Rekisteröidy

Ilmoitukset

Ladataan…

    Näytä kaikki

    ei toimi prkl

    ei toimi sitten mikaan.. messengerin kautta tuli joku popo. nappaimisto ihan sekaisin ja kone muutenkin. ja naista en ymmarra mitaan. auttakaa joku kiitos.

    Logfile of HijackThis v1.99.1
    Scan saved at 18:00:26, on 15.8.2005
    Platform: Windows XP SP1 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\csrss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    c:\Program Files\Norton AntiVirus\navapsvc.exe
    c:\Program Files\Norton Personal Firewall\NISUM.EXE
    C:\WINDOWS\System32\nvsvc32.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\System32\wdfmgr.exe
    c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    C:\WINDOWS\Explorer.EXE
    c:\Program Files\Norton Personal Firewall\ccPxySvc.exe
    C:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe
    C:\windows\system\hpsysdrv.exe
    C:\WINDOWS\System32\hphmon05.exe
    C:\HP\KBD\KBD.EXE
    C:\Program Files\Common Files\Symantec Shared\ccApp.exe
    C:\Program Files\Multimedia Card Reader\shwicon2k.exe
    C:\WINDOWS\ALCXMNTR.EXE
    C:\Program Files\Messenger Plus! 3\MsgPlus.exe
    C:\Program Files\MSN Apps\Updater\01.03.0000.1005\fi\msnappau.exe
    C:\WINDOWS\System32\windir32.exe
    C:\WINDOWS\System32\schvost.exe
    C:\WINDOWS\System32\rundll32.exe
    C:\WINDOWS\System32\wuauclt.exe
    C:\WINDOWS\etb\pokapoka63.exe
    C:\opera\Opera.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\Program Files\Windows Media Player\wmplayer.exe
    C:\Documents and Settings\Omistaja\Omat tiedostot\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe
    O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
    O4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\HP\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
    O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exe
    O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
    O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
    O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
    O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
    O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
    O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
    O4 - HKLM\..\Run: [Sunkist2k] C:\Program Files\Multimedia Card Reader\shwicon2k.exe
    O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
    O4 - HKLM\..\Run: [Reminder] "C:\Windows\Creator\Remind_XP.exe"
    O4 - HKLM\..\Run: [ccRegVfy] "c:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
    O4 - HKLM\..\Run: [CnxTrApp] rundll32.exe "C:\Program Files\TeleWell\ADSL USB Router\CnxTrApp.dll",AppEntry -REG "Conexant\Conexant USB Network"
    O4 - HKLM\..\Run: [Easy-PrintToolBox] C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
    O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"
    O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.03.0000.1005\fi\msnappau.exe"
    O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
    O4 - HKLM\..\Run: [Microsoft Windows DLL Services Configuration] windir32.exe
    O4 - HKLM\..\Run: [Microsoft Update 64 BIT] schvost.exe
    O4 - HKLM\..\Run: [System service63] C:\WINDOWS\etb\pokapoka63.exe
    O4 - HKLM\..\RunServices: [Microsoft Windows DLL Services Configuration] windir32.exe
    O4 - HKLM\..\RunServices: [Microsoft Update 64 BIT] schvost.exe
    O4 - HKCU\..\Run: [Microsoft Windows DLL Services Configuration] windir32.exe
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
    O4 - Global Startup: Ohjelmiston käyttöoikeussopimus.lnk = C:\License.txt
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
    O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
    O9 - Extra button: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
    O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
    O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
    O23 - Service: Symantec Proxy Service (ccPxySvc) - Symantec Corporation - c:\Program Files\Norton Personal Firewall\ccPxySvc.exe
    O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    O23 - Service: Norton AntiVirus -ohjelman automaattinen suojaus (navapsvc) - Symantec Corporation - c:\Program Files\Norton AntiVirus\navapsvc.exe
    O23 - Service: Norton Personal Firewall Accounts Manager (NISUM) - Symantec Corporation - c:\Program Files\Norton Personal Firewall\NISUM.EXE
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
    O23 - Service: SAVScan - Symantec Corporation - c:\Program Files\Norton AntiVirus\SAVScan.exe
    O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
    11519
    Äänestä

    Muut lukivat myös

    Vastaukset 11

    Vanhimmat

    Siirrä ensin se Hijackki omaan kansioon tonne
    C:\HjT\HijackThis.exe

    Piilotiedostot näkyviin,ohje tuolla

    http://www.xtra.co.nz/help/0,,4155-1916458,00.html

    Merkkaa nuo sulje selain ja muut avoimet ikkunat ja paina Fix checked

    O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
    O4 - HKLM\..\Run: [Microsoft Windows DLL Services Configuration] windir32.exe
    O4 - HKLM\..\Run: [Microsoft Update 64 BIT] schvost.exe
    O4 - HKLM\..\Run: [System service63] C:\WINDOWS\etb\pokapoka63.exe
    O4 - HKLM\..\RunServices: [Microsoft Windows DLL Services Configuration] windir32.exe
    O4 - HKLM\..\RunServices: [Microsoft Update 64 BIT] schvost.exe
    O4 - HKCU\..\Run: [Microsoft Windows DLL Services Configuration] windir32.exe


    Käynnistä sitte kone vikasietotilassa ja poista

    C:\WINDOWS\System32\windir32.exe
    C:\WINDOWS\System32\schvost.exe

    C:\WINDOWS\etb\ < kansio

    Käynnistä sitte normaalisti ja uus logi.

    Äänestä

    • en oo viel' tehnyt tota ku ajoin ton escanin lapi ja se anto tallasia. ni pystynko poistamaan ne tata kautta vai teenko kuitenkin ton?

      File C:\WINDOWS\System32\windir32.exe infected by "Backdoor.Win32.Rbot.yp" Virus. Action Taken: File Renamed.
      File C:\WINDOWS\System32\schvost.exe infected by "Backdoor.Win32.Rbot.yd" Virus. Action Taken: File Renamed.
      File C:\WINDOWS\etb\pokapoka63.exe tagged as not-a-virus:AdWare.ToolBar.EliteBar.ap. No Action Taken.
      File C:\WINDOWS\etb\pokapoka63.exe tagged as not-a-virus:AdWare.ToolBar.EliteBar.ap. No Action Taken.
      File C:\WINDOWS\pxckdla.exe infected by "Trojan-Downloader.Win32.OneClickNetSearch.i" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\pxckdlauninstall.exe tagged as not-a-virus:AdWare.BHO.NoName.f. No Action Taken.
      File C:\WINDOWS\snbho.exe tagged as not-a-virus:AdWare.ToolBar.ImiBar.e. No Action Taken.
      File C:\WINDOWS\System32\b5s.dll infected by "Trojan-Dropper.Win32.Small.nj" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\System32\PwrSrchP1.dll infected by "Trojan-Dropper.Win32.Small.mh" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\System32\Splpmt.dll infected by "Trojan-Dropper.Win32.Noname.a" Virus. Action Taken: File Deleted.
      File C:\Documents and Settings\Omistaja\Local Settings\Temp\1114814_1800_3868_200_63.41.tmp tagged as not-a-virus:AdWare.ToolBar.EliteBar.ap. No Action Taken.
      File C:\Documents and Settings\Omistaja\Local Settings\Temp\1310886_1800_3868_2452_63.41.tmp tagged as not-a-virus:AdWare.ToolBar.EliteBar.ap. No Action Taken.
      File C:\Documents and Settings\Omistaja\Local Settings\Temp\196878_5304_780_5332_63.41.tmp1 tagged as not-a-virus:AdWare.ToolBar.EliteBar.am. No Action Taken.
      File C:\Documents and Settings\Omistaja\Local Settings\Temp\393870_1800_3868_2336_63.41.tmp tagged as not-a-virus:AdWare.ToolBar.EliteBar.ap. No Action Taken.
      File C:\Documents and Settings\Omistaja\Local Settings\Temp\459494_1800_3868_2560_63.41.tmp tagged as not-a-virus:AdWare.ToolBar.EliteBar.ap. No Action Taken.
      File C:\Documents and Settings\Omistaja\Local Settings\Temp\perfectnavUninstall.exe infected by "Trojan-Downloader.Win32.Keenval.f" Virus. Action Taken: File Deleted.
      File C:\Documents and Settings\Omistaja\Local Settings\Temp\__unin__.exe tagged as not-a-virus:AdWare.Altnet.g. No Action Taken.
      File C:\Documents and Settings\Omistaja\Local Settings\Temporary Internet Files\Content.IE5\8XZS8X33\kw[1].exe tagged as not-a-virus:AdWare.ToolBar.EliteBar.ao. No Action Taken.
      File C:\Documents and Settings\Omistaja\Local Settings\Temporary Internet Files\Content.IE5\8XZS8X33\update[1].exe infected by "Backdoor.Win32.Rbot.yd" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Omistaja\Local Settings\Temporary Internet Files\Content.IE5\8XZS8X33\zzd[1].exe infected by "IM-Worm.Win32.Kelvir.dt" Virus. Action Taken: File Deleted.
      File C:\Documents and Settings\Omistaja\zzdate.exe infected by "Backdoor.Win32.Rbot.yd" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Omistaja\zzzd.exe infected by "IM-Worm.Win32.Kelvir.dt" Virus. Action Taken: File Deleted.
      File C:\download\mirc616 (1).exe tagged as not-a-virus:Client-IRC.Win32.mIRC.616. No Action Taken.
      File C:\download\mirc616.exe tagged as not-a-virus:Client-IRC.Win32.mIRC.616. No Action Taken.
      File C:\opera\zzzd.exe infected by "IM-Worm.Win32.Kelvir.dt" Virus. Action Taken: File Deleted.
      File C:\Program Files\mIRC\mirc.exe tagged as not-a-virus:Client-IRC.Win32.mIRC.616. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\12BE509F tagged as not-a-virus:AdWare.BetterInternet. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\12C42498 infected by "Trojan-Downloader.Win32.Agent.ae" Virus. Action Taken: File Deleted.
      File C:\Program Files\Norton AntiVirus\Quarantine\12C74E94 infected by "Trojan-Downloader.Win32.Agent.ae" Virus. Action Taken: File Deleted.
      File C:\Program Files\Norton AntiVirus\Quarantine\12CB7890 infected by "Trojan-Downloader.JS.IstBar.j" Virus. Action Taken: File Deleted.
      File C:\Program Files\Norton AntiVirus\Quarantine\32C31C56.htm infected by "Exploit.HTML.Mht" Virus. Action Taken: File Renamed.
      File C:\Program Files\Norton AntiVirus\Quarantine\3A6A7342 tagged as not-a-virus:RiskTool.Win32.HideWindows. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\3A71473B tagged as not-a-virus:RiskTool.Win32.HideWindows. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\3A811929 tagged as not-a-virus:RiskTool.Win32.HideWindows. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\3A983F10 tagged as not-a-virus:RiskTool.Win32.HideWindows. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\3AB962EC tagged as not-a-virus:RiskTool.Win32.HideWindows. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\3D250C41 tagged as not-a-virus:RiskTool.Win32.HideWindows. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\3EC1367C tagged as not-a-virus:RiskTool.Win32.HideWindows. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\4C353F3D tagged as not-a-virus:RiskTool.Win32.HideWindows. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\604D4F0C tagged as not-a-virus:RiskTool.Win32.HideWindows. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\62067326 tagged as not-a-virus:RiskTool.Win32.HideWindows. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\63C56B3A tagged as not-a-virus:RiskTool.Win32.HideWindows. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\657A6559 tagged as not-a-virus:RiskTool.Win32.HideWindows. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\77CE6B72 infected by "Trojan-Downloader.Win32.Agent.ae" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP212\A0052099.exe infected by "Trojan-Downloader.Win32.OneClickNetSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP212\A0052111.DLL tagged as not-a-virus:AdWare.ToolBar.MyWay.g. No Action Taken.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP212\A0052201.exe tagged as not-a-virus:AdWare.WebRebates.d. No Action Taken.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP212\A0052202.exe tagged as not-a-virus:AdWare.WebRebates.d. No Action Taken.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP212\A0052203.exe tagged as not-a-virus:AdWare.WebRebates.c. No Action Taken.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP212\A0052204.exe tagged as not-a-virus:AdWare.WebRebates.g. No Action Taken.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP212\A0052205.exe tagged as not-a-virus:AdWare.BiSpy.o. No Action Taken.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP212\A0052207.dll tagged as not-a-virus:AdWare.BiSpy.s. No Action Taken.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP212\A0052212.exe infected by "Trojan-Downloader.NSIS.Agent.a" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP212\A0052214.dll tagged as not-a-virus:AdWare.BHO.MegaSearch.g. No Action Taken.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP212\A0052218.dll infected by "Trojan-Dropper.Win32.Small.uv" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP212\A0052236.EXE tagged as not-a-virus:AdWare.ToolBar.MyWay.b. No Action Taken.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP212\A0052237.DLL tagged as not-a-virus:AdWare.ToolBar.MyWay.f. No Action Taken.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP274\A0059290.dll tagged as not-a-virus:AdWare.ToolBar.EliteBar.am. No Action Taken.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP274\A0059291.dll tagged as not-a-virus:AdWare.ToolBar.EliteBar.ap. No Action Taken.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP274\A0059292.exe tagged as not-a-virus:AdWare.ToolBar.EliteBar.ap. No Action Taken.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP274\A0059315.dll infected by "Trojan-Dropper.Win32.Small.mh" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP274\A0059316.dll tagged as not-a-virus:AdWare.ToolBar.ImiBar.e. No Action Taken.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP274\A0059340.dll tagged as not-a-virus:AdWare.ToolBar.EliteBar.am. No Action Taken.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP274\A0059341.dll tagged as not-a-virus:AdWare.ToolBar.EliteBar.ap. No Action Taken.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP274\A0059342.exe tagged as not-a-virus:AdWare.ToolBar.EliteBar.ap. No Action Taken.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP274\A0059370.dll tagged as not-a-virus:AdWare.ToolBar.EliteBar.am. No Action Taken.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP274\A0059371.dll tagged as not-a-virus:AdWare.ToolBar.EliteBar.ap. No Action Taken.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP274\A0059372.exe tagged as not-a-virus:AdWare.ToolBar.EliteBar.ap. No Action Taken.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP274\A0059412.dll tagged as not-a-virus:AdWare.ToolBar.EliteBar.am. No Action Taken.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP274\A0059413.dll tagged as not-a-virus:AdWare.ToolBar.EliteBar.ap. No Action Taken.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP274\A0059414.exe tagged as not-a-virus:AdWare.ToolBar.EliteBar.ap. No Action Taken.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP277\A0059468.dll tagged as not-a-virus:AdWare.ToolBar.EliteBar.am. No Action Taken.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP277\A0059469.dll tagged as not-a-virus:AdWare.ToolBar.EliteBar.ap. No Action Taken.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP277\A0059470.exe tagged as not-a-virus:AdWare.ToolBar.EliteBar.ap. No Action Taken.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP277\A0059503.dll tagged as not-a-virus:AdWare.ToolBar.EliteBar.am. No Action Taken.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP277\A0059504.dll tagged as not-a-virus:AdWare.ToolBar.EliteBar.ap. No Action Taken.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP277\A0059505.exe tagged as not-a-virus:AdWare.ToolBar.EliteBar.ap. No Action Taken.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP277\A0059512.exe infected by "Backdoor.Win32.Rbot.yp" Virus. Action Taken: File Renamed.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP277\A0059513.exe infected by "Backdoor.Win32.Rbot.yd" Virus. Action Taken: File Renamed.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP277\A0059514.exe infected by "Trojan-Downloader.Win32.OneClickNetSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP277\A0059515.dll infected by "Trojan-Dropper.Win32.Small.nj" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP277\A0059516.dll infected by "Trojan-Dropper.Win32.Small.mh" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP277\A0059517.dll infected by "Trojan-Dropper.Win32.Noname.a" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP277\A0059518.exe infected by "Backdoor.Win32.Rbot.yd" Virus. Action Taken: File Renamed.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP277\A0059519.exe infected by "IM-Worm.Win32.Kelvir.dt" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP277\A0059520.exe infected by "IM-Worm.Win32.Kelvir.dt" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\browserxtras\pn\remove.exe infected by "Trojan-Downloader.Win32.Keenval.f" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\etb\nt_hide63.dll tagged as not-a-virus:AdWare.ToolBar.EliteBar.am. No Action Taken.
      File C:\WINDOWS\etb\pokapoka63.exe tagged as not-a-virus:AdWare.ToolBar.EliteBar.ap. No Action Taken.
      File C:\WINDOWS\etb\xud_63.dll tagged as not-a-virus:AdWare.ToolBar.EliteBar.ap. No Action Taken.
      File C:\WINDOWS\pxckdlauninstall.exe tagged as not-a-virus:AdWare.BHO.NoName.f. No Action Taken.
      File C:\WINDOWS\snbho.exe tagged as not-a-virus:AdWare.ToolBar.ImiBar.e. No Action Taken.
      File C:\WINDOWS\Temp\Altnet\dmfiles.cab tagged as not-a-virus:AdWare.Altnet.g. No Action Taken.
      File C:\WINDOWS\Temp\Altnet\mysearch.cab tagged as not-a-virus:AdWare.ToolBar.MyWay.g. No Action Taken.
      File C:\WINDOWS\Temp\Altnet\pmexe.cab tagged as not-a-virus:AdWare.Altnet.h. No Action Taken.
      File C:\WINDOWS\Temp\Altnet\pmfiles.cab tagged as not-a-virus:AdWare.BrilliantDigital.1007. No Action Taken.

      Äänestä

    • epatuuus kirjoitti:

      en oo viel' tehnyt tota ku ajoin ton escanin lapi ja se anto tallasia. ni pystynko poistamaan ne tata kautta vai teenko kuitenkin ton?

      File C:\WINDOWS\System32\windir32.exe infected by "Backdoor.Win32.Rbot.yp" Virus. Action Taken: File Renamed.
      File C:\WINDOWS\System32\schvost.exe infected by "Backdoor.Win32.Rbot.yd" Virus. Action Taken: File Renamed.
      File C:\WINDOWS\etb\pokapoka63.exe tagged as not-a-virus:AdWare.ToolBar.EliteBar.ap. No Action Taken.
      File C:\WINDOWS\etb\pokapoka63.exe tagged as not-a-virus:AdWare.ToolBar.EliteBar.ap. No Action Taken.
      File C:\WINDOWS\pxckdla.exe infected by "Trojan-Downloader.Win32.OneClickNetSearch.i" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\pxckdlauninstall.exe tagged as not-a-virus:AdWare.BHO.NoName.f. No Action Taken.
      File C:\WINDOWS\snbho.exe tagged as not-a-virus:AdWare.ToolBar.ImiBar.e. No Action Taken.
      File C:\WINDOWS\System32\b5s.dll infected by "Trojan-Dropper.Win32.Small.nj" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\System32\PwrSrchP1.dll infected by "Trojan-Dropper.Win32.Small.mh" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\System32\Splpmt.dll infected by "Trojan-Dropper.Win32.Noname.a" Virus. Action Taken: File Deleted.
      File C:\Documents and Settings\Omistaja\Local Settings\Temp\1114814_1800_3868_200_63.41.tmp tagged as not-a-virus:AdWare.ToolBar.EliteBar.ap. No Action Taken.
      File C:\Documents and Settings\Omistaja\Local Settings\Temp\1310886_1800_3868_2452_63.41.tmp tagged as not-a-virus:AdWare.ToolBar.EliteBar.ap. No Action Taken.
      File C:\Documents and Settings\Omistaja\Local Settings\Temp\196878_5304_780_5332_63.41.tmp1 tagged as not-a-virus:AdWare.ToolBar.EliteBar.am. No Action Taken.
      File C:\Documents and Settings\Omistaja\Local Settings\Temp\393870_1800_3868_2336_63.41.tmp tagged as not-a-virus:AdWare.ToolBar.EliteBar.ap. No Action Taken.
      File C:\Documents and Settings\Omistaja\Local Settings\Temp\459494_1800_3868_2560_63.41.tmp tagged as not-a-virus:AdWare.ToolBar.EliteBar.ap. No Action Taken.
      File C:\Documents and Settings\Omistaja\Local Settings\Temp\perfectnavUninstall.exe infected by "Trojan-Downloader.Win32.Keenval.f" Virus. Action Taken: File Deleted.
      File C:\Documents and Settings\Omistaja\Local Settings\Temp\__unin__.exe tagged as not-a-virus:AdWare.Altnet.g. No Action Taken.
      File C:\Documents and Settings\Omistaja\Local Settings\Temporary Internet Files\Content.IE5\8XZS8X33\kw[1].exe tagged as not-a-virus:AdWare.ToolBar.EliteBar.ao. No Action Taken.
      File C:\Documents and Settings\Omistaja\Local Settings\Temporary Internet Files\Content.IE5\8XZS8X33\update[1].exe infected by "Backdoor.Win32.Rbot.yd" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Omistaja\Local Settings\Temporary Internet Files\Content.IE5\8XZS8X33\zzd[1].exe infected by "IM-Worm.Win32.Kelvir.dt" Virus. Action Taken: File Deleted.
      File C:\Documents and Settings\Omistaja\zzdate.exe infected by "Backdoor.Win32.Rbot.yd" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Omistaja\zzzd.exe infected by "IM-Worm.Win32.Kelvir.dt" Virus. Action Taken: File Deleted.
      File C:\download\mirc616 (1).exe tagged as not-a-virus:Client-IRC.Win32.mIRC.616. No Action Taken.
      File C:\download\mirc616.exe tagged as not-a-virus:Client-IRC.Win32.mIRC.616. No Action Taken.
      File C:\opera\zzzd.exe infected by "IM-Worm.Win32.Kelvir.dt" Virus. Action Taken: File Deleted.
      File C:\Program Files\mIRC\mirc.exe tagged as not-a-virus:Client-IRC.Win32.mIRC.616. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\12BE509F tagged as not-a-virus:AdWare.BetterInternet. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\12C42498 infected by "Trojan-Downloader.Win32.Agent.ae" Virus. Action Taken: File Deleted.
      File C:\Program Files\Norton AntiVirus\Quarantine\12C74E94 infected by "Trojan-Downloader.Win32.Agent.ae" Virus. Action Taken: File Deleted.
      File C:\Program Files\Norton AntiVirus\Quarantine\12CB7890 infected by "Trojan-Downloader.JS.IstBar.j" Virus. Action Taken: File Deleted.
      File C:\Program Files\Norton AntiVirus\Quarantine\32C31C56.htm infected by "Exploit.HTML.Mht" Virus. Action Taken: File Renamed.
      File C:\Program Files\Norton AntiVirus\Quarantine\3A6A7342 tagged as not-a-virus:RiskTool.Win32.HideWindows. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\3A71473B tagged as not-a-virus:RiskTool.Win32.HideWindows. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\3A811929 tagged as not-a-virus:RiskTool.Win32.HideWindows. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\3A983F10 tagged as not-a-virus:RiskTool.Win32.HideWindows. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\3AB962EC tagged as not-a-virus:RiskTool.Win32.HideWindows. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\3D250C41 tagged as not-a-virus:RiskTool.Win32.HideWindows. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\3EC1367C tagged as not-a-virus:RiskTool.Win32.HideWindows. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\4C353F3D tagged as not-a-virus:RiskTool.Win32.HideWindows. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\604D4F0C tagged as not-a-virus:RiskTool.Win32.HideWindows. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\62067326 tagged as not-a-virus:RiskTool.Win32.HideWindows. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\63C56B3A tagged as not-a-virus:RiskTool.Win32.HideWindows. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\657A6559 tagged as not-a-virus:RiskTool.Win32.HideWindows. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\77CE6B72 infected by "Trojan-Downloader.Win32.Agent.ae" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP212\A0052099.exe infected by "Trojan-Downloader.Win32.OneClickNetSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP212\A0052111.DLL tagged as not-a-virus:AdWare.ToolBar.MyWay.g. No Action Taken.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP212\A0052201.exe tagged as not-a-virus:AdWare.WebRebates.d. No Action Taken.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP212\A0052202.exe tagged as not-a-virus:AdWare.WebRebates.d. No Action Taken.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP212\A0052203.exe tagged as not-a-virus:AdWare.WebRebates.c. No Action Taken.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP212\A0052204.exe tagged as not-a-virus:AdWare.WebRebates.g. No Action Taken.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP212\A0052205.exe tagged as not-a-virus:AdWare.BiSpy.o. No Action Taken.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP212\A0052207.dll tagged as not-a-virus:AdWare.BiSpy.s. No Action Taken.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP212\A0052212.exe infected by "Trojan-Downloader.NSIS.Agent.a" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP212\A0052214.dll tagged as not-a-virus:AdWare.BHO.MegaSearch.g. No Action Taken.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP212\A0052218.dll infected by "Trojan-Dropper.Win32.Small.uv" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP212\A0052236.EXE tagged as not-a-virus:AdWare.ToolBar.MyWay.b. No Action Taken.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP212\A0052237.DLL tagged as not-a-virus:AdWare.ToolBar.MyWay.f. No Action Taken.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP274\A0059290.dll tagged as not-a-virus:AdWare.ToolBar.EliteBar.am. No Action Taken.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP274\A0059291.dll tagged as not-a-virus:AdWare.ToolBar.EliteBar.ap. No Action Taken.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP274\A0059292.exe tagged as not-a-virus:AdWare.ToolBar.EliteBar.ap. No Action Taken.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP274\A0059315.dll infected by "Trojan-Dropper.Win32.Small.mh" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP274\A0059316.dll tagged as not-a-virus:AdWare.ToolBar.ImiBar.e. No Action Taken.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP274\A0059340.dll tagged as not-a-virus:AdWare.ToolBar.EliteBar.am. No Action Taken.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP274\A0059341.dll tagged as not-a-virus:AdWare.ToolBar.EliteBar.ap. No Action Taken.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP274\A0059342.exe tagged as not-a-virus:AdWare.ToolBar.EliteBar.ap. No Action Taken.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP274\A0059370.dll tagged as not-a-virus:AdWare.ToolBar.EliteBar.am. No Action Taken.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP274\A0059371.dll tagged as not-a-virus:AdWare.ToolBar.EliteBar.ap. No Action Taken.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP274\A0059372.exe tagged as not-a-virus:AdWare.ToolBar.EliteBar.ap. No Action Taken.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP274\A0059412.dll tagged as not-a-virus:AdWare.ToolBar.EliteBar.am. No Action Taken.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP274\A0059413.dll tagged as not-a-virus:AdWare.ToolBar.EliteBar.ap. No Action Taken.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP274\A0059414.exe tagged as not-a-virus:AdWare.ToolBar.EliteBar.ap. No Action Taken.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP277\A0059468.dll tagged as not-a-virus:AdWare.ToolBar.EliteBar.am. No Action Taken.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP277\A0059469.dll tagged as not-a-virus:AdWare.ToolBar.EliteBar.ap. No Action Taken.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP277\A0059470.exe tagged as not-a-virus:AdWare.ToolBar.EliteBar.ap. No Action Taken.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP277\A0059503.dll tagged as not-a-virus:AdWare.ToolBar.EliteBar.am. No Action Taken.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP277\A0059504.dll tagged as not-a-virus:AdWare.ToolBar.EliteBar.ap. No Action Taken.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP277\A0059505.exe tagged as not-a-virus:AdWare.ToolBar.EliteBar.ap. No Action Taken.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP277\A0059512.exe infected by "Backdoor.Win32.Rbot.yp" Virus. Action Taken: File Renamed.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP277\A0059513.exe infected by "Backdoor.Win32.Rbot.yd" Virus. Action Taken: File Renamed.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP277\A0059514.exe infected by "Trojan-Downloader.Win32.OneClickNetSearch.i" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP277\A0059515.dll infected by "Trojan-Dropper.Win32.Small.nj" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP277\A0059516.dll infected by "Trojan-Dropper.Win32.Small.mh" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP277\A0059517.dll infected by "Trojan-Dropper.Win32.Noname.a" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP277\A0059518.exe infected by "Backdoor.Win32.Rbot.yd" Virus. Action Taken: File Renamed.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP277\A0059519.exe infected by "IM-Worm.Win32.Kelvir.dt" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{031CF81B-4B3F-4423-AB36-7CD81A63CB2C}\RP277\A0059520.exe infected by "IM-Worm.Win32.Kelvir.dt" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\browserxtras\pn\remove.exe infected by "Trojan-Downloader.Win32.Keenval.f" Virus. Action Taken: File Deleted.
      File C:\WINDOWS\etb\nt_hide63.dll tagged as not-a-virus:AdWare.ToolBar.EliteBar.am. No Action Taken.
      File C:\WINDOWS\etb\pokapoka63.exe tagged as not-a-virus:AdWare.ToolBar.EliteBar.ap. No Action Taken.
      File C:\WINDOWS\etb\xud_63.dll tagged as not-a-virus:AdWare.ToolBar.EliteBar.ap. No Action Taken.
      File C:\WINDOWS\pxckdlauninstall.exe tagged as not-a-virus:AdWare.BHO.NoName.f. No Action Taken.
      File C:\WINDOWS\snbho.exe tagged as not-a-virus:AdWare.ToolBar.ImiBar.e. No Action Taken.
      File C:\WINDOWS\Temp\Altnet\dmfiles.cab tagged as not-a-virus:AdWare.Altnet.g. No Action Taken.
      File C:\WINDOWS\Temp\Altnet\mysearch.cab tagged as not-a-virus:AdWare.ToolBar.MyWay.g. No Action Taken.
      File C:\WINDOWS\Temp\Altnet\pmexe.cab tagged as not-a-virus:AdWare.Altnet.h. No Action Taken.
      File C:\WINDOWS\Temp\Altnet\pmfiles.cab tagged as not-a-virus:AdWare.BrilliantDigital.1007. No Action Taken.

      Poista nuo vikasietotilassa

      C:\WINDOWS\pxckdlauninstall.exe
      C:\WINDOWS\snbho.exe

      C:\WINDOWS\etb\ < kansio

      Sitte tyhjennä kaikki Tempit.
      Käynnistä sitte normaalisti ja uus Hijack logi.

      Äänestä

    • Juu kirjoitti:

      Poista nuo vikasietotilassa

      C:\WINDOWS\pxckdlauninstall.exe
      C:\WINDOWS\snbho.exe

      C:\WINDOWS\etb\ < kansio

      Sitte tyhjennä kaikki Tempit.
      Käynnistä sitte normaalisti ja uus Hijack logi.

      Logfile of HijackThis v1.99.1
      Scan saved at 22:06:14, on 15.8.2005
      Platform: Windows XP SP1 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\spoolsv.exe
      c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
      c:\Program Files\Norton AntiVirus\navapsvc.exe
      c:\Program Files\Norton Personal Firewall\NISUM.EXE
      C:\WINDOWS\System32\nvsvc32.exe
      C:\WINDOWS\System32\svchost.exe
      c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
      c:\Program Files\Norton Personal Firewall\ccPxySvc.exe
      C:\WINDOWS\System32\msiexec.exe
      C:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe
      C:\windows\system\hpsysdrv.exe
      C:\WINDOWS\System32\hphmon05.exe
      C:\HP\KBD\KBD.EXE
      C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe
      C:\Program Files\Common Files\Symantec Shared\ccApp.exe
      C:\Program Files\Multimedia Card Reader\shwicon2k.exe
      C:\WINDOWS\System32\rundll32.exe
      C:\Program Files\Messenger Plus! 3\MsgPlus.exe
      C:\Program Files\MSN Apps\Updater\01.03.0000.1005\fi\msnappau.exe
      C:\Program Files\Real\RealPlayer\RealPlay.exe
      C:\WINDOWS\System32\rundll32.exe
      C:\WINDOWS\System32\wuauclt.exe
      C:\Hjt\HijackThis.exe
      C:\WINDOWS\System32\wuauclt.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe
      O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
      O4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\HP\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
      O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exe
      O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
      O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
      O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
      O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
      O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
      O4 - HKLM\..\Run: [Sunkist2k] C:\Program Files\Multimedia Card Reader\shwicon2k.exe
      O4 - HKLM\..\Run: [Reminder] "C:\Windows\Creator\Remind_XP.exe"
      O4 - HKLM\..\Run: [ccRegVfy] "c:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
      O4 - HKLM\..\Run: [CnxTrApp] rundll32.exe "C:\Program Files\TeleWell\ADSL USB Router\CnxTrApp.dll",AppEntry -REG "Conexant\Conexant USB Network"
      O4 - HKLM\..\Run: [Easy-PrintToolBox] C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
      O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"
      O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.03.0000.1005\fi\msnappau.exe"
      O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
      O4 - HKLM\..\Run: [System service63] C:\WINDOWS\etb\pokapoka63.exe
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
      O4 - Global Startup: Ohjelmiston käyttöoikeussopimus.lnk = C:\License.txt
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
      O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
      O9 - Extra button: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
      O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
      O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
      O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
      O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
      O23 - Service: Symantec Proxy Service (ccPxySvc) - Symantec Corporation - c:\Program Files\Norton Personal Firewall\ccPxySvc.exe
      O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
      O23 - Service: Norton AntiVirus -ohjelman automaattinen suojaus (navapsvc) - Symantec Corporation - c:\Program Files\Norton AntiVirus\navapsvc.exe
      O23 - Service: Norton Personal Firewall Accounts Manager (NISUM) - Symantec Corporation - c:\Program Files\Norton Personal Firewall\NISUM.EXE
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
      O23 - Service: SAVScan - Symantec Corporation - c:\Program Files\Norton AntiVirus\SAVScan.exe
      O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe


      tallasta tarjoilee.. kummittelee viel'kin. mitas nyt

      Äänestä

    • epatuuus kirjoitti:

      Logfile of HijackThis v1.99.1
      Scan saved at 22:06:14, on 15.8.2005
      Platform: Windows XP SP1 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\spoolsv.exe
      c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
      c:\Program Files\Norton AntiVirus\navapsvc.exe
      c:\Program Files\Norton Personal Firewall\NISUM.EXE
      C:\WINDOWS\System32\nvsvc32.exe
      C:\WINDOWS\System32\svchost.exe
      c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
      c:\Program Files\Norton Personal Firewall\ccPxySvc.exe
      C:\WINDOWS\System32\msiexec.exe
      C:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe
      C:\windows\system\hpsysdrv.exe
      C:\WINDOWS\System32\hphmon05.exe
      C:\HP\KBD\KBD.EXE
      C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe
      C:\Program Files\Common Files\Symantec Shared\ccApp.exe
      C:\Program Files\Multimedia Card Reader\shwicon2k.exe
      C:\WINDOWS\System32\rundll32.exe
      C:\Program Files\Messenger Plus! 3\MsgPlus.exe
      C:\Program Files\MSN Apps\Updater\01.03.0000.1005\fi\msnappau.exe
      C:\Program Files\Real\RealPlayer\RealPlay.exe
      C:\WINDOWS\System32\rundll32.exe
      C:\WINDOWS\System32\wuauclt.exe
      C:\Hjt\HijackThis.exe
      C:\WINDOWS\System32\wuauclt.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe
      O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
      O4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\HP\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
      O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exe
      O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
      O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
      O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
      O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
      O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
      O4 - HKLM\..\Run: [Sunkist2k] C:\Program Files\Multimedia Card Reader\shwicon2k.exe
      O4 - HKLM\..\Run: [Reminder] "C:\Windows\Creator\Remind_XP.exe"
      O4 - HKLM\..\Run: [ccRegVfy] "c:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
      O4 - HKLM\..\Run: [CnxTrApp] rundll32.exe "C:\Program Files\TeleWell\ADSL USB Router\CnxTrApp.dll",AppEntry -REG "Conexant\Conexant USB Network"
      O4 - HKLM\..\Run: [Easy-PrintToolBox] C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
      O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"
      O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.03.0000.1005\fi\msnappau.exe"
      O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
      O4 - HKLM\..\Run: [System service63] C:\WINDOWS\etb\pokapoka63.exe
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
      O4 - Global Startup: Ohjelmiston käyttöoikeussopimus.lnk = C:\License.txt
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
      O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
      O9 - Extra button: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
      O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
      O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
      O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
      O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
      O23 - Service: Symantec Proxy Service (ccPxySvc) - Symantec Corporation - c:\Program Files\Norton Personal Firewall\ccPxySvc.exe
      O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
      O23 - Service: Norton AntiVirus -ohjelman automaattinen suojaus (navapsvc) - Symantec Corporation - c:\Program Files\Norton AntiVirus\navapsvc.exe
      O23 - Service: Norton Personal Firewall Accounts Manager (NISUM) - Symantec Corporation - c:\Program Files\Norton Personal Firewall\NISUM.EXE
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
      O23 - Service: SAVScan - Symantec Corporation - c:\Program Files\Norton AntiVirus\SAVScan.exe
      O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe


      tallasta tarjoilee.. kummittelee viel'kin. mitas nyt

      Merkkaa ja Fix:saa

      O4 - HKLM\..\Run: [System service63] C:\WINDOWS\etb\pokapoka63.exe

      Eipä muuta näy enää.

      Sitte siellä järjestelmänpalutustoiminnossa oli roskaa joten sammuta se ja sitte käynnistä kone uudestaan ja pistä se takas päälle ja tee uus palutuspiste.
      Tuolla ohje mistä se sammutetaan

      http://support.f-secure.fi/fin/home/virusproblem/howtoclean/cleansystemrestore.shtml

      Äänestä

    • Juu kirjoitti:

      Merkkaa ja Fix:saa

      O4 - HKLM\..\Run: [System service63] C:\WINDOWS\etb\pokapoka63.exe

      Eipä muuta näy enää.

      Sitte siellä järjestelmänpalutustoiminnossa oli roskaa joten sammuta se ja sitte käynnistä kone uudestaan ja pistä se takas päälle ja tee uus palutuspiste.
      Tuolla ohje mistä se sammutetaan

      http://support.f-secure.fi/fin/home/virusproblem/howtoclean/cleansystemrestore.shtml

      Logfile of HijackThis v1.99.1
      Scan saved at 22:27:06, on 15.8.2005
      Platform: Windows XP SP1 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe
      C:\windows\system\hpsysdrv.exe
      C:\WINDOWS\System32\hphmon05.exe
      C:\HP\KBD\KBD.EXE
      C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe
      C:\Program Files\Common Files\Symantec Shared\ccApp.exe
      C:\Program Files\Multimedia Card Reader\shwicon2k.exe
      C:\WINDOWS\System32\rundll32.exe
      C:\Program Files\Messenger Plus! 3\MsgPlus.exe
      C:\Program Files\MSN Apps\Updater\01.03.0000.1005\fi\msnappau.exe
      C:\Program Files\MSN Messenger\msnmsgr.exe
      C:\WINDOWS\System32\rundll32.exe
      c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
      c:\Program Files\Norton AntiVirus\navapsvc.exe
      C:\WINDOWS\System32\nvsvc32.exe
      C:\WINDOWS\System32\svchost.exe
      c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
      C:\WINDOWS\System32\wuauclt.exe
      C:\WINDOWS\System32\wuauclt.exe
      C:\Hjt\HijackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe
      O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
      O4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\HP\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
      O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exe
      O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
      O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
      O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
      O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
      O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
      O4 - HKLM\..\Run: [Sunkist2k] C:\Program Files\Multimedia Card Reader\shwicon2k.exe
      O4 - HKLM\..\Run: [Reminder] "C:\Windows\Creator\Remind_XP.exe"
      O4 - HKLM\..\Run: [ccRegVfy] "c:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
      O4 - HKLM\..\Run: [CnxTrApp] rundll32.exe "C:\Program Files\TeleWell\ADSL USB Router\CnxTrApp.dll",AppEntry -REG "Conexant\Conexant USB Network"
      O4 - HKLM\..\Run: [Easy-PrintToolBox] C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
      O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"
      O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.03.0000.1005\fi\msnappau.exe"
      O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
      O4 - Global Startup: Ohjelmiston käyttöoikeussopimus.lnk = C:\License.txt
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
      O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
      O9 - Extra button: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
      O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
      O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
      O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
      O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
      O23 - Service: Symantec Proxy Service (ccPxySvc) - Symantec Corporation - c:\Program Files\Norton Personal Firewall\ccPxySvc.exe
      O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
      O23 - Service: Norton AntiVirus -ohjelman automaattinen suojaus (navapsvc) - Symantec Corporation - c:\Program Files\Norton AntiVirus\navapsvc.exe
      O23 - Service: Norton Personal Firewall Accounts Manager (NISUM) - Symantec Corporation - c:\Program Files\Norton Personal Firewall\NISUM.EXE
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
      O23 - Service: SAVScan - Symantec Corporation - c:\Program Files\Norton AntiVirus\SAVScan.exe
      O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe

      jotain haikkaa vielakin ku nappaimisto ei toimi:D
      mitenhan sen sais kuntoon sitten.

      Äänestä

    • epatuuus kirjoitti:

      Logfile of HijackThis v1.99.1
      Scan saved at 22:27:06, on 15.8.2005
      Platform: Windows XP SP1 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe
      C:\windows\system\hpsysdrv.exe
      C:\WINDOWS\System32\hphmon05.exe
      C:\HP\KBD\KBD.EXE
      C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe
      C:\Program Files\Common Files\Symantec Shared\ccApp.exe
      C:\Program Files\Multimedia Card Reader\shwicon2k.exe
      C:\WINDOWS\System32\rundll32.exe
      C:\Program Files\Messenger Plus! 3\MsgPlus.exe
      C:\Program Files\MSN Apps\Updater\01.03.0000.1005\fi\msnappau.exe
      C:\Program Files\MSN Messenger\msnmsgr.exe
      C:\WINDOWS\System32\rundll32.exe
      c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
      c:\Program Files\Norton AntiVirus\navapsvc.exe
      C:\WINDOWS\System32\nvsvc32.exe
      C:\WINDOWS\System32\svchost.exe
      c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
      C:\WINDOWS\System32\wuauclt.exe
      C:\WINDOWS\System32\wuauclt.exe
      C:\Hjt\HijackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe
      O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
      O4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\HP\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
      O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exe
      O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
      O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
      O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
      O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
      O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
      O4 - HKLM\..\Run: [Sunkist2k] C:\Program Files\Multimedia Card Reader\shwicon2k.exe
      O4 - HKLM\..\Run: [Reminder] "C:\Windows\Creator\Remind_XP.exe"
      O4 - HKLM\..\Run: [ccRegVfy] "c:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
      O4 - HKLM\..\Run: [CnxTrApp] rundll32.exe "C:\Program Files\TeleWell\ADSL USB Router\CnxTrApp.dll",AppEntry -REG "Conexant\Conexant USB Network"
      O4 - HKLM\..\Run: [Easy-PrintToolBox] C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
      O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"
      O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.03.0000.1005\fi\msnappau.exe"
      O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
      O4 - Global Startup: Ohjelmiston käyttöoikeussopimus.lnk = C:\License.txt
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
      O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
      O9 - Extra button: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
      O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
      O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
      O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
      O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
      O23 - Service: Symantec Proxy Service (ccPxySvc) - Symantec Corporation - c:\Program Files\Norton Personal Firewall\ccPxySvc.exe
      O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
      O23 - Service: Norton AntiVirus -ohjelman automaattinen suojaus (navapsvc) - Symantec Corporation - c:\Program Files\Norton AntiVirus\navapsvc.exe
      O23 - Service: Norton Personal Firewall Accounts Manager (NISUM) - Symantec Corporation - c:\Program Files\Norton Personal Firewall\NISUM.EXE
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
      O23 - Service: SAVScan - Symantec Corporation - c:\Program Files\Norton AntiVirus\SAVScan.exe
      O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe

      jotain haikkaa vielakin ku nappaimisto ei toimi:D
      mitenhan sen sais kuntoon sitten.

      on ok,näppiksestä en tiedä mikä siinä on.

      Äänestä

    • Juu kirjoitti:

      on ok,näppiksestä en tiedä mikä siinä on.

      mit's noi extrabuttonit?
      kaikki naa erikoismerkit, viivat, heittomerkit ja aakkoset =piste paalle, on ihan vituillaan.
      tulee ihan eri merkki ku mita pitais.

      Äänestä

    • epatuuus kirjoitti:

      mit's noi extrabuttonit?
      kaikki naa erikoismerkit, viivat, heittomerkit ja aakkoset =piste paalle, on ihan vituillaan.
      tulee ihan eri merkki ku mita pitais.

      Näkyykö sulla kellon vieressä näppäimistön tunnusta FI tai US (jos näkyy, klikkaa sitä hiirellä ja pääset vaihtamaan takas suomenkieliseksi). Näyttäis siltä, että sulla on nyt valittuna englanninkielinen koodaus näppäimille. siksi ne löytyy vähän oudoista paikoista ja skandeja ei lainkaan. (kaksoispiste on Shift Ö).
      Ohjauspaneelista käy katsomassa näppäimistön asiat ja valitse käyttöön Fi.

      Äänestä

    • Fox kirjoitti:

      Näkyykö sulla kellon vieressä näppäimistön tunnusta FI tai US (jos näkyy, klikkaa sitä hiirellä ja pääset vaihtamaan takas suomenkieliseksi). Näyttäis siltä, että sulla on nyt valittuna englanninkielinen koodaus näppäimille. siksi ne löytyy vähän oudoista paikoista ja skandeja ei lainkaan. (kaksoispiste on Shift Ö).
      Ohjauspaneelista käy katsomassa näppäimistön asiat ja valitse käyttöön Fi.

      Siellä ohjauspaneelissa anna sen näppäimistön olla rauhassa, mutta käý tsekkaamassa Regional and Language Options (oletan, että sulla engl. kielinen XP) --> Languages --> Text services and...Details,
      --> settings; Default input(laita Finnish)
      Ja siihen installed services ikkunaan pitää löytyä myös FI-näppäimistö.

      Äänestä

    • Fox kirjoitti:

      Siellä ohjauspaneelissa anna sen näppäimistön olla rauhassa, mutta käý tsekkaamassa Regional and Language Options (oletan, että sulla engl. kielinen XP) --> Languages --> Text services and...Details,
      --> settings; Default input(laita Finnish)
      Ja siihen installed services ikkunaan pitää löytyä myös FI-näppäimistö.

      toimii taas. iso kiitos teille

      Äänestä

    Odottaa vastausta

    Näihin keskusteluihin ei ole vielä vastattu. Ole ensimmäinen.

    Luetuimmat keskustelut

    Kommentoi aloitusta

    epatuuus kirjoitti:

    ei toimi sitten mikaan.. messengerin kautta tuli joku popo. nappaimisto ihan sekaisin ja kone muutenkin. ja naista en ymmarra mitaan. auttakaa joku kiitos.

    Logfile of HijackThis v1.99.1
    Scan saved at 18:00:26, on 15.8.2005
    Platform: Windows XP SP1 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\csrss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    c:\Program Files\Norton AntiVirus\navapsvc.exe
    c:\Program Files\Norton Personal Firewall\NISUM.EXE
    C:\WINDOWS\System32\nvsvc32.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\System32\wdfmgr.exe
    c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    C:\WINDOWS\Explorer.EXE
    c:\Program Files\Norton Personal Firewall\ccPxySvc.exe
    C:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe
    C:\windows\system\hpsysdrv.exe
    C:\WINDOWS\System32\hphmon05.exe
    C:\HP\KBD\KBD.EXE
    C:\Program Files\Common Files\Symantec Shared\ccApp.exe
    C:\Program Files\Multimedia Card Reader\shwicon2k.exe
    C:\WINDOWS\ALCXMNTR.EXE
    C:\Program Files\Messenger Plus! 3\MsgPlus.exe
    C:\Program Files\MSN Apps\Updater\01.03.0000.1005\fi\msnappau.exe
    C:\WINDOWS\System32\windir32.exe
    C:\WINDOWS\System32\schvost.exe
    C:\WINDOWS\System32\rundll32.exe
    C:\WINDOWS\System32\wuauclt.exe
    C:\WINDOWS\etb\pokapoka63.exe
    C:\opera\Opera.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\Program Files\Windows Media Player\wmplayer.exe
    C:\Documents and Settings\Omistaja\Omat tiedostot\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe
    O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
    O4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\HP\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
    O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exe
    O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
    O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
    O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
    O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
    O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
    O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
    O4 - HKLM\..\Run: [Sunkist2k] C:\Program Files\Multimedia Card Reader\shwicon2k.exe
    O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
    O4 - HKLM\..\Run: [Reminder] "C:\Windows\Creator\Remind_XP.exe"
    O4 - HKLM\..\Run: [ccRegVfy] "c:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
    O4 - HKLM\..\Run: [CnxTrApp] rundll32.exe "C:\Program Files\TeleWell\ADSL USB Router\CnxTrApp.dll",AppEntry -REG "Conexant\Conexant USB Network"
    O4 - HKLM\..\Run: [Easy-PrintToolBox] C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
    O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"
    O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.03.0000.1005\fi\msnappau.exe"
    O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
    O4 - HKLM\..\Run: [Microsoft Windows DLL Services Configuration] windir32.exe
    O4 - HKLM\..\Run: [Microsoft Update 64 BIT] schvost.exe
    O4 - HKLM\..\Run: [System service63] C:\WINDOWS\etb\pokapoka63.exe
    O4 - HKLM\..\RunServices: [Microsoft Windows DLL Services Configuration] windir32.exe
    O4 - HKLM\..\RunServices: [Microsoft Update 64 BIT] schvost.exe
    O4 - HKCU\..\Run: [Microsoft Windows DLL Services Configuration] windir32.exe
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
    O4 - Global Startup: Ohjelmiston käyttöoikeussopimus.lnk = C:\License.txt
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
    O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
    O9 - Extra button: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
    O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
    O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
    O23 - Service: Symantec Proxy Service (ccPxySvc) - Symantec Corporation - c:\Program Files\Norton Personal Firewall\ccPxySvc.exe
    O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    O23 - Service: Norton AntiVirus -ohjelman automaattinen suojaus (navapsvc) - Symantec Corporation - c:\Program Files\Norton AntiVirus\navapsvc.exe
    O23 - Service: Norton Personal Firewall Accounts Manager (NISUM) - Symantec Corporation - c:\Program Files\Norton Personal Firewall\NISUM.EXE
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
    O23 - Service: SAVScan - Symantec Corporation - c:\Program Files\Norton AntiVirus\SAVScan.exe
    O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe

    Anonyymi
    5000

    Ilmoita asiaton sisältö

    • Sisältää materiaalia, joka on loukkaavaa, herjaavaa, rasistista, uhkailevaa tai ahdistelevaa.

    • Materiaali sisältää nimiä, yhteystietoja tai muita henkilökohtaisia tietoja. Julkisuuden henkilöistä, julkisissa viroissa toimivista ihmisistä sekä yritysten vastuuhenkilöistä saa keskustella työhön liittyen. Myös yksityiselämään liittyvistä asioista voi keskustella siltä osin, kuin niistä on julkisesti kerrottu.

    • Sisältää lapsille haitallista tai heiltä kiellettyä materiaalia. Seksuaalinen sisältö on sallittua aiheeseen tarkoitetuilla palstoilla, joiden ikäraja on 18 vuotta.

    • Lainvastaista sisältöä voi olla mm. yksityiselämää loukkaavan tiedon levitys, kiihottaminen kansanryhmää vastaan, laiton uhkaaminen, alaikäisiin liittyvä seksuaalinen sisältö/grooming, petokset, identiteettivarkaudet, kunnianloukkaukset ja tekijänoikeusrikkomukset.

    • Sisältö ei liity palstan tai keskusteluketjun aiheeseen.

    • Viesti ei ole suomea tai ruotsia (pl. International Forums), se sisältää mainontaa, se sisältää tekijänoikeuksin suojattua materiaalia, se on massapostitus tai jokin muu syy.

    Jaa keskustelu