Logfile of HijackThis v1.99.1
Scan saved at 20:16:39, on 8.9.2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Logitech\Video\LogiTray.exe
C:\WINDOWS\system32\LVComS.exe
C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\iWare\iWare Mouse\3.2\lwbwheel.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_AICN03.EXE
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\HJTHotkey\HJTHotkey.exe
C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
C:\HJT\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://laajakaista.elisa.net/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKLM\..\Run: [LWBMOUSE] C:\Program Files\iWare\iWare Mouse\3.2\lwbwheel.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [EPSON Stylus COLOR 480] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_AICN03.EXE /P22 "EPSON Stylus COLOR 480" /O5 "LPT1:" /M "Stylus COLOR 480"
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra button: Oheistiedot - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {8EB3FF4E-86A1-4717-884D-7BA2D38272CB} (F-Secure Online Scanner) - http://support.f-secure.com/ols/fscax.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
Logfile of HijackThis v1.99.1 Safe.
Safe. Shows the version of HijackThis an. The newest version is: v1.99.1!
This should be the newest version. (v1.99.1)
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Safe.
Safe. Shows the version of your Internet Explorer. Newest Version is: 6.00.2900.2180!
This should be the newest version. (6.00.2900.2180)
C:\WINDOWS\System32\smss.exe Check with an antivirus scanner Safe.
Safe. This entry was classified from our visitors as good.
Visitor's assessment: 3.89 (Safe) Click on the stars and look at the comments from our visitors, to see, why the entry was classified in such a way.
C:\WINDOWS\system32\winlogon.exe Check with an antivirus scanner Safe.
Safe. running process. (winlogon.exe)
Systemprozess - Windows Login Routine
Visitor's assessment: 5 (Very safe)
C:\WINDOWS\system32\services.exe Check with an antivirus scanner Safe.
Safe. running process. (services.exe)
Systemprozess - Verwaltet die Systemdienste.
Visitor's assessment: 5 (Very safe)
C:\WINDOWS\system32\lsass.exe Check with an antivirus scanner Safe.
Safe. running process. (lsass.exe)
Systemprozess
Visitor's assessment: 5 (Very safe)
C:\WINDOWS\system32\svchost.exe Check with an antivirus scanner Safe.
Safe. running process. (svchost.exe)
Systemprozess - Allgemeiner Hostprozessname für Dienste.
Visitor's assessment: 5 (Very safe)
C:\WINDOWS\System32\svchost.exe Check with an antivirus scanner Safe.
Safe. running process. (svchost.exe)
Systemprozess - Allgemeiner Hostprozessname für Dienste.
Visitor's assessment: 5 (Very safe)
C:\WINDOWS\system32\spoolsv.exe Check with an antivirus scanner Safe.
Safe. running process. (spoolsv.exe)
Systemprozess
Visitor's assessment: 5 (Very safe)
C:\WINDOWS\Explorer.EXE Check with an antivirus scanner Safe.
Safe. This entry was classified from our visitors as good.
Visitor's assessment: 3.81 (Safe) Click on the stars and look at the comments from our visitors, to see, why the entry was classified in such a way.
C:\WINDOWS\system32\hkcmd.exe Check with an antivirus scanner Safe.
Safe. running process. (hkcmd.exe)
Visitor's assessment: 4 (Safe)
C:\Program Files\Logitech\Video\LogiTray.exe Check with an antivirus scanner Safe.
Safe. running process. (LogiTray.exe)
Visitor's assessment: 5 (Very safe)
C:\WINDOWS\system32\LVComS.exe Check with an antivirus scanner Safe.
Safe. running process. (LVComS.exe)
Currently there is no visitor's assessment!
Possibly nasty! According to our database this process runs normally in c:\programme\gemeinsame dateien\logitech\qcdriver\! Check if you know this process and arrange a viruscheck where required.
C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe Check with an antivirus scanner Safe.
Safe. running process. (jusched.exe)
Java Runtime
Visitor's assessment: 4 (Safe)
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe Check with an antivirus scanner Safe.
Safe. running process. (ashDisp.exe)
Visitor's assessment: 4 (Safe)
Possibly nasty! According to our database this process runs normally in c:\programme\alwil software\avast4\! Check if you know this process and arrange a viruscheck where required.
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe Check with an antivirus scanner Safe.
Safe. running process. (zlclient.exe)
Zone Alarm
Visitor's assessment: 5 (Very safe)
C:\Program Files\iWare\iWare Mouse\3.2\lwbwheel.exe Check with an antivirus scanner Safe.
Safe. running process. (lwbwheel.exe)
Currently there is no visitor's assessment!
Possibly nasty! According to our database this process runs normally in c:\programme\browser mouse\browser mouse\1.0\! Check if you know this process and arrange a viruscheck where required.
C:\WINDOWS\system32\ctfmon.exe Check with an antivirus scanner Safe.
Safe. running process. (ctfmon.exe)
Visitor's assessment: 5 (Very safe)
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_AICN03.EXE Check with an antivirus scanner Unknown
Unknown running process. (E_AICN03.EXE)
Currently there is no visitor's assessment! This is a unknown process.
C:\Program Files\Skype\Phone\Skype.exe Check with an antivirus scanner Safe.
Safe. running process. (Skype.exe)
Visitor's assessment: 5 (Very safe)
C:\Program Files\MSN Messenger\msnmsgr.exe Check with an antivirus scanner Safe.
Safe. running process. (msnmsgr.exe)
MSN Messenger
Visitor's assessment: 5 (Very safe)
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe Check with an antivirus scanner Safe.
Safe. running process. (aswUpdSv.exe)
Visitor's assessment: 5 (Very safe)
C:\Program Files\Alwil Software\Avast4\ashServ.exe Check with an antivirus scanner AV-Scanner
Safe. running process. (ashServ.exe)
Avast Antivirus-Scanner
Visitor's assessment: 5 (Very safe)
C:\WINDOWS\System32\svchost.exe Check with an antivirus scanner Safe.
Safe. running process. (svchost.exe)
Systemprozess - Allgemeiner Hostprozessname für Dienste.
Visitor's assessment: 5 (Very safe)
C:\WINDOWS\system32\ZoneLabs\vsmon.exe Check with an antivirus scanner Safe.
Safe. This entry was classified from our visitors as good.
Visitor's assessment: 4.43 (Very safe) Click on the stars and look at the comments from our visitors, to see, why the entry was classified in such a way.
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe Check with an antivirus scanner Safe.
Safe. running process. (ashMaiSv.exe)
Visitor's assessment: 5 (Very safe)
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe Check with an antivirus scanner AV-Scanner
Safe. running process. (ashWebSv.exe)
Avast virusscanner
Visitor's assessment: 4 (Safe)
C:\Program Files\HJTHotkey\HJTHotkey.exe Check with an antivirus scanner Unknown
Unknown running process. (HJTHotkey.exe)
Currently there is no visitor's assessment! This is a unknown process.
C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE Check with an antivirus scanner Unknown
Unknown running process. (OSE.EXE)
Visitor's assessment: 4 (Safe) This is a unknown process.
C:\HJT\HijackThis.exe Check with an antivirus scanner Safe.
Safe. running process. (HijackThis.exe)
Tool, mit dem sie dieses Logfile erzeugt haben.
Currently there is no visitor's assessment! Remember that Hijackthis must be run in an own folder. Only if Hijackthis run in an own folder it will create backups!
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://laajakaista.elisa.net/ Safe.
Safe. This page has been identified as safe.
Currently there is no visitor's assessment!
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = Safe.
Safe.
Visitor's assessment: 3 (Safe.)
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost Safe.
Safe. This page has been identified as safe.
Currently there is no visitor's assessment!
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit Safe.
Safe. This page has been identified as safe.
Currently there is no visitor's assessment!
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll Safe.
Safe. Entries found in this registry zone are potentially nasty. This application ([02478D38-C3F9-4efb-9B51-7695ECA05670] - Result: 02478D38-C3F9-4efb-9B51-7695ECA05670) has been checked. Hit rate: 99 %
Currently there is no visitor's assessment!
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll Safe.
Safe. Entries found in this registry zone are potentially nasty. This application ([06849E9F-C8D7-4D59-B87D-784B7D6BE0B3] - Result: 06849E9F-C8D7-4D59-B87D-784B7D6BE0B3) has been checked. Hit rate: 99 %
Visitor's assessment: 3.67 (Safe)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll Safe.
Safe. This entry was classified from our visitors as good.
Visitor's assessment: 4.6 (Very safe) Click on the stars and look at the comments from our visitors, to see, why the entry was classified in such a way.
O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll Safe.
Safe. Entries found in this registry zone are potentially nasty. This application ([EF99BD32-C1FB-11D2-892F-0090271D4F88] - Result: EF99BD32-C1FB-11D2-892F-0090271D4F88) has been checked. If the name is made up of random letters, found in the folder 'Application Data' and the kind is 'Unknown' , it should be fixed. Hit rate: 99 %
Currently there is no visitor's assessment!
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe Safe.
Safe. Application that implements the Intel Hotkey command.
Hit rate: 99 % (result)
Currently there is no visitor's assessment!
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe Safe.
Safe. Associated with "Nero Burning Rom" CD writing software. Checks for driver issues
Hit rate: 99 % (result)
Visitor's assessment: 5 (Very safe)
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe Safe.
Safe. LogitechGalleryRepair/LogitechVideoRepair - part of Logitech Image Studio - installed with Logitech QuickCam cameras. Required from version 8.11 onwards if you use the software to take pictures and capture videos, not if you don't. Also not required for versions up to and including 7.30 and after version 8.30 - hence the "U" rather than "Y" recommendation
Hit rate: 99 % (result)
Currently there is no visitor's assessment!
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe Safe.
Safe. Logitech Image Studio - installed with Logitech QuickCams
Hit rate: 99 % (result)
Currently there is no visitor's assessment! Not dangerous, but unnecessary.
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe Safe.
Safe. Java von Sun
Hit rate: 99 % (result)
Currently there is no visitor's assessment!
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe Safe.
Safe. Part of Avast! anti-virus software
Hit rate: 99 % (result)
Currently there is no visitor's assessment!
O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe Safe.
Safe. Firewall program from Zonelabs. Pro version inlcudes other online security options
Hit rate: 85 % (result)
Visitor's assessment: 4.33 (Very safe)
O4 - HKLM\..\Run: [LWBMOUSE] C:\Program Files\iWare\iWare Mouse\3.2\lwbwheel.exe Safe.
Safe. Browser Mouse
Hit rate: 99 % (result)
Currently there is no visitor's assessment!
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe Safe.
Safe. CTFMon is involved with the language/alternative input services in Office XP. CTFMON.exe will continue to put itself back into MSConfig when you run the Office XP apps as long as the Text Services and Speech applets in the Control Panel are enabled. Not required if you don\'t need these features. For more info on ctfmon see here. CTFMON can be disabled from Control Panel, Text & Speech Services
Hit rate: 54 % (result)
Visitor's assessment: 5 (Very safe)
O4 - HKCU\..\Run: [EPSON Stylus COLOR 480] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_AICN03.EXE /P22 "EPSON Stylus COLOR 480" /O5 "LPT1:" /M "Stylus COLOR 480" Unknown
Unknown
Hit rate: 2 % (result)
Currently there is no visitor's assessment! Unknown application.
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized Safe.
Safe. "Skype is free and simple software that will enable you to make free calls anywhere in the world in minutes"
Hit rate: 99 % (result)
Currently there is no visitor's assessment! Not dangerous, but unnecessary.
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background Safe.
Safe. Microsoft s MSN Messenger 6
Hit rate: 71 % (result)
Visitor's assessment: 4 (Safe)
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe Safe.
Safe. Part of Acrobat Reader 7
Hit rate: 79 % (result)
Currently there is no visitor's assessment!
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE Safe.
Safe.
Hit rate: 67 % (result)
Currently there is no visitor's assessment!
O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 Possibly nasty
Possibly nasty Entries shown in the menu that pops up when right-clicking into the Internet Explorer. Unknown entries should be fixed.
Currently there is no visitor's assessment! To be fixed if the entry 'Vie Microsoft E&xceliin ' is unknown.
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll Safe.
Safe. The entry has been identified as safe.
Visitor's assessment: 5 (Very safe) If the entry '' is not needed anymore, it should be fixed.
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll Safe.
Safe. The entry Sun Java Console has been identified as safe.
Visitor's assessment: 5 (Very safe) If the entry 'Sun Java Console ' is not needed anymore, it should be fixed.
O9 - Extra button: Oheistiedot - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL Safe.
Safe. The entry Oheistiedot has been identified as safe.
Currently there is no visitor's assessment! If the entry 'Oheistiedot ' is not needed anymore, it should be fixed.
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe Safe.
Safe. The entry Messenger has been identified as safe.
Visitor's assessment: 5 (Very safe) If the entry 'Messenger ' is not needed anymore, it should be fixed.
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe Safe.
Safe. The entry Windows Messenger has been identified as safe.
Visitor's assessment: 5 (Very safe) If the entry 'Windows Messenger ' is not needed anymore, it should be fixed.
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab Safe.
Safe. This entry has been identified as safe.
Currently there is no visitor's assessment!
O16 - DPF: {8EB3FF4E-86A1-4717-884D-7BA2D38272CB} (F-Secure Online Scanner) - http://support.f-secure.com/ols/fscax.cab Safe.
Safe. This entry has been identified as safe.
Currently there is no visitor's assessment!
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab Safe.
Safe. This entry has been identified as safe.
Currently there is no visitor's assessment!
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab Safe.
Safe. This entry has been identified as safe.
Currently there is no visitor's assessment!
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe Safe.
Safe. These entries shows all services which are not from Microsoft. Often malware is starting as a systemservice and it's not easy to detect it.
Currently there is no visitor's assessment! This service (aswUpdSv.exe) was identified as a good one.
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe AV-Scanner
Safe. These entries shows all services which are not from Microsoft. Often malware is starting as a systemservice and it's not easy to detect it.
Visitor's assessment: 5 (Very safe) This service (ashServ.exe) was identified as a good one.
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) Safe.
Safe. This entry was classified from our visitors as good.
Visitor's assessment: 4.4 (Very safe) Click on the stars and look at the comments from our visitors, to see, why the entry was classified in such a way.
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) Safe.
Safe. This entry was classified from our visitors as good.
Visitor's assessment: 4.8 (Very safe) Click on the stars and look at the comments from our visitors, to see, why the entry was classified in such a way.
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe Unknown
Unknown These entries shows all services which are not from Microsoft. Often malware is starting as a systemservice and it's not easy to detect it.
Visitor's assessment: 3 (Safe.) Unknown service. (IDriverT.exe)
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe Safe.
Safe. This entry was classified from our visitors as good.
Visitor's assessment: 4.2 (Very safe) Click on the stars and look at the comments from our visitors, to see, why the entry was classified in such a way.
tämä alimmainen logi visiin kumartaa maikkeli microsoftille
http://hijackthis.de/index.php#anl
Tuolta logi otettu ja jos ton mukaan teen niin örkkipesä on kohta valmis.... kun ton ohjeen mukaan teen. :))))))
Scan saved at 20:16:39, on 8.9.2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Logitech\Video\LogiTray.exe
C:\WINDOWS\system32\LVComS.exe
C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\iWare\iWare Mouse\3.2\lwbwheel.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_AICN03.EXE
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\HJTHotkey\HJTHotkey.exe
C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
C:\HJT\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://laajakaista.elisa.net/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKLM\..\Run: [LWBMOUSE] C:\Program Files\iWare\iWare Mouse\3.2\lwbwheel.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [EPSON Stylus COLOR 480] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_AICN03.EXE /P22 "EPSON Stylus COLOR 480" /O5 "LPT1:" /M "Stylus COLOR 480"
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra button: Oheistiedot - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {8EB3FF4E-86A1-4717-884D-7BA2D38272CB} (F-Secure Online Scanner) - http://support.f-secure.com/ols/fscax.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
Logfile of HijackThis v1.99.1 Safe.
Safe. Shows the version of HijackThis an. The newest version is: v1.99.1!
This should be the newest version. (v1.99.1)
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Safe.
Safe. Shows the version of your Internet Explorer. Newest Version is: 6.00.2900.2180!
This should be the newest version. (6.00.2900.2180)
C:\WINDOWS\System32\smss.exe Check with an antivirus scanner Safe.
Safe. This entry was classified from our visitors as good.
Visitor's assessment: 3.89 (Safe) Click on the stars and look at the comments from our visitors, to see, why the entry was classified in such a way.
C:\WINDOWS\system32\winlogon.exe Check with an antivirus scanner Safe.
Safe. running process. (winlogon.exe)
Systemprozess - Windows Login Routine
Visitor's assessment: 5 (Very safe)
C:\WINDOWS\system32\services.exe Check with an antivirus scanner Safe.
Safe. running process. (services.exe)
Systemprozess - Verwaltet die Systemdienste.
Visitor's assessment: 5 (Very safe)
C:\WINDOWS\system32\lsass.exe Check with an antivirus scanner Safe.
Safe. running process. (lsass.exe)
Systemprozess
Visitor's assessment: 5 (Very safe)
C:\WINDOWS\system32\svchost.exe Check with an antivirus scanner Safe.
Safe. running process. (svchost.exe)
Systemprozess - Allgemeiner Hostprozessname für Dienste.
Visitor's assessment: 5 (Very safe)
C:\WINDOWS\System32\svchost.exe Check with an antivirus scanner Safe.
Safe. running process. (svchost.exe)
Systemprozess - Allgemeiner Hostprozessname für Dienste.
Visitor's assessment: 5 (Very safe)
C:\WINDOWS\system32\spoolsv.exe Check with an antivirus scanner Safe.
Safe. running process. (spoolsv.exe)
Systemprozess
Visitor's assessment: 5 (Very safe)
C:\WINDOWS\Explorer.EXE Check with an antivirus scanner Safe.
Safe. This entry was classified from our visitors as good.
Visitor's assessment: 3.81 (Safe) Click on the stars and look at the comments from our visitors, to see, why the entry was classified in such a way.
C:\WINDOWS\system32\hkcmd.exe Check with an antivirus scanner Safe.
Safe. running process. (hkcmd.exe)
Visitor's assessment: 4 (Safe)
C:\Program Files\Logitech\Video\LogiTray.exe Check with an antivirus scanner Safe.
Safe. running process. (LogiTray.exe)
Visitor's assessment: 5 (Very safe)
C:\WINDOWS\system32\LVComS.exe Check with an antivirus scanner Safe.
Safe. running process. (LVComS.exe)
Currently there is no visitor's assessment!
Possibly nasty! According to our database this process runs normally in c:\programme\gemeinsame dateien\logitech\qcdriver\! Check if you know this process and arrange a viruscheck where required.
C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe Check with an antivirus scanner Safe.
Safe. running process. (jusched.exe)
Java Runtime
Visitor's assessment: 4 (Safe)
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe Check with an antivirus scanner Safe.
Safe. running process. (ashDisp.exe)
Visitor's assessment: 4 (Safe)
Possibly nasty! According to our database this process runs normally in c:\programme\alwil software\avast4\! Check if you know this process and arrange a viruscheck where required.
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe Check with an antivirus scanner Safe.
Safe. running process. (zlclient.exe)
Zone Alarm
Visitor's assessment: 5 (Very safe)
C:\Program Files\iWare\iWare Mouse\3.2\lwbwheel.exe Check with an antivirus scanner Safe.
Safe. running process. (lwbwheel.exe)
Currently there is no visitor's assessment!
Possibly nasty! According to our database this process runs normally in c:\programme\browser mouse\browser mouse\1.0\! Check if you know this process and arrange a viruscheck where required.
C:\WINDOWS\system32\ctfmon.exe Check with an antivirus scanner Safe.
Safe. running process. (ctfmon.exe)
Visitor's assessment: 5 (Very safe)
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_AICN03.EXE Check with an antivirus scanner Unknown
Unknown running process. (E_AICN03.EXE)
Currently there is no visitor's assessment! This is a unknown process.
C:\Program Files\Skype\Phone\Skype.exe Check with an antivirus scanner Safe.
Safe. running process. (Skype.exe)
Visitor's assessment: 5 (Very safe)
C:\Program Files\MSN Messenger\msnmsgr.exe Check with an antivirus scanner Safe.
Safe. running process. (msnmsgr.exe)
MSN Messenger
Visitor's assessment: 5 (Very safe)
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe Check with an antivirus scanner Safe.
Safe. running process. (aswUpdSv.exe)
Visitor's assessment: 5 (Very safe)
C:\Program Files\Alwil Software\Avast4\ashServ.exe Check with an antivirus scanner AV-Scanner
Safe. running process. (ashServ.exe)
Avast Antivirus-Scanner
Visitor's assessment: 5 (Very safe)
C:\WINDOWS\System32\svchost.exe Check with an antivirus scanner Safe.
Safe. running process. (svchost.exe)
Systemprozess - Allgemeiner Hostprozessname für Dienste.
Visitor's assessment: 5 (Very safe)
C:\WINDOWS\system32\ZoneLabs\vsmon.exe Check with an antivirus scanner Safe.
Safe. This entry was classified from our visitors as good.
Visitor's assessment: 4.43 (Very safe) Click on the stars and look at the comments from our visitors, to see, why the entry was classified in such a way.
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe Check with an antivirus scanner Safe.
Safe. running process. (ashMaiSv.exe)
Visitor's assessment: 5 (Very safe)
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe Check with an antivirus scanner AV-Scanner
Safe. running process. (ashWebSv.exe)
Avast virusscanner
Visitor's assessment: 4 (Safe)
C:\Program Files\HJTHotkey\HJTHotkey.exe Check with an antivirus scanner Unknown
Unknown running process. (HJTHotkey.exe)
Currently there is no visitor's assessment! This is a unknown process.
C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE Check with an antivirus scanner Unknown
Unknown running process. (OSE.EXE)
Visitor's assessment: 4 (Safe) This is a unknown process.
C:\HJT\HijackThis.exe Check with an antivirus scanner Safe.
Safe. running process. (HijackThis.exe)
Tool, mit dem sie dieses Logfile erzeugt haben.
Currently there is no visitor's assessment! Remember that Hijackthis must be run in an own folder. Only if Hijackthis run in an own folder it will create backups!
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://laajakaista.elisa.net/ Safe.
Safe. This page has been identified as safe.
Currently there is no visitor's assessment!
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = Safe.
Safe.
Visitor's assessment: 3 (Safe.)
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost Safe.
Safe. This page has been identified as safe.
Currently there is no visitor's assessment!
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit Safe.
Safe. This page has been identified as safe.
Currently there is no visitor's assessment!
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll Safe.
Safe. Entries found in this registry zone are potentially nasty. This application ([02478D38-C3F9-4efb-9B51-7695ECA05670] - Result: 02478D38-C3F9-4efb-9B51-7695ECA05670) has been checked. Hit rate: 99 %
Currently there is no visitor's assessment!
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll Safe.
Safe. Entries found in this registry zone are potentially nasty. This application ([06849E9F-C8D7-4D59-B87D-784B7D6BE0B3] - Result: 06849E9F-C8D7-4D59-B87D-784B7D6BE0B3) has been checked. Hit rate: 99 %
Visitor's assessment: 3.67 (Safe)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll Safe.
Safe. This entry was classified from our visitors as good.
Visitor's assessment: 4.6 (Very safe) Click on the stars and look at the comments from our visitors, to see, why the entry was classified in such a way.
O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll Safe.
Safe. Entries found in this registry zone are potentially nasty. This application ([EF99BD32-C1FB-11D2-892F-0090271D4F88] - Result: EF99BD32-C1FB-11D2-892F-0090271D4F88) has been checked. If the name is made up of random letters, found in the folder 'Application Data' and the kind is 'Unknown' , it should be fixed. Hit rate: 99 %
Currently there is no visitor's assessment!
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe Safe.
Safe. Application that implements the Intel Hotkey command.
Hit rate: 99 % (result)
Currently there is no visitor's assessment!
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe Safe.
Safe. Associated with "Nero Burning Rom" CD writing software. Checks for driver issues
Hit rate: 99 % (result)
Visitor's assessment: 5 (Very safe)
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe Safe.
Safe. LogitechGalleryRepair/LogitechVideoRepair - part of Logitech Image Studio - installed with Logitech QuickCam cameras. Required from version 8.11 onwards if you use the software to take pictures and capture videos, not if you don't. Also not required for versions up to and including 7.30 and after version 8.30 - hence the "U" rather than "Y" recommendation
Hit rate: 99 % (result)
Currently there is no visitor's assessment!
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe Safe.
Safe. Logitech Image Studio - installed with Logitech QuickCams
Hit rate: 99 % (result)
Currently there is no visitor's assessment! Not dangerous, but unnecessary.
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe Safe.
Safe. Java von Sun
Hit rate: 99 % (result)
Currently there is no visitor's assessment!
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe Safe.
Safe. Part of Avast! anti-virus software
Hit rate: 99 % (result)
Currently there is no visitor's assessment!
O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe Safe.
Safe. Firewall program from Zonelabs. Pro version inlcudes other online security options
Hit rate: 85 % (result)
Visitor's assessment: 4.33 (Very safe)
O4 - HKLM\..\Run: [LWBMOUSE] C:\Program Files\iWare\iWare Mouse\3.2\lwbwheel.exe Safe.
Safe. Browser Mouse
Hit rate: 99 % (result)
Currently there is no visitor's assessment!
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe Safe.
Safe. CTFMon is involved with the language/alternative input services in Office XP. CTFMON.exe will continue to put itself back into MSConfig when you run the Office XP apps as long as the Text Services and Speech applets in the Control Panel are enabled. Not required if you don\'t need these features. For more info on ctfmon see here. CTFMON can be disabled from Control Panel, Text & Speech Services
Hit rate: 54 % (result)
Visitor's assessment: 5 (Very safe)
O4 - HKCU\..\Run: [EPSON Stylus COLOR 480] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_AICN03.EXE /P22 "EPSON Stylus COLOR 480" /O5 "LPT1:" /M "Stylus COLOR 480" Unknown
Unknown
Hit rate: 2 % (result)
Currently there is no visitor's assessment! Unknown application.
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized Safe.
Safe. "Skype is free and simple software that will enable you to make free calls anywhere in the world in minutes"
Hit rate: 99 % (result)
Currently there is no visitor's assessment! Not dangerous, but unnecessary.
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background Safe.
Safe. Microsoft s MSN Messenger 6
Hit rate: 71 % (result)
Visitor's assessment: 4 (Safe)
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe Safe.
Safe. Part of Acrobat Reader 7
Hit rate: 79 % (result)
Currently there is no visitor's assessment!
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE Safe.
Safe.
Hit rate: 67 % (result)
Currently there is no visitor's assessment!
O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 Possibly nasty
Possibly nasty Entries shown in the menu that pops up when right-clicking into the Internet Explorer. Unknown entries should be fixed.
Currently there is no visitor's assessment! To be fixed if the entry 'Vie Microsoft E&xceliin ' is unknown.
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll Safe.
Safe. The entry has been identified as safe.
Visitor's assessment: 5 (Very safe) If the entry '' is not needed anymore, it should be fixed.
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll Safe.
Safe. The entry Sun Java Console has been identified as safe.
Visitor's assessment: 5 (Very safe) If the entry 'Sun Java Console ' is not needed anymore, it should be fixed.
O9 - Extra button: Oheistiedot - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL Safe.
Safe. The entry Oheistiedot has been identified as safe.
Currently there is no visitor's assessment! If the entry 'Oheistiedot ' is not needed anymore, it should be fixed.
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe Safe.
Safe. The entry Messenger has been identified as safe.
Visitor's assessment: 5 (Very safe) If the entry 'Messenger ' is not needed anymore, it should be fixed.
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe Safe.
Safe. The entry Windows Messenger has been identified as safe.
Visitor's assessment: 5 (Very safe) If the entry 'Windows Messenger ' is not needed anymore, it should be fixed.
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab Safe.
Safe. This entry has been identified as safe.
Currently there is no visitor's assessment!
O16 - DPF: {8EB3FF4E-86A1-4717-884D-7BA2D38272CB} (F-Secure Online Scanner) - http://support.f-secure.com/ols/fscax.cab Safe.
Safe. This entry has been identified as safe.
Currently there is no visitor's assessment!
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab Safe.
Safe. This entry has been identified as safe.
Currently there is no visitor's assessment!
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab Safe.
Safe. This entry has been identified as safe.
Currently there is no visitor's assessment!
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe Safe.
Safe. These entries shows all services which are not from Microsoft. Often malware is starting as a systemservice and it's not easy to detect it.
Currently there is no visitor's assessment! This service (aswUpdSv.exe) was identified as a good one.
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe AV-Scanner
Safe. These entries shows all services which are not from Microsoft. Often malware is starting as a systemservice and it's not easy to detect it.
Visitor's assessment: 5 (Very safe) This service (ashServ.exe) was identified as a good one.
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) Safe.
Safe. This entry was classified from our visitors as good.
Visitor's assessment: 4.4 (Very safe) Click on the stars and look at the comments from our visitors, to see, why the entry was classified in such a way.
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) Safe.
Safe. This entry was classified from our visitors as good.
Visitor's assessment: 4.8 (Very safe) Click on the stars and look at the comments from our visitors, to see, why the entry was classified in such a way.
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe Unknown
Unknown These entries shows all services which are not from Microsoft. Often malware is starting as a systemservice and it's not easy to detect it.
Visitor's assessment: 3 (Safe.) Unknown service. (IDriverT.exe)
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe Safe.
Safe. This entry was classified from our visitors as good.
Visitor's assessment: 4.2 (Very safe) Click on the stars and look at the comments from our visitors, to see, why the entry was classified in such a way.
tämä alimmainen logi visiin kumartaa maikkeli microsoftille
http://hijackthis.de/index.php#anl
Tuolta logi otettu ja jos ton mukaan teen niin örkkipesä on kohta valmis.... kun ton ohjeen mukaan teen. :))))))
Vastaukset 4
Vanhimmat
loki näyttää hyvältä
tuon ohjeen mukaan en tee ja siksi ei tuommosta ohjetta pidä kellekään tarjota eikä sen mukaan käskeä kenenkään fixsaamaan yhtään mitään.
Eikä sekoittaa tämän sivun toimintaa huuhaa sekkauksella.
missä vielä käsketään pahana örkkinä f-securen virus ohjelmaa poistamaan ja tekemään koneesta suojatonta.
ja paljon muutakin semoista mikä on koneeseen kuuluvaa se ohjelma ei ole 100% varma toiminnaltaan
lisäksi se jätää erittäin pahoja örkkejä koneeseen. UG EIKÖS TÄMÄ NYT TULLUT SELVÄKSI ,ETTÄ TUOTA HOMMAA EI TÄÄLLÄ VILJELLÄ!!!!
vaan osata tulkata oikein !
Oiskos tää sitten parempi http://hjt.iamnotageek.com/
sillä sekkaa vain oman login
ja tekee sitten virheet itse.