Rekisteröidy

Ilmoitukset

Ladataan…

    Näytä kaikki

    Skannaukset eivät poista

    Kuukausi ovat aina samat asiat.
    Käytännössä on ongelma, että jotkut linkit eivät aukea: on vaan vilahdus.
    Tietokone on ajan tasalla, Elisa tietoturva ja muut ohjelmat päivitetty.
    Jos joku osasi neuvoa.
    Täällä tuloksia:

    Logfile of HijackThis v1.99.1
    Scan saved at 22:04:31, on 30.7.2005
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    D:\PROGRA~1\ELISAT~1\backweb\4119343\Program\SERVIC~1.EXE
    D:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fsgk32st.exe
    D:\Program Files\Elisa Tietoturvapalvelu\backweb\4119343\program\fsbwsys.exe
    D:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\FSGK32.EXE
    D:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fssm32.exe
    D:\Program Files\Elisa Tietoturvapalvelu\Common\FSMA32.EXE
    D:\Program Files\Elisa Tietoturvapalvelu\Common\FSMB32.EXE
    C:\WINDOWS\system32\nvsvc32.exe
    D:\Program Files\Elisa Tietoturvapalvelu\Common\FCH32.EXE
    C:\Program Files\Windows Media Connect\mswmcls.exe
    D:\Program Files\Elisa Tietoturvapalvelu\Common\FAMEH32.EXE
    D:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fsav32.exe
    C:\WINDOWS\Explorer.EXE
    D:\Program Files\Elisa Tietoturvapalvelu\FWES\Program\fsdfwd.exe
    D:\Program Files\Elisa Tietoturvapalvelu\Common\FSM32.EXE
    D:\Program Files\Elisa Tietoturvapalvelu\backweb\4119343\Program\fspex.exe
    C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe
    D:\Program Files\Lavasoft\Ad-Aware SE Professional\Ad-Watch.exe
    D:\Program Files\Elisa Tietoturvapalvelu\FSGUI\fsguiexe.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Messenger\msmsgs.exe
    D:\Program Files\WinZip\WZQKPICK.EXE
    D:\Program Files\program\soffice.exe
    C:\PROGRA~1\INCRED~1\bin\IMApp.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Documents and Settings\Ethel\Local Settings\Temporary Internet Files\Content.IE5\GTIJW3G5\HijackThis[1].exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://elisa.net/
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer - toimittaja Elisa Internet
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
    O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
    O4 - HKLM\..\Run: [F-Secure Manager] "D:\Program Files\Elisa Tietoturvapalvelu\Common\FSM32.EXE" /splash
    O4 - HKLM\..\Run: [F-Secure TNB] "D:\Program Files\Elisa Tietoturvapalvelu\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
    O4 - HKLM\..\Run: [F-Secure Startup Wizard] "D:\Program Files\Elisa Tietoturvapalvelu\FSGUI\FSSW.EXE" /reboot
    O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe
    O4 - HKLM\..\Run: [AWMON] "D:\Program Files\Lavasoft\Ad-Aware SE Professional\Ad-Watch.exe"
    O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.02.3000.1001\fi\msnappau.exe"
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [*wuauclt.exe] wmsct.exe
    O4 - HKLM\..\Run: [Microsoft Windows W32 Services] mssw32.exe
    O4 - HKLM\..\Run: [Mcafee Antivirus Monitoring System32mn] VSStatmn32.exe
    O4 - HKLM\..\Run: [Windows DLL Loader] C:\WINDOWS\system32\defragfatz.exe
    O4 - HKLM\..\Run: [Admanager Controller] C:\Program Files\Admanager Controller\AdManCtl.exe
    O4 - HKLM\..\Run: [Windows Task System] tasksys.exe
    O4 - HKLM\..\Run: [Zone Labs Client] "D:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
    O4 - HKLM\..\RunServices: [Windows Task System] tasksys.exe
    O4 - HKLM\..\RunServices: [Microsoft Windows W32 Services] mssw32.exe
    O4 - HKLM\..\RunServices: [Mcafee Antivirus Monitoring System32mn] VSStatmn32.exe
    O4 - HKLM\..\RunServices: [*wuauclt.exe] vheipwrmt.exe
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - HKCU\..\Run: [*wuauclt.exe] wmsct.exe
    O4 - HKCU\..\Run: [Microsoft Windows W32 Services] mssw32.exe
    O4 - HKCU\..\Run: [Mcafee Antivirus Monitoring System32mn] VSStatmn32.exe
    O4 - HKCU\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /0
    O4 - Startup: OpenOffice.org 1.1.4.lnk = D:\Program Files\program\quickstart.exe
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: WinZip Quick Pick.lnk = D:\Program Files\WinZip\WZQKPICK.EXE
    O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm
    O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
    O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
    O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://D:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
    O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
    O8 - Extra context menu item: Translate into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL
    O16 - DPF: {02E09B2E-2A03-4572-9291-69900C068564} (LCSim Control) - http://www.learnitcorp.com/cabs/lcsim.cab
    O16 - DPF: {0E8D0700-75DF-11D3-8B4A-0008C7450C4A} (DjVuCtl Class) - http://downloadcenter.samsung.com/content/common/cab/DjVuControlLite_EN.cab
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage) - http://go.microsoft.com/fwlink/?linkid=36467&clcid=0x409
    O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
    O16 - DPF: {3BFFE033-BF43-11D5-A271-00A024A51325} (iNotes6 Class) - http://pirmail1.piramk.fi/iNotes6.cab
    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.com/scan8/oscan8.cab
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1119937308093
    O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1120420527906
    O16 - DPF: {8EB3FF4E-86A1-4717-884D-7BA2D38272CB} (F-Secure Online Scanner) - http://support.f-secure.com/ols/fscax.cab
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
    O23 - Service: Elisa Tietoturvapalvelu (BackWeb Plug-in - 4119343) - Unknown owner - D:\PROGRA~1\ELISAT~1\backweb\4119343\Program\SERVIC~1.EXE
    O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - D:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fsgk32st.exe
    O23 - Service: fsbwsys - F-Secure Corp. - D:\Program Files\Elisa Tietoturvapalvelu\backweb\4119343\program\fsbwsys.exe
    O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - D:\Program Files\Elisa Tietoturvapalvelu\FWES\Program\fsdfwd.exe
    O23 - Service: FSMA - F-Secure Corporation - D:\Program Files\Elisa Tietoturvapalvelu\Common\FSMA32.EXE
    O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
    *********
    Ad-Aware SE Scanning Result, 30.7.2005 17:27:35
    -Vendor-Type-Category-Object-Comment
    -Win32.Worm.Agobot.E-RegValue-Worm-HKEY_LOCAL_MACHINE:software\microsoft\windows\currentversion\run "Windows DLL Loader"-"Windows DLL Loader"
    -WindUpdates-RegValue-Malware-HKEY_LOCAL_MACHINE:software\microsoft\windows\currentversion\run "Admanager Controller"-"Admanager Controller"
    **********
    SpybotSD Results
    CallingHome.biz: Autorun settings (Windows DLL Loader) (Rekisterin arvo,)
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Windows DLL Loader

    CallingHome.biz: Autorun settings (NeroFilterCheck) (Rekisterin arvo,)
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\NeroFilterCheck
    *********
    Registry Mechanic 5.0.0.136 (http://www.pctools.com/registry-mechanic/ )

    SUP - 1
    Location: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
    Value : SpySweeper = "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /0
    Parsed : C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe

    SUP - 2
    Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
    Value : Windows DLL Loader = C:\WINDOWS\system32\defragfatz.exe
    Parsed : C:\WINDOWS\system32\defragfatz.exe

    SUP - 3
    Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
    Value : Admanager Controller = C:\Program Files\Admanager Controller\AdManCtl.exe
    Parsed : C:\Program Files\Admanager Controller\AdManCtl.exe

    SUP - 4
    Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
    Value : NeroFilterCheck = C:\WINDOWS\system32\NeroCheck.exe
    Parsed : C:\WINDOWS\system32\NeroCheck.exe

    SUP - 5
    Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
    Value : msnappau = "C:\Program Files\MSN Apps\Updater\01.02.3000.1001\fi\msnappau.exe"
    Parsed : C:\Program Files\MSN Apps\Updater\01.02.3000.1001\fi\msnappau.exe

    SUP - 6
    Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
    Value : Zone Labs Client = "D:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
    Parsed : D:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
    6500
    Äänestä

    Muut lukivat myös

    Vastaukset 6

    Vanhimmat

    Jos se nyt mitenkään asiaan vaikuttaa.
    "Logfile of HijackThis v1.99.1
    Scan saved at 22:04:31, on 30.7.2005 "

    Ehkä joihinkin aikakriittisiin päivitys- ym. systeemeihin.
    Ihmetystä tuo kuitenkin herättää.
    Hijackthis.exe'lle pitäisi tehdä oma kansio: c:\HJT\

    Tuolla on senverran paljon siivottavaa, että kannattais varmaan päivyrin ajastuksen jälkeen ajaa eScan:
    http://koti.mbnet.fi/pattaya1/escanmwav.htm
    Lue ohjeet huolella ja päivitä käyttäen tapaa2.
    Vastaavanlaisia pahiksia löytyy myös tuolla käsitellystä koneesta:
    http://www.experts-exchange.com/Security/Firewalls/Q_21286672.html

    Äänestä

    • Vanhat nämä tiedot olivat, mutta nämä ovat samalaisia jo pari kuukautta. Tässä tuoremat:
      Logfile of HijackThis v1.99.1
      Scan saved at 23:25:15, on 10.8.2005
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\WINDOWS\Explorer.EXE
      D:\PROGRA~1\ELISAT~1\backweb\4119343\Program\SERVIC~1.EXE
      D:\Program Files\Elisa Tietoturvapalvelu\backweb\4119343\Program\fspex.exe
      D:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fsgk32st.exe
      D:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\FSGK32.EXE
      D:\Program Files\Elisa Tietoturvapalvelu\backweb\4119343\program\fsbwsys.exe
      D:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fssm32.exe
      D:\Program Files\Elisa Tietoturvapalvelu\Common\FSMA32.EXE
      D:\Program Files\Elisa Tietoturvapalvelu\Common\FSMB32.EXE
      C:\WINDOWS\system32\nvsvc32.exe
      D:\Program Files\Elisa Tietoturvapalvelu\Common\FCH32.EXE
      C:\Program Files\Windows Media Connect\mswmcls.exe
      D:\Program Files\Elisa Tietoturvapalvelu\Common\FAMEH32.EXE
      D:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fsav32.exe
      D:\Program Files\Elisa Tietoturvapalvelu\Common\FSM32.EXE
      C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe
      D:\Program Files\Lavasoft\Ad-Aware SE Professional\Ad-Watch.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\Messenger\msmsgs.exe
      D:\Program Files\Tmas.exe
      D:\Program Files\WinZip\WZQKPICK.EXE
      D:\Program Files\Elisa Tietoturvapalvelu\FWES\Program\fsdfwd.exe
      D:\Program Files\Elisa Tietoturvapalvelu\FSGUI\fsguiexe.exe
      C:\PROGRA~1\INCRED~1\bin\IMApp.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      D:\Kaspersky\mwavscan.com
      D:\Kaspersky\kavss.exe
      C:\WINDOWS\system32\notepad.exe
      D:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
      C:\WINDOWS\msagent\AgentSvr.exe
      D:\Program Files\program\soffice.exe
      C:\Documents and Settings\Ethel\Local Settings\Temporary Internet Files\Content.IE5\4R1CAJKE\HijackThis[1].exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://elisa.net/
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer - toimittaja Elisa Internet
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
      O4 - HKLM\..\Run: [F-Secure Manager] "D:\Program Files\Elisa Tietoturvapalvelu\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [F-Secure TNB] "D:\Program Files\Elisa Tietoturvapalvelu\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
      O4 - HKLM\..\Run: [F-Secure Startup Wizard] "D:\Program Files\Elisa Tietoturvapalvelu\FSGUI\FSSW.EXE" /reboot
      O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe
      O4 - HKLM\..\Run: [AWMON] "D:\Program Files\Lavasoft\Ad-Aware SE Professional\Ad-Watch.exe"
      O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
      O4 - HKLM\..\Run: [Mcafee Antivirus Monitoring System32mn] VSStatmn32.exe
      O4 - HKLM\..\Run: [*wuauclt.exe] wmsct.exe
      O4 - HKLM\..\Run: [Microsoft Windows W32 Services] mssw32.exe
      O4 - HKLM\..\Run: [Windows Task System] tasksys.exe
      O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
      O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.02.3000.1001\fi\msnappau.exe"
      O4 - HKLM\..\Run: [Zone Labs Client] "D:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
      O4 - HKLM\..\Run: [Windows DLL Loader] C:\WINDOWS\system32\defragfatz.exe
      O4 - HKLM\..\Run: [Admanager Controller] C:\Program Files\Admanager Controller\AdManCtl.exe
      O4 - HKLM\..\RunServices: [*wuauclt.exe] vheipwrmt.exe
      O4 - HKLM\..\RunServices: [Mcafee Antivirus Monitoring System32mn] VSStatmn32.exe
      O4 - HKLM\..\RunServices: [Microsoft Windows W32 Services] mssw32.exe
      O4 - HKLM\..\RunServices: [Windows Task System] tasksys.exe
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [Microsoft Windows W32 Services] mssw32.exe
      O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
      O4 - HKCU\..\Run: [Mcafee Antivirus Monitoring System32mn] VSStatmn32.exe
      O4 - HKCU\..\Run: [*wuauclt.exe] wmsct.exe
      O4 - HKCU\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /0
      O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      O4 - Global Startup: Trend Micro Anti-Spyware.lnk = D:\Program Files\Tmas.exe
      O4 - Global Startup: WinZip Quick Pick.lnk = D:\Program Files\WinZip\WZQKPICK.EXE
      O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm
      O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
      O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
      O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
      O8 - Extra context menu item: E&xport to Microsoft Excel - res://D:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
      O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
      O8 - Extra context menu item: Translate into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
      O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
      O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL
      O16 - DPF: {02E09B2E-2A03-4572-9291-69900C068564} (LCSim Control) - http://www.learnitcorp.com/cabs/lcsim.cab
      O16 - DPF: {0E8D0700-75DF-11D3-8B4A-0008C7450C4A} (DjVuCtl Class) - http://downloadcenter.samsung.com/content/common/cab/DjVuControlLite_EN.cab
      O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage) - http://go.microsoft.com/fwlink/?linkid=36467&clcid=0x409
      O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
      O16 - DPF: {3BFFE033-BF43-11D5-A271-00A024A51325} (iNotes6 Class) - http://pirmail1.piramk.fi/iNotes6.cab
      O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.com/scan8/oscan8.cab
      O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1119937308093
      O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
      O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1120420527906
      O16 - DPF: {8EB3FF4E-86A1-4717-884D-7BA2D38272CB} (F-Secure Online Scanner) - http://support.f-secure.com/ols/fscax.cab
      O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
      O23 - Service: Elisa Tietoturvapalvelu (BackWeb Plug-in - 4119343) - Unknown owner - D:\PROGRA~1\ELISAT~1\backweb\4119343\Program\SERVIC~1.EXE
      O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - D:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fsgk32st.exe
      O23 - Service: fsbwsys - F-Secure Corp. - D:\Program Files\Elisa Tietoturvapalvelu\backweb\4119343\program\fsbwsys.exe
      O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - D:\Program Files\Elisa Tietoturvapalvelu\FWES\Program\fsdfwd.exe
      O23 - Service: FSMA - F-Secure Corporation - D:\Program Files\Elisa Tietoturvapalvelu\Common\FSMA32.EXE
      O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe


      Sat Aug 06 22:08:05 2005 => Total Number of Files Scanned: 39182
      Sat Aug 06 22:08:05 2005 => Total Number of Virus(es) Found: 0
      Sat Aug 06 22:08:05 2005 => Total Number of Disinfected Files: 0
      Sat Aug 06 22:08:05 2005 => Total Number of Files Renamed: 0
      Sat Aug 06 22:08:05 2005 => Total Number of Deleted Files: 0
      Sat Aug 06 22:08:05 2005 => Total Number of Errors: 8
      Sat Aug 06 22:08:05 2005 => Time Elapsed: 01:09:14
      Sat Aug 06 22:08:05 2005 => Virus Database Date: 2005/08/06
      Sat Aug 06 22:08:05 2005 => Virus Database Count: 142385

      Äänestä

    • ienet aivot kirjoitti:

      Vanhat nämä tiedot olivat, mutta nämä ovat samalaisia jo pari kuukautta. Tässä tuoremat:
      Logfile of HijackThis v1.99.1
      Scan saved at 23:25:15, on 10.8.2005
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\WINDOWS\Explorer.EXE
      D:\PROGRA~1\ELISAT~1\backweb\4119343\Program\SERVIC~1.EXE
      D:\Program Files\Elisa Tietoturvapalvelu\backweb\4119343\Program\fspex.exe
      D:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fsgk32st.exe
      D:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\FSGK32.EXE
      D:\Program Files\Elisa Tietoturvapalvelu\backweb\4119343\program\fsbwsys.exe
      D:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fssm32.exe
      D:\Program Files\Elisa Tietoturvapalvelu\Common\FSMA32.EXE
      D:\Program Files\Elisa Tietoturvapalvelu\Common\FSMB32.EXE
      C:\WINDOWS\system32\nvsvc32.exe
      D:\Program Files\Elisa Tietoturvapalvelu\Common\FCH32.EXE
      C:\Program Files\Windows Media Connect\mswmcls.exe
      D:\Program Files\Elisa Tietoturvapalvelu\Common\FAMEH32.EXE
      D:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fsav32.exe
      D:\Program Files\Elisa Tietoturvapalvelu\Common\FSM32.EXE
      C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe
      D:\Program Files\Lavasoft\Ad-Aware SE Professional\Ad-Watch.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\Messenger\msmsgs.exe
      D:\Program Files\Tmas.exe
      D:\Program Files\WinZip\WZQKPICK.EXE
      D:\Program Files\Elisa Tietoturvapalvelu\FWES\Program\fsdfwd.exe
      D:\Program Files\Elisa Tietoturvapalvelu\FSGUI\fsguiexe.exe
      C:\PROGRA~1\INCRED~1\bin\IMApp.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      D:\Kaspersky\mwavscan.com
      D:\Kaspersky\kavss.exe
      C:\WINDOWS\system32\notepad.exe
      D:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
      C:\WINDOWS\msagent\AgentSvr.exe
      D:\Program Files\program\soffice.exe
      C:\Documents and Settings\Ethel\Local Settings\Temporary Internet Files\Content.IE5\4R1CAJKE\HijackThis[1].exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://elisa.net/
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer - toimittaja Elisa Internet
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
      O4 - HKLM\..\Run: [F-Secure Manager] "D:\Program Files\Elisa Tietoturvapalvelu\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [F-Secure TNB] "D:\Program Files\Elisa Tietoturvapalvelu\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
      O4 - HKLM\..\Run: [F-Secure Startup Wizard] "D:\Program Files\Elisa Tietoturvapalvelu\FSGUI\FSSW.EXE" /reboot
      O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe
      O4 - HKLM\..\Run: [AWMON] "D:\Program Files\Lavasoft\Ad-Aware SE Professional\Ad-Watch.exe"
      O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
      O4 - HKLM\..\Run: [Mcafee Antivirus Monitoring System32mn] VSStatmn32.exe
      O4 - HKLM\..\Run: [*wuauclt.exe] wmsct.exe
      O4 - HKLM\..\Run: [Microsoft Windows W32 Services] mssw32.exe
      O4 - HKLM\..\Run: [Windows Task System] tasksys.exe
      O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
      O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.02.3000.1001\fi\msnappau.exe"
      O4 - HKLM\..\Run: [Zone Labs Client] "D:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
      O4 - HKLM\..\Run: [Windows DLL Loader] C:\WINDOWS\system32\defragfatz.exe
      O4 - HKLM\..\Run: [Admanager Controller] C:\Program Files\Admanager Controller\AdManCtl.exe
      O4 - HKLM\..\RunServices: [*wuauclt.exe] vheipwrmt.exe
      O4 - HKLM\..\RunServices: [Mcafee Antivirus Monitoring System32mn] VSStatmn32.exe
      O4 - HKLM\..\RunServices: [Microsoft Windows W32 Services] mssw32.exe
      O4 - HKLM\..\RunServices: [Windows Task System] tasksys.exe
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [Microsoft Windows W32 Services] mssw32.exe
      O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
      O4 - HKCU\..\Run: [Mcafee Antivirus Monitoring System32mn] VSStatmn32.exe
      O4 - HKCU\..\Run: [*wuauclt.exe] wmsct.exe
      O4 - HKCU\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /0
      O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      O4 - Global Startup: Trend Micro Anti-Spyware.lnk = D:\Program Files\Tmas.exe
      O4 - Global Startup: WinZip Quick Pick.lnk = D:\Program Files\WinZip\WZQKPICK.EXE
      O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm
      O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
      O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
      O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
      O8 - Extra context menu item: E&xport to Microsoft Excel - res://D:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
      O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
      O8 - Extra context menu item: Translate into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
      O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
      O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL
      O16 - DPF: {02E09B2E-2A03-4572-9291-69900C068564} (LCSim Control) - http://www.learnitcorp.com/cabs/lcsim.cab
      O16 - DPF: {0E8D0700-75DF-11D3-8B4A-0008C7450C4A} (DjVuCtl Class) - http://downloadcenter.samsung.com/content/common/cab/DjVuControlLite_EN.cab
      O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage) - http://go.microsoft.com/fwlink/?linkid=36467&clcid=0x409
      O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
      O16 - DPF: {3BFFE033-BF43-11D5-A271-00A024A51325} (iNotes6 Class) - http://pirmail1.piramk.fi/iNotes6.cab
      O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.com/scan8/oscan8.cab
      O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1119937308093
      O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
      O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1120420527906
      O16 - DPF: {8EB3FF4E-86A1-4717-884D-7BA2D38272CB} (F-Secure Online Scanner) - http://support.f-secure.com/ols/fscax.cab
      O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
      O23 - Service: Elisa Tietoturvapalvelu (BackWeb Plug-in - 4119343) - Unknown owner - D:\PROGRA~1\ELISAT~1\backweb\4119343\Program\SERVIC~1.EXE
      O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - D:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fsgk32st.exe
      O23 - Service: fsbwsys - F-Secure Corp. - D:\Program Files\Elisa Tietoturvapalvelu\backweb\4119343\program\fsbwsys.exe
      O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - D:\Program Files\Elisa Tietoturvapalvelu\FWES\Program\fsdfwd.exe
      O23 - Service: FSMA - F-Secure Corporation - D:\Program Files\Elisa Tietoturvapalvelu\Common\FSMA32.EXE
      O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe


      Sat Aug 06 22:08:05 2005 => Total Number of Files Scanned: 39182
      Sat Aug 06 22:08:05 2005 => Total Number of Virus(es) Found: 0
      Sat Aug 06 22:08:05 2005 => Total Number of Disinfected Files: 0
      Sat Aug 06 22:08:05 2005 => Total Number of Files Renamed: 0
      Sat Aug 06 22:08:05 2005 => Total Number of Deleted Files: 0
      Sat Aug 06 22:08:05 2005 => Total Number of Errors: 8
      Sat Aug 06 22:08:05 2005 => Time Elapsed: 01:09:14
      Sat Aug 06 22:08:05 2005 => Virus Database Date: 2005/08/06
      Sat Aug 06 22:08:05 2005 => Virus Database Count: 142385

      Siirrä ensin se Hijackki omaan kansioon tonne
      C:\HjT\HijackThis.exe

      Sammuta tuo Ad-Watch.exe

      Poista Lisää/Poista paneelista jos näkyy

      Admanager Controller

      Merkkaa nuo sulje selain ja muut avoimet ikkunat ja paina Fix checked

      O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)
      O4 - HKLM\..\Run: [Mcafee Antivirus Monitoring System32mn] VSStatmn32.exe
      O4 - HKLM\..\Run: [*wuauclt.exe] wmsct.exe
      O4 - HKLM\..\Run: [Microsoft Windows W32 Services] mssw32.exe
      O4 - HKLM\..\Run: [Windows Task System] tasksys.exe
      O4 - HKLM\..\Run: [Windows DLL Loader] C:\WINDOWS\system32\defragfatz.exe
      O4 - HKLM\..\Run: [Admanager Controller] C:\Program Files\Admanager Controller\AdManCtl.exe
      O4 - HKLM\..\RunServices: [*wuauclt.exe] vheipwrmt.exe
      O4 - HKLM\..\RunServices: [Mcafee Antivirus Monitoring System32mn] VSStatmn32.exe
      O4 - HKLM\..\RunServices: [Microsoft Windows W32 Services] mssw32.exe
      O4 - HKLM\..\RunServices: [Windows Task System] tasksys.exe
      O4 - HKCU\..\Run: [Microsoft Windows W32 Services] mssw32.exe
      O4 - HKCU\..\Run: [Mcafee Antivirus Monitoring System32mn] VSStatmn32.exe
      O4 - HKCU\..\Run: [*wuauclt.exe] wmsct.exe
      O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
      O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)


      Sitte poista tuo kansio ja jos se ei lähe pois norm.tilassa niin sitte vikasietotilassa

      C:\Program Files\Admanager Controller\ <

      Käynnistä sitte kone uudestaan ja uus logi.

      Äänestä

    • Juu kirjoitti:

      Siirrä ensin se Hijackki omaan kansioon tonne
      C:\HjT\HijackThis.exe

      Sammuta tuo Ad-Watch.exe

      Poista Lisää/Poista paneelista jos näkyy

      Admanager Controller

      Merkkaa nuo sulje selain ja muut avoimet ikkunat ja paina Fix checked

      O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)
      O4 - HKLM\..\Run: [Mcafee Antivirus Monitoring System32mn] VSStatmn32.exe
      O4 - HKLM\..\Run: [*wuauclt.exe] wmsct.exe
      O4 - HKLM\..\Run: [Microsoft Windows W32 Services] mssw32.exe
      O4 - HKLM\..\Run: [Windows Task System] tasksys.exe
      O4 - HKLM\..\Run: [Windows DLL Loader] C:\WINDOWS\system32\defragfatz.exe
      O4 - HKLM\..\Run: [Admanager Controller] C:\Program Files\Admanager Controller\AdManCtl.exe
      O4 - HKLM\..\RunServices: [*wuauclt.exe] vheipwrmt.exe
      O4 - HKLM\..\RunServices: [Mcafee Antivirus Monitoring System32mn] VSStatmn32.exe
      O4 - HKLM\..\RunServices: [Microsoft Windows W32 Services] mssw32.exe
      O4 - HKLM\..\RunServices: [Windows Task System] tasksys.exe
      O4 - HKCU\..\Run: [Microsoft Windows W32 Services] mssw32.exe
      O4 - HKCU\..\Run: [Mcafee Antivirus Monitoring System32mn] VSStatmn32.exe
      O4 - HKCU\..\Run: [*wuauclt.exe] wmsct.exe
      O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
      O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)


      Sitte poista tuo kansio ja jos se ei lähe pois norm.tilassa niin sitte vikasietotilassa

      C:\Program Files\Admanager Controller\ <

      Käynnistä sitte kone uudestaan ja uus logi.

      Olen todella yrittänyt niitä poista kaikilla mahdollisilla ohjelmilla. Laitan vielä virheitä, mitä olen poiminut e-scanista. En kyllä halua että tuhlasit aika sen tutkimisen, mutta jos vilkastat, ehkä on jotain vakaava vikaa koneella.
      Yritän tehdä huomenna tarkan ohjeidesi mukaisesti mutta tänään enää en pysty – aamuherätys on 5:30.

      )
      Tarkistusohjelmat:
      •   F-Secure AVP: 6.0.167.6190, 2005-04-25
      •   F-Secure Libra: 2.01.10, 2005-04-22
      •   F-Secure Orion: 1.02.33, 2005-04-20
      Miksei saa niitä tarkastaa?
      •   Tiedoston C:\pagefile.sys avaaminen ei onnistu.
      •   Tiedoston C:\WINDOWS\system32\config\default avaaminen ei onnistu.
      •   Tiedoston C:\WINDOWS\SoftwareDistribution\EventCache\{5DB18022-586B-48B9-83F4-8DC2ED516366}.bin avaaminen ei onnistu.
      •   Tiedoston C:\WINDOWS\SoftwareDistribution\EventCache\{BD0A367E-4DC2-4142-B5A0-4BEDC228C11F}.bin avaaminen ei onnistu.

      ) eScan AntiVirus Toolkit Utility: ovatko nämä virheet vaarallisia?
      ERROR!!! Invalid Entry Microsoft Windows W32 Services = mssw32.exe. Removing it.
      ERROR!!! Invalid Entry Mcafee Antivirus Monitoring System32mn = VSStatmn32.exe
      ERROR!!! Invalid Entry C:\WINDOWS\system32\vheipwrmt.exe in SYSTEM\CurrentControlSet\Services\*wuauclt.exe...
      ERROR!!! Invalid Entry system32\DRIVERS\pcipim.sys in SYSTEM\CurrentControlSet\Services\pcipim...
      C:\WINDOWS\system32\WSMCT.0XE.mwt File already Scanned once... not able to clean.
      C:\WINDOWS\system32\WTMSC.0XE.mwt File already Scanned once... not able to clean.

      ERROR!!! FindFirstFile For C:\3ef21ae0ba5e72f9acac28b6dcc3e3\i386\*.* Failed!!! Reason is Käyttö estetty. (0x5)

      ERROR!!! ScanFile fails for C:\DOCUME~1\ALLUSE~1\APPLIC~1\MICROS~1\Crypto\RSA\MACHIN~1\54BF7A~1


      ERROR!!! ScanFile fails for C:\DOCUME~1\ALLUSE~1\APPLIC~1\MICROS~1\Crypto\RSA\MACHIN~1\67EF4F~1

      ERROR!!! ScanFile fails for C:\DOCUME~1\ALLUSE~1\APPLIC~1\MICROS~1\Crypto\RSA\MACHIN~1\A5479A~1
      ERROR!!! ScanFile fails for C:\DOCUME~1\ALLUSE~1\APPLIC~1\MICROS~1\Crypto\RSA\MACHIN~1\EA5D83~1

      ERROR!!! ScanFile fails for C:\DOCUME~1\ALLUSE~1\APPLIC~1\MICROS~1\Crypto\RSA\MACHIN~1\F3BC02~1

      ERROR!!! ScanFile fails for C:\DOCUME~1\ALLUSE~1\APPLIC~1\MICROS~1\Crypto\RSA\MACHIN~1\F3BC02~1

      ERROR!!! ScanFile fails for C:\DOCUME~1\JRJEST~1\Cookies\index.dat

      ERROR!!! ScanFile fails for C:\DOCUME~1\JRJEST~1\LOCALS~1\TEMPOR~1\Content.IE5\index.dat

      ERROR!!! ScanFile fails for C:\DOCUME~1\JRJEST~1\NTUSER.DAT


      ERROR!!! ScanFile fails for C:\DOCUME~1\JRJEST~1\NTUSER~1.LOG

      ERROR!!! ScanFile fails for C:\DOCUME~1\NETWOR~1\LOCALS~1\APPLIC~1\MICROS~1\Windows\UsrClass.dat

      ERROR!!! ScanFile fails for C:\DOCUME~1\NETWOR~1\LOCALS~1\APPLIC~1\MICROS~1\Windows\USRCLA~1.LOG

      ERROR!!! ScanFile fails for C:\DOCUME~1\NETWOR~1\NTUSER.DAT

      ERROR!!! ScanFile fails for C:\DOCUME~1\NETWOR~1\NTUSER~1.LOG

      ERROR!!! FindFirstFile For C:\System Volume Information\*.* Failed!!! Reason is Käyttö estetty. (0x5)

      ERROR!!! ScanFile fails for C:\WINDOWS\system32\config\AppEvent.Evt

      ERROR!!! ScanFile fails for C:\WINDOWS\system32\config\default.LOG

      ERROR!!! ScanFile fails for C:\WINDOWS\system32\config\SAM

      ERROR!!! ScanFile fails for C:\WINDOWS\system32\config\SAM.LOG

      ERROR!!! ScanFile fails for C:\WINDOWS\system32\config\SecEvent.Evt

      ERROR!!! ScanFile fails for C:\WINDOWS\system32\config\SECURITY

      ERROR!!! ScanFile fails for C:\WINDOWS\system32\config\SECURITY.LOG

      ERROR!!! ScanFile fails for C:\WINDOWS\system32\config\software.LOG

      ERROR!!! ScanFile fails for C:\WINDOWS\system32\config\SysEvent.Evt

      ERROR!!! ScanFile fails for C:\WINDOWS\system32\config\SysEvent.Evt

      ERROR!!! ScanFile fails for C:\WINDOWS\system32\config\system.LOG

      ERROR!!! ScanFile fails for C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR

      ERROR!!! ScanFile fails for C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP

      ERROR!!! ScanFile fails for C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER

      ERROR!!! ScanFile fails for C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP

      ERROR!!! ScanFile fails for C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP

      ERROR!!! ScanFile fails for C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP

      ERROR!!! ScanFile fails for D:\PROGRA~1\NETANT~1\Param\scArena.loc

      Mitä merkitse “having Size Restriction”? Niitäkin oli aika paljon.
      *** File C:\pagefile.sys having Size Restriction ***
      *** File C:\Program Files\Windows Media Connect\Redist\wmfdist95.exe having Size Restriction

      Äänestä

    • Juu kirjoitti:

      Siirrä ensin se Hijackki omaan kansioon tonne
      C:\HjT\HijackThis.exe

      Sammuta tuo Ad-Watch.exe

      Poista Lisää/Poista paneelista jos näkyy

      Admanager Controller

      Merkkaa nuo sulje selain ja muut avoimet ikkunat ja paina Fix checked

      O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)
      O4 - HKLM\..\Run: [Mcafee Antivirus Monitoring System32mn] VSStatmn32.exe
      O4 - HKLM\..\Run: [*wuauclt.exe] wmsct.exe
      O4 - HKLM\..\Run: [Microsoft Windows W32 Services] mssw32.exe
      O4 - HKLM\..\Run: [Windows Task System] tasksys.exe
      O4 - HKLM\..\Run: [Windows DLL Loader] C:\WINDOWS\system32\defragfatz.exe
      O4 - HKLM\..\Run: [Admanager Controller] C:\Program Files\Admanager Controller\AdManCtl.exe
      O4 - HKLM\..\RunServices: [*wuauclt.exe] vheipwrmt.exe
      O4 - HKLM\..\RunServices: [Mcafee Antivirus Monitoring System32mn] VSStatmn32.exe
      O4 - HKLM\..\RunServices: [Microsoft Windows W32 Services] mssw32.exe
      O4 - HKLM\..\RunServices: [Windows Task System] tasksys.exe
      O4 - HKCU\..\Run: [Microsoft Windows W32 Services] mssw32.exe
      O4 - HKCU\..\Run: [Mcafee Antivirus Monitoring System32mn] VSStatmn32.exe
      O4 - HKCU\..\Run: [*wuauclt.exe] wmsct.exe
      O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
      O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)


      Sitte poista tuo kansio ja jos se ei lähe pois norm.tilassa niin sitte vikasietotilassa

      C:\Program Files\Admanager Controller\ <

      Käynnistä sitte kone uudestaan ja uus logi.

      Olen yrittänyt etsiä näitä tiedostoja ”Etsi” – toiminnolla ja resurssienhallinnan kautta, mutta ei löydy. Ja Lisää/poista myös ei ole.

      Äänestä

    • Pienet aivot kirjoitti:

      Olen todella yrittänyt niitä poista kaikilla mahdollisilla ohjelmilla. Laitan vielä virheitä, mitä olen poiminut e-scanista. En kyllä halua että tuhlasit aika sen tutkimisen, mutta jos vilkastat, ehkä on jotain vakaava vikaa koneella.
      Yritän tehdä huomenna tarkan ohjeidesi mukaisesti mutta tänään enää en pysty – aamuherätys on 5:30.

      )
      Tarkistusohjelmat:
      •   F-Secure AVP: 6.0.167.6190, 2005-04-25
      •   F-Secure Libra: 2.01.10, 2005-04-22
      •   F-Secure Orion: 1.02.33, 2005-04-20
      Miksei saa niitä tarkastaa?
      •   Tiedoston C:\pagefile.sys avaaminen ei onnistu.
      •   Tiedoston C:\WINDOWS\system32\config\default avaaminen ei onnistu.
      •   Tiedoston C:\WINDOWS\SoftwareDistribution\EventCache\{5DB18022-586B-48B9-83F4-8DC2ED516366}.bin avaaminen ei onnistu.
      •   Tiedoston C:\WINDOWS\SoftwareDistribution\EventCache\{BD0A367E-4DC2-4142-B5A0-4BEDC228C11F}.bin avaaminen ei onnistu.

      ) eScan AntiVirus Toolkit Utility: ovatko nämä virheet vaarallisia?
      ERROR!!! Invalid Entry Microsoft Windows W32 Services = mssw32.exe. Removing it.
      ERROR!!! Invalid Entry Mcafee Antivirus Monitoring System32mn = VSStatmn32.exe
      ERROR!!! Invalid Entry C:\WINDOWS\system32\vheipwrmt.exe in SYSTEM\CurrentControlSet\Services\*wuauclt.exe...
      ERROR!!! Invalid Entry system32\DRIVERS\pcipim.sys in SYSTEM\CurrentControlSet\Services\pcipim...
      C:\WINDOWS\system32\WSMCT.0XE.mwt File already Scanned once... not able to clean.
      C:\WINDOWS\system32\WTMSC.0XE.mwt File already Scanned once... not able to clean.

      ERROR!!! FindFirstFile For C:\3ef21ae0ba5e72f9acac28b6dcc3e3\i386\*.* Failed!!! Reason is Käyttö estetty. (0x5)

      ERROR!!! ScanFile fails for C:\DOCUME~1\ALLUSE~1\APPLIC~1\MICROS~1\Crypto\RSA\MACHIN~1\54BF7A~1


      ERROR!!! ScanFile fails for C:\DOCUME~1\ALLUSE~1\APPLIC~1\MICROS~1\Crypto\RSA\MACHIN~1\67EF4F~1

      ERROR!!! ScanFile fails for C:\DOCUME~1\ALLUSE~1\APPLIC~1\MICROS~1\Crypto\RSA\MACHIN~1\A5479A~1
      ERROR!!! ScanFile fails for C:\DOCUME~1\ALLUSE~1\APPLIC~1\MICROS~1\Crypto\RSA\MACHIN~1\EA5D83~1

      ERROR!!! ScanFile fails for C:\DOCUME~1\ALLUSE~1\APPLIC~1\MICROS~1\Crypto\RSA\MACHIN~1\F3BC02~1

      ERROR!!! ScanFile fails for C:\DOCUME~1\ALLUSE~1\APPLIC~1\MICROS~1\Crypto\RSA\MACHIN~1\F3BC02~1

      ERROR!!! ScanFile fails for C:\DOCUME~1\JRJEST~1\Cookies\index.dat

      ERROR!!! ScanFile fails for C:\DOCUME~1\JRJEST~1\LOCALS~1\TEMPOR~1\Content.IE5\index.dat

      ERROR!!! ScanFile fails for C:\DOCUME~1\JRJEST~1\NTUSER.DAT


      ERROR!!! ScanFile fails for C:\DOCUME~1\JRJEST~1\NTUSER~1.LOG

      ERROR!!! ScanFile fails for C:\DOCUME~1\NETWOR~1\LOCALS~1\APPLIC~1\MICROS~1\Windows\UsrClass.dat

      ERROR!!! ScanFile fails for C:\DOCUME~1\NETWOR~1\LOCALS~1\APPLIC~1\MICROS~1\Windows\USRCLA~1.LOG

      ERROR!!! ScanFile fails for C:\DOCUME~1\NETWOR~1\NTUSER.DAT

      ERROR!!! ScanFile fails for C:\DOCUME~1\NETWOR~1\NTUSER~1.LOG

      ERROR!!! FindFirstFile For C:\System Volume Information\*.* Failed!!! Reason is Käyttö estetty. (0x5)

      ERROR!!! ScanFile fails for C:\WINDOWS\system32\config\AppEvent.Evt

      ERROR!!! ScanFile fails for C:\WINDOWS\system32\config\default.LOG

      ERROR!!! ScanFile fails for C:\WINDOWS\system32\config\SAM

      ERROR!!! ScanFile fails for C:\WINDOWS\system32\config\SAM.LOG

      ERROR!!! ScanFile fails for C:\WINDOWS\system32\config\SecEvent.Evt

      ERROR!!! ScanFile fails for C:\WINDOWS\system32\config\SECURITY

      ERROR!!! ScanFile fails for C:\WINDOWS\system32\config\SECURITY.LOG

      ERROR!!! ScanFile fails for C:\WINDOWS\system32\config\software.LOG

      ERROR!!! ScanFile fails for C:\WINDOWS\system32\config\SysEvent.Evt

      ERROR!!! ScanFile fails for C:\WINDOWS\system32\config\SysEvent.Evt

      ERROR!!! ScanFile fails for C:\WINDOWS\system32\config\system.LOG

      ERROR!!! ScanFile fails for C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR

      ERROR!!! ScanFile fails for C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP

      ERROR!!! ScanFile fails for C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER

      ERROR!!! ScanFile fails for C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP

      ERROR!!! ScanFile fails for C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP

      ERROR!!! ScanFile fails for C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP

      ERROR!!! ScanFile fails for D:\PROGRA~1\NETANT~1\Param\scArena.loc

      Mitä merkitse “having Size Restriction”? Niitäkin oli aika paljon.
      *** File C:\pagefile.sys having Size Restriction ***
      *** File C:\Program Files\Windows Media Connect\Redist\wmfdist95.exe having Size Restriction

      Enpä minä noista erroreista tiiä,mutta eikös tuo oo yläikkunasta kopioitu.
      Kopioi ne jotka ilmestyy alaikkkunaan.

      Äänestä

    Odottaa vastausta

    Näihin keskusteluihin ei ole vielä vastattu. Ole ensimmäinen.

    Luetuimmat keskustelut

    Kommentoi aloitusta

    Pienet aivot kirjoitti:

    Kuukausi ovat aina samat asiat.
    Käytännössä on ongelma, että jotkut linkit eivät aukea: on vaan vilahdus.
    Tietokone on ajan tasalla, Elisa tietoturva ja muut ohjelmat päivitetty.
    Jos joku osasi neuvoa.
    Täällä tuloksia:

    Logfile of HijackThis v1.99.1
    Scan saved at 22:04:31, on 30.7.2005
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    D:\PROGRA~1\ELISAT~1\backweb\4119343\Program\SERVIC~1.EXE
    D:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fsgk32st.exe
    D:\Program Files\Elisa Tietoturvapalvelu\backweb\4119343\program\fsbwsys.exe
    D:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\FSGK32.EXE
    D:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fssm32.exe
    D:\Program Files\Elisa Tietoturvapalvelu\Common\FSMA32.EXE
    D:\Program Files\Elisa Tietoturvapalvelu\Common\FSMB32.EXE
    C:\WINDOWS\system32\nvsvc32.exe
    D:\Program Files\Elisa Tietoturvapalvelu\Common\FCH32.EXE
    C:\Program Files\Windows Media Connect\mswmcls.exe
    D:\Program Files\Elisa Tietoturvapalvelu\Common\FAMEH32.EXE
    D:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fsav32.exe
    C:\WINDOWS\Explorer.EXE
    D:\Program Files\Elisa Tietoturvapalvelu\FWES\Program\fsdfwd.exe
    D:\Program Files\Elisa Tietoturvapalvelu\Common\FSM32.EXE
    D:\Program Files\Elisa Tietoturvapalvelu\backweb\4119343\Program\fspex.exe
    C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe
    D:\Program Files\Lavasoft\Ad-Aware SE Professional\Ad-Watch.exe
    D:\Program Files\Elisa Tietoturvapalvelu\FSGUI\fsguiexe.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Messenger\msmsgs.exe
    D:\Program Files\WinZip\WZQKPICK.EXE
    D:\Program Files\program\soffice.exe
    C:\PROGRA~1\INCRED~1\bin\IMApp.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Documents and Settings\Ethel\Local Settings\Temporary Internet Files\Content.IE5\GTIJW3G5\HijackThis[1].exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://elisa.net/
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer - toimittaja Elisa Internet
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
    O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
    O4 - HKLM\..\Run: [F-Secure Manager] "D:\Program Files\Elisa Tietoturvapalvelu\Common\FSM32.EXE" /splash
    O4 - HKLM\..\Run: [F-Secure TNB] "D:\Program Files\Elisa Tietoturvapalvelu\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
    O4 - HKLM\..\Run: [F-Secure Startup Wizard] "D:\Program Files\Elisa Tietoturvapalvelu\FSGUI\FSSW.EXE" /reboot
    O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe
    O4 - HKLM\..\Run: [AWMON] "D:\Program Files\Lavasoft\Ad-Aware SE Professional\Ad-Watch.exe"
    O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.02.3000.1001\fi\msnappau.exe"
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [*wuauclt.exe] wmsct.exe
    O4 - HKLM\..\Run: [Microsoft Windows W32 Services] mssw32.exe
    O4 - HKLM\..\Run: [Mcafee Antivirus Monitoring System32mn] VSStatmn32.exe
    O4 - HKLM\..\Run: [Windows DLL Loader] C:\WINDOWS\system32\defragfatz.exe
    O4 - HKLM\..\Run: [Admanager Controller] C:\Program Files\Admanager Controller\AdManCtl.exe
    O4 - HKLM\..\Run: [Windows Task System] tasksys.exe
    O4 - HKLM\..\Run: [Zone Labs Client] "D:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
    O4 - HKLM\..\RunServices: [Windows Task System] tasksys.exe
    O4 - HKLM\..\RunServices: [Microsoft Windows W32 Services] mssw32.exe
    O4 - HKLM\..\RunServices: [Mcafee Antivirus Monitoring System32mn] VSStatmn32.exe
    O4 - HKLM\..\RunServices: [*wuauclt.exe] vheipwrmt.exe
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - HKCU\..\Run: [*wuauclt.exe] wmsct.exe
    O4 - HKCU\..\Run: [Microsoft Windows W32 Services] mssw32.exe
    O4 - HKCU\..\Run: [Mcafee Antivirus Monitoring System32mn] VSStatmn32.exe
    O4 - HKCU\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /0
    O4 - Startup: OpenOffice.org 1.1.4.lnk = D:\Program Files\program\quickstart.exe
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: WinZip Quick Pick.lnk = D:\Program Files\WinZip\WZQKPICK.EXE
    O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm
    O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
    O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
    O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://D:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
    O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
    O8 - Extra context menu item: Translate into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL
    O16 - DPF: {02E09B2E-2A03-4572-9291-69900C068564} (LCSim Control) - http://www.learnitcorp.com/cabs/lcsim.cab
    O16 - DPF: {0E8D0700-75DF-11D3-8B4A-0008C7450C4A} (DjVuCtl Class) - http://downloadcenter.samsung.com/content/common/cab/DjVuControlLite_EN.cab
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage) - http://go.microsoft.com/fwlink/?linkid=36467&clcid=0x409
    O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
    O16 - DPF: {3BFFE033-BF43-11D5-A271-00A024A51325} (iNotes6 Class) - http://pirmail1.piramk.fi/iNotes6.cab
    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.com/scan8/oscan8.cab
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1119937308093
    O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1120420527906
    O16 - DPF: {8EB3FF4E-86A1-4717-884D-7BA2D38272CB} (F-Secure Online Scanner) - http://support.f-secure.com/ols/fscax.cab
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
    O23 - Service: Elisa Tietoturvapalvelu (BackWeb Plug-in - 4119343) - Unknown owner - D:\PROGRA~1\ELISAT~1\backweb\4119343\Program\SERVIC~1.EXE
    O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - D:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fsgk32st.exe
    O23 - Service: fsbwsys - F-Secure Corp. - D:\Program Files\Elisa Tietoturvapalvelu\backweb\4119343\program\fsbwsys.exe
    O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - D:\Program Files\Elisa Tietoturvapalvelu\FWES\Program\fsdfwd.exe
    O23 - Service: FSMA - F-Secure Corporation - D:\Program Files\Elisa Tietoturvapalvelu\Common\FSMA32.EXE
    O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
    *********
    Ad-Aware SE Scanning Result, 30.7.2005 17:27:35
    -Vendor-Type-Category-Object-Comment
    -Win32.Worm.Agobot.E-RegValue-Worm-HKEY_LOCAL_MACHINE:software\microsoft\windows\currentversion\run "Windows DLL Loader"-"Windows DLL Loader"
    -WindUpdates-RegValue-Malware-HKEY_LOCAL_MACHINE:software\microsoft\windows\currentversion\run "Admanager Controller"-"Admanager Controller"
    **********
    SpybotSD Results
    CallingHome.biz: Autorun settings (Windows DLL Loader) (Rekisterin arvo,)
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Windows DLL Loader

    CallingHome.biz: Autorun settings (NeroFilterCheck) (Rekisterin arvo,)
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\NeroFilterCheck
    *********
    Registry Mechanic 5.0.0.136 (http://www.pctools.com/registry-mechanic/ )

    SUP - 1
    Location: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
    Value : SpySweeper = "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /0
    Parsed : C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe

    SUP - 2
    Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
    Value : Windows DLL Loader = C:\WINDOWS\system32\defragfatz.exe
    Parsed : C:\WINDOWS\system32\defragfatz.exe

    SUP - 3
    Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
    Value : Admanager Controller = C:\Program Files\Admanager Controller\AdManCtl.exe
    Parsed : C:\Program Files\Admanager Controller\AdManCtl.exe

    SUP - 4
    Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
    Value : NeroFilterCheck = C:\WINDOWS\system32\NeroCheck.exe
    Parsed : C:\WINDOWS\system32\NeroCheck.exe

    SUP - 5
    Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
    Value : msnappau = "C:\Program Files\MSN Apps\Updater\01.02.3000.1001\fi\msnappau.exe"
    Parsed : C:\Program Files\MSN Apps\Updater\01.02.3000.1001\fi\msnappau.exe

    SUP - 6
    Location: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
    Value : Zone Labs Client = "D:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
    Parsed : D:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe

    Anonyymi
    5000

    Ilmoita asiaton sisältö

    • Sisältää materiaalia, joka on loukkaavaa, herjaavaa, rasistista, uhkailevaa tai ahdistelevaa.

    • Materiaali sisältää nimiä, yhteystietoja tai muita henkilökohtaisia tietoja. Julkisuuden henkilöistä, julkisissa viroissa toimivista ihmisistä sekä yritysten vastuuhenkilöistä saa keskustella työhön liittyen. Myös yksityiselämään liittyvistä asioista voi keskustella siltä osin, kuin niistä on julkisesti kerrottu.

    • Sisältää lapsille haitallista tai heiltä kiellettyä materiaalia. Seksuaalinen sisältö on sallittua aiheeseen tarkoitetuilla palstoilla, joiden ikäraja on 18 vuotta.

    • Lainvastaista sisältöä voi olla mm. yksityiselämää loukkaavan tiedon levitys, kiihottaminen kansanryhmää vastaan, laiton uhkaaminen, alaikäisiin liittyvä seksuaalinen sisältö/grooming, petokset, identiteettivarkaudet, kunnianloukkaukset ja tekijänoikeusrikkomukset.

    • Sisältö ei liity palstan tai keskusteluketjun aiheeseen.

    • Viesti ei ole suomea tai ruotsia (pl. International Forums), se sisältää mainontaa, se sisältää tekijänoikeuksin suojattua materiaalia, se on massapostitus tai jokin muu syy.

    Jaa keskustelu