Rekisteröidy

Ilmoitukset

Ladataan…

    Näytä kaikki

    Joku hyökkäs koneelle

    Tässä olisi logi:

    Logfile of HijackThis v1.99.0
    Scan saved at 21:56:07, on 08/11/2005
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\SYSTEM32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\wscntfy.exe
    C:\Program Files\TeleWell TW-IA300C ADSL\CnxDslTb.exe
    C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\OpenOffice.org1.1.4\program\soffice.exe
    C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
    C:\WINDOWS\system32\ZoneLabs\vsmon.exe
    C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
    C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
    C:\Program Files\Grisoft\AVG7\avgemc.exe
    C:\WINDOWS\ntap32.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Documents and Settings\Owaska\Työpöytä\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system32\pkakd.dll/sp.html#55135
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\pkakd.dll/sp.html#55135
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\system32\pkakd.dll/sp.html#55135
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system32\pkakd.dll/sp.html#55135
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\pkakd.dll/sp.html#55135
    R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system32\pkakd.dll/sp.html#55135
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system32\pkakd.dll/sp.html#55135
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Tuomas Owaska
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 139.223.199.194:8080
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    R3 - Default URLSearchHook is missing
    O2 - BHO: Class - {9630B339-88D1-522D-5AC9-DB595AC38D7B} - C:\WINDOWS\system32\sdkql.dll
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [CnxDslTaskBar] C:\Program Files\TeleWell TW-IA300C ADSL\CnxDslTb.exe
    O4 - HKLM\..\Run: [Zone Labs Client] C:\PROGRA~1\ZONELA~1\ZONEAL~1\zlclient.exe
    O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
    O4 - HKLM\..\Run: [ntap32.exe] C:\WINDOWS\ntap32.exe
    O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
    O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
    O4 - HKLM\..\RunOnce: [ntcy32.exe] C:\WINDOWS\system32\ntcy32.exe
    O4 - HKLM\..\RunOnce: [crsl.exe] C:\WINDOWS\crsl.exe
    O4 - HKLM\..\RunOnce: [atlkv32.exe] C:\WINDOWS\system32\atlkv32.exe
    O4 - HKLM\..\RunOnce: [netce32.exe] C:\WINDOWS\netce32.exe
    O4 - HKLM\..\RunOnce: [ntia32.exe] C:\WINDOWS\system32\ntia32.exe
    O4 - HKLM\..\RunOnce: [sdkqg32.exe] C:\WINDOWS\system32\sdkqg32.exe
    O4 - HKLM\..\RunOnce: [d3vl.exe] C:\WINDOWS\d3vl.exe
    O4 - HKLM\..\RunOnce: [javawl32.exe] C:\WINDOWS\system32\javawl32.exe
    O4 - HKLM\..\RunOnce: [javaki32.exe] C:\WINDOWS\javaki32.exe
    O4 - HKLM\..\RunOnce: [mfcpe.exe] C:\WINDOWS\mfcpe.exe
    O4 - HKLM\..\RunOnce: [cryk.exe] C:\WINDOWS\cryk.exe
    O4 - HKLM\..\RunOnce: [ntcw32.exe] C:\WINDOWS\ntcw32.exe
    O4 - HKLM\..\RunOnce: [mfcsm.exe] C:\WINDOWS\system32\mfcsm.exe
    O4 - HKLM\..\RunOnce: [atlot32.exe] C:\WINDOWS\system32\atlot32.exe
    O4 - HKLM\..\RunOnce: [iezt32.exe] C:\WINDOWS\iezt32.exe
    O4 - HKLM\..\RunOnce: [crpz.exe] C:\WINDOWS\system32\crpz.exe
    O4 - HKLM\..\RunOnce: [javayz.exe] C:\WINDOWS\javayz.exe
    O4 - HKLM\..\RunOnce: [winno32.exe] C:\WINDOWS\system32\winno32.exe
    O4 - HKLM\..\RunOnce: [atlew32.exe] C:\WINDOWS\system32\atlew32.exe
    O4 - HKLM\..\RunOnce: [mfcuc.exe] C:\WINDOWS\mfcuc.exe
    O4 - HKLM\..\RunOnce: [mfcrs.exe] C:\WINDOWS\mfcrs.exe
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall60.trendmicro.com/housecall/xscan60.cab
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1122311255982
    O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cab
    O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
    O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://zone.msn.com/binFramework/v10/ZIntro.cab32846.cab
    O23 - Service: Workstation NetLogon Service - Unknown - C:\WINDOWS\system32\ntcy32.exe
    O23 - Service: AVG7 Alert Manager Server - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
    O23 - Service: AVG7 Update Service - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
    O23 - Service: Loogisen levyn hallinnan valvontapalvelu - Unknown - C:\WINDOWS\System32\dmadmin.exe
    O23 - Service: Tapahtumaloki - Unknown - C:\WINDOWS\system32\services.exe
    O23 - Service: CD-levyjen kirjoittamisen IMAPI COM -palvelu - Unknown - C:\WINDOWS\System32\imapi.exe
    O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: NetMeeting etätyöpöydän jakaminen - Unknown - C:\WINDOWS\System32\mnmsrvc.exe
    O23 - Service: NVIDIA Display Driver Service - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
    O23 - Service: Plug and Play - Unknown - C:\WINDOWS\system32\services.exe
    O23 - Service: Etätyöpöydän ohjeen istunnonhallinta - Unknown - C:\WINDOWS\system32\sessmgr.exe
    O23 - Service: Älykortti - Unknown - C:\WINDOWS\System32\SCardSvr.exe
    O23 - Service: Symantec Network Drivers Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
    O23 - Service: Resurssilokit ja -hälytykset - Unknown - C:\WINDOWS\system32\smlogsvc.exe
    O23 - Service: TrueVector Internet Monitor - Zone Labs Inc. - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
    O23 - Service: Aseman tilannevedos - Unknown - C:\WINDOWS\System32\vssvc.exe
    O23 - Service: WMI resurssisovitin - Unknown - C:\WINDOWS\System32\wbem\wmiapsrv.exe


    Kiitos jo etukäteen!
    6580
    Äänestä

    Muut lukivat myös

    Vastaukset 6

    Vanhimmat

    Tässä paikat
    C:\hijackthis\HijackThis.exe tai
    C:\Program Files\hijackthis\HijackThis.exe tai
    C:\HJT\HijackThis.exe
    ja tee scannaus juuri sieltä.

    Lähetä uusi logi.

    Äänestä

    • 1.99.1 uusin versio

      Äänestä

    • Mutta kirjoitti:

      1.99.1 uusin versio

      Logfile of HijackThis v1.99.1
      Scan saved at 22:19:07, on 08/11/2005
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\SYSTEM32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\wscntfy.exe
      C:\Program Files\TeleWell TW-IA300C ADSL\CnxDslTb.exe
      C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\OpenOffice.org1.1.4\program\soffice.exe
      C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
      C:\WINDOWS\system32\ZoneLabs\vsmon.exe
      C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
      C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
      C:\Program Files\Grisoft\AVG7\avgemc.exe
      C:\WINDOWS\ntap32.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\HJT\HijackThis.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system32\pkakd.dll/sp.html#55135
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\pkakd.dll/sp.html#55135
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\system32\pkakd.dll/sp.html#55135
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system32\pkakd.dll/sp.html#55135
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\pkakd.dll/sp.html#55135
      R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system32\pkakd.dll/sp.html#55135
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system32\pkakd.dll/sp.html#55135
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Tuomas Owaska
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 139.223.199.194:8080
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      R3 - Default URLSearchHook is missing
      O2 - BHO: Class - {9630B339-88D1-522D-5AC9-DB595AC38D7B} - C:\WINDOWS\system32\sdkql.dll
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
      O4 - HKLM\..\Run: [CnxDslTaskBar] C:\Program Files\TeleWell TW-IA300C ADSL\CnxDslTb.exe
      O4 - HKLM\..\Run: [Zone Labs Client] C:\PROGRA~1\ZONELA~1\ZONEAL~1\zlclient.exe
      O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
      O4 - HKLM\..\Run: [ntap32.exe] C:\WINDOWS\ntap32.exe
      O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
      O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
      O4 - HKLM\..\RunOnce: [ntcy32.exe] C:\WINDOWS\system32\ntcy32.exe
      O4 - HKLM\..\RunOnce: [crsl.exe] C:\WINDOWS\crsl.exe
      O4 - HKLM\..\RunOnce: [atlkv32.exe] C:\WINDOWS\system32\atlkv32.exe
      O4 - HKLM\..\RunOnce: [netce32.exe] C:\WINDOWS\netce32.exe
      O4 - HKLM\..\RunOnce: [ntia32.exe] C:\WINDOWS\system32\ntia32.exe
      O4 - HKLM\..\RunOnce: [sdkqg32.exe] C:\WINDOWS\system32\sdkqg32.exe
      O4 - HKLM\..\RunOnce: [d3vl.exe] C:\WINDOWS\d3vl.exe
      O4 - HKLM\..\RunOnce: [javawl32.exe] C:\WINDOWS\system32\javawl32.exe
      O4 - HKLM\..\RunOnce: [javaki32.exe] C:\WINDOWS\javaki32.exe
      O4 - HKLM\..\RunOnce: [mfcpe.exe] C:\WINDOWS\mfcpe.exe
      O4 - HKLM\..\RunOnce: [cryk.exe] C:\WINDOWS\cryk.exe
      O4 - HKLM\..\RunOnce: [ntcw32.exe] C:\WINDOWS\ntcw32.exe
      O4 - HKLM\..\RunOnce: [mfcsm.exe] C:\WINDOWS\system32\mfcsm.exe
      O4 - HKLM\..\RunOnce: [atlot32.exe] C:\WINDOWS\system32\atlot32.exe
      O4 - HKLM\..\RunOnce: [iezt32.exe] C:\WINDOWS\iezt32.exe
      O4 - HKLM\..\RunOnce: [crpz.exe] C:\WINDOWS\system32\crpz.exe
      O4 - HKLM\..\RunOnce: [javayz.exe] C:\WINDOWS\javayz.exe
      O4 - HKLM\..\RunOnce: [winno32.exe] C:\WINDOWS\system32\winno32.exe
      O4 - HKLM\..\RunOnce: [atlew32.exe] C:\WINDOWS\system32\atlew32.exe
      O4 - HKLM\..\RunOnce: [mfcuc.exe] C:\WINDOWS\mfcuc.exe
      O4 - HKLM\..\RunOnce: [mfcrs.exe] C:\WINDOWS\mfcrs.exe
      O4 - HKLM\..\RunOnce: [ntkj32.exe] C:\WINDOWS\system32\ntkj32.exe
      O4 - HKLM\..\RunOnce: [ipia32.exe] C:\WINDOWS\ipia32.exe
      O4 - HKLM\..\RunOnce: [addhh.exe] C:\WINDOWS\addhh.exe
      O4 - HKLM\..\RunOnce: [apphn.exe] C:\WINDOWS\apphn.exe
      O4 - HKLM\..\RunOnce: [ipak.exe] C:\WINDOWS\ipak.exe
      O4 - HKLM\..\RunOnce: [sysxc.exe] C:\WINDOWS\sysxc.exe
      O4 - HKLM\..\RunOnce: [d3gp32.exe] C:\WINDOWS\d3gp32.exe
      O4 - HKLM\..\RunOnce: [netlr.exe] C:\WINDOWS\netlr.exe
      O4 - HKLM\..\RunOnce: [ipwf32.exe] C:\WINDOWS\system32\ipwf32.exe
      O4 - HKLM\..\RunOnce: [apiov.exe] C:\WINDOWS\apiov.exe
      O4 - HKLM\..\RunOnce: [ntev.exe] C:\WINDOWS\ntev.exe
      O4 - HKLM\..\RunOnce: [appkp.exe] C:\WINDOWS\appkp.exe
      O4 - HKLM\..\RunOnce: [ieob32.exe] C:\WINDOWS\system32\ieob32.exe
      O4 - HKLM\..\RunOnce: [d3ih32.exe] C:\WINDOWS\d3ih32.exe
      O4 - HKLM\..\RunOnce: [javami.exe] C:\WINDOWS\javami.exe
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall60.trendmicro.com/housecall/xscan60.cab
      O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1122311255982
      O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cab
      O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
      O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://zone.msn.com/binFramework/v10/ZIntro.cab32846.cab
      O23 - Service: Workstation NetLogon Service ( 11Fßä#·ºÄÖ`I) - Unknown owner - C:\WINDOWS\system32\ntcy32.exe
      O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
      O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
      O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
      O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
      O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs Inc. - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

      Äänestä

    • Bailey kirjoitti:

      Logfile of HijackThis v1.99.1
      Scan saved at 22:19:07, on 08/11/2005
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\SYSTEM32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\wscntfy.exe
      C:\Program Files\TeleWell TW-IA300C ADSL\CnxDslTb.exe
      C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\OpenOffice.org1.1.4\program\soffice.exe
      C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
      C:\WINDOWS\system32\ZoneLabs\vsmon.exe
      C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
      C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
      C:\Program Files\Grisoft\AVG7\avgemc.exe
      C:\WINDOWS\ntap32.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\HJT\HijackThis.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system32\pkakd.dll/sp.html#55135
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\pkakd.dll/sp.html#55135
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\system32\pkakd.dll/sp.html#55135
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system32\pkakd.dll/sp.html#55135
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\pkakd.dll/sp.html#55135
      R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system32\pkakd.dll/sp.html#55135
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system32\pkakd.dll/sp.html#55135
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Tuomas Owaska
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 139.223.199.194:8080
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      R3 - Default URLSearchHook is missing
      O2 - BHO: Class - {9630B339-88D1-522D-5AC9-DB595AC38D7B} - C:\WINDOWS\system32\sdkql.dll
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
      O4 - HKLM\..\Run: [CnxDslTaskBar] C:\Program Files\TeleWell TW-IA300C ADSL\CnxDslTb.exe
      O4 - HKLM\..\Run: [Zone Labs Client] C:\PROGRA~1\ZONELA~1\ZONEAL~1\zlclient.exe
      O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
      O4 - HKLM\..\Run: [ntap32.exe] C:\WINDOWS\ntap32.exe
      O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
      O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
      O4 - HKLM\..\RunOnce: [ntcy32.exe] C:\WINDOWS\system32\ntcy32.exe
      O4 - HKLM\..\RunOnce: [crsl.exe] C:\WINDOWS\crsl.exe
      O4 - HKLM\..\RunOnce: [atlkv32.exe] C:\WINDOWS\system32\atlkv32.exe
      O4 - HKLM\..\RunOnce: [netce32.exe] C:\WINDOWS\netce32.exe
      O4 - HKLM\..\RunOnce: [ntia32.exe] C:\WINDOWS\system32\ntia32.exe
      O4 - HKLM\..\RunOnce: [sdkqg32.exe] C:\WINDOWS\system32\sdkqg32.exe
      O4 - HKLM\..\RunOnce: [d3vl.exe] C:\WINDOWS\d3vl.exe
      O4 - HKLM\..\RunOnce: [javawl32.exe] C:\WINDOWS\system32\javawl32.exe
      O4 - HKLM\..\RunOnce: [javaki32.exe] C:\WINDOWS\javaki32.exe
      O4 - HKLM\..\RunOnce: [mfcpe.exe] C:\WINDOWS\mfcpe.exe
      O4 - HKLM\..\RunOnce: [cryk.exe] C:\WINDOWS\cryk.exe
      O4 - HKLM\..\RunOnce: [ntcw32.exe] C:\WINDOWS\ntcw32.exe
      O4 - HKLM\..\RunOnce: [mfcsm.exe] C:\WINDOWS\system32\mfcsm.exe
      O4 - HKLM\..\RunOnce: [atlot32.exe] C:\WINDOWS\system32\atlot32.exe
      O4 - HKLM\..\RunOnce: [iezt32.exe] C:\WINDOWS\iezt32.exe
      O4 - HKLM\..\RunOnce: [crpz.exe] C:\WINDOWS\system32\crpz.exe
      O4 - HKLM\..\RunOnce: [javayz.exe] C:\WINDOWS\javayz.exe
      O4 - HKLM\..\RunOnce: [winno32.exe] C:\WINDOWS\system32\winno32.exe
      O4 - HKLM\..\RunOnce: [atlew32.exe] C:\WINDOWS\system32\atlew32.exe
      O4 - HKLM\..\RunOnce: [mfcuc.exe] C:\WINDOWS\mfcuc.exe
      O4 - HKLM\..\RunOnce: [mfcrs.exe] C:\WINDOWS\mfcrs.exe
      O4 - HKLM\..\RunOnce: [ntkj32.exe] C:\WINDOWS\system32\ntkj32.exe
      O4 - HKLM\..\RunOnce: [ipia32.exe] C:\WINDOWS\ipia32.exe
      O4 - HKLM\..\RunOnce: [addhh.exe] C:\WINDOWS\addhh.exe
      O4 - HKLM\..\RunOnce: [apphn.exe] C:\WINDOWS\apphn.exe
      O4 - HKLM\..\RunOnce: [ipak.exe] C:\WINDOWS\ipak.exe
      O4 - HKLM\..\RunOnce: [sysxc.exe] C:\WINDOWS\sysxc.exe
      O4 - HKLM\..\RunOnce: [d3gp32.exe] C:\WINDOWS\d3gp32.exe
      O4 - HKLM\..\RunOnce: [netlr.exe] C:\WINDOWS\netlr.exe
      O4 - HKLM\..\RunOnce: [ipwf32.exe] C:\WINDOWS\system32\ipwf32.exe
      O4 - HKLM\..\RunOnce: [apiov.exe] C:\WINDOWS\apiov.exe
      O4 - HKLM\..\RunOnce: [ntev.exe] C:\WINDOWS\ntev.exe
      O4 - HKLM\..\RunOnce: [appkp.exe] C:\WINDOWS\appkp.exe
      O4 - HKLM\..\RunOnce: [ieob32.exe] C:\WINDOWS\system32\ieob32.exe
      O4 - HKLM\..\RunOnce: [d3ih32.exe] C:\WINDOWS\d3ih32.exe
      O4 - HKLM\..\RunOnce: [javami.exe] C:\WINDOWS\javami.exe
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall60.trendmicro.com/housecall/xscan60.cab
      O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1122311255982
      O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cab
      O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
      O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://zone.msn.com/binFramework/v10/ZIntro.cab32846.cab
      O23 - Service: Workstation NetLogon Service ( 11Fßä#·ºÄÖ`I) - Unknown owner - C:\WINDOWS\system32\ntcy32.exe
      O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
      O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
      O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
      O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
      O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs Inc. - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

      katso *Nimimerkki* juu antaa sulle ohjeita nyt mitä teet.

      Äänestä

    Siirrä ensin se Hijackki omaan kansioon tonne
    C:\HjT\HijackThis.exe

    Ota tosta AboutBuster

    http://www.malwarebytes.biz/AboutBuster5.zip

    Pura se omaan kansioon työpöydälle ja sitte avaa se ja kato jos siihen löytyy päivityksiä ja sammuta se sitte.

    Piilotiedostot näkyviin,ohje tuolla

    http://www.xtra.co.nz/help/0,,4155-1916458,00.html

    Käynnistä kone vikasietotilassa.

    Kirjota Suorita kohtaan services.msc ja Ok
    Eti sieltä tuo service

    Workstation NetLogon Service

    Sammuta se ja pistä käynnistysmuotoon ei käytössä Käytä ja Ok

    Scannaa hijackillä merkka nuo ja klikkaa Fix checked

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system32\pkakd.dll/sp.html#55135
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\pkakd.dll/sp.html#55135
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\system32\pkakd.dll/sp.html#55135
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system32\pkakd.dll/sp.html#55135
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\pkakd.dll/sp.html#55135
    R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system32\pkakd.dll/sp.html#55135
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system32\pkakd.dll/sp.html#55135
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
    R3 - Default URLSearchHook is missing
    O2 - BHO: Class - {9630B339-88D1-522D-5AC9-DB595AC38D7B} - C:\WINDOWS\system32\sdkql.dll
    O4 - HKLM\..\Run: [ntap32.exe] C:\WINDOWS\ntap32.exe
    O4 - HKLM\..\RunOnce: [ntcy32.exe] C:\WINDOWS\system32\ntcy32.exe
    O4 - HKLM\..\RunOnce: [crsl.exe] C:\WINDOWS\crsl.exe
    O4 - HKLM\..\RunOnce: [atlkv32.exe] C:\WINDOWS\system32\atlkv32.exe
    O4 - HKLM\..\RunOnce: [netce32.exe] C:\WINDOWS\netce32.exe
    O4 - HKLM\..\RunOnce: [ntia32.exe] C:\WINDOWS\system32\ntia32.exe
    O4 - HKLM\..\RunOnce: [sdkqg32.exe] C:\WINDOWS\system32\sdkqg32.exe
    O4 - HKLM\..\RunOnce: [d3vl.exe] C:\WINDOWS\d3vl.exe
    O4 - HKLM\..\RunOnce: [javawl32.exe] C:\WINDOWS\system32\javawl32.exe
    O4 - HKLM\..\RunOnce: [javaki32.exe] C:\WINDOWS\javaki32.exe
    O4 - HKLM\..\RunOnce: [mfcpe.exe] C:\WINDOWS\mfcpe.exe
    O4 - HKLM\..\RunOnce: [cryk.exe] C:\WINDOWS\cryk.exe
    O4 - HKLM\..\RunOnce: [ntcw32.exe] C:\WINDOWS\ntcw32.exe
    O4 - HKLM\..\RunOnce: [mfcsm.exe] C:\WINDOWS\system32\mfcsm.exe
    O4 - HKLM\..\RunOnce: [atlot32.exe] C:\WINDOWS\system32\atlot32.exe
    O4 - HKLM\..\RunOnce: [iezt32.exe] C:\WINDOWS\iezt32.exe
    O4 - HKLM\..\RunOnce: [crpz.exe] C:\WINDOWS\system32\crpz.exe
    O4 - HKLM\..\RunOnce: [javayz.exe] C:\WINDOWS\javayz.exe
    O4 - HKLM\..\RunOnce: [winno32.exe] C:\WINDOWS\system32\winno32.exe
    O4 - HKLM\..\RunOnce: [atlew32.exe] C:\WINDOWS\system32\atlew32.exe
    O4 - HKLM\..\RunOnce: [mfcuc.exe] C:\WINDOWS\mfcuc.exe
    O4 - HKLM\..\RunOnce: [mfcrs.exe] C:\WINDOWS\mfcrs.exe
    O23 - Service: Workstation NetLogon Service - Unknown - C:\WINDOWS\system32\ntcy32.exe


    Sitte poista nuo jos löytyy

    C:\WINDOWS\system32\pkakd.dll
    C:\WINDOWS\system32\sdkql.dll
    C:\WINDOWS\system32\ntcy32.exe

    kaikki nuo exe tiedostot jotka on noissa 04 rivissä.

    Sen jälkeen avaa AboutBuster ja putsaa sillä 2 kertaa.
    Putsaa myös Ad-Awarella kerran.
    Kirjota sitte Suorita kohtaan cleanmgr ja Ok
    Merkkaa sieltä nuo ja putsaa pois ne

    Temporary Files
    Temporary Internet Files
    Recycle Bin

    Käynistä sitte normaalisti ja uus Hijack logi tolla versiolla.

    http://koti.mbnet.fi/pattaya1/HijackThis.exe

    Äänestä

    • Tuli uus logi näköjään merkkaa nuo kaikki mitä aikasemmassa ohjeessa oli

      O4 - HKLM\..\RunOnce: [ntcy32.exe] C:\WINDOWS\system32\ntcy32.exe
      O4 - HKLM\..\RunOnce: [crsl.exe] C:\WINDOWS\crsl.exe
      O4 - HKLM\..\RunOnce: [atlkv32.exe] C:\WINDOWS\system32\atlkv32.exe
      O4 - HKLM\..\RunOnce: [netce32.exe] C:\WINDOWS\netce32.exe
      O4 - HKLM\..\RunOnce: [ntia32.exe] C:\WINDOWS\system32\ntia32.exe
      O4 - HKLM\..\RunOnce: [sdkqg32.exe] C:\WINDOWS\system32\sdkqg32.exe
      O4 - HKLM\..\RunOnce: [d3vl.exe] C:\WINDOWS\d3vl.exe
      O4 - HKLM\..\RunOnce: [javawl32.exe] C:\WINDOWS\system32\javawl32.exe
      O4 - HKLM\..\RunOnce: [javaki32.exe] C:\WINDOWS\javaki32.exe
      O4 - HKLM\..\RunOnce: [mfcpe.exe] C:\WINDOWS\mfcpe.exe
      O4 - HKLM\..\RunOnce: [cryk.exe] C:\WINDOWS\cryk.exe
      O4 - HKLM\..\RunOnce: [ntcw32.exe] C:\WINDOWS\ntcw32.exe
      O4 - HKLM\..\RunOnce: [mfcsm.exe] C:\WINDOWS\system32\mfcsm.exe
      O4 - HKLM\..\RunOnce: [atlot32.exe] C:\WINDOWS\system32\atlot32.exe
      O4 - HKLM\..\RunOnce: [iezt32.exe] C:\WINDOWS\iezt32.exe
      O4 - HKLM\..\RunOnce: [crpz.exe] C:\WINDOWS\system32\crpz.exe
      O4 - HKLM\..\RunOnce: [javayz.exe] C:\WINDOWS\javayz.exe
      O4 - HKLM\..\RunOnce: [winno32.exe] C:\WINDOWS\system32\winno32.exe
      O4 - HKLM\..\RunOnce: [atlew32.exe] C:\WINDOWS\system32\atlew32.exe
      O4 - HKLM\..\RunOnce: [mfcuc.exe] C:\WINDOWS\mfcuc.exe
      O4 - HKLM\..\RunOnce: [mfcrs.exe] C:\WINDOWS\mfcrs.exe
      O4 - HKLM\..\RunOnce: [ntkj32.exe] C:\WINDOWS\system32\ntkj32.exe
      O4 - HKLM\..\RunOnce: [ipia32.exe] C:\WINDOWS\ipia32.exe
      O4 - HKLM\..\RunOnce: [addhh.exe] C:\WINDOWS\addhh.exe
      O4 - HKLM\..\RunOnce: [apphn.exe] C:\WINDOWS\apphn.exe
      O4 - HKLM\..\RunOnce: [ipak.exe] C:\WINDOWS\ipak.exe
      O4 - HKLM\..\RunOnce: [sysxc.exe] C:\WINDOWS\sysxc.exe
      O4 - HKLM\..\RunOnce: [d3gp32.exe] C:\WINDOWS\d3gp32.exe
      O4 - HKLM\..\RunOnce: [netlr.exe] C:\WINDOWS\netlr.exe
      O4 - HKLM\..\RunOnce: [ipwf32.exe] C:\WINDOWS\system32\ipwf32.exe
      O4 - HKLM\..\RunOnce: [apiov.exe] C:\WINDOWS\apiov.exe
      O4 - HKLM\..\RunOnce: [ntev.exe] C:\WINDOWS\ntev.exe
      O4 - HKLM\..\RunOnce: [appkp.exe] C:\WINDOWS\appkp.exe
      O4 - HKLM\..\RunOnce: [ieob32.exe] C:\WINDOWS\system32\ieob32.exe
      O4 - HKLM\..\RunOnce: [d3ih32.exe] C:\WINDOWS\d3ih32.exe
      O4 - HKLM\..\RunOnce: [javami.exe] C:\WINDOWS\javami.exe

      Äänestä

    Odottaa vastausta

    Näihin keskusteluihin ei ole vielä vastattu. Ole ensimmäinen.

    Luetuimmat keskustelut

    Kommentoi aloitusta

    Bailey kirjoitti:

    Tässä olisi logi:

    Logfile of HijackThis v1.99.0
    Scan saved at 21:56:07, on 08/11/2005
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\SYSTEM32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\wscntfy.exe
    C:\Program Files\TeleWell TW-IA300C ADSL\CnxDslTb.exe
    C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\OpenOffice.org1.1.4\program\soffice.exe
    C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
    C:\WINDOWS\system32\ZoneLabs\vsmon.exe
    C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
    C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
    C:\Program Files\Grisoft\AVG7\avgemc.exe
    C:\WINDOWS\ntap32.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Documents and Settings\Owaska\Työpöytä\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system32\pkakd.dll/sp.html#55135
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\pkakd.dll/sp.html#55135
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\system32\pkakd.dll/sp.html#55135
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system32\pkakd.dll/sp.html#55135
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\pkakd.dll/sp.html#55135
    R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system32\pkakd.dll/sp.html#55135
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system32\pkakd.dll/sp.html#55135
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Tuomas Owaska
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 139.223.199.194:8080
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    R3 - Default URLSearchHook is missing
    O2 - BHO: Class - {9630B339-88D1-522D-5AC9-DB595AC38D7B} - C:\WINDOWS\system32\sdkql.dll
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [CnxDslTaskBar] C:\Program Files\TeleWell TW-IA300C ADSL\CnxDslTb.exe
    O4 - HKLM\..\Run: [Zone Labs Client] C:\PROGRA~1\ZONELA~1\ZONEAL~1\zlclient.exe
    O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
    O4 - HKLM\..\Run: [ntap32.exe] C:\WINDOWS\ntap32.exe
    O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
    O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
    O4 - HKLM\..\RunOnce: [ntcy32.exe] C:\WINDOWS\system32\ntcy32.exe
    O4 - HKLM\..\RunOnce: [crsl.exe] C:\WINDOWS\crsl.exe
    O4 - HKLM\..\RunOnce: [atlkv32.exe] C:\WINDOWS\system32\atlkv32.exe
    O4 - HKLM\..\RunOnce: [netce32.exe] C:\WINDOWS\netce32.exe
    O4 - HKLM\..\RunOnce: [ntia32.exe] C:\WINDOWS\system32\ntia32.exe
    O4 - HKLM\..\RunOnce: [sdkqg32.exe] C:\WINDOWS\system32\sdkqg32.exe
    O4 - HKLM\..\RunOnce: [d3vl.exe] C:\WINDOWS\d3vl.exe
    O4 - HKLM\..\RunOnce: [javawl32.exe] C:\WINDOWS\system32\javawl32.exe
    O4 - HKLM\..\RunOnce: [javaki32.exe] C:\WINDOWS\javaki32.exe
    O4 - HKLM\..\RunOnce: [mfcpe.exe] C:\WINDOWS\mfcpe.exe
    O4 - HKLM\..\RunOnce: [cryk.exe] C:\WINDOWS\cryk.exe
    O4 - HKLM\..\RunOnce: [ntcw32.exe] C:\WINDOWS\ntcw32.exe
    O4 - HKLM\..\RunOnce: [mfcsm.exe] C:\WINDOWS\system32\mfcsm.exe
    O4 - HKLM\..\RunOnce: [atlot32.exe] C:\WINDOWS\system32\atlot32.exe
    O4 - HKLM\..\RunOnce: [iezt32.exe] C:\WINDOWS\iezt32.exe
    O4 - HKLM\..\RunOnce: [crpz.exe] C:\WINDOWS\system32\crpz.exe
    O4 - HKLM\..\RunOnce: [javayz.exe] C:\WINDOWS\javayz.exe
    O4 - HKLM\..\RunOnce: [winno32.exe] C:\WINDOWS\system32\winno32.exe
    O4 - HKLM\..\RunOnce: [atlew32.exe] C:\WINDOWS\system32\atlew32.exe
    O4 - HKLM\..\RunOnce: [mfcuc.exe] C:\WINDOWS\mfcuc.exe
    O4 - HKLM\..\RunOnce: [mfcrs.exe] C:\WINDOWS\mfcrs.exe
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall60.trendmicro.com/housecall/xscan60.cab
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1122311255982
    O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cab
    O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
    O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://zone.msn.com/binFramework/v10/ZIntro.cab32846.cab
    O23 - Service: Workstation NetLogon Service - Unknown - C:\WINDOWS\system32\ntcy32.exe
    O23 - Service: AVG7 Alert Manager Server - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
    O23 - Service: AVG7 Update Service - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
    O23 - Service: Loogisen levyn hallinnan valvontapalvelu - Unknown - C:\WINDOWS\System32\dmadmin.exe
    O23 - Service: Tapahtumaloki - Unknown - C:\WINDOWS\system32\services.exe
    O23 - Service: CD-levyjen kirjoittamisen IMAPI COM -palvelu - Unknown - C:\WINDOWS\System32\imapi.exe
    O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: NetMeeting etätyöpöydän jakaminen - Unknown - C:\WINDOWS\System32\mnmsrvc.exe
    O23 - Service: NVIDIA Display Driver Service - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
    O23 - Service: Plug and Play - Unknown - C:\WINDOWS\system32\services.exe
    O23 - Service: Etätyöpöydän ohjeen istunnonhallinta - Unknown - C:\WINDOWS\system32\sessmgr.exe
    O23 - Service: Älykortti - Unknown - C:\WINDOWS\System32\SCardSvr.exe
    O23 - Service: Symantec Network Drivers Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
    O23 - Service: Resurssilokit ja -hälytykset - Unknown - C:\WINDOWS\system32\smlogsvc.exe
    O23 - Service: TrueVector Internet Monitor - Zone Labs Inc. - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
    O23 - Service: Aseman tilannevedos - Unknown - C:\WINDOWS\System32\vssvc.exe
    O23 - Service: WMI resurssisovitin - Unknown - C:\WINDOWS\System32\wbem\wmiapsrv.exe


    Kiitos jo etukäteen!

    Anonyymi
    5000

    Ilmoita asiaton sisältö

    • Sisältää materiaalia, joka on loukkaavaa, herjaavaa, rasistista, uhkailevaa tai ahdistelevaa.

    • Materiaali sisältää nimiä, yhteystietoja tai muita henkilökohtaisia tietoja. Julkisuuden henkilöistä, julkisissa viroissa toimivista ihmisistä sekä yritysten vastuuhenkilöistä saa keskustella työhön liittyen. Myös yksityiselämään liittyvistä asioista voi keskustella siltä osin, kuin niistä on julkisesti kerrottu.

    • Sisältää lapsille haitallista tai heiltä kiellettyä materiaalia. Seksuaalinen sisältö on sallittua aiheeseen tarkoitetuilla palstoilla, joiden ikäraja on 18 vuotta.

    • Lainvastaista sisältöä voi olla mm. yksityiselämää loukkaavan tiedon levitys, kiihottaminen kansanryhmää vastaan, laiton uhkaaminen, alaikäisiin liittyvä seksuaalinen sisältö/grooming, petokset, identiteettivarkaudet, kunnianloukkaukset ja tekijänoikeusrikkomukset.

    • Sisältö ei liity palstan tai keskusteluketjun aiheeseen.

    • Viesti ei ole suomea tai ruotsia (pl. International Forums), se sisältää mainontaa, se sisältää tekijänoikeuksin suojattua materiaalia, se on massapostitus tai jokin muu syy.

    Jaa keskustelu