Munkin konetta riivaa nyt tämä Aurora-spywareohjelma. F-Secure ilmoittelee poller.exe-tiedostosta kansiossa c:\windows\system32, ja myös windows-hakemiston nail.exe liittyy tähän.
Yksi oire on se, että normaalitilassa XP heittää ruudulle blue screenin, jossa sanotaan, että on huomattu vakava ongelma ja kone sammutetaan vahinkojen välttämiseksi. Vikasietotilassa konetta pystyy käyttämään.
Olen ottanut osoitteesta http://www.mypctuneup.com/evaluate.php ohjelman, jonka pitäisi auttaa, mutta sitä ei pysty ajamaan vikasietotilassa (palvelimelle ei saa yhteyttä).
Ad-Aware, Spybot, Spy Sweeper, Kaspersky ja F-Secure eivät osaa ongelmaa poistaa. Ajoin HijackThis-softan, alla logi. Toivottavasti joku osaa auttaa, kiitos!
Logfile of HijackThis v1.99.1
Scan saved at 14:37:37, on 3.8.2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
C:\progs\PowerDesk 6\PDExplo.exe
C:\progs\Mozilla Firefox\firefox.exe
C:\progs\Trillian 3\trillian.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\ctfmon.exe
C:\progs\GetRight\GetRight.exe
C:\progs\GetRight\GetRight.exe
C:\HJT\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O2 - BHO: bho2gr Class - {31FF080D-12A3-439A-A2EF-4BA95A3148E8} - C:\progs\GetRight\xx2gr.dll
O2 - BHO: Mouse Gestures - {A6A49249-57AE-4295-8D4D-18A9502C7D8E} - C:\Program Files\Internet Explorer\Plugins\Drowse\MouseGestures.dll
O2 - BHO: C:\WINDOWS\system32\diskperff.dll - {A82BE883-EE51-4FAB-85B4-9432C6056673} - C:\WINDOWS\system32\diskperff.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [zBrowser Launcher] C:\Program Files\Logitech\iTouch\iTouch.exe
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [PivotSoftware] "C:\Program Files\WinPortrait\wpctrl.exe"
O4 - HKLM\..\Run: [CoolSwitch] C:\WINDOWS\System32\taskswitch.exe
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /startintray
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKCU\..\Run: [Skype] "C:\progs\Skype\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Active Desktop Calendar] C:\Progs\Active Desktop Calendar\ADC.exe
O4 - Startup: sizer.lnk = C:\progs\Sizer\sizer.exe
O4 - Startup: Trillian.lnk = C:\progs\Trillian 3\trillian.exe
O4 - Startup: WinKey.exe
O4 - Startup: WinTidy.lnk = C:\progs\WinTidy\WinTidy.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: GetRight - Tray Icon.lnk = C:\progs\GetRight\getright.exe
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: Download with GetRight - C:\progs\GetRight\GRdownload.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Progs\OfficeXP\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Open with GetRight Browser - C:\progs\GetRight\GRbrowse.htm
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_01\bin\npjpi142_01.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_01\bin\npjpi142_01.dll
O9 - Extra button: Natural Reader - {0DF757C4-9999-463C-A4EB-B6BF1D8D8D3D} - C:\Audio\Progs\Natural Voice\read.html
O9 - Extra button: (no name) - {4E660F19-E91E-41e1-88EF-D1DFAB118F67} - C:\Program Files\Internet Explorer\Plugins\Drowse\MouseGestures.dll
O9 - Extra 'Tools' menuitem: Mouse Gestures... - {4E660F19-E91E-41e1-88EF-D1DFAB118F67} - C:\Program Files\Internet Explorer\Plugins\Drowse\MouseGestures.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: bw 0 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw 0s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - Winlogon Notify: disk - C:\WINDOWS\system32\diskperff.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apache2 - Unknown owner - C:\Program Files\Apache Group\Apache2\bin\Apache.exe" -k runservice (file missing)
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Autodesk Licensing Service - Unknown owner - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: F-Secure Automatic Update (BackWeb Plug-in - 7681197) - Unknown owner - C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
O23 - Service: C-DillaSrv - C-Dilla Ltd - C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTSVCCDA.EXE
O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
O23 - Service: iPod-palvelu (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: kavsvc - Kaspersky Lab - C:\Progs\Kaspersky Anti-Virus Personal\kavsvc.exe
O23 - Service: License Management Service ESD - Unknown owner - C:\Program Files\Common Files\element5 Shared\Service\Licence Manager ESD.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: MySQL - Unknown owner - C:\Program.exe (file missing)
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
Yksi oire on se, että normaalitilassa XP heittää ruudulle blue screenin, jossa sanotaan, että on huomattu vakava ongelma ja kone sammutetaan vahinkojen välttämiseksi. Vikasietotilassa konetta pystyy käyttämään.
Olen ottanut osoitteesta http://www.mypctuneup.com/evaluate.php ohjelman, jonka pitäisi auttaa, mutta sitä ei pysty ajamaan vikasietotilassa (palvelimelle ei saa yhteyttä).
Ad-Aware, Spybot, Spy Sweeper, Kaspersky ja F-Secure eivät osaa ongelmaa poistaa. Ajoin HijackThis-softan, alla logi. Toivottavasti joku osaa auttaa, kiitos!
Logfile of HijackThis v1.99.1
Scan saved at 14:37:37, on 3.8.2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
C:\progs\PowerDesk 6\PDExplo.exe
C:\progs\Mozilla Firefox\firefox.exe
C:\progs\Trillian 3\trillian.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\ctfmon.exe
C:\progs\GetRight\GetRight.exe
C:\progs\GetRight\GetRight.exe
C:\HJT\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O2 - BHO: bho2gr Class - {31FF080D-12A3-439A-A2EF-4BA95A3148E8} - C:\progs\GetRight\xx2gr.dll
O2 - BHO: Mouse Gestures - {A6A49249-57AE-4295-8D4D-18A9502C7D8E} - C:\Program Files\Internet Explorer\Plugins\Drowse\MouseGestures.dll
O2 - BHO: C:\WINDOWS\system32\diskperff.dll - {A82BE883-EE51-4FAB-85B4-9432C6056673} - C:\WINDOWS\system32\diskperff.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [zBrowser Launcher] C:\Program Files\Logitech\iTouch\iTouch.exe
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [PivotSoftware] "C:\Program Files\WinPortrait\wpctrl.exe"
O4 - HKLM\..\Run: [CoolSwitch] C:\WINDOWS\System32\taskswitch.exe
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /startintray
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKCU\..\Run: [Skype] "C:\progs\Skype\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Active Desktop Calendar] C:\Progs\Active Desktop Calendar\ADC.exe
O4 - Startup: sizer.lnk = C:\progs\Sizer\sizer.exe
O4 - Startup: Trillian.lnk = C:\progs\Trillian 3\trillian.exe
O4 - Startup: WinKey.exe
O4 - Startup: WinTidy.lnk = C:\progs\WinTidy\WinTidy.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: GetRight - Tray Icon.lnk = C:\progs\GetRight\getright.exe
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: Download with GetRight - C:\progs\GetRight\GRdownload.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Progs\OfficeXP\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Open with GetRight Browser - C:\progs\GetRight\GRbrowse.htm
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_01\bin\npjpi142_01.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_01\bin\npjpi142_01.dll
O9 - Extra button: Natural Reader - {0DF757C4-9999-463C-A4EB-B6BF1D8D8D3D} - C:\Audio\Progs\Natural Voice\read.html
O9 - Extra button: (no name) - {4E660F19-E91E-41e1-88EF-D1DFAB118F67} - C:\Program Files\Internet Explorer\Plugins\Drowse\MouseGestures.dll
O9 - Extra 'Tools' menuitem: Mouse Gestures... - {4E660F19-E91E-41e1-88EF-D1DFAB118F67} - C:\Program Files\Internet Explorer\Plugins\Drowse\MouseGestures.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: bw 0 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw 0s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {5BED48AF-4698-43BE-A890-58CB5F9CA144} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - Winlogon Notify: disk - C:\WINDOWS\system32\diskperff.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apache2 - Unknown owner - C:\Program Files\Apache Group\Apache2\bin\Apache.exe" -k runservice (file missing)
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Autodesk Licensing Service - Unknown owner - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: F-Secure Automatic Update (BackWeb Plug-in - 7681197) - Unknown owner - C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
O23 - Service: C-DillaSrv - C-Dilla Ltd - C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTSVCCDA.EXE
O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
O23 - Service: iPod-palvelu (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: kavsvc - Kaspersky Lab - C:\Progs\Kaspersky Anti-Virus Personal\kavsvc.exe
O23 - Service: License Management Service ESD - Unknown owner - C:\Program Files\Common Files\element5 Shared\Service\Licence Manager ESD.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: MySQL - Unknown owner - C:\Program.exe (file missing)
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
Vastaukset 9
Vanhimmat
Kirjota tai kopioi Suorita kohtaan msconfig ja Ok
Pistä siellä täppi kohtaan normaali startti ja sitte käynnistä kone uudestaan ja uus Hijack logi.
Tekisin kyllä sen, mutta kuten sanoin, kone ei suostu toimimaan normaalitilassa. Se toimii vähän aikaa, mutta kun yritän ajaa jonkin ohjelman, tulee blue screen.
Ei tossa logissa näy Nailia ja kumppaneita mutta jos Secure niistä valitta niin koitetaan ajaa niitten putsaushommeli.
Ota tosta Ewido
http://www.ewido.net/en/download/
Asenna ja sitte päivitä se.
Ota tosta Nailfix
http://www.noidea.us/easyfile/file.php?download=20050515010747824
Pura se työpöydälle,mutta älä aja sitä vielä.
Käynnistä kone vikasietotilassa.
Sitte tuplaklikkaa nailfix.cmd ja sitte pitäs ikkuna välähtää ees takas.
Sen jälkeen aja se Ewido ja poista löydöt ja säästä se logi.
Sitte scannaa Hijackillä merkkaa ja Fix:saa nämä rivit jos näkyy
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
O2 - BHO: C:\WINDOWS\system32\diskperff.dll - {A82BE883-EE51-4FAB-85B4-9432C6056673} - C:\WINDOWS\system32\diskperff.dll
O20 - Winlogon Notify: disk - C:\WINDOWS\system32\diskperff.dll
kaikki 018 rivit
Sitte poista jos löytyy piilotiedostot näkyvissä
C:\WINDOWS\system32\diskperff.dll
Käynnistä sitte normaalisti jos pystyy ja uus Hijack logi ja se Ewidon logi.
Toistaiseksi kone vakaa. Ei juurikaan ohjelmia käynnissä.
HJT-logi:
Logfile of HijackThis v1.99.1
Scan saved at 19:35:26, on 3.8.2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\WinPortrait\wpctrl.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\WinPortrait\floater.exe
C:\Program Files\Apache Group\Apache2\bin\Apache.exe
C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
C:\WINDOWS\system32\CTSVCCDA.EXE
C:\Program Files\Apache Group\Apache2\bin\Apache.exe
C:\Program Files\F-Secure\BackWeb\7681197\Program\F-Secure Automatic Update.exe
C:\Progs\Ewido Security Suite\ewidoctrl.exe
C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
C:\Program Files\F-Secure\Common\FSMA32.EXE
C:\Program Files\F-Secure\Common\FSMB32.EXE
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\MySQL\MySQL Server 4.1\bin\mysqld-nt.exe
C:\Program Files\F-Secure\Common\FCH32.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
C:\Program Files\F-Secure\Common\FAMEH32.EXE
C:\Program Files\F-Secure\Common\FNRB32.EXE
C:\Program Files\F-Secure\Common\FIH32.EXE
C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
C:\progs\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Heikki\Työpöytä\HijackThis.exe
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O2 - BHO: bho2gr Class - {31FF080D-12A3-439A-A2EF-4BA95A3148E8} - C:\progs\GetRight\xx2gr.dll
O2 - BHO: Mouse Gestures - {A6A49249-57AE-4295-8D4D-18A9502C7D8E} - C:\Program Files\Internet Explorer\Plugins\Drowse\MouseGestures.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [PivotSoftware] "C:\Program Files\WinPortrait\wpctrl.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: Download with GetRight - C:\progs\GetRight\GRdownload.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Progs\OfficeXP\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Open with GetRight Browser - C:\progs\GetRight\GRbrowse.htm
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_01\bin\npjpi142_01.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_01\bin\npjpi142_01.dll
O9 - Extra button: Natural Reader - {0DF757C4-9999-463C-A4EB-B6BF1D8D8D3D} - C:\Audio\Progs\Natural Voice\read.html
O9 - Extra button: (no name) - {4E660F19-E91E-41e1-88EF-D1DFAB118F67} - C:\Program Files\Internet Explorer\Plugins\Drowse\MouseGestures.dll
O9 - Extra 'Tools' menuitem: Mouse Gestures... - {4E660F19-E91E-41e1-88EF-D1DFAB118F67} - C:\Program Files\Internet Explorer\Plugins\Drowse\MouseGestures.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apache2 - Unknown owner - C:\Program Files\Apache Group\Apache2\bin\Apache.exe" -k runservice (file missing)
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Autodesk Licensing Service - Unknown owner - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: F-Secure Automatic Update (BackWeb Plug-in - 7681197) - Unknown owner - C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
O23 - Service: C-DillaSrv - C-Dilla Ltd - C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTSVCCDA.EXE
O23 - Service: ewido security suite control - ewido networks - C:\Progs\Ewido Security Suite\ewidoctrl.exe
O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
O23 - Service: iPod-palvelu (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: kavsvc - Kaspersky Lab - C:\Progs\Kaspersky Anti-Virus Personal\kavsvc.exe
O23 - Service: License Management Service ESD - Unknown owner - C:\Program Files\Common Files\element5 Shared\Service\Licence Manager ESD.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: MySQL - Unknown owner - C:\Program.exe (file missing)
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
Ewido-logi:
---------------------------------------------------------
ewido security suite - Scan report
---------------------------------------------------------
+ Created on: 19:06:30, 3.8.2005
+ Report-Checksum: 77E019A0
+ Scan result:
HKLM\SOFTWARE\Classes\CLSID\{0494D0D1-F8E0-41ad-92A3-14154ECE70AC} -> Spyware.MyWay : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{0494D0D9-F8E0-41ad-92A3-14154ECE70AC} -> Spyware.MyWay : Cleaned with backup
HKU\S-1-5-21-1801674531-343818398-2147140409-1004\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00000049-8F91-4D9C-9573-F016E7626484} -> Spyware.BetterInternet : Cleaned with backup
HKU\S-1-5-21-1801674531-343818398-2147140409-1004\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{302A3240-4805-4A34-97D7-1645A0B08410} -> Spyware.VX2 : Cleaned with backup
HKU\S-1-5-21-1801674531-343818398-2147140409-1004\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{999A06FF-10EF-4A29-8640-69E99882C26B} -> Spyware.Begin2Search : Cleaned with backup
:mozilla.10:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Doubleclick : Cleaned with backup
:mozilla.11:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Doubleclick : Cleaned with backup
:mozilla.57:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Tribalfusion : Cleaned with backup
:mozilla.58:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Tribalfusion : Cleaned with backup
:mozilla.59:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Tribalfusion : Cleaned with backup
:mozilla.68:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Atdmt : Cleaned with backup
:mozilla.79:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Mediaplex : Cleaned with backup
:mozilla.80:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.81:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.82:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.83:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.84:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.91:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.92:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.93:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.94:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.95:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.96:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.97:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.98:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.99:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.100:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.101:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.102:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.103:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.104:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.105:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.106:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.107:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.108:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.109:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.110:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.111:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.112:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.113:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.114:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.115:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.116:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.117:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.118:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.119:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.120:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.121:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.122:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.123:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.124:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.125:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.126:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.127:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Pointroll : Cleaned with backup
:mozilla.128:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Pointroll : Cleaned with backup
:mozilla.129:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Pointroll : Cleaned with backup
:mozilla.130:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Pointroll : Cleaned with backup
:mozilla.131:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Pointroll : Cleaned with backup
:mozilla.149:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Adserver : Cleaned with backup
:mozilla.150:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Adserver : Cleaned with backup
:mozilla.151:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Adserver : Cleaned with backup
:mozilla.152:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Adserver : Cleaned with backup
:mozilla.153:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Adserver : Cleaned with backup
:mozilla.154:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Adserver : Cleaned with backup
:mozilla.155:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Adserver : Cleaned with backup
:mozilla.156:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Adserver : Cleaned with backup
:mozilla.189:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Adtech : Cleaned with backup
:mozilla.194:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Adtech : Cleaned with backup
:mozilla.207:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Xxxtoolbar : Cleaned with backup
:mozilla.212:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Hotlog : Cleaned with backup
:mozilla.213:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Spylog : Cleaned with backup
:mozilla.220:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Tradedoubler : Cleaned with backup
:mozilla.221:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Tradedoubler : Cleaned with backup
:mozilla.222:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Tradedoubler : Cleaned with backup
:mozilla.223:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Tradedoubler : Cleaned with backup
:mozilla.224:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Tradedoubler : Cleaned with backup
:mozilla.226:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.228:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.229:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.230:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.231:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.232:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.233:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.234:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.235:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.236:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.237:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.238:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.240:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.241:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.242:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.243:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.244:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.245:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.246:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.247:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.248:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.249:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.250:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.251:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.252:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.253:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.254:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.255:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.256:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.257:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.258:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.259:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.262:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.263:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.264:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.265:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.266:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.267:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.268:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.269:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.270:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.271:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.272:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.273:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.274:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.275:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.276:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.277:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.278:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.290:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Overture : Cleaned with backup
:mozilla.291:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Overture : Cleaned with backup
:mozilla.296:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Serving-sys : Cleaned with backup
:mozilla.297:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Serving-sys : Cleaned with backup
:mozilla.298:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Serving-sys : Cleaned with backup
:mozilla.299:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Serving-sys : Cleaned with backup
:mozilla.334:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Serving-sys : Cleaned with backup
:mozilla.336:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.337:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.338:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.340:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.247realmedia : Cleaned with backup
:mozilla.350:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.390:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Comclick : Cleaned with backup
:mozilla.391:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Comclick : Cleaned with backup
:mozilla.392:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Comclick : Cleaned with backup
:mozilla.394:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Weborama : Cleaned with backup
:mozilla.405:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Qksrv : Cleaned with backup
:mozilla.407:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Qksrv : Cleaned with backup
:mozilla.447:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.448:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.449:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.450:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.451:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.460:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Webtrendslive : Cleaned with backup
:mozilla.466:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Questionmarket : Cleaned with backup
:mozilla.467:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.468:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.469:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.470:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.471:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.472:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.474:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Webtrendslive : Cleaned with backup
:mozilla.476:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Bfast : Cleaned with backup
:mozilla.515:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Linksynergy : Cleaned with backup
:mozilla.516:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Linksynergy : Cleaned with backup
:mozilla.551:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Ad-logics : Cleaned with backup
:mozilla.552:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Ad-logics : Cleaned with backup
:mozilla.553:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Ad-logics : Cleaned with backup
:mozilla.554:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Ad-logics : Cleaned with backup
:mozilla.555:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Ad-logics : Cleaned with backup
:mozilla.563:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.577:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Bluestreak : Cleaned with backup
:mozilla.627:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Specificclick : Cleaned with backup
:mozilla.723:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.724:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.726:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.731:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.732:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.761:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.764:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.817:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.818:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.819:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.820:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.821:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.822:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.835:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Webtrendslive : Cleaned with backup
:mozilla.860:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.871:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.877:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Dbbsrv : Cleaned with backup
:mozilla.907:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.909:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Targetnet : Cleaned with backup
:mozilla.910:C:\Documents and Settings\Heikki\Application Data\Mozilla\Firefox\Profiles\3j4rpowo.default\cookies.txt -> Spyware.Cookie.Targetnet : Cleaned with backup
C:\Documents and Settings\Heikki\Local Settings\Temp\trgen-yourbrain_277797-default.exe -> Spyware.HotSearchBar.d : Cleaned with backup
C:\Imut\3DSMaxHelp\rusted metal_tiedostot\210.htm -> Spyware.BookedSpace : Cleaned with backup
C:\Program Files\MyWay\myBar\1.bin\MY2NS.EXE -> Spyware.MyWay : Cleaned with backup
C:\Program Files\MyWay\myBar\1.bin\MYWAYPLUGINPROXY.CLASS -> Spyware.MyWay : Cleaned with backup
C:\Program Files\MyWay\myBar\1.bin\NPMYWAY.DLL -> Spyware.MyWay : Cleaned with backup
::Report End
Siinä analyysit. Kerro sä omasi. :)
Hijack logi on ok.
Vieläkö F-secure ilmoittelee jotain.
Äsken sanoin koneen olevan toistaiseksi vakaa, mutta kyllä se hetken surffailtuani ja Ewidoa ajettuani taas palasi blue screeniin.
Nyt olen vikasietotilassa, F-Secure ei ole päällä. Ei kyllä ole enää poller.exe- ja nail.exe-tiedostojakaan näkynyt. Ongelma on kuitenkin edelleen ratkaisematta.
Täällä on asiasta lisää:
http://keskustelu.suomi24.fi/show.fcgi?category=108&conference=4500000000000672&posting=22000000009795051
Onko hyviä ideoita?
Kiitos HJT-opastuksesta.
Ei ole ideoita blue screeniin en tiedä että mistä vois johtua.
saattaa olla hajua..
lokis on myös
O23 - Service: kavsvc - Kaspersky Lab - C:\Progs\Kaspersky Anti-Virus Personal\kavsvc.exe
lukee siellä, ja sit on kuitenki fsecurekin..
toinen niistä v*ttuun ni loppuu bsod:t
Poistin käynnistyksestä kyllä kaiken ylimääräisen, myös F-Securen ja Kasperskyn, minimoidakseni koneen rasituksen, mutta silti siniruutu tulee kummittelemaan.