Rekisteröidy

Ilmoitukset

Ladataan…

    Näytä kaikki

    Näyttäs olevan vikaa

       Logfile of HijackThis v1.99.1        Safe.
    Safe.        Shows the version of HijackThis an. The newest version is: v1.99.1!
           This should be the newest version. (v1.99.1)
       Platform: Windows XP SP2 (WinNT 5.01.2600)               
           
       MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)        Safe.
    Safe.        Shows the version of your Internet Explorer. Newest Version is: 6.00.2900.2180!
           This should be the newest version. (6.00.2900.2180)
       C:\WINDOWS\System32\smss.exe Check with an antivirus scanner        Safe.
    Safe.        This entry was classified from our visitors as good.
    Visitor's assessment: 4.08 (Very safe)        Click on the stars and look at the comments from our visitors, to see, why the entry was classified in such a way.
       C:\WINDOWS\system32\winlogon.exe Check with an antivirus scanner        Safe.
    Safe.        This entry was classified from our visitors as good.
    Visitor's assessment: 4.44 (Very safe)        Click on the stars and look at the comments from our visitors, to see, why the entry was classified in such a way.
       C:\WINDOWS\system32\services.exe Check with an antivirus scanner        Safe.
    Safe.        running process. (services.exe)
    Systemprozess - Verwaltet die Systemdienste.
    Visitor's assessment: 5 (Very safe)        
       C:\WINDOWS\system32\lsass.exe Check with an antivirus scanner        Safe.
    Safe.        running process. (lsass.exe)
    Systemprozess
    Visitor's assessment: 5 (Very safe)        
       C:\WINDOWS\system32\svchost.exe Check with an antivirus scanner        Safe.
    Safe.        running process. (svchost.exe)
    Systemprozess - Allgemeiner Hostprozessname für Dienste.
    Visitor's assessment: 4.5 (Very safe)        
       C:\WINDOWS\System32\svchost.exe Check with an antivirus scanner        Safe.
    Safe.        running process. (svchost.exe)
    Systemprozess - Allgemeiner Hostprozessname für Dienste.
    Visitor's assessment: 5 (Very safe)        
       C:\WINDOWS\system32\spoolsv.exe Check with an antivirus scanner        Safe.
    Safe.        This entry was classified from our visitors as good.
    Visitor's assessment: 3.9 (Safe)        Click on the stars and look at the comments from our visitors, to see, why the entry was classified in such a way.
       C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe Check with an antivirus scanner        Safe.
    Safe.        running process. (aswUpdSv.exe)

    Visitor's assessment: 5 (Very safe)        
       C:\Program Files\Alwil Software\Avast4\ashServ.exe Check with an antivirus scanner        AV-Scanner
    Safe.        running process. (ashServ.exe)
    Avast Antivirus-Scanner
    Visitor's assessment: 5 (Very safe)        
       C:\WINDOWS\System32\svchost.exe Check with an antivirus scanner        Safe.
    Safe.        running process. (svchost.exe)
    Systemprozess - Allgemeiner Hostprozessname für Dienste.
    Visitor's assessment: 5 (Very safe)        
       C:\WINDOWS\system32\ZoneLabs\vsmon.exe Check with an antivirus scanner        Firewall
    Safe.        This entry was classified from our visitors as good.
    Visitor's assessment: 4.5 (Very safe)        Click on the stars and look at the comments from our visitors, to see, why the entry was classified in such a way.
       C:\WINDOWS\Explorer.EXE Check with an antivirus scanner        Safe.
    Safe.        This entry was classified from our visitors as good.
    Visitor's assessment: 3.88 (Safe)        Click on the stars and look at the comments from our visitors, to see, why the entry was classified in such a way.
       C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe Check with an antivirus scanner        Safe.
    Safe.        This entry was classified from our visitors as good.
    Visitor's assessment: 4.43 (Very safe)        Click on the stars and look at the comments from our visitors, to see, why the entry was classified in such a way.
       C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe Check with an antivirus scanner        Safe.
    Safe.        running process. (zlclient.exe)
    Zone Alarm
    Visitor's assessment: 4.33 (Very safe)        
       C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_AICN03.EXE Check with an antivirus scanner        Unknown
    Unknown        running process. (E_AICN03.EXE)

    Currently there is no visitor's assessment!        This is a unknown process.
       C:\Program Files\MSN Messenger\msnmsgr.exe Check with an antivirus scanner        Safe.
    Safe.        running process. (msnmsgr.exe)
    MSN Messenger
    Visitor's assessment: 4.75 (Very safe)        
       C:\Program Files\Skype\Phone\Skype.exe Check with an antivirus scanner        Safe.
    Safe.        running process. (Skype.exe)

    Visitor's assessment: 4.33 (Very safe)        
       C:\WINDOWS\system32\ctfmon.exe Check with an antivirus scanner        Safe.
    Safe.        running process. (ctfmon.exe)

    Visitor's assessment: 5 (Very safe)        
       C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe Check with an antivirus scanner        Safe.
    Safe.        running process. (ashMaiSv.exe)

    Visitor's assessment: 5 (Very safe)        
       C:\Program Files\Alwil Software\Avast4\ashWebSv.exe Check with an antivirus scanner        AV-Scanner
    Safe.        This entry was classified from our visitors as good.
    Visitor's assessment: 3.86 (Safe)        Click on the stars and look at the comments from our visitors, to see, why the entry was classified in such a way.
       C:\HJT\HijackThis.exe Check with an antivirus scanner        Safe.
    Safe.        running process. (HijackThis.exe)
    Tool, mit dem sie dieses Logfile erzeugt haben. C:\Programme\HijackThis\HijackThis.exe
    Currently there is no visitor's assessment!        Remember that Hijackthis must be run in an own folder. Only if Hijackthis run in an own folder it will create backups!
       R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://laajakaista.elisa.net/        Safe.
    Safe.        This page has been identified as safe.
    Currently there is no visitor's assessment!        
       R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =        Safe.
    Safe.        
    Visitor's assessment: 3.5 (Safe)        
       R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost        Safe.
    Safe.        This page has been identified as safe.
    Currently there is no visitor's assessment!        
       R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit        Safe.
    Safe.        This page has been identified as safe.
    Currently there is no visitor's assessment!        
       O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll        Safe.
    Safe.        Entries found in this registry zone are potentially nasty. This application ([02478D38-C3F9-4efb-9B51-7695ECA05670] - Result: 02478D38-C3F9-4efb-9B51-7695ECA05670) has been checked. Hit rate: 99 %
    Currently there is no visitor's assessment!        
       O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll        Safe.
    Safe.        This entry was classified from our visitors as good.
    Visitor's assessment: 3.67 (Safe)        Click on the stars and look at the comments from our visitors, to see, why the entry was classified in such a way.
       O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll        Safe.
    Safe.        This entry was classified from our visitors as good.
    Visitor's assessment: 3.83 (Safe)        Click on the stars and look at the comments from our visitors, to see, why the entry was classified in such a way.
       O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll        Safe.
    Safe.        Entries found in this registry zone are potentially nasty. This application ([EF99BD32-C1FB-11D2-892F-0090271D4F88] - Result: EF99BD32-C1FB-11D2-892F-0090271D4F88) has been checked. If the name is made up of random letters, found in the folder 'Application Data' and the kind is 'Unknown' , it should be fixed. Hit rate: 99 %
    Currently there is no visitor's assessment!        
       O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe        Safe.
    Safe.        Part of Avast! anti-virus software
    Hit rate: 99 % (result)
    Visitor's assessment: 3 (Safe.)        
       O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe        Safe.
    Safe.        This entry was classified from our visitors as good.
    Visitor's assessment: 4.6 (Very safe)        Click on the stars and look at the comments from our visitors, to see, why the entry was classified in such a way.
       O4 - HKCU\..\Run: [EPSON Stylus COLOR 480] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_AICN03.EXE /P22 "EPSON Stylus COLOR 480" /O5 "LPT1:" /M "Stylus COLOR 480"        Unknown
    Unknown        
    Hit rate: 2 % (result)
    Currently there is no visitor's assessment!        Unknown application.
       O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background        Safe.
    Safe.        Microsoft s MSN Messenger 6
    Hit rate: 71 % (result)
    Visitor's assessment: 4 (Safe)        
       O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized        Safe.
    Safe.        "Skype is free and simple software that will enable you to make free calls anywhere in the world in minutes"
    Hit rate: 99 % (result)
    Currently there is no visitor's assessment!        Not dangerous, but unnecessary.
       O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe        Safe.
    Safe.        CTFMon is involved with the language/alternative input services in Office XP. CTFMON.exe will continue to put itself back into MSConfig when you run the Office XP apps as long as the Text Services and Speech applets in the Control Panel are enabled. Not required if you don\'t need these features. For more info on ctfmon see here. CTFMON can be disabled from Control Panel, Text & Speech Services
    Hit rate: 54 % (result)
    Visitor's assessment: 5 (Very safe)        
       O4 - Startup: Webshots.lnk = C:\Program Files\Webshots\Launcher.exe        Unknown
    Unknown        
    Hit rate: 11 % (result)
    Visitor's assessment: 3.33 (Safe)        Unknown application.
       O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE        Safe.
    Safe.        
    Hit rate: 67 % (result)
    Currently there is no visitor's assessment!        
       O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000        Possibly nasty
    Possibly nasty        Entries shown in the menu that pops up when right-clicking into the Internet Explorer. Unknown entries should be fixed.
    Currently there is no visitor's assessment!        To be fixed if the entry 'Vie Microsoft E&xceliin ' is unknown.
       O9 - Extra button: Oheistiedot - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL        Safe.
    Safe.        The entry Oheistiedot has been identified as safe.
    Currently there is no visitor's assessment!        If the entry 'Oheistiedot ' is not needed anymore, it should be fixed.
       O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab        Safe.
    Safe.        This entry has been identified as safe.
    Visitor's assessment: 3 (Safe.)        
       O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab        Safe.
    Safe.        This entry has been identified as safe.
    Currently there is no visitor's assessment!        
       O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab        Safe.
    Safe.        This entry has been identified as safe.
    Currently there is no visitor's assessment!        
       O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab        Safe.
    Safe.        This entry has been identified as safe.
    Currently there is no visitor's assessment!        
       O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)        Safe.
    Safe.        This entry was classified from our visitors as good.
    Visitor's assessment: 2.38 (Safe.)        Click on the stars and look at the comments from our visitors, to see, why the entry was classified in such a way.
       O20 - AppInit_DLLs: MsgPlusLoader.dll        Safe.
    Safe.        This entry was classified from our visitors as good.
    Visitor's assessment: 3.8 (Safe)        Click on the stars and look at the comments from our visitors, to see, why the entry was classified in such a way.
       O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll        Safe.
    Safe.        This entry was classified from our visitors as good.
    Visitor's assessment: 4.8 (Very safe)        Click on the stars and look at the comments from our visitors, to see, why the entry was classified in such a way.
       O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe        Safe.
    Safe.        These entries shows all services which are not from Microsoft. Often malware is starting as a systemservice and it's not easy to detect it.
    Visitor's assessment: 5 (Very safe)        This service (aswUpdSv.exe) was identified as a good one.
       O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe        AV-Scanner
    Safe.        These entries shows all services which are not from Microsoft. Often malware is starting as a systemservice and it's not easy to detect it.
    Visitor's assessment: 5 (Very safe)        This service (ashServ.exe) was identified as a good one.
       O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)        Safe.
    Safe.        This entry was classified from our visitors as good.
    Visitor's assessment: 4.4 (Very safe)        Click on the stars and look at the comments from our visitors, to see, why the entry was classified in such a way.
       O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)        Safe.
    Safe.        This entry was classified from our visitors as good.
    Visitor's assessment: 4.8 (Very safe)        Click on the stars and look at the comments from our visitors, to see, why the entry was classified in such a way.
       O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe        Safe.
    Safe.        This entry was classified from our visitors as good.
    Visitor's assessment: 4.13 (Very safe)        Click on the stars and look at the comments from our visitors, to see, why the entry was classified in such a way.
       O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe        Firewall
    Safe.        This entry was classified from our visitors as good.
    Visitor's assessment: 4.43 (Very safe)        Click on the stars and look at the comments from our visitors, to see, why the entry was classified in such a way.
       
    4337
    Äänestä

    Muut lukivat myös

    Vastaukset 4

    Vanhimmat

    Saisiko tuon lokin ensin hieman luettavammassa muodossa, kiitos :) Eli siis siinä muodossa kun se tulee suoraan hijackthisistä.

    Äänestä

    • Logfile of HijackThis v1.99.1
      Scan saved at 3:28:06, on 28.10.2005
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      C:\Program Files\Alwil Software\Avast4\ashServ.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\ZoneLabs\vsmon.exe
      C:\WINDOWS\Explorer.EXE
      C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
      C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_AICN03.EXE
      C:\Program Files\MSN Messenger\msnmsgr.exe
      C:\Program Files\Skype\Phone\Skype.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\PROGRA~1\Webshots\webshots.scr
      C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      C:\HJT\HijackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://laajakaista.elisa.net/
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll
      O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
      O4 - HKCU\..\Run: [EPSON Stylus COLOR 480] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_AICN03.EXE /P22 "EPSON Stylus COLOR 480" /O5 "LPT1:" /M "Stylus COLOR 480"
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
      O4 - Startup: Webshots.lnk = C:\Program Files\Webshots\Launcher.exe
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
      O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
      O9 - Extra button: Oheistiedot - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
      O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
      O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
      O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
      O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
      O20 - AppInit_DLLs: MsgPlusLoader.dll
      O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
      O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
      O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
      O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

      Äänestä

    • Poistetaanko kirjoitti:

      Logfile of HijackThis v1.99.1
      Scan saved at 3:28:06, on 28.10.2005
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      C:\Program Files\Alwil Software\Avast4\ashServ.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\ZoneLabs\vsmon.exe
      C:\WINDOWS\Explorer.EXE
      C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
      C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_AICN03.EXE
      C:\Program Files\MSN Messenger\msnmsgr.exe
      C:\Program Files\Skype\Phone\Skype.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\PROGRA~1\Webshots\webshots.scr
      C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      C:\HJT\HijackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://laajakaista.elisa.net/
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll
      O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
      O4 - HKCU\..\Run: [EPSON Stylus COLOR 480] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_AICN03.EXE /P22 "EPSON Stylus COLOR 480" /O5 "LPT1:" /M "Stylus COLOR 480"
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
      O4 - Startup: Webshots.lnk = C:\Program Files\Webshots\Launcher.exe
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
      O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
      O9 - Extra button: Oheistiedot - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
      O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
      O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
      O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
      O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
      O20 - AppInit_DLLs: MsgPlusLoader.dll
      O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
      O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
      O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
      O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

      Ei tuossa mitään vikaa ole, HjT- nettianalysaattorien tuloksiin ei koskaan kannata luottaa 100% :)

      Äänestä

    • Fixaaja kirjoitti:

      Ei tuossa mitään vikaa ole, HjT- nettianalysaattorien tuloksiin ei koskaan kannata luottaa 100% :)

      ei näyttä toimivan. :)

      Äänestä

    Odottaa vastausta

    Näihin keskusteluihin ei ole vielä vastattu. Ole ensimmäinen.

    Luetuimmat keskustelut

    Kommentoi aloitusta

    poistetaanko kirjoitti:

       Logfile of HijackThis v1.99.1        Safe.
    Safe.        Shows the version of HijackThis an. The newest version is: v1.99.1!
           This should be the newest version. (v1.99.1)
       Platform: Windows XP SP2 (WinNT 5.01.2600)               
           
       MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)        Safe.
    Safe.        Shows the version of your Internet Explorer. Newest Version is: 6.00.2900.2180!
           This should be the newest version. (6.00.2900.2180)
       C:\WINDOWS\System32\smss.exe Check with an antivirus scanner        Safe.
    Safe.        This entry was classified from our visitors as good.
    Visitor's assessment: 4.08 (Very safe)        Click on the stars and look at the comments from our visitors, to see, why the entry was classified in such a way.
       C:\WINDOWS\system32\winlogon.exe Check with an antivirus scanner        Safe.
    Safe.        This entry was classified from our visitors as good.
    Visitor's assessment: 4.44 (Very safe)        Click on the stars and look at the comments from our visitors, to see, why the entry was classified in such a way.
       C:\WINDOWS\system32\services.exe Check with an antivirus scanner        Safe.
    Safe.        running process. (services.exe)
    Systemprozess - Verwaltet die Systemdienste.
    Visitor's assessment: 5 (Very safe)        
       C:\WINDOWS\system32\lsass.exe Check with an antivirus scanner        Safe.
    Safe.        running process. (lsass.exe)
    Systemprozess
    Visitor's assessment: 5 (Very safe)        
       C:\WINDOWS\system32\svchost.exe Check with an antivirus scanner        Safe.
    Safe.        running process. (svchost.exe)
    Systemprozess - Allgemeiner Hostprozessname für Dienste.
    Visitor's assessment: 4.5 (Very safe)        
       C:\WINDOWS\System32\svchost.exe Check with an antivirus scanner        Safe.
    Safe.        running process. (svchost.exe)
    Systemprozess - Allgemeiner Hostprozessname für Dienste.
    Visitor's assessment: 5 (Very safe)        
       C:\WINDOWS\system32\spoolsv.exe Check with an antivirus scanner        Safe.
    Safe.        This entry was classified from our visitors as good.
    Visitor's assessment: 3.9 (Safe)        Click on the stars and look at the comments from our visitors, to see, why the entry was classified in such a way.
       C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe Check with an antivirus scanner        Safe.
    Safe.        running process. (aswUpdSv.exe)

    Visitor's assessment: 5 (Very safe)        
       C:\Program Files\Alwil Software\Avast4\ashServ.exe Check with an antivirus scanner        AV-Scanner
    Safe.        running process. (ashServ.exe)
    Avast Antivirus-Scanner
    Visitor's assessment: 5 (Very safe)        
       C:\WINDOWS\System32\svchost.exe Check with an antivirus scanner        Safe.
    Safe.        running process. (svchost.exe)
    Systemprozess - Allgemeiner Hostprozessname für Dienste.
    Visitor's assessment: 5 (Very safe)        
       C:\WINDOWS\system32\ZoneLabs\vsmon.exe Check with an antivirus scanner        Firewall
    Safe.        This entry was classified from our visitors as good.
    Visitor's assessment: 4.5 (Very safe)        Click on the stars and look at the comments from our visitors, to see, why the entry was classified in such a way.
       C:\WINDOWS\Explorer.EXE Check with an antivirus scanner        Safe.
    Safe.        This entry was classified from our visitors as good.
    Visitor's assessment: 3.88 (Safe)        Click on the stars and look at the comments from our visitors, to see, why the entry was classified in such a way.
       C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe Check with an antivirus scanner        Safe.
    Safe.        This entry was classified from our visitors as good.
    Visitor's assessment: 4.43 (Very safe)        Click on the stars and look at the comments from our visitors, to see, why the entry was classified in such a way.
       C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe Check with an antivirus scanner        Safe.
    Safe.        running process. (zlclient.exe)
    Zone Alarm
    Visitor's assessment: 4.33 (Very safe)        
       C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_AICN03.EXE Check with an antivirus scanner        Unknown
    Unknown        running process. (E_AICN03.EXE)

    Currently there is no visitor's assessment!        This is a unknown process.
       C:\Program Files\MSN Messenger\msnmsgr.exe Check with an antivirus scanner        Safe.
    Safe.        running process. (msnmsgr.exe)
    MSN Messenger
    Visitor's assessment: 4.75 (Very safe)        
       C:\Program Files\Skype\Phone\Skype.exe Check with an antivirus scanner        Safe.
    Safe.        running process. (Skype.exe)

    Visitor's assessment: 4.33 (Very safe)        
       C:\WINDOWS\system32\ctfmon.exe Check with an antivirus scanner        Safe.
    Safe.        running process. (ctfmon.exe)

    Visitor's assessment: 5 (Very safe)        
       C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe Check with an antivirus scanner        Safe.
    Safe.        running process. (ashMaiSv.exe)

    Visitor's assessment: 5 (Very safe)        
       C:\Program Files\Alwil Software\Avast4\ashWebSv.exe Check with an antivirus scanner        AV-Scanner
    Safe.        This entry was classified from our visitors as good.
    Visitor's assessment: 3.86 (Safe)        Click on the stars and look at the comments from our visitors, to see, why the entry was classified in such a way.
       C:\HJT\HijackThis.exe Check with an antivirus scanner        Safe.
    Safe.        running process. (HijackThis.exe)
    Tool, mit dem sie dieses Logfile erzeugt haben. C:\Programme\HijackThis\HijackThis.exe
    Currently there is no visitor's assessment!        Remember that Hijackthis must be run in an own folder. Only if Hijackthis run in an own folder it will create backups!
       R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://laajakaista.elisa.net/        Safe.
    Safe.        This page has been identified as safe.
    Currently there is no visitor's assessment!        
       R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =        Safe.
    Safe.        
    Visitor's assessment: 3.5 (Safe)        
       R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost        Safe.
    Safe.        This page has been identified as safe.
    Currently there is no visitor's assessment!        
       R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit        Safe.
    Safe.        This page has been identified as safe.
    Currently there is no visitor's assessment!        
       O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll        Safe.
    Safe.        Entries found in this registry zone are potentially nasty. This application ([02478D38-C3F9-4efb-9B51-7695ECA05670] - Result: 02478D38-C3F9-4efb-9B51-7695ECA05670) has been checked. Hit rate: 99 %
    Currently there is no visitor's assessment!        
       O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll        Safe.
    Safe.        This entry was classified from our visitors as good.
    Visitor's assessment: 3.67 (Safe)        Click on the stars and look at the comments from our visitors, to see, why the entry was classified in such a way.
       O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll        Safe.
    Safe.        This entry was classified from our visitors as good.
    Visitor's assessment: 3.83 (Safe)        Click on the stars and look at the comments from our visitors, to see, why the entry was classified in such a way.
       O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll        Safe.
    Safe.        Entries found in this registry zone are potentially nasty. This application ([EF99BD32-C1FB-11D2-892F-0090271D4F88] - Result: EF99BD32-C1FB-11D2-892F-0090271D4F88) has been checked. If the name is made up of random letters, found in the folder 'Application Data' and the kind is 'Unknown' , it should be fixed. Hit rate: 99 %
    Currently there is no visitor's assessment!        
       O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe        Safe.
    Safe.        Part of Avast! anti-virus software
    Hit rate: 99 % (result)
    Visitor's assessment: 3 (Safe.)        
       O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe        Safe.
    Safe.        This entry was classified from our visitors as good.
    Visitor's assessment: 4.6 (Very safe)        Click on the stars and look at the comments from our visitors, to see, why the entry was classified in such a way.
       O4 - HKCU\..\Run: [EPSON Stylus COLOR 480] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_AICN03.EXE /P22 "EPSON Stylus COLOR 480" /O5 "LPT1:" /M "Stylus COLOR 480"        Unknown
    Unknown        
    Hit rate: 2 % (result)
    Currently there is no visitor's assessment!        Unknown application.
       O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background        Safe.
    Safe.        Microsoft s MSN Messenger 6
    Hit rate: 71 % (result)
    Visitor's assessment: 4 (Safe)        
       O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized        Safe.
    Safe.        "Skype is free and simple software that will enable you to make free calls anywhere in the world in minutes"
    Hit rate: 99 % (result)
    Currently there is no visitor's assessment!        Not dangerous, but unnecessary.
       O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe        Safe.
    Safe.        CTFMon is involved with the language/alternative input services in Office XP. CTFMON.exe will continue to put itself back into MSConfig when you run the Office XP apps as long as the Text Services and Speech applets in the Control Panel are enabled. Not required if you don\'t need these features. For more info on ctfmon see here. CTFMON can be disabled from Control Panel, Text & Speech Services
    Hit rate: 54 % (result)
    Visitor's assessment: 5 (Very safe)        
       O4 - Startup: Webshots.lnk = C:\Program Files\Webshots\Launcher.exe        Unknown
    Unknown        
    Hit rate: 11 % (result)
    Visitor's assessment: 3.33 (Safe)        Unknown application.
       O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE        Safe.
    Safe.        
    Hit rate: 67 % (result)
    Currently there is no visitor's assessment!        
       O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000        Possibly nasty
    Possibly nasty        Entries shown in the menu that pops up when right-clicking into the Internet Explorer. Unknown entries should be fixed.
    Currently there is no visitor's assessment!        To be fixed if the entry 'Vie Microsoft E&xceliin ' is unknown.
       O9 - Extra button: Oheistiedot - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL        Safe.
    Safe.        The entry Oheistiedot has been identified as safe.
    Currently there is no visitor's assessment!        If the entry 'Oheistiedot ' is not needed anymore, it should be fixed.
       O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab        Safe.
    Safe.        This entry has been identified as safe.
    Visitor's assessment: 3 (Safe.)        
       O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab        Safe.
    Safe.        This entry has been identified as safe.
    Currently there is no visitor's assessment!        
       O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab        Safe.
    Safe.        This entry has been identified as safe.
    Currently there is no visitor's assessment!        
       O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab        Safe.
    Safe.        This entry has been identified as safe.
    Currently there is no visitor's assessment!        
       O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)        Safe.
    Safe.        This entry was classified from our visitors as good.
    Visitor's assessment: 2.38 (Safe.)        Click on the stars and look at the comments from our visitors, to see, why the entry was classified in such a way.
       O20 - AppInit_DLLs: MsgPlusLoader.dll        Safe.
    Safe.        This entry was classified from our visitors as good.
    Visitor's assessment: 3.8 (Safe)        Click on the stars and look at the comments from our visitors, to see, why the entry was classified in such a way.
       O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll        Safe.
    Safe.        This entry was classified from our visitors as good.
    Visitor's assessment: 4.8 (Very safe)        Click on the stars and look at the comments from our visitors, to see, why the entry was classified in such a way.
       O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe        Safe.
    Safe.        These entries shows all services which are not from Microsoft. Often malware is starting as a systemservice and it's not easy to detect it.
    Visitor's assessment: 5 (Very safe)        This service (aswUpdSv.exe) was identified as a good one.
       O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe        AV-Scanner
    Safe.        These entries shows all services which are not from Microsoft. Often malware is starting as a systemservice and it's not easy to detect it.
    Visitor's assessment: 5 (Very safe)        This service (ashServ.exe) was identified as a good one.
       O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)        Safe.
    Safe.        This entry was classified from our visitors as good.
    Visitor's assessment: 4.4 (Very safe)        Click on the stars and look at the comments from our visitors, to see, why the entry was classified in such a way.
       O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)        Safe.
    Safe.        This entry was classified from our visitors as good.
    Visitor's assessment: 4.8 (Very safe)        Click on the stars and look at the comments from our visitors, to see, why the entry was classified in such a way.
       O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe        Safe.
    Safe.        This entry was classified from our visitors as good.
    Visitor's assessment: 4.13 (Very safe)        Click on the stars and look at the comments from our visitors, to see, why the entry was classified in such a way.
       O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe        Firewall
    Safe.        This entry was classified from our visitors as good.
    Visitor's assessment: 4.43 (Very safe)        Click on the stars and look at the comments from our visitors, to see, why the entry was classified in such a way.
       

    Anonyymi
    5000

    Ilmoita asiaton sisältö

    • Sisältää materiaalia, joka on loukkaavaa, herjaavaa, rasistista, uhkailevaa tai ahdistelevaa.

    • Materiaali sisältää nimiä, yhteystietoja tai muita henkilökohtaisia tietoja. Julkisuuden henkilöistä, julkisissa viroissa toimivista ihmisistä sekä yritysten vastuuhenkilöistä saa keskustella työhön liittyen. Myös yksityiselämään liittyvistä asioista voi keskustella siltä osin, kuin niistä on julkisesti kerrottu.

    • Sisältää lapsille haitallista tai heiltä kiellettyä materiaalia. Seksuaalinen sisältö on sallittua aiheeseen tarkoitetuilla palstoilla, joiden ikäraja on 18 vuotta.

    • Lainvastaista sisältöä voi olla mm. yksityiselämää loukkaavan tiedon levitys, kiihottaminen kansanryhmää vastaan, laiton uhkaaminen, alaikäisiin liittyvä seksuaalinen sisältö/grooming, petokset, identiteettivarkaudet, kunnianloukkaukset ja tekijänoikeusrikkomukset.

    • Sisältö ei liity palstan tai keskusteluketjun aiheeseen.

    • Viesti ei ole suomea tai ruotsia (pl. International Forums), se sisältää mainontaa, se sisältää tekijänoikeuksin suojattua materiaalia, se on massapostitus tai jokin muu syy.

    Jaa keskustelu