AVPersonal\AVGUARD.EXE
      O23 - Service: AntiVir Update (AVWUpSrv) - H BEDV Datentechnik GmbH, Germany - C:\Program Files\AVPersonal\AVWUPSRV.EXE
      O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

      Äänestä

    • mä vaan kirjoitti:

      Logfile of HijackThis v1.99.1
      Scan saved at 15:31:56, on 03/31/2005
      Platform: Windows XP SP1 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\csrss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\AVPersonal\AVGUARD.EXE
      C:\Program Files\AVPersonal\AVWUPSRV.EXE
      C:\WINDOWS\system32\ZoneLabs\vsmon.exe
      C:\WINDOWS\System32\RunDll32.exe
      C:\WINDOWS\System32\sistray.EXE
      C:\WINDOWS\System32\keyhook.exe
      C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
      C:\Program Files\AVPersonal\AVGNT.EXE
      C:\Program Files\MSN Apps\Updater\01.02.3000.1001\fi\msnappau.exe
      C:\Program Files\Winamp\winampa.exe
      C:\program files\powerstrip\pstrip.exe
      C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
      C:\WINDOWS\System32\ctfmon.exe
      E:\steam\Steam.exe
      C:\Program Files\MSN Messenger\msnmsgr.exe
      C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      C:\Documents and Settings\1\Desktop\hijackthis\HijackThis.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fi/0SEFIFI/SAOS01
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.suomi24.fi/
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
      O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.02.3000.1002\en-xu\stmain.dll
      O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fi\msntb.dll
      O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
      O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fi\msntb.dll
      O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
      O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
      O4 - HKLM\..\Run: [SiS Tray] C:\WINDOWS\System32\sistray.EXE
      O4 - HKLM\..\Run: [SiS Windows KeyHook] C:\WINDOWS\System32\keyhook.exe
      O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
      O4 - HKLM\..\Run: [AVGCtrl] C:\Program Files\AVPersonal\AVGNT.EXE /min
      O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.02.3000.1001\fi\msnappau.exe"
      O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
      O4 - HKLM\..\Run: [PowerStrip] c:\program files\powerstrip\pstrip.exe
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
      O4 - HKLM\..\Run: [THGuard] "C:\Program Files\TrojanHunter 4.2\THGuard.exe"
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
      O4 - HKCU\..\Run: [Steam] E:\steam\Steam.exe -silent
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
      O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
      O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1111498353686
      O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
      O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
      O23 - Service: AntiVir Service (AntiVirService) - H BEDV Datentechnik GmbH - C:\Program Files\AVPersonal\AVGUARD.EXE
      O23 - Service: AntiVir Update (AVWUpSrv) - H BEDV Datentechnik GmbH, Germany - C:\Program Files\AVPersonal\AVWUPSRV.EXE
      O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

      The firewall has blocked internet access to your computer (NetBIOS Session) from 192.168.1.36 (TCP Port 2404) [TCP Flags: S]

      antaa tollaisen ilmoituksen koko ajan näitä samoja tullut joka bootin jälkeen...?

      Äänestä

    • mä vaan kirjoitti:

      Logfile of HijackThis v1.99.1
      Scan saved at 15:31:56, on 03/31/2005
      Platform: Windows XP SP1 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\csrss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\AVPersonal\AVGUARD.EXE
      C:\Program Files\AVPersonal\AVWUPSRV.EXE
      C:\WINDOWS\system32\ZoneLabs\vsmon.exe
      C:\WINDOWS\System32\RunDll32.exe
      C:\WINDOWS\System32\sistray.EXE
      C:\WINDOWS\System32\keyhook.exe
      C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
      C:\Program Files\AVPersonal\AVGNT.EXE
      C:\Program Files\MSN Apps\Updater\01.02.3000.1001\fi\msnappau.exe
      C:\Program Files\Winamp\winampa.exe
      C:\program files\powerstrip\pstrip.exe
      C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
      C:\WINDOWS\System32\ctfmon.exe
      E:\steam\Steam.exe
      C:\Program Files\MSN Messenger\msnmsgr.exe
      C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      C:\Documents and Settings\1\Desktop\hijackthis\HijackThis.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fi/0SEFIFI/SAOS01
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.suomi24.fi/
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
      O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.02.3000.1002\en-xu\stmain.dll
      O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fi\msntb.dll
      O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
      O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fi\msntb.dll
      O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
      O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
      O4 - HKLM\..\Run: [SiS Tray] C:\WINDOWS\System32\sistray.EXE
      O4 - HKLM\..\Run: [SiS Windows KeyHook] C:\WINDOWS\System32\keyhook.exe
      O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
      O4 - HKLM\..\Run: [AVGCtrl] C:\Program Files\AVPersonal\AVGNT.EXE /min
      O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.02.3000.1001\fi\msnappau.exe"
      O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
      O4 - HKLM\..\Run: [PowerStrip] c:\program files\powerstrip\pstrip.exe
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
      O4 - HKLM\..\Run: [THGuard] "C:\Program Files\TrojanHunter 4.2\THGuard.exe"
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
      O4 - HKCU\..\Run: [Steam] E:\steam\Steam.exe -silent
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
      O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
      O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1111498353686
      O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
      O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
      O23 - Service: AntiVir Service (AntiVirService) - H BEDV Datentechnik GmbH - C:\Program Files\AVPersonal\AVGUARD.EXE
      O23 - Service: AntiVir Update (AVWUpSrv) - H BEDV Datentechnik GmbH, Germany - C:\Program Files\AVPersonal\AVWUPSRV.EXE
      O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

      Logi on ok.

      Äänestä

    • mä vaan kirjoitti:

      The firewall has blocked internet access to your computer (NetBIOS Session) from 192.168.1.36 (TCP Port 2404) [TCP Flags: S]

      antaa tollaisen ilmoituksen koko ajan näitä samoja tullut joka bootin jälkeen...?

      Tuo on ihan normaalia,todiste vaan siittä että Zone toimii.

      Äänestä

    • Juu kirjoitti:

      Logi on ok.

      kun luulen et mun koneelta yrittää joku ulos?

      Äänestä

    • Juu kirjoitti:

      Koita scannata kone tolla

      http://koti.mbnet.fi/pattaya1/escanmwav.htm

      File C:\WINDOWS\system32\drivers\delprot.sys infected by "Trojan.Win32.Delprot.a" Virus. Action Taken: File to be deleted on reboot.
      File C:\WINDOWS\70tovmto.exe tagged as not-a-virus:AdWare.Sahat.o. No Action Taken.
      File C:\WINDOWS\ceres.dll tagged as not-a-virus:AdWare.BetterInternet. No Action Taken.
      File C:\WINDOWS\System32\bln02nqv.exe tagged as not-a-virus:AdWare.Sahat.o. No Action Taken.
      File C:\Documents and Settings\1\Local Settings\Temp\B74136506\build2.exe tagged as not-a-virus:AdWare.ToolBar.ISearch.d. No Action Taken.
      File C:\Documents and Settings\1\Local Settings\Temp\temp.fr0B16 tagged as not-a-virus:AdWare.Sahat.l. No Action Taken.
      File C:\Program Files\Internet Explorer\gka.exe infected by "Trojan-Downloader.Win32.Delf.cb" Virus. Action Taken: File Deleted.
      File C:\sys1056428588.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\sys1215818218.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\sys1226112075.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\sys1370516347.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\sys1374720030.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\sys1437524112.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\sys1501821867.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\sys1525214475.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\sys1556221954.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\sys166916536.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\sys1853511958.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\sys1927432762.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\sys2115517556.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\sys2419821899.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\sys2487516338.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\sys2765622075.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\sys2832324465.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\sys2943928780.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\sys3030810100.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\sys465122247.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\sys552812611.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\sys61454109.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\sys633129710.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\sys891323168.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\sys964119090.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP32\A0002778.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP32\A0002779.EXE infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP32\A0002780.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP32\A0002781.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP32\A0002782.EXE infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP32\A0002783.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP32\A0002784.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP32\A0002785.EXE infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP32\A0002786.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP32\A0002787.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP32\A0002788.EXE infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP32\A0002789.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0002823.exe infected by "Trojan-Dropper.Win32.Small.vv" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0002824.exe infected by "Trojan.Win32.LowZones.y" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0002825.exe tagged as not-a-virus:RiskWare.Downloader.Awmcash.a. No Action Taken.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0002826.exe tagged as not-a-virus:AdWare.ToolBar.ISearch.d. No Action Taken.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0002849.dll infected by "Trojan-Downloader.Win32.Small.anu" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0002850.dll infected by "Trojan-Downloader.Win32.Agent.kf" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0003849.exe infected by "Trojan-Dropper.Win32.Small.vv" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0003850.exe infected by "Trojan.Win32.LowZones.y" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0003851.exe tagged as not-a-virus:RiskWare.Downloader.Awmcash.a. No Action Taken.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0003852.exe tagged as not-a-virus:AdWare.ToolBar.ISearch.d. No Action Taken.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0003853.dll infected by "Trojan-Downloader.Win32.Small.anu" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0003868.exe infected by "Trojan-Dropper.Win32.Small.vv" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0003869.exe infected by "Trojan.Win32.LowZones.y" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0003870.exe tagged as not-a-virus:RiskWare.Downloader.Awmcash.a. No Action Taken.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0003871.exe tagged as not-a-virus:AdWare.ToolBar.ISearch.d. No Action Taken.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0003872.dll infected by "Trojan-Downloader.Win32.Small.anu" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0004865.exe infected by "Trojan-Dropper.Win32.Small.vv" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0004866.exe infected by "Trojan.Win32.LowZones.y" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0004867.exe tagged as not-a-virus:RiskWare.Downloader.Awmcash.a. No Action Taken.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0004868.exe tagged as not-a-virus:AdWare.ToolBar.ISearch.d. No Action Taken.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0004872.dll infected by "Trojan-Downloader.Win32.Small.anu" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0004917.exe infected by "Trojan-Dropper.Win32.Small.vv" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0004918.exe infected by "Trojan.Win32.LowZones.y" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0004919.exe tagged as not-a-virus:RiskWare.Downloader.Awmcash.a. No Action Taken.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0004921.exe tagged as not-a-virus:AdWare.ToolBar.ISearch.d. No Action Taken.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0004925.exe infected by "Trojan-Downloader.Win32.Dyfuca.dx" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0004926.exe tagged as not-a-virus:AdWare.Sahat.o. No Action Taken.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0004930.dll tagged as not-a-virus:AdWare.Sahat.l. No Action Taken.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0004961.dll infected by "Trojan-Downloader.Win32.Small.anu" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0004965.dll infected by "Trojan-Downloader.Win32.Agent.kf" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005934.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005935.EXE infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005936.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005937.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005938.EXE infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005939.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005940.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005941.EXE infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005942.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005943.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005944.EXE infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005945.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005946.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005947.EXE infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005948.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005949.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005950.EXE infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005951.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005952.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005953.EXE infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005954.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005955.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005956.EXE infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005957.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005958.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005959.EXE infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005960.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005961.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005962.EXE infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005963.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005964.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005965.EXE infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005966.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005967.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005968.EXE infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005969.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005970.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005971.EXE infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005972.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005973.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005974.EXE infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005975.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005976.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005977.EXE infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005978.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005979.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005980.EXE infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005981.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005982.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005983.EXE infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005984.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005985.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005986.EXE infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005987.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005988.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005989.EXE infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005990.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005991.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005992.EXE infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005993.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005994.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005995.EXE infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005996.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0006025.exe infected by "Trojan-Dropper.Win32.Small.vv" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0006026.exe infected by "Trojan.Win32.LowZones.y" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0006027.exe tagged as not-a-virus:RiskWare.Downloader.Awmcash.a. No Action Taken.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0006028.exe tagged as not-a-virus:AdWare.ToolBar.ISearch.d. No Action Taken.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006078.exe tagged as not-a-virus:AdWare.WinAD.af. No Action Taken.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006092.exe tagged as not-a-virus:AdWare.ToolBar.ISearch.d. No Action Taken.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006093.exe infected by "Trojan.Win32.Delprot.a" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006095.dll tagged as not-a-virus:AdWare.ToolBar.ISearch.d. No Action Taken.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006097.dll infected by "Trojan-Downloader.Win32.Ieser.a" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006147.dll infected by "Trojan-Downloader.Win32.Agent.kf" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006148.exe infected by "Trojan-Downloader.Win32.Delf.cb" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006149.dll infected by "Trojan-Downloader.Win32.Agent.kf" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006150.dll infected by "Trojan-Downloader.Win32.Ieser.a" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006151.exe infected by "Trojan-Downloader.Win32.Delf.cb" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006152.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006153.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006154.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006155.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006156.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006157.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006158.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006159.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006160.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006161.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006162.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006163.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006164.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006165.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006166.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006167.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006168.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006169.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006170.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006171.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006172.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006173.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006174.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006175.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006176.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\snapshot\MFEX-2.DAT tagged as not-a-virus:AdWare.BetterInternet. No Action Taken.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\snapshot\MFEX-3.DAT tagged as not-a-virus:AdWare.ToolBar.ISearch.d. No Action Taken.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\snapshot\MFEX-4.DAT tagged as not-a-virus:AdWare.ToolBar.ISearch.d. No Action Taken.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\snapshot\MFEX-5.DAT infected by "Trojan-Downloader.Win32.Ieser.a" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\70tovmto.exe tagged as not-a-virus:AdWare.Sahat.o. No Action Taken.
      File C:\WINDOWS\ceres.dll tagged as not-a-virus:AdWare.BetterInternet. No Action Taken.
      File C:\WINDOWS\Downloaded Program Files\gka.exe infected by "Trojan-Downloader.Win32.Delf.cb" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\bln02nqv.exe tagged as not-a-virus:AdWare.Sahat.o. No Action Taken.
      File C:\winloadhh.dll infected by "Trojan-Downloader.Win32.Small.anu" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\70tovmto.exe tagged as not-a-virus:AdWare.Sahat.o. No Action Taken.
      File C:\WINDOWS\ceres.dll tagged as not-a-virus:AdWare.BetterInternet. No Action Taken.

      Äänestä

    • mä vaan kirjoitti:

      File C:\WINDOWS\system32\drivers\delprot.sys infected by "Trojan.Win32.Delprot.a" Virus. Action Taken: File to be deleted on reboot.
      File C:\WINDOWS\70tovmto.exe tagged as not-a-virus:AdWare.Sahat.o. No Action Taken.
      File C:\WINDOWS\ceres.dll tagged as not-a-virus:AdWare.BetterInternet. No Action Taken.
      File C:\WINDOWS\System32\bln02nqv.exe tagged as not-a-virus:AdWare.Sahat.o. No Action Taken.
      File C:\Documents and Settings\1\Local Settings\Temp\B74136506\build2.exe tagged as not-a-virus:AdWare.ToolBar.ISearch.d. No Action Taken.
      File C:\Documents and Settings\1\Local Settings\Temp\temp.fr0B16 tagged as not-a-virus:AdWare.Sahat.l. No Action Taken.
      File C:\Program Files\Internet Explorer\gka.exe infected by "Trojan-Downloader.Win32.Delf.cb" Virus. Action Taken: File Deleted.
      File C:\sys1056428588.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\sys1215818218.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\sys1226112075.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\sys1370516347.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\sys1374720030.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\sys1437524112.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\sys1501821867.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\sys1525214475.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\sys1556221954.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\sys166916536.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\sys1853511958.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\sys1927432762.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\sys2115517556.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\sys2419821899.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\sys2487516338.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\sys2765622075.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\sys2832324465.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\sys2943928780.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\sys3030810100.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\sys465122247.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\sys552812611.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\sys61454109.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\sys633129710.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\sys891323168.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\sys964119090.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP32\A0002778.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP32\A0002779.EXE infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP32\A0002780.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP32\A0002781.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP32\A0002782.EXE infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP32\A0002783.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP32\A0002784.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP32\A0002785.EXE infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP32\A0002786.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP32\A0002787.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP32\A0002788.EXE infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP32\A0002789.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0002823.exe infected by "Trojan-Dropper.Win32.Small.vv" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0002824.exe infected by "Trojan.Win32.LowZones.y" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0002825.exe tagged as not-a-virus:RiskWare.Downloader.Awmcash.a. No Action Taken.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0002826.exe tagged as not-a-virus:AdWare.ToolBar.ISearch.d. No Action Taken.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0002849.dll infected by "Trojan-Downloader.Win32.Small.anu" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0002850.dll infected by "Trojan-Downloader.Win32.Agent.kf" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0003849.exe infected by "Trojan-Dropper.Win32.Small.vv" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0003850.exe infected by "Trojan.Win32.LowZones.y" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0003851.exe tagged as not-a-virus:RiskWare.Downloader.Awmcash.a. No Action Taken.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0003852.exe tagged as not-a-virus:AdWare.ToolBar.ISearch.d. No Action Taken.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0003853.dll infected by "Trojan-Downloader.Win32.Small.anu" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0003868.exe infected by "Trojan-Dropper.Win32.Small.vv" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0003869.exe infected by "Trojan.Win32.LowZones.y" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0003870.exe tagged as not-a-virus:RiskWare.Downloader.Awmcash.a. No Action Taken.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0003871.exe tagged as not-a-virus:AdWare.ToolBar.ISearch.d. No Action Taken.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0003872.dll infected by "Trojan-Downloader.Win32.Small.anu" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0004865.exe infected by "Trojan-Dropper.Win32.Small.vv" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0004866.exe infected by "Trojan.Win32.LowZones.y" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0004867.exe tagged as not-a-virus:RiskWare.Downloader.Awmcash.a. No Action Taken.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0004868.exe tagged as not-a-virus:AdWare.ToolBar.ISearch.d. No Action Taken.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0004872.dll infected by "Trojan-Downloader.Win32.Small.anu" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0004917.exe infected by "Trojan-Dropper.Win32.Small.vv" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0004918.exe infected by "Trojan.Win32.LowZones.y" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0004919.exe tagged as not-a-virus:RiskWare.Downloader.Awmcash.a. No Action Taken.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0004921.exe tagged as not-a-virus:AdWare.ToolBar.ISearch.d. No Action Taken.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0004925.exe infected by "Trojan-Downloader.Win32.Dyfuca.dx" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0004926.exe tagged as not-a-virus:AdWare.Sahat.o. No Action Taken.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0004930.dll tagged as not-a-virus:AdWare.Sahat.l. No Action Taken.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0004961.dll infected by "Trojan-Downloader.Win32.Small.anu" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0004965.dll infected by "Trojan-Downloader.Win32.Agent.kf" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005934.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005935.EXE infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005936.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005937.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005938.EXE infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005939.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005940.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005941.EXE infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005942.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005943.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005944.EXE infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005945.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005946.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005947.EXE infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005948.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005949.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005950.EXE infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005951.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005952.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005953.EXE infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005954.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005955.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005956.EXE infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005957.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005958.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005959.EXE infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005960.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005961.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005962.EXE infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005963.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005964.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005965.EXE infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005966.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005967.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005968.EXE infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005969.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005970.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005971.EXE infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005972.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005973.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005974.EXE infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005975.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005976.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005977.EXE infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005978.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005979.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005980.EXE infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005981.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005982.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005983.EXE infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005984.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005985.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005986.EXE infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005987.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005988.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005989.EXE infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005990.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005991.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005992.EXE infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005993.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005994.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005995.EXE infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0005996.DLL infected by "Trojan.Win32.WebSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0006025.exe infected by "Trojan-Dropper.Win32.Small.vv" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0006026.exe infected by "Trojan.Win32.LowZones.y" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0006027.exe tagged as not-a-virus:RiskWare.Downloader.Awmcash.a. No Action Taken.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP34\A0006028.exe tagged as not-a-virus:AdWare.ToolBar.ISearch.d. No Action Taken.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006078.exe tagged as not-a-virus:AdWare.WinAD.af. No Action Taken.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006092.exe tagged as not-a-virus:AdWare.ToolBar.ISearch.d. No Action Taken.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006093.exe infected by "Trojan.Win32.Delprot.a" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006095.dll tagged as not-a-virus:AdWare.ToolBar.ISearch.d. No Action Taken.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006097.dll infected by "Trojan-Downloader.Win32.Ieser.a" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006147.dll infected by "Trojan-Downloader.Win32.Agent.kf" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006148.exe infected by "Trojan-Downloader.Win32.Delf.cb" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006149.dll infected by "Trojan-Downloader.Win32.Agent.kf" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006150.dll infected by "Trojan-Downloader.Win32.Ieser.a" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006151.exe infected by "Trojan-Downloader.Win32.Delf.cb" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006152.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006153.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006154.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006155.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006156.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006157.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006158.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006159.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006160.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006161.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006162.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006163.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006164.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006165.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006166.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006167.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006168.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006169.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006170.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006171.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006172.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006173.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006174.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006175.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\A0006176.exe infected by "Trojan-Dropper.Win32.Small.vn" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\snapshot\MFEX-2.DAT tagged as not-a-virus:AdWare.BetterInternet. No Action Taken.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\snapshot\MFEX-3.DAT tagged as not-a-virus:AdWare.ToolBar.ISearch.d. No Action Taken.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\snapshot\MFEX-4.DAT tagged as not-a-virus:AdWare.ToolBar.ISearch.d. No Action Taken.
      File C:\System Volume Information\_restore{45A145BA-A9CB-4909-B99F-37A7C371AB33}\RP35\snapshot\MFEX-5.DAT infected by "Trojan-Downloader.Win32.Ieser.a" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\70tovmto.exe tagged as not-a-virus:AdWare.Sahat.o. No Action Taken.
      File C:\WINDOWS\ceres.dll tagged as not-a-virus:AdWare.BetterInternet. No Action Taken.
      File C:\WINDOWS\Downloaded Program Files\gka.exe infected by "Trojan-Downloader.Win32.Delf.cb" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\system32\bln02nqv.exe tagged as not-a-virus:AdWare.Sahat.o. No Action Taken.
      File C:\winloadhh.dll infected by "Trojan-Downloader.Win32.Small.anu" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\70tovmto.exe tagged as not-a-virus:AdWare.Sahat.o. No Action Taken.
      File C:\WINDOWS\ceres.dll tagged as not-a-virus:AdWare.BetterInternet. No Action Taken.

      Tais olla pisin E-scan logi mitä oon nähny

      Sammuta System Restore (järjestelmänpalautustoiminto)

      Käynnistä sitte kone vikasietotilassa ja poista nuo

      C:\WINDOWS\70tovmto.exe
      C:\WINDOWS\ceres.dll
      C:\WINDOWS\System32\bln02nqv.exe

      Tyhjennä tuolta tuo Temp kansio

      C:\Documents and Settings\1\Local Settings\Temp

      Käynnistä sitte normaalisti ja pistä se System Restore takas päälle ja tee uus palautuspiste.

      Äänestä

    • Juu kirjoitti:

      Tais olla pisin E-scan logi mitä oon nähny

      Sammuta System Restore (järjestelmänpalautustoiminto)

      Käynnistä sitte kone vikasietotilassa ja poista nuo

      C:\WINDOWS\70tovmto.exe
      C:\WINDOWS\ceres.dll
      C:\WINDOWS\System32\bln02nqv.exe

      Tyhjennä tuolta tuo Temp kansio

      C:\Documents and Settings\1\Local Settings\Temp

      Käynnistä sitte normaalisti ja pistä se System Restore takas päälle ja tee uus palautuspiste.

      Sammuta System Restore (järjestelmänpalautustoiminto)

      eScannista???

      Äänestä

    • mä vaan kirjoitti:

      Sammuta System Restore (järjestelmänpalautustoiminto)

      eScannista???

      1. Valitse My Computer (klikkaa oikealla).
      2. Valitse Properties. (ominaisuudet)
      3. Valitse System Restore välilehti.
      4. Valitse "Turn off System Restore".
      5. Paina Apply.
      6. Paina OK.

      Niin ja sitte toisin päin ku pistää sen päälle

      > eScannista??? <

      No scanneri jolla scannsit

      Äänestä

    • Juu kirjoitti:

      1. Valitse My Computer (klikkaa oikealla).
      2. Valitse Properties. (ominaisuudet)
      3. Valitse System Restore välilehti.
      4. Valitse "Turn off System Restore".
      5. Paina Apply.
      6. Paina OK.

      Niin ja sitte toisin päin ku pistää sen päälle

      > eScannista??? <

      No scanneri jolla scannsit

      ruksin kävin ottamassa pois ja tuleeko se paulautus piste sitten automaattisesti?

      Äänestä

    • mä vaan kirjoitti:

      ruksin kävin ottamassa pois ja tuleeko se paulautus piste sitten automaattisesti?

      Start kohta ja sieltä systeemityökalut ja järj.palutus kohta ja siellä on ohjeet miten tehä se uus piste.

      Äänestä

    • Juu kirjoitti:

      Start kohta ja sieltä systeemityökalut ja järj.palutus kohta ja siellä on ohjeet miten tehä se uus piste.

      File C:\WINDOWS\system32\drivers\delprot.sys infected by "Trojan.Win32.Delprot.a" Virus. Action Taken: File to be deleted on reboot.

      toi oli ainut minkä eScan antoi ja ei lähtenyt troijan hunterilla.

      Äänestä

    • Juu kirjoitti:

      Start kohta ja sieltä systeemityökalut ja järj.palutus kohta ja siellä on ohjeet miten tehä se uus piste.

      on muuten englannin kielinen käyttis meni vähän vaikeaksi etsiä oikea valikko

      Äänestä

    Windows XP:
    1. Valitse My Computer (klikkaa oikealla).
    2. Valitse Properties.
    3. Valitse System Restore välilehti.
    4. Valitse "Turn off System Restore".
    5. Paina Apply.
    6. Paina OK.
    7. Käynnistä kone uudelleen
    8. Tarkista kaikki kiintolevyt virusten varalta.

    Äänestä

    • KÄÄNTEISESTI, jos palautuspistettä teet !!!

      Viestin hierarkia oli liian " syvältä " väittää SUOMI24 !!!! Sen takia NÄIN.....

      Äänestä

    File C:\WINDOWS\system32\drivers\delprot.sys infected by "Trojan.Win32.Delprot.a" Virus. Action Taken: File to be deleted on reboot.

    > toi oli ainut minkä eScan antoi <

    Mitäköhän tolla tarkoitat

    tuo lähtee seuraavassa koneen startissa itestään käsittääkseni,mutta voit varmistaa vielä että se on poissa

    Äänestä

    Odottaa vastausta

    Näihin keskusteluihin ei ole vielä vastattu. Ole ensimmäinen.

    Luetuimmat keskustelut

    Kommentoi aloitusta

    mä vaan kirjoitti:

    Logfile of HijackThis v1.99.1
    Scan saved at 10:10:37, on 03/31/2005
    Platform: Windows XP SP1 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\AVPersonal\AVGUARD.EXE
    C:\Program Files\AVPersonal\AVWUPSRV.EXE
    C:\WINDOWS\system32\ZoneLabs\vsmon.exe
    C:\WINDOWS\System32\RunDll32.exe
    C:\WINDOWS\System32\sistray.EXE
    C:\WINDOWS\System32\keyhook.exe
    C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
    C:\Program Files\AVPersonal\AVGNT.EXE
    C:\Program Files\MSN Apps\Updater\01.02.3000.1001\fi\msnappau.exe
    C:\Program Files\Winamp\winampa.exe
    C:\program files\powerstrip\pstrip.exe
    C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
    C:\WINDOWS\System32\cmd32.exe
    C:\WINDOWS\isrvs\desktop.exe
    C:\Program Files\Media Access\MediaAccK.exe
    C:\Program Files\Media Access\MediaAccess.exe
    C:\WINDOWS\System32\Services\{DB39A8A3-80BC-44B8-8D10-BFD146E83AEB}\SVCHOST.EXE
    C:\WINDOWS\System32\ctfmon.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\WINDOWS\System32\izxczxcr.exe
    C:\WINDOWS\System32\intrcxzcxzcon.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Documents and Settings\1\Desktop\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fi/0SEFIFI/SAOS01
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.suomi24.fi/
    O2 - BHO: CeresObj Class - {00000049-8F91-4D9C-9573-F016E7626484} - C:\WINDOWS\ceres.dll
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
    O2 - BHO: IE Update Class - {5B4AB8E2-6DC5-477A-B637-BF3C1A2E5993} - C:\WINDOWS\isrvs\sysupd.dll
    O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.02.3000.1002\en-xu\stmain.dll
    O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fi\msntb.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
    O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fi\msntb.dll
    O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
    O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
    O4 - HKLM\..\Run: [SiS Tray] C:\WINDOWS\System32\sistray.EXE
    O4 - HKLM\..\Run: [SiS Windows KeyHook] C:\WINDOWS\System32\keyhook.exe
    O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
    O4 - HKLM\..\Run: [AVGCtrl] C:\Program Files\AVPersonal\AVGNT.EXE /min
    O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.02.3000.1001\fi\msnappau.exe"
    O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
    O4 - HKLM\..\Run: [PowerStrip] c:\program files\powerstrip\pstrip.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
    O4 - HKLM\..\Run: [ControlPanel] C:\WINDOWS\System32\cmd32.exe internat.dll,LoadKeyboardProfile
    O4 - HKLM\..\Run: [Desktop Search] C:\WINDOWS\isrvs\desktop.exe
    O4 - HKLM\..\Run: [ffis] C:\WINDOWS\isrvs\ffisearch.exe
    O4 - HKLM\..\Run: [Media Access] C:\Program Files\Media Access\MediaAccK.exe
    O4 - HKLM\..\Run: [Security iGuard] C:\Program Files\Security iGuard\Security iGuard.exe
    O4 - HKLM\..\Run: [Service Host] C:\WINDOWS\System32\Services\{DB39A8A3-80BC-44B8-8D10-BFD146E83AEB}\SVCHOST.EXE
    O4 - HKLM\..\Run: [gah95on6] C:\WINDOWS\System32\gah95on6.exe
    O4 - HKLM\..\Run: [SpySpotter] C:\PROGRA~1\SPYSPO~1\SpySpotter.exe -onreboot
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
    O4 - HKCU\..\Run: [Steam] E:\steam\Steam.exe -silent
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: Microsoft AntiSpyware helper - {9111E61B-4403-4B66-BC1B-AA69A834FEE1} - (no file) (HKCU)
    O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {9111E61B-4403-4B66-BC1B-AA69A834FEE1} - (no file) (HKCU)
    O9 - Extra button: Microsoft AntiSpyware helper - {A207DDB9-10D0-4440-84FA-6C94FA52CADA} - (no file) (HKCU)
    O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {A207DDB9-10D0-4440-84FA-6C94FA52CADA} - (no file) (HKCU)
    O9 - Extra button: Microsoft AntiSpyware helper - {C70C123F-AE95-4A0E-B009-62DE72A14EFE} - (no file) (HKCU)
    O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {C70C123F-AE95-4A0E-B009-62DE72A14EFE} - (no file) (HKCU)
    O9 - Extra button: Microsoft AntiSpyware helper - {F5A788F0-FDB1-471D-83C7-F969E8C9786B} - (no file) (HKCU)
    O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {F5A788F0-FDB1-471D-83C7-F969E8C9786B} - (no file) (HKCU)
    O15 - Trusted Zone: *.blazefind.com
    O15 - Trusted Zone: *.clickspring.net
    O15 - Trusted Zone: *.flingstone.com
    O15 - Trusted Zone: *.mt-download.com
    O15 - Trusted Zone: *.my-internet.info
    O15 - Trusted Zone: *.searchbarcash.com
    O15 - Trusted Zone: *.searchmiracle.com
    O15 - Trusted Zone: *.skoobidoo.com
    O15 - Trusted Zone: *.slotch.com
    O15 - Trusted Zone: *.slotchbar.com
    O15 - Trusted Zone: *.windupdates.com
    O15 - Trusted Zone: *.xxxtoolbar.com
    O15 - Trusted Zone: *.ysbweb.com
    O15 - Trusted Zone: *.blazefind.com (HKLM)
    O15 - Trusted Zone: *.clickspring.net (HKLM)
    O15 - Trusted Zone: *.flingstone.com (HKLM)
    O15 - Trusted Zone: *.mt-download.com (HKLM)
    O15 - Trusted Zone: *.my-internet.info (HKLM)
    O15 - Trusted Zone: *.searchbarcash.com (HKLM)
    O15 - Trusted Zone: *.searchmiracle.com (HKLM)
    O15 - Trusted Zone: *.skoobidoo.com (HKLM)
    O15 - Trusted Zone: *.slotch.com (HKLM)
    O15 - Trusted Zone: *.slotchbar.com (HKLM)
    O15 - Trusted Zone: *.windupdates.com (HKLM)
    O15 - Trusted Zone: *.xxxtoolbar.com (HKLM)
    O15 - Trusted Zone: *.ysbweb.com (HKLM)
    O15 - Trusted IP range: 67.19.185.246
    O15 - Trusted IP range: 67.19.185.246 (HKLM)
    O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
    O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/6247971CanadaInc/ie/bridge-c7.cab
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1111498353686
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
    O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
    O18 - Filter: text/html - {950238FB-C706-4791-8674-4D429F85897E} - C:\WINDOWS\isrvs\mfiltis.dll
    O23 - Service: AntiVir Service (AntiVirService) - H BEDV Datentechnik GmbH - C:\Program Files\AVPersonal\AVGUARD.EXE
    O23 - Service: AntiVir Update (AVWUpSrv) - H BEDV Datentechnik GmbH, Germany - C:\Program Files\AVPersonal\AVWUPSRV.EXE
    O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

    Anonyymi
    5000

    Ilmoita asiaton sisältö

    • Sisältää materiaalia, joka on loukkaavaa, herjaavaa, rasistista, uhkailevaa tai ahdistelevaa.

    • Materiaali sisältää nimiä, yhteystietoja tai muita henkilökohtaisia tietoja. Julkisuuden henkilöistä, julkisissa viroissa toimivista ihmisistä sekä yritysten vastuuhenkilöistä saa keskustella työhön liittyen. Myös yksityiselämään liittyvistä asioista voi keskustella siltä osin, kuin niistä on julkisesti kerrottu.

    • Sisältää lapsille haitallista tai heiltä kiellettyä materiaalia. Seksuaalinen sisältö on sallittua aiheeseen tarkoitetuilla palstoilla, joiden ikäraja on 18 vuotta.

    • Lainvastaista sisältöä voi olla mm. yksityiselämää loukkaavan tiedon levitys, kiihottaminen kansanryhmää vastaan, laiton uhkaaminen, alaikäisiin liittyvä seksuaalinen sisältö/grooming, petokset, identiteettivarkaudet, kunnianloukkaukset ja tekijänoikeusrikkomukset.

    • Sisältö ei liity palstan tai keskusteluketjun aiheeseen.

    • Viesti ei ole suomea tai ruotsia (pl. International Forums), se sisältää mainontaa, se sisältää tekijänoikeuksin suojattua materiaalia, se on massapostitus tai jokin muu syy.

    Jaa keskustelu