näyttöön tulee tälläinen ikkuna:
System.32\WINCTR-1.exe
ilmeisesti virus.
auttaisko joku saammaan sen pois.
jussi
System.32\WINCTR-1.exe
ilmeisesti virus.
auttaisko joku saammaan sen pois.
jussi
Turvaa tilisi vahvistamalla puhelinnumerosi. Voit silloin palauttaa unohtuneen salasanan tekstiviestillä.
Näihin keskusteluihin ei ole vielä vastattu. Ole ensimmäinen.
Vastaukset 15
Vanhimmat
Vikasietotilassa lähtee jos ei muuten.
http://koti.mbnet.fi/pattaya1/escanmwav.htm
Pyöveli
katso ohjeet ja asennukset tarkkaan: päivitä se on tärkeää.
Päivitys tapa kakkosella on kiva käyttää.
Tallena logi virukset jonnekin mistä löydät
Jos ala ikkunaan virukset tulee jotain niin laita logi tuonne.
http://keskustelu.suomi24.fi/show.fcgi?category=108&conference=4500000000000628
kiitos neuvoista.
escan on todella tehokas.
kone käy taas kuin sukkasillaan.
jotakin olisko logi tallessa vai käytikkö hjt sivulla?
tuli hirveästi virus yms. ilmoituksia mutta ei ole enää tallessa. Miksi scannatessa siinä missä pitäisi olla sellainen hammasratas jota pieni pallo kiertää niin mulla on jonkinlaisen ötökän kuva? onko se merkki että kone ei ole vielä tyhjä?
että siellä on örkki jota escan pitää siintä pillistä kiinni.
ota se tallenukseen logi siintä alaikkunasta vaikka wordpad
joo mä laitan huomenna
hei, mulla olis logi mutta miten lähetän sen ja minne?
tuonne...
http://keskustelu.suomi24.fi/show.fcgi?category=108&conference=4500000000000628&subcat=758
maalaa siniseksi ja kopioi sitten liität ....
jogi oli niin iso tiedosto että se ei sovi tähän.
Jos logi on se alempi ikkuna escanissa?
Ylemmän ikkunan logi on turhan pitkä tänne lähetettäväksi. Maalaa siitä alemmasta tekstit kopioitavaksi ja liitä viestiin.
Nekin ovat joskus olleet melkoisen pitkiä.
Pienenetään sitä tuossa ohje.
http://support.f-secure.fi/fin/home/virusproblem/howtoclean/cleansystemrestore.shtml
sitten uusi scannaus escanilla ja tallenna se logi.
nyt taisi onnistua...
tässä logi:
Fri Sep 02 13:58:55 2005 => **********************************************************
Fri Sep 02 13:58:55 2005 => eScan AntiVirus Toolkit Utility.
Fri Sep 02 13:58:55 2005 => Copyright © 2003-2004, MicroWorld Technologies Inc.
Fri Sep 02 13:58:55 2005 =>
Fri Sep 02 13:58:55 2005 => Support: [email protected]
Fri Sep 02 13:58:55 2005 => Web: http://www.mwti.net
Fri Sep 02 13:58:55 2005 => **********************************************************
Fri Sep 02 13:58:55 2005 => Version 4.4.7
Fri Sep 02 13:58:55 2005 => Log File: C:\KASPER~1\mwav.log
Fri Sep 02 13:58:55 2005 => Latest Date of files inside MWAV: 28 Aug 2005 03:11:49.
Fri Sep 02 13:58:55 2005 => Options Selected by User:
Fri Sep 02 13:58:55 2005 => Memory Check: Enabled
Fri Sep 02 13:58:55 2005 => Registry Check: Enabled
Fri Sep 02 13:58:55 2005 => StartUp Folder Check: Enabled
Fri Sep 02 13:58:55 2005 => System Folder Check: Disabled
Fri Sep 02 13:58:55 2005 => System Area Check: Disabled
Fri Sep 02 13:58:55 2005 => Services Check: Enabled
Fri Sep 02 13:58:55 2005 => Drive Check Option Disabled
Fri Sep 02 13:58:55 2005 => Scanning Type: Scan And Clean
Fri Sep 02 13:58:55 2005 => Folder Check: Disabled
Fri Sep 02 13:58:55 2005 => ***** Scanning Memory Files *****
Fri Sep 02 13:58:55 2005 => Scanning File C:\WINDOWS\system32\services.exe
Fri Sep 02 13:58:56 2005 => Scanning File C:\WINDOWS\system32\lsass.exe
Fri Sep 02 13:58:56 2005 => Scanning File C:\WINDOWS\system32\svchost.exe
Fri Sep 02 13:58:56 2005 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Sep 02 13:58:56 2005 => Scanning File C:\PROGRA~1\COMMON~1\SYMANT~1\ccSetMgr.exe
Fri Sep 02 13:58:56 2005 => Scanning File C:\PROGRA~1\COMMON~1\SYMANT~1\SNDSrvc.exe
Fri Sep 02 13:58:56 2005 => Scanning File C:\WINDOWS\Explorer.EXE
Fri Sep 02 13:58:56 2005 => Scanning File C:\PROGRA~1\COMMON~1\SYMANT~1\ccEvtMgr.exe
Fri Sep 02 13:58:56 2005 => Scanning File C:\WINDOWS\System32\rundll32.exe
Fri Sep 02 13:58:56 2005 => Scanning File C:\PROGRA~1\COMMON~1\Real\UPDATE~1\REALSC~1.EXE
Fri Sep 02 13:58:56 2005 => Scanning File C:\PROGRA~1\Tech\WHEELM~1\5.2\MOUSE32A.EXE
Fri Sep 02 13:58:57 2005 => Scanning File D:\SAMINK~1\Winamp\winampa.exe
Fri Sep 02 13:58:57 2005 => Scanning File C:\PROGRA~1\COMMON~1\SYMANT~1\ccApp.exe
Fri Sep 02 13:58:57 2005 => Scanning File C:\PROGRA~1\COMMON~1\SYMANT~1\SECURI~1\UsrPrmpt.exe
Fri Sep 02 13:58:57 2005 => Scanning File C:\PROGRA~1\Java\JRE15~1.0_0\bin\jusched.exe
Fri Sep 02 13:58:57 2005 => Scanning File E:\D-Tools\daemon.exe
Fri Sep 02 13:58:57 2005 => Scanning File D:\SAMINK~1\CloneCD\CLONEC~1.EXE
Fri Sep 02 13:58:58 2005 => Scanning File C:\WINDOWS\System32\ctfmon.exe
Fri Sep 02 13:58:58 2005 => Scanning File C:\PROGRA~1\MSNMES~1\msnmsgr.exe
Fri Sep 02 13:58:58 2005 => Scanning File C:\PROGRA~1\WIDCOMM\BLUETO~1\BTTray.exe
Fri Sep 02 13:58:59 2005 => Scanning File C:\WINDOWS\system32\spoolsv.exe
Fri Sep 02 13:58:59 2005 => Scanning File C:\PROGRA~1\INTERN~1\iexplore.exe
Fri Sep 02 13:58:59 2005 => Scanning File c:\progra~1\intern~1\iexplore.exe
Fri Sep 02 13:58:59 2005 => Scanning File C:\PROGRA~1\WIDCOMM\BLUETO~1\bin\btwdins.exe
Fri Sep 02 13:58:59 2005 => Scanning File C:\PROGRA~1\COMMON~1\SYMANT~1\ccProxy.exe
Fri Sep 02 13:58:59 2005 => Scanning File D:\NORTON~1\NORTON~1\navapsvc.exe
Fri Sep 02 13:58:59 2005 => Scanning File D:\NORTON~1\NORTON~1\AdvTools\NPROTECT.EXE
Fri Sep 02 13:59:00 2005 => Scanning File C:\PROGRA~1\MESSEN~1\msmsgs.exe
Fri Sep 02 13:59:00 2005 => Scanning File C:\WINDOWS\System32\nvsvc32.exe
Fri Sep 02 13:59:00 2005 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Sep 02 13:59:00 2005 => Scanning File C:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe
Fri Sep 02 13:59:00 2005 => Scanning File C:\WINDOWS\System32\devldr32.exe
Fri Sep 02 13:59:00 2005 => Scanning File D:\NORTON~1\NORTON~1\SAVScan.exe
Fri Sep 02 13:59:00 2005 => Scanning File C:\WINDOWS\System32\wuauclt.exe
Fri Sep 02 13:59:00 2005 => Scanning File C:\WINDOWS\System32\wuauclt.exe
Fri Sep 02 13:59:01 2005 => Scanning File C:\Kaspersky\mwavscan.com
Fri Sep 02 13:59:01 2005 => Scanning File C:\Kaspersky\kavss.exe
Fri Sep 02 13:59:01 2005 => ***** Scanning Registry Files *****
Fri Sep 02 13:59:01 2005 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad
Fri Sep 02 13:59:01 2005 => *** File C:\WINDOWS\system32\SHELL32.dll having Size Restriction ***
Fri Sep 02 13:59:01 2005 => Scanning File C:\WINDOWS\system32\SHELL32.dll [**]
Fri Sep 02 13:59:01 2005 => *** File C:\WINDOWS\system32\SHELL32.dll having Size Restriction ***
Fri Sep 02 13:59:01 2005 => Scanning File C:\WINDOWS\system32\SHELL32.dll [**]
Fri Sep 02 13:59:01 2005 => Scanning File C:\WINDOWS\System32\webcheck.dll
Fri Sep 02 13:59:01 2005 => Scanning File C:\WINDOWS\System32\stobject.dll
Fri Sep 02 13:59:01 2005 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects
Fri Sep 02 13:59:01 2005 => {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} = C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
Fri Sep 02 13:59:01 2005 => Scanning File C:\PROGRA~1\Adobe\ACROBA~2.0\ActiveX\ACROIE~1.DLL
Fri Sep 02 13:59:01 2005 => {4A2AACF3-ADF6-11D5-98A9-00E018981B9E} = C:\Program Files\NewDotNet\newdotnet6_38.dll
Fri Sep 02 13:59:01 2005 => Scanning File C:\PROGRA~1\NEWDOT~1\NEWDOT~2.DLL
Fri Sep 02 13:59:01 2005 => File C:\PROGRA~1\NEWDOT~1\NEWDOT~2.DLL tagged as not-a-virus:AdWare.NewDotNet. No Action Taken.
Fri Sep 02 13:59:01 2005 => {53707962-6F74-2D53-2644-206D7942484F} = C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
Fri Sep 02 13:59:01 2005 => Scanning File C:\PROGRA~1\SPYBOT~1\SDHelper.dll
Fri Sep 02 13:59:01 2005 => {589EEC91-98FA-40A3-A7CE-02C8223FC6A4} = C:\WINDOWS\lbbho.dll
Fri Sep 02 13:59:01 2005 => Scanning File C:\WINDOWS\lbbho.dll
Fri Sep 02 13:59:01 2005 => File C:\WINDOWS\lbbho.dll tagged as not-a-virus:AdWare.ToolBar.Neon.a. No Action Taken.
Fri Sep 02 13:59:01 2005 => {58F07DD3-924D-4141-BC74-299F523A95F1} = C:\WINDOWS\pxwma.dll
Fri Sep 02 13:59:02 2005 => Scanning File C:\WINDOWS\pxwma.dll
Fri Sep 02 13:59:02 2005 => File C:\WINDOWS\pxwma.dll tagged as not-a-virus:AdWare.Webdir.b. No Action Taken.
Fri Sep 02 13:59:02 2005 => {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} = NULL
Fri Sep 02 13:59:02 2005 => {9ECB9560-04F9-4bbc-943D-298DDF1699E1} = C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
Fri Sep 02 13:59:02 2005 => Scanning File C:\PROGRA~1\COMMON~1\SYMANT~1\ADBLOC~1\NISShExt.dll
Fri Sep 02 13:59:02 2005 => {BDF3E430-B101-42AD-A544-FADC6B084872} = D:\Norton Internet Security Professional\Norton AntiVirus\NavShExt.dll
Fri Sep 02 13:59:02 2005 => Scanning File D:\NORTON~1\NORTON~1\NavShExt.dll
Fri Sep 02 13:59:02 2005 => Scanning HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
Fri Sep 02 13:59:02 2005 => Scanning File C:\WINDOWS\system32\userinit.exe
Fri Sep 02 13:59:02 2005 => Scanning File C:\WINDOWS\explorer.exe
Fri Sep 02 13:59:02 2005 => Scanning HKCU\Control Panel\Desktop
Fri Sep 02 13:59:02 2005 => Scanning File C:\WINDOWS\System32\logon.scr
Fri Sep 02 13:59:02 2005 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Fri Sep 02 13:59:02 2005 => Scanning File C:\PROGRA~1\ATITEC~1\ATICON~1\atiptaxx.exe
Fri Sep 02 13:59:02 2005 => Scanning File C:\WINDOWS\system32\rundll32.exe
Fri Sep 02 13:59:02 2005 => Scanning File C:\PROGRA~1\COMMON~1\Real\UPDATE~1\REALSC~1.EXE
Fri Sep 02 13:59:03 2005 => Scanning File C:\PROGRA~1\Tech\WHEELM~1\5.2\MOUSE32A.EXE
Fri Sep 02 13:59:03 2005 => Scanning File D:\SAMINK~1\Winamp\winampa.exe
Fri Sep 02 13:59:03 2005 => Scanning File C:\PROGRA~1\COMMON~1\SYMANT~1\ccApp.exe
Fri Sep 02 13:59:03 2005 => Scanning File D:\NORTON~1\UrlLstCk.exe
Fri Sep 02 13:59:03 2005 => Scanning File D:\NORTON~1\NORTON~1\AdvTools\ADVCHK.EXE
Fri Sep 02 13:59:03 2005 => Scanning File C:\PROGRA~1\SYMNET~1\SNDMon.exe
Fri Sep 02 13:59:03 2005 => Scanning File C:\PROGRA~1\COMMON~1\SYMANT~1\SECURI~1\UsrPrmpt.exe
Fri Sep 02 13:59:03 2005 => Scanning File C:\PROGRA~1\Java\JRE15~1.0_0\bin\jusched.exe
Fri Sep 02 13:59:04 2005 => Scanning File E:\D-Tools\daemon.exe
Fri Sep 02 13:59:04 2005 => Scanning File C:\WINDOWS\system32\RUNDLL32.EXE
Fri Sep 02 13:59:04 2005 => Scanning File C:\WINDOWS\system32\nwiz.exe
Fri Sep 02 13:59:04 2005 => Scanning File D:\SAMINK~1\CloneCD\CLONEC~1.EXE
Fri Sep 02 13:59:04 2005 => Scanning File C:\DOCUME~1\ALLUSE~1\APPLIC~1\JUNKST~1\VIEWST~1.EXE
Fri Sep 02 13:59:04 2005 => File C:\DOCUME~1\ALLUSE~1\APPLIC~1\JUNKST~1\VIEWST~1.EXE tagged as not-a-virus:AdWare.Lop.ab. No Action Taken.
Fri Sep 02 13:59:04 2005 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
Fri Sep 02 13:59:05 2005 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx
Fri Sep 02 13:59:05 2005 => Scanning HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
Fri Sep 02 13:59:05 2005 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Fri Sep 02 13:59:05 2005 => Scanning File C:\WINDOWS\System32\ctfmon.exe
Fri Sep 02 13:59:05 2005 => Scanning File C:\DOCUME~1\jussi\APPLIC~1\FUNKJU~1\NounMfcd.exe
Fri Sep 02 13:59:05 2005 => File C:\DOCUME~1\jussi\APPLIC~1\FUNKJU~1\NounMfcd.exe tagged as not-a-virus:AdWare.Lop.m. No Action Taken.
Fri Sep 02 13:59:05 2005 => *** File C:\PROGRA~1\MSNMES~1\msnmsgr.exe having Size Restriction ***
Fri Sep 02 13:59:05 2005 => Scanning File C:\PROGRA~1\MSNMES~1\msnmsgr.exe [**]
Fri Sep 02 13:59:05 2005 => Scanning File d:\steam\pelit\steam\steam.exe
Fri Sep 02 13:59:05 2005 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
Fri Sep 02 13:59:05 2005 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx
Fri Sep 02 13:59:05 2005 => Scanning HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
Fri Sep 02 13:59:05 2005 => Scanning HKCR\txtfile\shell\open\command
Fri Sep 02 13:59:05 2005 => Scanning HKCR\comfile\shell\open\command
Fri Sep 02 13:59:05 2005 => Scanning HKCR\exefile\shell\open\command
Fri Sep 02 13:59:05 2005 => Scanning HKCR\dllfile\shell\open\command
Fri Sep 02 13:59:05 2005 => Scanning HKCR\batfile\shell\open\command
Fri Sep 02 13:59:05 2005 => Scanning HKCR\piffile\shell\open\command
Fri Sep 02 13:59:05 2005 => Scanning HKCR\scrfile\shell\open\command
Fri Sep 02 13:59:05 2005 => Scanning HKCR\scrfile\shell\config\command
Fri Sep 02 13:59:05 2005 => Scanning HKCR\regfile\shell\open\command
Fri Sep 02 13:59:05 2005 => ***** Scanning StartUp Folders *****
Fri Sep 02 13:59:05 2005 => ***** Scanning C:\Documents and Settings\jussi\Käynnistä-valikko\Ohjelmat\Käynnistys Folder *****
Fri Sep 02 13:59:05 2005 => Scanning Folder: C:\Documents and Settings\jussi\Käynnistä-valikko\Ohjelmat\Käynnistys\*.*
Fri Sep 02 13:59:05 2005 => Scanning File C:\Documents and Settings\jussi\Käynnistä-valikko\Ohjelmat\Käynnistys\desktop.ini
Fri Sep 02 13:59:05 2005 => ***** Scanning C:\Documents and Settings\All Users\Käynnistä-valikko\Ohjelmat\Käynnistys Folder *****
Fri Sep 02 13:59:05 2005 => Scanning Folder: C:\Documents and Settings\All Users\Käynnistä-valikko\Ohjelmat\Käynnistys\*.*
Fri Sep 02 13:59:05 2005 => Scanning File C:\Documents and Settings\All Users\Käynnistä-valikko\Ohjelmat\Käynnistys\Adobe Reader Speed Launch.lnk
Fri Sep 02 13:59:05 2005 => Scanning File C:\Documents and Settings\All Users\Käynnistä-valikko\Ohjelmat\Käynnistys\BTTray.lnk
Fri Sep 02 13:59:06 2005 => Scanning File C:\Documents and Settings\All Users\Käynnistä-valikko\Ohjelmat\Käynnistys\desktop.ini
Fri Sep 02 13:59:06 2005 => ***** Scanning Service Files *****
Fri Sep 02 13:59:06 2005 => Scanning HKLM\SYSTEM\CurrentControlSet\Services
Fri Sep 02 13:59:06 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\ACPI.sys
Fri Sep 02 13:59:06 2005 => Scanning File C:\WINDOWS\System32\drivers\aec.sys
Fri Sep 02 13:59:06 2005 => Scanning File C:\WINDOWS\System32\drivers\afd.sys
Fri Sep 02 13:59:06 2005 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Sep 02 13:59:06 2005 => Scanning File C:\WINDOWS\System32\alg.exe
Fri Sep 02 13:59:06 2005 => Scanning File C:\WINDOWS\system32\svchost.exe
Fri Sep 02 13:59:06 2005 => ERROR!!! Invalid Entry C:\Program Files\Aquarius Soft\PC Lock Up Pro\svchost.exe in SYSTEM\CurrentControlSet\Services\aslunts...
Fri Sep 02 13:59:06 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\asyncmac.sys
Fri Sep 02 13:59:06 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\atapi.sys
Fri Sep 02 13:59:06 2005 => Scanning File C:\WINDOWS\System32\Ati2evxx.exe
Fri Sep 02 13:59:06 2005 => Scanning File C:\WINDOWS\system32\ati2sgag.exe
Fri Sep 02 13:59:06 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\ati2mtag.sys
Fri Sep 02 13:59:07 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\atmarpc.sys
Fri Sep 02 13:59:07 2005 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Sep 02 13:59:07 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\audstub.sys
Fri Sep 02 13:59:07 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\HSF_BSC2.sys
Fri Sep 02 13:59:07 2005 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Sep 02 13:59:07 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\bridge.sys
Fri Sep 02 13:59:07 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\bridge.sys
Fri Sep 02 13:59:07 2005 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Sep 02 13:59:07 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\btaudio.sys
Fri Sep 02 13:59:07 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\btport.sys
Fri Sep 02 13:59:07 2005 => Scanning File C:\WINDOWS\System32\drivers\btkrnl.sys
Fri Sep 02 13:59:07 2005 => Scanning File C:\WINDOWS\SYSTEM32\DRIVERS\BTSERIAL.SYS
Fri Sep 02 13:59:07 2005 => Scanning File C:\WINDOWS\SYSTEM32\DRIVERS\BTSLBCSP.SYS
Fri Sep 02 13:59:07 2005 => Scanning File C:\PROGRA~1\WIDCOMM\BLUETO~1\bin\btwdins.exe
Fri Sep 02 13:59:08 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\btwdndis.sys
Fri Sep 02 13:59:08 2005 => Scanning File C:\WINDOWS\System32\Drivers\btwusb.sys
Fri Sep 02 13:59:08 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\CCDECODE.sys
Fri Sep 02 13:59:08 2005 => Scanning File C:\PROGRA~1\COMMON~1\SYMANT~1\ccEvtMgr.exe
Fri Sep 02 13:59:08 2005 => Scanning File C:\PROGRA~1\COMMON~1\SYMANT~1\ccProxy.exe
Fri Sep 02 13:59:08 2005 => Scanning File C:\PROGRA~1\COMMON~1\SYMANT~1\ccPwdSvc.exe
Fri Sep 02 13:59:08 2005 => Scanning File C:\PROGRA~1\COMMON~1\SYMANT~1\ccSetMgr.exe
Fri Sep 02 13:59:08 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\cdrom.sys
Fri Sep 02 13:59:08 2005 => Scanning File C:\WINDOWS\System32\cisvc.exe
Fri Sep 02 13:59:08 2005 => Scanning File C:\WINDOWS\system32\clipsrv.exe
Fri Sep 02 13:59:08 2005 => Scanning File C:\WINDOWS\System32\dllhost.exe
Fri Sep 02 13:59:08 2005 => Scanning File C:\WINDOWS\system32\svchost.exe
Fri Sep 02 13:59:08 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\ctljystk.sys
Fri Sep 02 13:59:08 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\d347bus.sys
Fri Sep 02 13:59:08 2005 => Scanning File C:\WINDOWS\System32\Drivers\d347prt.sys
Fri Sep 02 13:59:08 2005 => Scanning File C:\DOCUME~1\JUSSI\LOCALS~1\TEMP\DBUSTRCM.SYS
Fri Sep 02 13:59:09 2005 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Sep 02 13:59:09 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\disk.sys
Fri Sep 02 13:59:09 2005 => Scanning File C:\WINDOWS\System32\dmadmin.exe
Fri Sep 02 13:59:09 2005 => Scanning File C:\WINDOWS\System32\drivers\dmboot.sys
Fri Sep 02 13:59:09 2005 => Scanning File C:\WINDOWS\System32\drivers\dmio.sys
Fri Sep 02 13:59:09 2005 => Scanning File C:\WINDOWS\System32\drivers\dmload.sys
Fri Sep 02 13:59:09 2005 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Sep 02 13:59:09 2005 => Scanning File C:\WINDOWS\System32\drivers\DMusic.sys
Fri Sep 02 13:59:09 2005 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Sep 02 13:59:09 2005 => Scanning File C:\WINDOWS\System32\drivers\drmkaud.sys
Fri Sep 02 13:59:09 2005 => Scanning File C:\WINDOWS\System32\Drivers\ElbyCDFL.sys
Fri Sep 02 13:59:09 2005 => Scanning File C:\WINDOWS\System32\Drivers\ElbyCDIO.sys
Fri Sep 02 13:59:09 2005 => Scanning File C:\WINDOWS\System32\drivers\emu10k1m.sys
Fri Sep 02 13:59:09 2005 => Scanning File C:\WINDOWS\System32\drivers\ctlfacem.sys
Fri Sep 02 13:59:09 2005 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Sep 02 13:59:09 2005 => Scanning File C:\WINDOWS\system32\services.exe
Fri Sep 02 13:59:10 2005 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Sep 02 13:59:10 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\HSF_FALL.sys
Fri Sep 02 13:59:10 2005 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Sep 02 13:59:10 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\fdc.sys
Fri Sep 02 13:59:10 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\flpydisk.sys
Fri Sep 02 13:59:10 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\HSF_FSKS.sys
Fri Sep 02 13:59:10 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\ftdisk.sys
Fri Sep 02 13:59:10 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\gameenum.sys
Fri Sep 02 13:59:10 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\msgpc.sys
Fri Sep 02 13:59:10 2005 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Sep 02 13:59:10 2005 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Sep 02 13:59:10 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\hidusb.sys
Fri Sep 02 13:59:10 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\HSF_MSFT.sys
Fri Sep 02 13:59:10 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\i8042prt.sys
Fri Sep 02 13:59:10 2005 => Scanning File C:\WINDOWS\System32\imapi.exe
Fri Sep 02 13:59:10 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\ipfltdrv.sys
Fri Sep 02 13:59:10 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\ipinip.sys
Fri Sep 02 13:59:10 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\ipnat.sys
Fri Sep 02 13:59:11 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\ipsec.sys
Fri Sep 02 13:59:11 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\irenum.sys
Fri Sep 02 13:59:11 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\isapnp.sys
Fri Sep 02 13:59:11 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\HSF_K56K.sys
Fri Sep 02 13:59:11 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\kbdclass.sys
Fri Sep 02 13:59:11 2005 => Scanning File C:\WINDOWS\System32\drivers\kmixer.sys
Fri Sep 02 13:59:11 2005 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Sep 02 13:59:11 2005 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Sep 02 13:59:11 2005 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Sep 02 13:59:11 2005 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Sep 02 13:59:11 2005 => ERROR!!! Invalid Entry "C:\WINDOWS\System32\svmhost.exe" -netsvcs in SYSTEM\CurrentControlSet\Services\Microsoft Update...
Fri Sep 02 13:59:11 2005 => Scanning File C:\WINDOWS\System32\mnmsrvc.exe
Fri Sep 02 13:59:11 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\mouclass.sys
Fri Sep 02 13:59:11 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\mouhid.sys
Fri Sep 02 13:59:11 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\mrxdav.sys
Fri Sep 02 13:59:11 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\mrxsmb.sys
Fri Sep 02 13:59:11 2005 => Scanning File C:\WINDOWS\System32\msdtc.exe
Fri Sep 02 13:59:11 2005 => Scanning File C:\WINDOWS\System32\msiexec.exe
Fri Sep 02 13:59:12 2005 => Scanning File C:\WINDOWS\System32\drivers\MSKSSRV.sys
Fri Sep 02 13:59:12 2005 => Scanning File C:\WINDOWS\System32\drivers\MSPCLOCK.sys
Fri Sep 02 13:59:12 2005 => Scanning File C:\WINDOWS\System32\drivers\MSPQM.sys
Fri Sep 02 13:59:12 2005 => Scanning File C:\WINDOWS\System32\drivers\MSTEE.sys
Fri Sep 02 13:59:12 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\NABTSFEC.sys
Fri Sep 02 13:59:12 2005 => Scanning File D:\NORTON~1\NORTON~1\navapsvc.exe
Fri Sep 02 13:59:12 2005 => Scanning File C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20050831.016\NAVENG.SYS
Fri Sep 02 13:59:12 2005 => Scanning File C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20050831.016\NAVEX15.SYS
Fri Sep 02 13:59:12 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\NdisIP.sys
Fri Sep 02 13:59:12 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\ndistapi.sys
Fri Sep 02 13:59:12 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\ndisuio.sys
Fri Sep 02 13:59:12 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\ndiswan.sys
Fri Sep 02 13:59:12 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\netbios.sys
Fri Sep 02 13:59:12 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\netbt.sys
Fri Sep 02 13:59:12 2005 => Scanning File C:\WINDOWS\system32\netdde.exe
Fri Sep 02 13:59:12 2005 => Scanning File C:\WINDOWS\system32\netdde.exe
Fri Sep 02 13:59:12 2005 => Scanning File C:\WINDOWS\System32\lsass.exe
Fri Sep 02 13:59:12 2005 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Sep 02 13:59:13 2005 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Sep 02 13:59:13 2005 => Scanning File C:\WINDOWS\SYSTEM32\DRIVERS\NPDRIVER.SYS
Fri Sep 02 13:59:13 2005 => Scanning File D:\NORTON~1\NORTON~1\AdvTools\NPROTECT.EXE
Fri Sep 02 13:59:13 2005 => Scanning File C:\WINDOWS\System32\lsass.exe
Fri Sep 02 13:59:13 2005 => Scanning File C:\WINDOWS\system32\svchost.exe
Fri Sep 02 13:59:13 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\nv4_mini.sys
Fri Sep 02 13:59:13 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\nv4.sys
Fri Sep 02 13:59:13 2005 => Scanning File C:\WINDOWS\System32\nvsvc32.exe
Fri Sep 02 13:59:13 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\nwlnkflt.sys
Fri Sep 02 13:59:13 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\nwlnkfwd.sys
Fri Sep 02 13:59:13 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\nwlnkipx.sys
Fri Sep 02 13:59:14 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\nwlnknb.sys
Fri Sep 02 13:59:14 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\nwlnkspx.sys
Fri Sep 02 13:59:14 2005 => Scanning File C:\PROGRA~1\COMMON~1\MICROS~1\SOURCE~1\OSE.EXE
Fri Sep 02 13:59:14 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\parport.sys
Fri Sep 02 13:59:14 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\pci.sys
Fri Sep 02 13:59:14 2005 => ERROR!!! Invalid Entry \??\C:\WINDOWS\System32\PfModNT.sys in SYSTEM\CurrentControlSet\Services\PfModNT...
Fri Sep 02 13:59:14 2005 => Scanning File C:\WINDOWS\system32\services.exe
Fri Sep 02 13:59:14 2005 => Scanning File C:\WINDOWS\System32\lsass.exe
Fri Sep 02 13:59:14 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\raspptp.sys
Fri Sep 02 13:59:14 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\processr.sys
Fri Sep 02 13:59:14 2005 => Scanning File C:\WINDOWS\System32\drivers\prodrv06.sys
Fri Sep 02 13:59:14 2005 => Scanning File C:\WINDOWS\System32\drivers\prohlp02.sys
Fri Sep 02 13:59:21 2005 => Scanning File C:\WINDOWS\system32\lsass.exe
Fri Sep 02 13:59:21 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\psched.sys
Fri Sep 02 13:59:21 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\ptilink.sys
Fri Sep 02 13:59:21 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\PxHelp20.sys
Fri Sep 02 13:59:21 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\OVCD.sys
Fri Sep 02 13:59:22 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\rasacd.sys
Fri Sep 02 13:59:22 2005 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Sep 02 13:59:22 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\rasl2tp.sys
Fri Sep 02 13:59:22 2005 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Sep 02 13:59:22 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\raspppoe.sys
Fri Sep 02 13:59:22 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\raspti.sys
Fri Sep 02 13:59:22 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\rdbss.sys
Fri Sep 02 13:59:22 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\RDPCDD.sys
Fri Sep 02 13:59:22 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\rdpdr.sys
Fri Sep 02 13:59:22 2005 => Scanning File C:\WINDOWS\system32\sessmgr.exe
Fri Sep 02 13:59:22 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\redbook.sys
Fri Sep 02 13:59:22 2005 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Sep 02 13:59:22 2005 => Scanning File C:\WINDOWS\system32\svchost.exe
Fri Sep 02 13:59:22 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\HSF_SAMP.sys
Fri Sep 02 13:59:22 2005 => Scanning File C:\WINDOWS\System32\locator.exe
Fri Sep 02 13:59:23 2005 => Scanning File C:\WINDOWS\system32\svchost.exe
Fri Sep 02 13:59:23 2005 => Scanning File C:\WINDOWS\System32\rsvp.exe
Fri Sep 02 13:59:23 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\RTL8139.SYS
Fri Sep 02 13:59:23 2005 => Scanning File C:\WINDOWS\system32\lsass.exe
Fri Sep 02 13:59:23 2005 => Scanning File D:\NORTON~1\NORTON~1\SAVRT.SYS
Fri Sep 02 13:59:23 2005 => Scanning File D:\NORTON~1\NORTON~1\SAVRTPEL.SYS
Fri Sep 02 13:59:23 2005 => Scanning File D:\NORTON~1\NORTON~1\SAVScan.exe
Fri Sep 02 13:59:23 2005 => Scanning File C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
Fri Sep 02 13:59:24 2005 => Scanning File C:\WINDOWS\System32\SCardSvr.exe
Fri Sep 02 13:59:24 2005 => Scanning File C:\WINDOWS\System32\SCardSvr.exe
Fri Sep 02 13:59:24 2005 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Sep 02 13:59:24 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\secdrv.sys
Fri Sep 02 13:59:24 2005 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Sep 02 13:59:24 2005 => Scanning File C:\WINDOWS\system32\svchost.exe
Fri Sep 02 13:59:24 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\serenum.sys
Fri Sep 02 13:59:24 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\serial.sys
Fri Sep 02 13:59:24 2005 => Scanning File C:\WINDOWS\System32\drivers\sfhlp01.sys
Fri Sep 02 13:59:24 2005 => Scanning File C:\WINDOWS\System32\drivers\sfmanm.sys
Fri Sep 02 13:59:24 2005 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Sep 02 13:59:24 2005 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Sep 02 13:59:24 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\SLIP.sys
Fri Sep 02 13:59:24 2005 => Scanning File C:\PROGRA~1\COMMON~1\SYMANT~1\SNDSrvc.exe
Fri Sep 02 13:59:24 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\HSF_FAXX.sys
Fri Sep 02 13:59:25 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\SONYPVU1.SYS
Fri Sep 02 13:59:25 2005 => Scanning File C:\WINDOWS\System32\drivers\splitter.sys
Fri Sep 02 13:59:25 2005 => Scanning File C:\WINDOWS\system32\spoolsv.exe
Fri Sep 02 13:59:25 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\sr.sys
Fri Sep 02 13:59:25 2005 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Sep 02 13:59:25 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\srv.sys
Fri Sep 02 13:59:25 2005 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Sep 02 13:59:25 2005 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Sep 02 13:59:25 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\StreamIP.sys
Fri Sep 02 13:59:25 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\swenum.sys
Fri Sep 02 13:59:25 2005 => Scanning File C:\WINDOWS\System32\drivers\swmidi.sys
Fri Sep 02 13:59:25 2005 => Scanning File C:\WINDOWS\System32\dllhost.exe
Fri Sep 02 13:59:25 2005 => Scanning File C:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe
Fri Sep 02 13:59:25 2005 => Scanning File C:\WINDOWS\System32\Drivers\SYMDNS.SYS
Fri Sep 02 13:59:26 2005 => Scanning File C:\PROGRA~1\SYMANTEC\SYMEVENT.SYS
Fri Sep 02 13:59:26 2005 => Scanning File C:\WINDOWS\System32\Drivers\SYMFW.SYS
Fri Sep 02 13:59:26 2005 => Scanning File C:\WINDOWS\System32\Drivers\SYMIDS.SYS
Fri Sep 02 13:59:26 2005 => Scanning File C:\PROGRA~1\COMMON~1\SYMANT~1\SYMCDATA\IDSDEFS\20050816.022\SYMIDSCO.SYS
Fri Sep 02 13:59:26 2005 => Scanning File C:\WINDOWS\SYSTEM32\DRIVERS\SYMLCBRD.SYS
Fri Sep 02 13:59:26 2005 => Scanning File C:\WINDOWS\System32\Drivers\SYMNDIS.SYS
Fri Sep 02 13:59:27 2005 => Scanning File C:\WINDOWS\System32\Drivers\SYMREDRV.SYS
Fri Sep 02 13:59:27 2005 => Scanning File C:\WINDOWS\System32\Drivers\SYMTDI.SYS
Fri Sep 02 13:59:27 2005 => Scanning File C:\PROGRA~1\COMMON~1\SYMANT~1\SECURI~1\SymWSC.exe
Fri Sep 02 13:59:27 2005 => Scanning File C:\WINDOWS\System32\drivers\sysaudio.sys
Fri Sep 02 13:59:27 2005 => Scanning File C:\WINDOWS\system32\smlogsvc.exe
Fri Sep 02 13:59:27 2005 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Sep 02 13:59:27 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\tcpip.sys
Fri Sep 02 13:59:27 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\termdd.sys
Fri Sep 02 13:59:27 2005 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Sep 02 13:59:27 2005 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Sep 02 13:59:28 2005 => Scanning File C:\WINDOWS\System32\tlntsvr.exe
Fri Sep 02 13:59:28 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\HSF_TONE.sys
Fri Sep 02 13:59:28 2005 => Scanning File C:\WINDOWS\system32\svchost.exe
Fri Sep 02 13:59:28 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\ultra.sys
Fri Sep 02 13:59:28 2005 => Scanning File C:\WINDOWS\System32\wdfmgr.exe
Fri Sep 02 13:59:28 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\update.sys
Fri Sep 02 13:59:28 2005 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Sep 02 13:59:28 2005 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Sep 02 13:59:28 2005 => Scanning File C:\WINDOWS\System32\ups.exe
Fri Sep 02 13:59:28 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\usbhub.sys
Fri Sep 02 13:59:28 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS
Fri Sep 02 13:59:28 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\usbuhci.sys
Fri Sep 02 13:59:28 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\HSF_V124.sys
Fri Sep 02 13:59:28 2005 => Scanning File C:\WINDOWS\System32\drivers\vga.sys
Fri Sep 02 13:59:28 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\viaagp.sys
Fri Sep 02 13:59:28 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\viaagp1.sys
Fri Sep 02 13:59:28 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\viaidexp.sys
Fri Sep 02 13:59:29 2005 => Scanning File C:\WINDOWS\System32\vssvc.exe
Fri Sep 02 13:59:29 2005 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Sep 02 13:59:29 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\wanarp.sys
Fri Sep 02 13:59:29 2005 => Scanning File C:\WINDOWS\System32\drivers\wdmaud.sys
Fri Sep 02 13:59:29 2005 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Sep 02 13:59:29 2005 => Scanning File C:\WINDOWS\system32\svchost.exe
Fri Sep 02 13:59:29 2005 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Sep 02 13:59:29 2005 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Sep 02 13:59:29 2005 => Scanning File C:\WINDOWS\System32\wbem\wmiapsrv.exe
Fri Sep 02 13:59:29 2005 => Scanning File C:\WINDOWS\System32\drivers\ws2ifsl.sys
Fri Sep 02 13:59:29 2005 => Scanning File C:\WINDOWS\System32\DRIVERS\WSTCODEC.SYS
Fri Sep 02 13:59:29 2005 => Scanning File C:\WINDOWS\system32\svchost.exe
Fri Sep 02 13:59:29 2005 => Scanning File C:\WINDOWS\System32\svchost.exe
Fri Sep 02 13:59:29 2005 => ***** Scanning Important System Files *****
Fri Sep 02 13:59:29 2005 => Scanning File C:\WINDOWS\System32\winsock.dll
Fri Sep 02 13:59:29 2005 => Scanning File C:\WINDOWS\System32\ws2help.dll
Fri Sep 02 13:59:29 2005 => Scanning File C:\WINDOWS\System32\ws2_32.dll
Fri Sep 02 13:59:29 2005 => Scanning File C:\WINDOWS\System32\wscript.exe
Fri Sep 02 13:59:29 2005 => Scanning File C:\WINDOWS\System32\wsecedit.dll
Fri Sep 02 13:59:30 2005 => Scanning File C:\WINDOWS\System32\wshatm.dll
Fri Sep 02 13:59:30 2005 => Scanning File C:\WINDOWS\System32\wshcon.dll
Fri Sep 02 13:59:30 2005 => Scanning File C:\WINDOWS\System32\wshext.dll
Fri Sep 02 13:59:30 2005 => Scanning File C:\WINDOWS\System32\wshfi.dll
Fri Sep 02 13:59:30 2005 => Scanning File C:\WINDOWS\System32\wship6.dll
Fri Sep 02 13:59:30 2005 => Scanning File C:\WINDOWS\System32\wshisn.dll
Fri Sep 02 13:59:30 2005 => Scanning File C:\WINDOWS\System32\wshnetbs.dll
Fri Sep 02 13:59:30 2005 => Scanning File C:\WINDOWS\System32\wshom.ocx
Fri Sep 02 13:59:30 2005 => Scanning File C:\WINDOWS\System32\WshRm.dll
Fri Sep 02 13:59:30 2005 => Scanning File C:\WINDOWS\System32\wshtcpip.dll
Fri Sep 02 13:59:30 2005 => Scanning File C:\WINDOWS\System32\wsnmp32.dll
Fri Sep 02 13:59:30 2005 => Scanning File C:\WINDOWS\System32\wsock32.dll
Fri Sep 02 13:59:30 2005 => Scanning File C:\WINDOWS\System32\wstdecod.dll
Fri Sep 02 13:59:31 2005 => Scanning File C:\WINDOWS\System32\msblank.html
Fri Sep 02 13:59:31 2005 => Scanning File C:\WINDOWS\explorer.exe
Fri Sep 02 13:59:31 2005 => Scanning File C:\WINDOWS\explorer.scf
Fri Sep 02 13:59:31 2005 => Scanning File C:\WINDOWS\NOTEPAD.EXE
Fri Sep 02 13:59:31 2005 => Scanning File C:\WINDOWS\System32\notepad.exe
Fri Sep 02 13:59:31 2005 => Scanning File C:\WINDOWS\System32\ctfmon.exe
Fri Sep 02 13:59:31 2005 => Scanning File C:\WINDOWS\System32\cmd.exe
Fri Sep 02 13:59:31 2005 => Scanning File C:\WINDOWS\System32\kernel32.dll
Fri Sep 02 13:59:31 2005 => Scanning File C:\WINDOWS\System32\ntoskrnl.exe
Fri Sep 02 13:59:31 2005 => Scanning File C:\WINDOWS\System32\ntkrnlpa.exe
Fri Sep 02 13:59:31 2005 => Scanning File C:\WINDOWS\System32\hal.dll
Fri Sep 02 13:59:31 2005 => Scanning File C:\WINDOWS\System32\win32k.sys
Fri Sep 02 13:59:31 2005 => Scanning File C:\WINDOWS\System32\ntdll.dll
Fri Sep 02 13:59:31 2005 => Scanning File C:\WINDOWS\System32\advapi32.dll
Fri Sep 02 13:59:32 2005 => Scanning File C:\WINDOWS\System32\user32.dll
Fri Sep 02 13:59:32 2005 => Scanning File C:\WINDOWS\System32\gdi32.dll
Fri Sep 02 13:59:32 2005 => Scanning File C:\WINDOWS\System32\bootvid.dll
Fri Sep 02 13:59:32 2005 => Scanning File C:\WINDOWS\System32\command.com
Fri Sep 02 13:59:32 2005 => ***** Checking for specific ITW Viruses *****
Fri Sep 02 13:59:32 2005 => Checking for Welchia Virus...
Fri Sep 02 13:59:32 2005 => Checking for LovGate Virus...
Fri Sep 02 13:59:32 2005 => Checking for CodeRed Virus...
Fri Sep 02 13:59:32 2005 => Checking for OpaServ Virus...
Fri Sep 02 13:59:32 2005 => Checking for Sobig.e Virus...
Fri Sep 02 13:59:32 2005 => Checking for Winupie Virus...
Fri Sep 02 13:59:32 2005 => Checking for Swen Virus...
Fri Sep 02 13:59:32 2005 => Checking for JS.Fortnight Virus...
Fri Sep 02 13:59:32 2005 => Checking for Novarg Virus...
Fri Sep 02 13:59:32 2005 => Checking for Pagabot Virus...
Fri Sep 02 13:59:32 2005 => Checking for Parite.b Virus...
Fri Sep 02 13:59:32 2005 => Checking for Parite.a Virus...
Fri Sep 02 13:59:32 2005 => ***** Scanning complete. *****
Fri Sep 02 13:59:32 2005 => Total Number of Files Scanned: 346
Fri Sep 02 13:59:32 2005 => Total Number of Virus(es) Found: 5
Fri Sep 02 13:59:32 2005 => Total Number of Disinfected Files: 0
Fri Sep 02 13:59:32 2005 => Total Number of Files Renamed: 0
Fri Sep 02 13:59:32 2005 => Total Number of Deleted Files: 0
Fri Sep 02 13:59:32 2005 => Total Number of Errors: 3
Fri Sep 02 13:59:32 2005 => Time Elapsed: 00:00:36
Fri Sep 02 13:59:32 2005 => Virus Database Date: 2005/08/28
Fri Sep 02 13:59:32 2005 => Virus Database Count: 145915
Fri Sep 02 13:59:32 2005 => Scan Completed.
Sulla on noi skannausasetukset kai vähän pielessä:
ri Sep 02 13:58:55 2005 => Options Selected by User:
Fri Sep 02 13:58:55 2005 => System Folder Check: Disabled
Fri Sep 02 13:58:55 2005 => System Area Check: Disabled
Fri Sep 02 13:58:55 2005 => Drive Check Option Disabled
Fri Sep 02 13:58:55 2005 => Scanning Type: Scan And Clean
Fri Sep 02 13:58:55 2005 => Folder Check: Disabled
Siellä näkyy olevan Lop.com örkki ja tais olla muutakin.
Käyppäs lataamassa Hijackthis ja laita sen logi tuonne http://keskustelu.suomi24.fi/show.fcgi?category=108&conference=4500000000000628&subcat=758
Hijackthisin saat tuolta, lue huolella ohjeet:
http://koti.mbnet.fi/pattaya1/hijackthis.htm
ÄLÄ aloita scannausta noilla alkuperäisillä asetuksilla. Muuta niitä siten, että valitset kohdan Drive ja sitten All Local Drivers. Varmista myös,että kohta Scan All Files on valittu. Asetukset siis kuvan mukaiset. Vasta tämän jälkeen paina Scan nappia.