web search bar poisto

apua taas kerran

2005-07-10 19:31:21

Mitä poistan täältä?

Poistin lisää/poista-sovelluksen kautta mywebsearchtoolbarin mutta ei poistunut.

Logfile of HijackThis v1.98.2
Scan saved at 19:11:06, on 10.7.2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Sygate\SPF\smc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Java\j2re1.4.2_01\bin\jusched.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Sonera Tietoturva\Common\FSM32.EXE
C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\QuickTime\qttask.exe
C:\Documents and Settings\Latexi\Työpöytä\Winamp\winampa.exe
C:\WINDOWS\System32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\PROGRA~1\SONERA~2\backweb\4436233\Program\SERVIC~1.EXE
C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
C:\Program Files\Sonera Tietoturva\Anti-Virus\fsgk32st.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Sonera Tietoturva\Anti-Virus\FSGK32.EXE
C:\Program Files\Sonera Tietoturva\backweb\4436233\program\fsbwsys.exe
C:\Program Files\Sonera Tietoturva\backweb\4436233\Program\fspex.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\Sonera Tietoturva\Anti-Virus\fssm32.exe
C:\Program Files\Sonera Tietoturva\Common\FSMA32.EXE
C:\Program Files\Sonera Tietoturva\Common\FSMB32.EXE
C:\Program Files\Sonera Tietoturva\Common\FCH32.EXE
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Sonera Tietoturva\Common\FAMEH32.EXE
C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
C:\Program Files\Sonera Tietoturva\Anti-Virus\fsav32.exe
C:\Program Files\Sonera Tietoturva\FWES\Program\fsdfwd.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_SICN03.EXE
C:\Program Files\Sonera Tietoturva\FSGUI\fsguiexe.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\System32\wuauclt.exe
C:\hijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.vetvzrjhbkurmw.uk/MeWGb5Y9i_1r1C6oFZJ2Q9d1IVbWnm10jjbnYJIwMQonCX9iJCnTidbti5LRqw_6.php
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fi/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = file://C:\APPS\IE\offline\fin.htm
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.websearch.com/ie.aspx?tb_id=50168
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Packard Bell
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\apps\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {A16ACDF6-C326-CEEC-B3DA-7579753F0F3B} - C:\DOCUME~1\Mertsi\APPLIC~1\USERBO~1\Wave Axis.exe
O3 - Toolbar: (no name) - {C5183ABC-EB6E-4E05-B8C9-500A16B6CF94} - (no file)
O3 - Toolbar: MSN-työkalurivi - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar\01.01.2607.0\fi\msntb.dll (file missing)
O3 - Toolbar: (no name) - {339BB23F-A864-48C0-A59F-29EA915965EC} - (no file)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\system32\msdxm.ocx
O4 - HKLM\..\Run: [VCSPlayer] "C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_01\bin\jusched.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKLM\..\Run: [News Service] "C:\Program Files\Sonera Tietoturva\FSGUI\ispnews.exe"
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Sonera Tietoturva\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Sonera Tietoturva\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [ATIPTA] C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.02.0002.1001\fi\msnappau.exe"
O4 - HKLM\..\Run: [WinampAgent] C:\Documents and Settings\Latexi\Työpöytä\Winamp\winampa.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [Bash Love Thunk Regs] C:\Documents and Settings\All Users\Application Data\32 corn bash love\byte army.exe
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - Global Startup: EPSON Status Monitor 3 Environment Check.lnk = C:\WINDOWS\system32\spool\drivers\w32x86\3\E_SRCV03.EXE
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZCfox000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra button: (no name) - {120E090D-9136-4b78-8258-F0B44B4BD2AC} - C:\WINDOWS\System32\ms.exe (file missing)
O9 - Extra 'Tools' menuitem: MaxSpeed - {120E090D-9136-4b78-8258-F0B44B4BD2AC} - C:\WINDOWS\System32\ms.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fin.htm
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {10B80396-96A7-11D3-B7A6-00A0C94C6AE0} (ParallelGraphics Cortona VRML 1.0 to VRML 2.0 convertor) - http://www.parallelgraphics.com/bin/cortvrml10.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab31267.cab

506

Äänestä

Vastaukset

Juu
2005-07-10 19:38:18
logi tolla versiolla

http://koti.mbnet.fi/pattaya1/HijackThis.exe
- apua taas kerran
  2005-07-10 20:16:09
  sorry, en oo tarvinnut pitkään aikaan.
  
  Logfile of HijackThis v1.99.1
  Scan saved at 20:14:42, on 10.7.2005
  Platform: Windows XP SP2 (WinNT 5.01.2600)
  MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
  
  Running processes:
  C:\WINDOWS\System32\smss.exe
  C:\WINDOWS\system32\winlogon.exe
  C:\WINDOWS\system32\services.exe
  C:\WINDOWS\system32\lsass.exe
  C:\WINDOWS\system32\svchost.exe
  C:\WINDOWS\System32\svchost.exe
  C:\Program Files\Sygate\SPF\smc.exe
  C:\WINDOWS\system32\spoolsv.exe
  C:\PROGRA~1\SONERA~2\backweb\4436233\Program\SERVIC~1.EXE
  C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
  C:\Program Files\Sonera Tietoturva\Anti-Virus\fsgk32st.exe
  C:\Program Files\Sonera Tietoturva\Anti-Virus\FSGK32.EXE
  C:\Program Files\Sonera Tietoturva\backweb\4436233\program\fsbwsys.exe
  C:\Program Files\Sonera Tietoturva\Common\FSMA32.EXE
  C:\Program Files\Sonera Tietoturva\Common\FSMB32.EXE
  C:\WINDOWS\system32\slserv.exe
  C:\Program Files\Sonera Tietoturva\Anti-Virus\fssm32.exe
  C:\WINDOWS\System32\svchost.exe
  C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
  C:\Program Files\Sonera Tietoturva\Common\FCH32.EXE
  C:\Program Files\Sonera Tietoturva\Common\FAMEH32.EXE
  C:\Program Files\Sonera Tietoturva\Anti-Virus\fsav32.exe
  C:\WINDOWS\system32\wuauclt.exe
  C:\Program Files\Sonera Tietoturva\FWES\Program\fsdfwd.exe
  C:\WINDOWS\Explorer.EXE
  C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe
  C:\Program Files\Common Files\Real\Update_OB\realsched.exe
  C:\Program Files\Java\j2re1.4.2_01\bin\jusched.exe
  C:\WINDOWS\SOUNDMAN.EXE
  C:\WINDOWS\system32\wuauclt.exe
  C:\Program Files\Sonera Tietoturva\FSGUI\ispnews.exe
  C:\Program Files\Sonera Tietoturva\Common\FSM32.EXE
  C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
  C:\Program Files\QuickTime\qttask.exe
  C:\Program Files\Sonera Tietoturva\backweb\4436233\Program\fspex.exe
  C:\Documents and Settings\Latexi\Työpöytä\Winamp\winampa.exe
  C:\WINDOWS\System32\LVCOMSX.EXE
  C:\Program Files\Logitech\Video\LogiTray.exe
  C:\Program Files\Sonera Tietoturva\FSGUI\fsguiexe.exe
  C:\Program Files\Internet Explorer\iexplore.exe
  C:\Program Files\Logitech\Video\FxSvr2.exe
  C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_SICN03.EXE
  \?\C:\WINDOWS\system32\WBEM\WMIADAP.EXE
  \?\C:\WINDOWS\system32\WBEM\WMIADAP.EXE
  C:\Program Files\Lavasoft\Ad-Aware SE Personal\Ad-Aware.exe
  C:\Program Files\Internet Explorer\iexplore.exe
  C:\Documents and Settings\Hilkka\Local Settings\Temporary Internet Files\Content.IE5\B2R5T9Z7\HijackThis[1].exe
  
  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.vetvzrjhbkurmw.uk/MeWGb5Y9i_1r1C6oFZJ2Q9d1IVbWnm10jjbnYJIwMQonCX9iJCnTidbti5LRqw_6.php
  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fi/
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = file://C:\APPS\IE\offline\fin.htm
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.websearch.com/ie.aspx?tb_id=50168
  R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Packard Bell
  R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
  O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\apps\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
  O2 - BHO: (no name) - {A16ACDF6-C326-CEEC-B3DA-7579753F0F3B} - C:\DOCUME~1\Mertsi\APPLIC~1\USERBO~1\Wave Axis.exe
  O3 - Toolbar: (no name) - {C5183ABC-EB6E-4E05-B8C9-500A16B6CF94} - (no file)
  O3 - Toolbar: MSN-työkalurivi - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar\01.01.2607.0\fi\msntb.dll (file missing)
  O3 - Toolbar: (no name) - {339BB23F-A864-48C0-A59F-29EA915965EC} - (no file)
  O4 - HKLM\..\Run: [VCSPlayer] "C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe"
  O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
  O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_01\bin\jusched.exe
  O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
  O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
  O4 - HKLM\..\Run: [News Service] "C:\Program Files\Sonera Tietoturva\FSGUI\ispnews.exe"
  O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Sonera Tietoturva\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
  O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Sonera Tietoturva\Common\FSM32.EXE" /splash
  O4 - HKLM\..\Run: [ATIPTA] C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
  O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
  O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
  O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.02.0002.1001\fi\msnappau.exe"
  O4 - HKLM\..\Run: [WinampAgent] C:\Documents and Settings\Latexi\Työpöytä\Winamp\winampa.exe
  O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE
  O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
  O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
  O4 - HKLM\..\Run: [Bash Love Thunk Regs] C:\Documents and Settings\All Users\Application Data\32 corn bash love\byte army.exe
  O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
  O4 - Global Startup: EPSON Status Monitor 3 Environment Check.lnk = C:\WINDOWS\system32\spool\drivers\w32x86\3\E_SRCV03.EXE
  O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
  O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZCfox000
  O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_01\bin\npjpi142_01.dll
  O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_01\bin\npjpi142_01.dll
  O9 - Extra button: (no name) - {120E090D-9136-4b78-8258-F0B44B4BD2AC} - C:\WINDOWS\System32\shdocvw.dll
  O9 - Extra 'Tools' menuitem: MaxSpeed - {120E090D-9136-4b78-8258-F0B44B4BD2AC} - C:\WINDOWS\System32\shdocvw.dll
  O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
  O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
  O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fin.htm
  O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
  O16 - DPF: {10B80396-96A7-11D3-B7A6-00A0C94C6AE0} (ParallelGraphics Cortona VRML 1.0 to VRML 2.0 convertor) - http://www.parallelgraphics.com/bin/cortvrml10.cab
  O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
  O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com//PhotoUpload/MsnPUpld.cab
  O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cab
  O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
  O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
  O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
  O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
  O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab31267.cab
  O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
  O23 - Service: Sonera Tietoturva (BackWeb Plug-in - 4436233) - Unknown owner - C:\PROGRA~1\SONERA~2\backweb\4436233\Program\SERVIC~1.EXE
  O23 - Service: C-DillaSrv - C-Dilla Ltd - C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
  O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\Sonera Tietoturva\Anti-Virus\fsgk32st.exe
  O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\Sonera Tietoturva\backweb\4436233\program\fsbwsys.exe
  O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Sonera Tietoturva\FWES\Program\fsdfwd.exe
  O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\Sonera Tietoturva\Common\FSMA32.EXE
  O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
  O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe
  O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
  O23 - Service: Virtual CD v4 Security service (SDK - Version) (VCSSecS) - H H Software GmbH - C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
- apua taas kerran
  2005-07-10 20:17:26
  apua taas kerran kirjoitti:
  sorry, en oo tarvinnut pitkään aikaan.
  
  Logfile of HijackThis v1.99.1
  Scan saved at 20:14:42, on 10.7.2005
  Platform: Windows XP SP2 (WinNT 5.01.2600)
  MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
  
  Running processes:
  C:\WINDOWS\System32\smss.exe
  C:\WINDOWS\system32\winlogon.exe
  C:\WINDOWS\system32\services.exe
  C:\WINDOWS\system32\lsass.exe
  C:\WINDOWS\system32\svchost.exe
  C:\WINDOWS\System32\svchost.exe
  C:\Program Files\Sygate\SPF\smc.exe
  C:\WINDOWS\system32\spoolsv.exe
  C:\PROGRA~1\SONERA~2\backweb\4436233\Program\SERVIC~1.EXE
  C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
  C:\Program Files\Sonera Tietoturva\Anti-Virus\fsgk32st.exe
  C:\Program Files\Sonera Tietoturva\Anti-Virus\FSGK32.EXE
  C:\Program Files\Sonera Tietoturva\backweb\4436233\program\fsbwsys.exe
  C:\Program Files\Sonera Tietoturva\Common\FSMA32.EXE
  C:\Program Files\Sonera Tietoturva\Common\FSMB32.EXE
  C:\WINDOWS\system32\slserv.exe
  C:\Program Files\Sonera Tietoturva\Anti-Virus\fssm32.exe
  C:\WINDOWS\System32\svchost.exe
  C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
  C:\Program Files\Sonera Tietoturva\Common\FCH32.EXE
  C:\Program Files\Sonera Tietoturva\Common\FAMEH32.EXE
  C:\Program Files\Sonera Tietoturva\Anti-Virus\fsav32.exe
  C:\WINDOWS\system32\wuauclt.exe
  C:\Program Files\Sonera Tietoturva\FWES\Program\fsdfwd.exe
  C:\WINDOWS\Explorer.EXE
  C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe
  C:\Program Files\Common Files\Real\Update_OB\realsched.exe
  C:\Program Files\Java\j2re1.4.2_01\bin\jusched.exe
  C:\WINDOWS\SOUNDMAN.EXE
  C:\WINDOWS\system32\wuauclt.exe
  C:\Program Files\Sonera Tietoturva\FSGUI\ispnews.exe
  C:\Program Files\Sonera Tietoturva\Common\FSM32.EXE
  C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
  C:\Program Files\QuickTime\qttask.exe
  C:\Program Files\Sonera Tietoturva\backweb\4436233\Program\fspex.exe
  C:\Documents and Settings\Latexi\Työpöytä\Winamp\winampa.exe
  C:\WINDOWS\System32\LVCOMSX.EXE
  C:\Program Files\Logitech\Video\LogiTray.exe
  C:\Program Files\Sonera Tietoturva\FSGUI\fsguiexe.exe
  C:\Program Files\Internet Explorer\iexplore.exe
  C:\Program Files\Logitech\Video\FxSvr2.exe
  C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_SICN03.EXE
  \?\C:\WINDOWS\system32\WBEM\WMIADAP.EXE
  \?\C:\WINDOWS\system32\WBEM\WMIADAP.EXE
  C:\Program Files\Lavasoft\Ad-Aware SE Personal\Ad-Aware.exe
  C:\Program Files\Internet Explorer\iexplore.exe
  C:\Documents and Settings\Hilkka\Local Settings\Temporary Internet Files\Content.IE5\B2R5T9Z7\HijackThis[1].exe
  
  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.vetvzrjhbkurmw.uk/MeWGb5Y9i_1r1C6oFZJ2Q9d1IVbWnm10jjbnYJIwMQonCX9iJCnTidbti5LRqw_6.php
  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fi/
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = file://C:\APPS\IE\offline\fin.htm
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.websearch.com/ie.aspx?tb_id=50168
  R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Packard Bell
  R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
  O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\apps\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
  O2 - BHO: (no name) - {A16ACDF6-C326-CEEC-B3DA-7579753F0F3B} - C:\DOCUME~1\Mertsi\APPLIC~1\USERBO~1\Wave Axis.exe
  O3 - Toolbar: (no name) - {C5183ABC-EB6E-4E05-B8C9-500A16B6CF94} - (no file)
  O3 - Toolbar: MSN-työkalurivi - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar\01.01.2607.0\fi\msntb.dll (file missing)
  O3 - Toolbar: (no name) - {339BB23F-A864-48C0-A59F-29EA915965EC} - (no file)
  O4 - HKLM\..\Run: [VCSPlayer] "C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe"
  O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
  O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_01\bin\jusched.exe
  O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
  O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
  O4 - HKLM\..\Run: [News Service] "C:\Program Files\Sonera Tietoturva\FSGUI\ispnews.exe"
  O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Sonera Tietoturva\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
  O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Sonera Tietoturva\Common\FSM32.EXE" /splash
  O4 - HKLM\..\Run: [ATIPTA] C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
  O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
  O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
  O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.02.0002.1001\fi\msnappau.exe"
  O4 - HKLM\..\Run: [WinampAgent] C:\Documents and Settings\Latexi\Työpöytä\Winamp\winampa.exe
  O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE
  O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
  O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
  O4 - HKLM\..\Run: [Bash Love Thunk Regs] C:\Documents and Settings\All Users\Application Data\32 corn bash love\byte army.exe
  O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
  O4 - Global Startup: EPSON Status Monitor 3 Environment Check.lnk = C:\WINDOWS\system32\spool\drivers\w32x86\3\E_SRCV03.EXE
  O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
  O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZCfox000
  O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_01\bin\npjpi142_01.dll
  O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_01\bin\npjpi142_01.dll
  O9 - Extra button: (no name) - {120E090D-9136-4b78-8258-F0B44B4BD2AC} - C:\WINDOWS\System32\shdocvw.dll
  O9 - Extra 'Tools' menuitem: MaxSpeed - {120E090D-9136-4b78-8258-F0B44B4BD2AC} - C:\WINDOWS\System32\shdocvw.dll
  O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
  O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
  O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fin.htm
  O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
  O16 - DPF: {10B80396-96A7-11D3-B7A6-00A0C94C6AE0} (ParallelGraphics Cortona VRML 1.0 to VRML 2.0 convertor) - http://www.parallelgraphics.com/bin/cortvrml10.cab
  O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
  O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com//PhotoUpload/MsnPUpld.cab
  O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cab
  O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
  O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
  O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
  O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
  O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab31267.cab
  O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
  O23 - Service: Sonera Tietoturva (BackWeb Plug-in - 4436233) - Unknown owner - C:\PROGRA~1\SONERA~2\backweb\4436233\Program\SERVIC~1.EXE
  O23 - Service: C-DillaSrv - C-Dilla Ltd - C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
  O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\Sonera Tietoturva\Anti-Virus\fsgk32st.exe
  O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\Sonera Tietoturva\backweb\4436233\program\fsbwsys.exe
  O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Sonera Tietoturva\FWES\Program\fsdfwd.exe
  O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\Sonera Tietoturva\Common\FSMA32.EXE
  O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
  O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe
  O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
  O23 - Service: Virtual CD v4 Security service (SDK - Version) (VCSSecS) - H H Software GmbH - C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
  latasin tossa välillä sp2-päivityksen, kun varhaisnuoriso on sen jostain syystä poistanut koneelta.
- Juu
  2005-07-10 20:24:17
  apua taas kerran kirjoitti:
  sorry, en oo tarvinnut pitkään aikaan.
  
  Logfile of HijackThis v1.99.1
  Scan saved at 20:14:42, on 10.7.2005
  Platform: Windows XP SP2 (WinNT 5.01.2600)
  MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
  
  Running processes:
  C:\WINDOWS\System32\smss.exe
  C:\WINDOWS\system32\winlogon.exe
  C:\WINDOWS\system32\services.exe
  C:\WINDOWS\system32\lsass.exe
  C:\WINDOWS\system32\svchost.exe
  C:\WINDOWS\System32\svchost.exe
  C:\Program Files\Sygate\SPF\smc.exe
  C:\WINDOWS\system32\spoolsv.exe
  C:\PROGRA~1\SONERA~2\backweb\4436233\Program\SERVIC~1.EXE
  C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
  C:\Program Files\Sonera Tietoturva\Anti-Virus\fsgk32st.exe
  C:\Program Files\Sonera Tietoturva\Anti-Virus\FSGK32.EXE
  C:\Program Files\Sonera Tietoturva\backweb\4436233\program\fsbwsys.exe
  C:\Program Files\Sonera Tietoturva\Common\FSMA32.EXE
  C:\Program Files\Sonera Tietoturva\Common\FSMB32.EXE
  C:\WINDOWS\system32\slserv.exe
  C:\Program Files\Sonera Tietoturva\Anti-Virus\fssm32.exe
  C:\WINDOWS\System32\svchost.exe
  C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
  C:\Program Files\Sonera Tietoturva\Common\FCH32.EXE
  C:\Program Files\Sonera Tietoturva\Common\FAMEH32.EXE
  C:\Program Files\Sonera Tietoturva\Anti-Virus\fsav32.exe
  C:\WINDOWS\system32\wuauclt.exe
  C:\Program Files\Sonera Tietoturva\FWES\Program\fsdfwd.exe
  C:\WINDOWS\Explorer.EXE
  C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe
  C:\Program Files\Common Files\Real\Update_OB\realsched.exe
  C:\Program Files\Java\j2re1.4.2_01\bin\jusched.exe
  C:\WINDOWS\SOUNDMAN.EXE
  C:\WINDOWS\system32\wuauclt.exe
  C:\Program Files\Sonera Tietoturva\FSGUI\ispnews.exe
  C:\Program Files\Sonera Tietoturva\Common\FSM32.EXE
  C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
  C:\Program Files\QuickTime\qttask.exe
  C:\Program Files\Sonera Tietoturva\backweb\4436233\Program\fspex.exe
  C:\Documents and Settings\Latexi\Työpöytä\Winamp\winampa.exe
  C:\WINDOWS\System32\LVCOMSX.EXE
  C:\Program Files\Logitech\Video\LogiTray.exe
  C:\Program Files\Sonera Tietoturva\FSGUI\fsguiexe.exe
  C:\Program Files\Internet Explorer\iexplore.exe
  C:\Program Files\Logitech\Video\FxSvr2.exe
  C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_SICN03.EXE
  \?\C:\WINDOWS\system32\WBEM\WMIADAP.EXE
  \?\C:\WINDOWS\system32\WBEM\WMIADAP.EXE
  C:\Program Files\Lavasoft\Ad-Aware SE Personal\Ad-Aware.exe
  C:\Program Files\Internet Explorer\iexplore.exe
  C:\Documents and Settings\Hilkka\Local Settings\Temporary Internet Files\Content.IE5\B2R5T9Z7\HijackThis[1].exe
  
  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.vetvzrjhbkurmw.uk/MeWGb5Y9i_1r1C6oFZJ2Q9d1IVbWnm10jjbnYJIwMQonCX9iJCnTidbti5LRqw_6.php
  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fi/
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = file://C:\APPS\IE\offline\fin.htm
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.websearch.com/ie.aspx?tb_id=50168
  R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Packard Bell
  R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
  O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\apps\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
  O2 - BHO: (no name) - {A16ACDF6-C326-CEEC-B3DA-7579753F0F3B} - C:\DOCUME~1\Mertsi\APPLIC~1\USERBO~1\Wave Axis.exe
  O3 - Toolbar: (no name) - {C5183ABC-EB6E-4E05-B8C9-500A16B6CF94} - (no file)
  O3 - Toolbar: MSN-työkalurivi - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar\01.01.2607.0\fi\msntb.dll (file missing)
  O3 - Toolbar: (no name) - {339BB23F-A864-48C0-A59F-29EA915965EC} - (no file)
  O4 - HKLM\..\Run: [VCSPlayer] "C:\Program Files\Virtual CD v4 SDK\system\vcsplay.exe"
  O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
  O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_01\bin\jusched.exe
  O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
  O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
  O4 - HKLM\..\Run: [News Service] "C:\Program Files\Sonera Tietoturva\FSGUI\ispnews.exe"
  O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Sonera Tietoturva\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
  O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Sonera Tietoturva\Common\FSM32.EXE" /splash
  O4 - HKLM\..\Run: [ATIPTA] C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
  O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
  O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
  O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.02.0002.1001\fi\msnappau.exe"
  O4 - HKLM\..\Run: [WinampAgent] C:\Documents and Settings\Latexi\Työpöytä\Winamp\winampa.exe
  O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE
  O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
  O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
  O4 - HKLM\..\Run: [Bash Love Thunk Regs] C:\Documents and Settings\All Users\Application Data\32 corn bash love\byte army.exe
  O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
  O4 - Global Startup: EPSON Status Monitor 3 Environment Check.lnk = C:\WINDOWS\system32\spool\drivers\w32x86\3\E_SRCV03.EXE
  O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
  O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZCfox000
  O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_01\bin\npjpi142_01.dll
  O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_01\bin\npjpi142_01.dll
  O9 - Extra button: (no name) - {120E090D-9136-4b78-8258-F0B44B4BD2AC} - C:\WINDOWS\System32\shdocvw.dll
  O9 - Extra 'Tools' menuitem: MaxSpeed - {120E090D-9136-4b78-8258-F0B44B4BD2AC} - C:\WINDOWS\System32\shdocvw.dll
  O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
  O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
  O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fin.htm
  O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
  O16 - DPF: {10B80396-96A7-11D3-B7A6-00A0C94C6AE0} (ParallelGraphics Cortona VRML 1.0 to VRML 2.0 convertor) - http://www.parallelgraphics.com/bin/cortvrml10.cab
  O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
  O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com//PhotoUpload/MsnPUpld.cab
  O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cab
  O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
  O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
  O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
  O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
  O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab31267.cab
  O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
  O23 - Service: Sonera Tietoturva (BackWeb Plug-in - 4436233) - Unknown owner - C:\PROGRA~1\SONERA~2\backweb\4436233\Program\SERVIC~1.EXE
  O23 - Service: C-DillaSrv - C-Dilla Ltd - C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
  O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\Sonera Tietoturva\Anti-Virus\fsgk32st.exe
  O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\Sonera Tietoturva\backweb\4436233\program\fsbwsys.exe
  O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Sonera Tietoturva\FWES\Program\fsdfwd.exe
  O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\Sonera Tietoturva\Common\FSMA32.EXE
  O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
  O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe
  O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
  O23 - Service: Virtual CD v4 Security service (SDK - Version) (VCSSecS) - H H Software GmbH - C:\Program Files\Virtual CD v4 SDK\system\vcssecs.exe
  Siirrä ensin se Hijackki omaan kansioon tonne
  C:\HjT\HijackThis.exe
  
  Piilotiedostot näkyviin,ohje tuolla
  
  http://www.xtra.co.nz/help/0,,4155-1916458,00.html
  
  Merkkaa nuo sulje selain ja muut avoimet ikkunat ja paina Fix checked
  
  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.vetvzrjhbkurmw.uk/MeWGb5Y9i_1r1C6oFZJ2Q9d1IVbWnm10jjbnYJIwMQonCX9iJCnTidbti5LRqw
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.websearch.com/ie.aspx?tb_id=50168
  O2 - BHO: (no name) - {A16ACDF6-C326-CEEC-B3DA-7579753F0F3B} - C:\DOCUME~1\Mertsi\APPLIC~1\USERBO~1\Wave Axis.exe
  O3 - Toolbar: (no name) - {C5183ABC-EB6E-4E05-B8C9-500A16B6CF94} - (no file)
  O4 - HKLM\..\Run: [Bash Love Thunk Regs] C:\Documents and Settings\All Users\Application Data\32 corn bash love\byte army.exe
  
  Käynnistä sitte vikasietotilassa ja poista nuo kansiot
  
  C:\DOCUME~1\Mertsi\APPLIC~1\USERBO~1\ <
  
  C:\Documents and Settings\All Users\Application Data\32 corn bash love\ <
  
  äläkä käytä Etsi toimintoo vaan seuraa noita polkuja.
- apua taas kerran
  2005-07-10 21:23:53
  Juu kirjoitti:
  Siirrä ensin se Hijackki omaan kansioon tonne
  C:\HjT\HijackThis.exe
  
  Piilotiedostot näkyviin,ohje tuolla
  
  http://www.xtra.co.nz/help/0,,4155-1916458,00.html
  
  Merkkaa nuo sulje selain ja muut avoimet ikkunat ja paina Fix checked
  
  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.vetvzrjhbkurmw.uk/MeWGb5Y9i_1r1C6oFZJ2Q9d1IVbWnm10jjbnYJIwMQonCX9iJCnTidbti5LRqw
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.websearch.com/ie.aspx?tb_id=50168
  O2 - BHO: (no name) - {A16ACDF6-C326-CEEC-B3DA-7579753F0F3B} - C:\DOCUME~1\Mertsi\APPLIC~1\USERBO~1\Wave Axis.exe
  O3 - Toolbar: (no name) - {C5183ABC-EB6E-4E05-B8C9-500A16B6CF94} - (no file)
  O4 - HKLM\..\Run: [Bash Love Thunk Regs] C:\Documents and Settings\All Users\Application Data\32 corn bash love\byte army.exe
  
  Käynnistä sitte vikasietotilassa ja poista nuo kansiot
  
  C:\DOCUME~1\Mertsi\APPLIC~1\USERBO~1\ <
  
  C:\Documents and Settings\All Users\Application Data\32 corn bash love\ <
  
  äläkä käytä Etsi toimintoo vaan seuraa noita polkuja.
  Kiitos paljon, teit taas yhden ihmisen onnelliseksi.

Ketjusta on poistettu 0 sääntöjenvastaista viestiä.

Takaisin ylös

Luetuimmat keskustelut

Taasko se show alkaa
Koo osottaa taas mieltään
23.04.2024 01:59Ikävä
24
1749
Miksi ihmeessä nainen seurustelit kanssani joskus
Olin ruma silloin ja nykyisin vielä rumempi En voi kuin miettiä että miksi Olitko vain rikki edellisestä suhteesta ja ha
23.04.2024 00:49Ikävä
20
1654
Minun oma kaivattuni
Ei ole mikään ilkeä kiusaajatyyppi, vaan sivistynyt ja fiksu sekä ystävällinen ihminen, ja arvostan häntä suuresti. Raka
22.04.2024 22:53Ikävä
71
1495
Persut nimittivät kummeli-hahmon valtiosihteeriksi!
Persujen riveistä löytyi taas uusi törkyturpa valtiosihteeriksi! Jutun perusteella järjenjuoksu on kuin sketsihahmolla.
23.04.2024 01:45Perussuomalaiset
60
1493
Heikki Silvennoinen petti vaimoaan vuosien ajan
Viiden lapsen isä Heikki kehuu kirjassaan kuinka paljon on pettänyt vaimoaan vuosien varrella.
23.04.2024 07:28Kotimaiset julkkisjuorut
102
1414
Onko ministeri Juuso epäkelpo ministerin tehtäviensä hoitamiseen?
Eikö hänellä ole kompetenttia hoitaa sosiaali- ja terveysministetin toimialalle kuuluvia ministerin tehtäviä?
23.04.2024 01:01Perussuomalaiset
57
1382
Pelastakaa Lapset: Netti ei ole turvallinen paikka lapsille - Erätauko-tilaisuus to 25.4.2024
Netti ei ole turvallinen paikka lapsille, mutta mitä asialle voi vanhempana tehdä? Torstaina 25.4.2024 keskustellaan ne
22.04.2024 14:22Suomi24 Blogi ★
14
1349
Sakarjan kirjan 6. luku
Jolla korva on, se kuulkoon. Sain profetian 22.4.2023. Sen sisältö oli seuraava: Suomeen tulee nälänhätä niin, että se
23.04.2024 01:39Profetiat
19
1192
Tervehdys!
Sä voit poistaa nää kaikki, mut mä kysyn silti A:lta sen kokemuksia sun käytöksestä eron jälkeen. Btw, miks haluut sabot
22.04.2024 01:18Turku
65
1140
Elia tulee vielä
Johannes Kastaja oli Elia, mutta Jeesus sanoi, että Elia tulee vielä. Malakian kirjan profetia Eliasta toteutuu kokonaan
23.04.2024 01:40Helluntailaisuus
35
1124

web search bar poisto

Vastaukset

apua taas kerran kirjoitti:

apua taas kerran kirjoitti:

Juu kirjoitti:

Luetuimmat keskustelut

Taasko se show alkaa

Miksi ihmeessä nainen seurustelit kanssani joskus

Minun oma kaivattuni

Persut nimittivät kummeli-hahmon valtiosihteeriksi!

Heikki Silvennoinen petti vaimoaan vuosien ajan

Onko ministeri Juuso epäkelpo ministerin tehtäviensä hoitamiseen?

Pelastakaa Lapset: Netti ei ole turvallinen paikka lapsille - Erätauko-tilaisuus to 25.4.2024

Sakarjan kirjan 6. luku

Tervehdys!

Elia tulee vielä

Iso konflikti puhkeaa Farmi Suomessa - Veeti Kallio lataa pöytään viisaat sanat: "Jos ei ole..."

Heikki Silvennoinen petti vaimoaan vuosien ajan

KL: Mikko Kekäläinen paljastaa - Tapasi Kristiina-vaimonsa yllättävällä tavalla: "Se oli hyvä..."

Farmi Suomi: Miina Äkkijyrkkä saa täyslaidallisen ryöpytystä - Romahtaa täysin: "Julkisesti häpäisi"

Kenen etua Stubb ajaa Euroopassa ilmoittaessaan olevansa enemmän Ruotsalainen

Pelastakaa Lapset: Netti ei ole turvallinen paikka lapsille - Erätauko-tilaisuus to 25.4.2024

Tätä et nähnyt TV:ssä: Sofia Zida paljastaa Farmi-kuvauksista: "Kun mä tulin tänne, luulin, että..."

Voi, mikä reissu! Suosikkijuontaja Niko Saarinen ja Outi-äiti yhteisissä lomakuvissa - Katso tästä!

Elokapina viivästytti lentokoneen lähtöä tällä kertaa

Oho! Farmi-tippuja Wallu Valpio ei säästele sanojaan Farmi-oloista "Se oli niin luotaantyöntävää..."