Rekisteröidy

Ilmoitukset

Ladataan…

    Näytä kaikki

    Spyware Doctor

    osaiskohan joku auttaa kun sain tälläsen login spyware doctor ohjelmasta ja sen mukaan koneessa pitäisi olla 35 löydettyä spywareohjelmaa

    Scan Results:
    scan start:    26.7.2005 15:42:48
    scan stop:    26.7.2005 15:52:45
    scanned items:    51461
    found items:    35
    found and ignored:    0
    tools used:    General Scanner, Process Scanner, Hosts scanner, LSP Scanner, Registry Scanner, Cookie Scanner, Browser Defaults, Favorites and ZoneMap Scanner, ActiveX Scanner, Disk Scanner
             
       Infection Name    Location    Risk
       Kazaa Promotional Items    multiple    Medium
       DeskAd Service    HKCR\DeskAdX.Installer    Elevated
       DeskAd Service    HKCR\DeskAdX.Installer##    Elevated
       DeskAd Service    HKCR\DeskAdX.Installer\CLSID    Elevated
       DeskAd Service    HKCR\DeskAdX.Installer\CLSID##    Elevated
       DeskAd Service    HKLM\SOFTWARE\DeskAd Service    Elevated
       DeskAd Service    HKLM\SOFTWARE\DeskAd Service##    Elevated
       DeskAd Service    HKLM\SOFTWARE\DeskAd Service##param    Elevated
       DeskAd Service    HKLM\SOFTWARE\DeskAd Service##track    Elevated
       DeskAd Service    HKLM\SOFTWARE\DeskAd Service##LastUpdate    Elevated
       DeskAd Service    HKLM\SOFTWARE\DeskAd Service##reqcount    Elevated
       DeskAd Service    HKLM\SOFTWARE\DeskAd Service##DownloadPath    Elevated
       DeskAd Service    HKLM\SOFTWARE\DeskAd Service##Language    Elevated
       DeskAd Service    HKLM\SOFTWARE\DeskAd Service##SoftwareTable    Elevated
       DeskAd Service    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage\C:/WINDOWS/Downloaded Program Files/DeskAdX.dll    Elevated
       DeskAd Service    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage\C:/WINDOWS/Downloaded Program Files/DeskAdX.dll##    Elevated
       DeskAd Service    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage\C:/WINDOWS/Downloaded Program Files/DeskAdX.dll##.Owner    Elevated
       DeskAd Service    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage\C:/WINDOWS/Downloaded Program Files/DeskAdX.dll##{15AD4789-CDB4-47E1-A9DA-992EE8E6BAD6}    Elevated
       DeskAd Service    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs##C:\WINDOWS\Downloaded Program Files\DeskAdX.dll    Elevated
       Joltid P2P Networking    HKCU\Software\P2P Networking    Elevated
       Joltid P2P Networking    HKCU\Software\P2P Networking##    Elevated
       Joltid P2P Networking    HKCU\Software\P2P Networking\JcdeAgent    Elevated
       Joltid P2P Networking    HKCU\Software\P2P Networking\JcdeAgent##    Elevated
       Joltid P2P Networking    HKCU\Software\P2P Networking\JcdeAgent##TouchChannels    Elevated
       Lop.com    HKCU\Software\Microsoft\Internet Explorer\New Windows\Allow##lop.com    High
       Lop.com    HKCU\Software\Microsoft\Internet Explorer\New Windows\Allow##mysearchnow.com    High
       Lop.com    HKCU\Software\Microsoft\Internet Explorer\New Windows\Allow##www.lop.com    High
       Lop.com    HKCU\Software\Microsoft\Internet Explorer\New Windows\Allow##www.mysearchnow.com    High
       SearchRelevancy    HKLM\SOFTWARE\SearchRelevancy    High
       SearchRelevancy    HKLM\SOFTWARE\SearchRelevancy##    High
       SearchRelevancy    HKLM\SOFTWARE\SearchRelevancy##ID    High
       SearchRelevancy    HKLM\SOFTWARE\SearchRelevancy\Update    High
       SearchRelevancy    HKLM\SOFTWARE\SearchRelevancy\Update##    High
       SearchRelevancy    HKLM\SOFTWARE\SearchRelevancy\Update##TimeStamp    High
       Lop.com    C:\Program Files\C2Media    High
          
    3437
    Äänestä

    Muut lukivat myös

    Vastaukset 3

    Vanhimmat

    Poista lisää poista sovelluksen kautta jos löytyy:

    DeskAd Service
    Winad
    P2P Networking
    SearchRelevancy
    C2Media
    Messenger plus

    Boottaa kone.

    Lataa hijackki ja lähetä hijack-logi.
    http://koti.mbnet.fi/pattaya1/hijackthis.htm

    Äänestä

    • En saanu niitä poistettua. Tässä tämä logi.

      Logfile of HijackThis v1.99.1
      Scan saved at 16:32:25, on 27.7.2005
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\csrss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Ahead\InCD\InCDsrv.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\PROGRA~1\F-SECU~1\backweb\1245240\Program\SERVIC~1.EXE
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\F-Secure Internet Security\Anti-Virus\fsgk32st.exe
      C:\Program Files\F-Secure Internet Security\Anti-Virus\FSGK32.EXE
      C:\Program Files\F-Secure Internet Security\backweb\1245240\program\fsbwsys.exe
      C:\Program Files\F-Secure Internet Security\backweb\1245240\Program\fspex.exe
      C:\Program Files\F-Secure Internet Security\Anti-Virus\fssm32.exe
      C:\Program Files\F-Secure Internet Security\Common\FSMA32.EXE
      C:\Program Files\F-Secure Internet Security\Common\FSMB32.EXE
      C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
      C:\Program Files\F-Secure Internet Security\Common\FCH32.EXE
      C:\WINDOWS\System32\snmp.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\F-Secure Internet Security\Common\FAMEH32.EXE
      C:\WINDOWS\system32\wdfmgr.exe
      C:\Program Files\F-Secure Internet Security\FSPC\fspc.exe
      C:\WINDOWS\system32\RunDll32.exe
      C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      C:\Program Files\Ahead\InCD\InCD.exe
      C:\Program Files\F-Secure Internet Security\Common\FSM32.EXE
      C:\Program Files\F-Secure Internet Security\Anti-Virus\fsav32.exe
      C:\Program Files\F-Secure Internet Security\Anti-Spyware\Ad-Monitor.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\Messenger\msmsgs.exe
      C:\Program Files\WinZip\WZQKPICK.EXE
      C:\Program Files\F-Secure Internet Security\FSPC\fshttps\fshttps.exe
      C:\Program Files\F-Secure Internet Security\FWES\Program\fsdfwd.exe
      C:\WINDOWS\System32\alg.exe
      C:\Program Files\F-Secure Internet Security\FSGUI\fsguiexe.exe
      C:\Program Files\Common Files\Real\Update_OB\realsched.exe
      C:\HJT\HijackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.jippii.fi/
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
      O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)
      O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
      O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure Internet Security\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure Internet Security\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
      O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\F-Secure Internet Security\FSGUI\FSSW.EXE" /reboot
      O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
      O4 - HKLM\..\Run: [AWMON] "C:\Program Files\F-Secure Internet Security\Anti-Spyware\Ad-Monitor.exe"
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
      O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
      O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_06\bin\npjpi142_06.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_06\bin\npjpi142_06.dll
      O9 - Extra button: Web-suodatin - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure Internet Security\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\F-Secure Internet Security\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: Näytä &Web-sivuluettelo... - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\F-Secure Internet Security\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F02} - C:\Program Files\F-Secure Internet Security\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: &Keskeytä Web-sivujen suodatus - {200DB664-75B5-47c0-8B45-A44ACCF73F02} - C:\Program Files\F-Secure Internet Security\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F03} - C:\Program Files\F-Secure Internet Security\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: &Kiellä tämä Web-sivusto - {200DB664-75B5-47c0-8B45-A44ACCF73F03} - C:\Program Files\F-Secure Internet Security\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F04} - C:\Program Files\F-Secure Internet Security\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: &Salli tämä Web-sivusto - {200DB664-75B5-47c0-8B45-A44ACCF73F04} - C:\Program Files\F-Secure Internet Security\FSPC\fspcmsie.dll
      O9 - Extra button: Oheistiedot - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O12 - Plugin for .mpeg: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin3.dll
      O16 - DPF: {8EB3FF4E-86A1-4717-884D-7BA2D38272CB} (F-Secure Online Scanner) - file://D:\ols\cd-db\fscax.cab
      O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://194.252.194.38/activex/AxisCamControl.cab
      O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
      O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
      O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
      O23 - Service: F-Secure Internet Security 2005 OEM (BackWeb Plug-in - 1245240) - Unknown owner - C:\PROGRA~1\F-SECU~1\backweb\1245240\Program\SERVIC~1.EXE
      O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\F-Secure Internet Security\Anti-Virus\fsgk32st.exe
      O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\F-Secure Internet Security\backweb\1245240\program\fsbwsys.exe
      O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure Internet Security\FWES\Program\fsdfwd.exe
      O23 - Service: F-Secure HTTP Server (fshttps) - F-Secure Corporation - C:\Program Files\F-Secure Internet Security\FSPC\fshttps\fshttps.exe
      O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\F-Secure Internet Security\Common\FSMA32.EXE
      O23 - Service: InCD Helper (InCDsrv) - Ahead Software AG - C:\Program Files\Ahead\InCD\InCDsrv.exe

      Äänestä

    • hmm... kirjoitti:

      En saanu niitä poistettua. Tässä tämä logi.

      Logfile of HijackThis v1.99.1
      Scan saved at 16:32:25, on 27.7.2005
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\csrss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Ahead\InCD\InCDsrv.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\PROGRA~1\F-SECU~1\backweb\1245240\Program\SERVIC~1.EXE
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\F-Secure Internet Security\Anti-Virus\fsgk32st.exe
      C:\Program Files\F-Secure Internet Security\Anti-Virus\FSGK32.EXE
      C:\Program Files\F-Secure Internet Security\backweb\1245240\program\fsbwsys.exe
      C:\Program Files\F-Secure Internet Security\backweb\1245240\Program\fspex.exe
      C:\Program Files\F-Secure Internet Security\Anti-Virus\fssm32.exe
      C:\Program Files\F-Secure Internet Security\Common\FSMA32.EXE
      C:\Program Files\F-Secure Internet Security\Common\FSMB32.EXE
      C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
      C:\Program Files\F-Secure Internet Security\Common\FCH32.EXE
      C:\WINDOWS\System32\snmp.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\F-Secure Internet Security\Common\FAMEH32.EXE
      C:\WINDOWS\system32\wdfmgr.exe
      C:\Program Files\F-Secure Internet Security\FSPC\fspc.exe
      C:\WINDOWS\system32\RunDll32.exe
      C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      C:\Program Files\Ahead\InCD\InCD.exe
      C:\Program Files\F-Secure Internet Security\Common\FSM32.EXE
      C:\Program Files\F-Secure Internet Security\Anti-Virus\fsav32.exe
      C:\Program Files\F-Secure Internet Security\Anti-Spyware\Ad-Monitor.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\Messenger\msmsgs.exe
      C:\Program Files\WinZip\WZQKPICK.EXE
      C:\Program Files\F-Secure Internet Security\FSPC\fshttps\fshttps.exe
      C:\Program Files\F-Secure Internet Security\FWES\Program\fsdfwd.exe
      C:\WINDOWS\System32\alg.exe
      C:\Program Files\F-Secure Internet Security\FSGUI\fsguiexe.exe
      C:\Program Files\Common Files\Real\Update_OB\realsched.exe
      C:\HJT\HijackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.jippii.fi/
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
      O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)
      O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
      O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure Internet Security\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure Internet Security\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
      O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\F-Secure Internet Security\FSGUI\FSSW.EXE" /reboot
      O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
      O4 - HKLM\..\Run: [AWMON] "C:\Program Files\F-Secure Internet Security\Anti-Spyware\Ad-Monitor.exe"
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
      O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
      O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_06\bin\npjpi142_06.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_06\bin\npjpi142_06.dll
      O9 - Extra button: Web-suodatin - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure Internet Security\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\F-Secure Internet Security\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: Näytä &Web-sivuluettelo... - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\F-Secure Internet Security\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F02} - C:\Program Files\F-Secure Internet Security\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: &Keskeytä Web-sivujen suodatus - {200DB664-75B5-47c0-8B45-A44ACCF73F02} - C:\Program Files\F-Secure Internet Security\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F03} - C:\Program Files\F-Secure Internet Security\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: &Kiellä tämä Web-sivusto - {200DB664-75B5-47c0-8B45-A44ACCF73F03} - C:\Program Files\F-Secure Internet Security\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F04} - C:\Program Files\F-Secure Internet Security\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: &Salli tämä Web-sivusto - {200DB664-75B5-47c0-8B45-A44ACCF73F04} - C:\Program Files\F-Secure Internet Security\FSPC\fspcmsie.dll
      O9 - Extra button: Oheistiedot - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O12 - Plugin for .mpeg: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin3.dll
      O16 - DPF: {8EB3FF4E-86A1-4717-884D-7BA2D38272CB} (F-Secure Online Scanner) - file://D:\ols\cd-db\fscax.cab
      O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://194.252.194.38/activex/AxisCamControl.cab
      O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
      O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
      O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
      O23 - Service: F-Secure Internet Security 2005 OEM (BackWeb Plug-in - 1245240) - Unknown owner - C:\PROGRA~1\F-SECU~1\backweb\1245240\Program\SERVIC~1.EXE
      O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\F-Secure Internet Security\Anti-Virus\fsgk32st.exe
      O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\F-Secure Internet Security\backweb\1245240\program\fsbwsys.exe
      O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure Internet Security\FWES\Program\fsdfwd.exe
      O23 - Service: F-Secure HTTP Server (fshttps) - F-Secure Corporation - C:\Program Files\F-Secure Internet Security\FSPC\fshttps\fshttps.exe
      O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\F-Secure Internet Security\Common\FSMA32.EXE
      O23 - Service: InCD Helper (InCDsrv) - Ahead Software AG - C:\Program Files\Ahead\InCD\InCDsrv.exe

      Eipä näy logissa noita.

      Ruksaa tuo:
      O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)

      Sammuta muut ohjelmat ja paina fix checked.

      Laita piilotiedostot näkyviin ja sammuta järjestelmän palautus, ohjeet:

      Piilotiedostot:

      Oma Tietokone >
      - Työkalut >
      - Kansion asetukset >
      - Näytä
      Tiedostot ja kansiot >
      - vieritä alaspäin
      RUKSI pois seuraavasta kohdasta
      - Piilota tunnettujen tiedostotyyppien tunnisteet
      Piilotetut tiedostot ja kansiot
      - RUKSI > Näytä piilotetut tiedostot ja kansiot
      Käytä > OK


      Järjestelmän palautus:

      Oma Tietokone >
      - Muuta asetusta >
      - järjestelmä >
      - järjestelmän palautus-välilehti >
      - ruksi ruutuun "poista järjestelmän palauttaminen kaikista asemista >
      - Käytä >
      - Ok

      Käynnistä kone vikasietotilaan.

      Poista nuo:
      C:/WINDOWS/Downloaded Program Files/DeskAdX.dll

      Äänestä

    Odottaa vastausta

    Näihin keskusteluihin ei ole vielä vastattu. Ole ensimmäinen.

    Luetuimmat keskustelut

    Kommentoi aloitusta

    hmm.... kirjoitti:

    osaiskohan joku auttaa kun sain tälläsen login spyware doctor ohjelmasta ja sen mukaan koneessa pitäisi olla 35 löydettyä spywareohjelmaa

    Scan Results:
    scan start:    26.7.2005 15:42:48
    scan stop:    26.7.2005 15:52:45
    scanned items:    51461
    found items:    35
    found and ignored:    0
    tools used:    General Scanner, Process Scanner, Hosts scanner, LSP Scanner, Registry Scanner, Cookie Scanner, Browser Defaults, Favorites and ZoneMap Scanner, ActiveX Scanner, Disk Scanner
             
       Infection Name    Location    Risk
       Kazaa Promotional Items    multiple    Medium
       DeskAd Service    HKCR\DeskAdX.Installer    Elevated
       DeskAd Service    HKCR\DeskAdX.Installer##    Elevated
       DeskAd Service    HKCR\DeskAdX.Installer\CLSID    Elevated
       DeskAd Service    HKCR\DeskAdX.Installer\CLSID##    Elevated
       DeskAd Service    HKLM\SOFTWARE\DeskAd Service    Elevated
       DeskAd Service    HKLM\SOFTWARE\DeskAd Service##    Elevated
       DeskAd Service    HKLM\SOFTWARE\DeskAd Service##param    Elevated
       DeskAd Service    HKLM\SOFTWARE\DeskAd Service##track    Elevated
       DeskAd Service    HKLM\SOFTWARE\DeskAd Service##LastUpdate    Elevated
       DeskAd Service    HKLM\SOFTWARE\DeskAd Service##reqcount    Elevated
       DeskAd Service    HKLM\SOFTWARE\DeskAd Service##DownloadPath    Elevated
       DeskAd Service    HKLM\SOFTWARE\DeskAd Service##Language    Elevated
       DeskAd Service    HKLM\SOFTWARE\DeskAd Service##SoftwareTable    Elevated
       DeskAd Service    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage\C:/WINDOWS/Downloaded Program Files/DeskAdX.dll    Elevated
       DeskAd Service    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage\C:/WINDOWS/Downloaded Program Files/DeskAdX.dll##    Elevated
       DeskAd Service    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage\C:/WINDOWS/Downloaded Program Files/DeskAdX.dll##.Owner    Elevated
       DeskAd Service    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage\C:/WINDOWS/Downloaded Program Files/DeskAdX.dll##{15AD4789-CDB4-47E1-A9DA-992EE8E6BAD6}    Elevated
       DeskAd Service    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs##C:\WINDOWS\Downloaded Program Files\DeskAdX.dll    Elevated
       Joltid P2P Networking    HKCU\Software\P2P Networking    Elevated
       Joltid P2P Networking    HKCU\Software\P2P Networking##    Elevated
       Joltid P2P Networking    HKCU\Software\P2P Networking\JcdeAgent    Elevated
       Joltid P2P Networking    HKCU\Software\P2P Networking\JcdeAgent##    Elevated
       Joltid P2P Networking    HKCU\Software\P2P Networking\JcdeAgent##TouchChannels    Elevated
       Lop.com    HKCU\Software\Microsoft\Internet Explorer\New Windows\Allow##lop.com    High
       Lop.com    HKCU\Software\Microsoft\Internet Explorer\New Windows\Allow##mysearchnow.com    High
       Lop.com    HKCU\Software\Microsoft\Internet Explorer\New Windows\Allow##www.lop.com    High
       Lop.com    HKCU\Software\Microsoft\Internet Explorer\New Windows\Allow##www.mysearchnow.com    High
       SearchRelevancy    HKLM\SOFTWARE\SearchRelevancy    High
       SearchRelevancy    HKLM\SOFTWARE\SearchRelevancy##    High
       SearchRelevancy    HKLM\SOFTWARE\SearchRelevancy##ID    High
       SearchRelevancy    HKLM\SOFTWARE\SearchRelevancy\Update    High
       SearchRelevancy    HKLM\SOFTWARE\SearchRelevancy\Update##    High
       SearchRelevancy    HKLM\SOFTWARE\SearchRelevancy\Update##TimeStamp    High
       Lop.com    C:\Program Files\C2Media    High
          

    Anonyymi
    5000

    Ilmoita asiaton sisältö

    • Sisältää materiaalia, joka on loukkaavaa, herjaavaa, rasistista, uhkailevaa tai ahdistelevaa.

    • Materiaali sisältää nimiä, yhteystietoja tai muita henkilökohtaisia tietoja. Julkisuuden henkilöistä, julkisissa viroissa toimivista ihmisistä sekä yritysten vastuuhenkilöistä saa keskustella työhön liittyen. Myös yksityiselämään liittyvistä asioista voi keskustella siltä osin, kuin niistä on julkisesti kerrottu.

    • Sisältää lapsille haitallista tai heiltä kiellettyä materiaalia. Seksuaalinen sisältö on sallittua aiheeseen tarkoitetuilla palstoilla, joiden ikäraja on 18 vuotta.

    • Lainvastaista sisältöä voi olla mm. yksityiselämää loukkaavan tiedon levitys, kiihottaminen kansanryhmää vastaan, laiton uhkaaminen, alaikäisiin liittyvä seksuaalinen sisältö/grooming, petokset, identiteettivarkaudet, kunnianloukkaukset ja tekijänoikeusrikkomukset.

    • Sisältö ei liity palstan tai keskusteluketjun aiheeseen.

    • Viesti ei ole suomea tai ruotsia (pl. International Forums), se sisältää mainontaa, se sisältää tekijänoikeuksin suojattua materiaalia, se on massapostitus tai jokin muu syy.

    Jaa keskustelu