Yht´äkkiä ilmesty ongelmia..Kone meni hitaaksi. Suoritinkäyttö melkein kokoajan 100%. Troijalaisia ollut ja tuhottu. Sit tuli jotain selaimen kaappausyrityksiä ym. Aurora myöskin vaivannu. Nyt sit tod. hidas.
Logfile of HijackThis v1.99.1
Scan saved at 23:23:22, on 24.11.2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\ELISAT~1\backweb\4119343\Program\SERVIC~1.EXE
C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fsgk32st.exe
C:\Program Files\Elisa Tietoturvapalvelu\backweb\4119343\program\fsbwsys.exe
C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\FSGK32.EXE
C:\Program Files\Elisa Tietoturvapalvelu\Common\FSMA32.EXE
C:\WINDOWS\system32\HPConfig.exe
C:\Program Files\Elisa Tietoturvapalvelu\Common\FSMB32.EXE
C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fssm32.exe
C:\Program Files\HPQ\Notebook Utilities\HPWirelessMgr.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Elisa Tietoturvapalvelu\backweb\4119343\Program\fspex.exe
C:\Program Files\Elisa Tietoturvapalvelu\Common\FCH32.EXE
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\HPQ\One-Touch\OneTouch.EXE
C:\Program Files\Elisa Tietoturvapalvelu\Common\FSM32.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Elisa Tietoturvapalvelu\FSGUI\ispnews.exe
C:\Program Files\Winamp\winampa.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Elisa Tietoturvapalvelu\Common\FAMEH32.EXE
C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fsrw.exe
C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fsav32.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Elisa Tietoturvapalvelu\FWES\Program\fsdfwd.exe
C:\PROGRA~1\ELISAT~1\ANTI-S~1\fsaw.exe
C:\Program Files\Elisa Tietoturvapalvelu\FSGUI\fsguidll.exe
C:\Documents and Settings\Janne\Työpöytä\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.idklckfvindjzwkwwze.com/nsJnYVcie4NCrLV21zsufCM7xQv_TFU4kZHdTdPqTmw.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll
O2 - BHO: AuroraHandlerObj Class - {4AA870AC-8427-42a4-B92E-ECD956197489} - C:\WINDOWS\AuroraHandler.dll (file missing)
O2 - BHO: wb - {55BE9F0D-6CAF-4c3e-B125-5A13A8C9D0EC} - C:\WINDOWS\system32\nsk2B.dll (file missing)
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: IRiras Class - {95C60327-8E17-44D6-98EB-7EB70CC606DD} - C:\WINDOWS\system32\irasqgou.dll (file missing)
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fi\msntb.dll
O2 - BHO: (no name) - {E6EFE250-1124-C460-745C-29DE521F4810} - C:\DOCUME~1\Janne\APPLIC~1\01spam\Thatprogram.exe (file missing)
O2 - BHO: RichEditor Class - {F79A2C4B-8776-4ED7-8B2F-4786A4A3500A} - C:\WINDOWS\system32\richedtr.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fi\msntb.dll
O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [TV Now] C:\Program Files\HPQ\Notebook Utilities\TvNow.exe /RK
O4 - HKLM\..\Run: [Display Settings] C:\Program Files\HPQ\Notebook Utilities\hptasks.exe /s
O4 - HKLM\..\Run: [QT4HPOT] C:\Program Files\HPQ\One-Touch\OneTouch.EXE
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Elisa Tietoturvapalvelu\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Elisa Tietoturvapalvelu\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\Elisa Tietoturvapalvelu\FSGUI\FSSW.EXE" /reboot
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Lexmark Fax Solutions\fm3032.exe" /s
O4 - HKLM\..\Run: [richup] C:\WINDOWS\system32\richup.exe
O4 - HKLM\..\Run: [News Service] "C:\Program Files\Elisa Tietoturvapalvelu\FSGUI\ispnews.exe"
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Global Startup: Elisa Tietoturvapalvelu.lnk = C:\Program Files\Elisa Tietoturvapalvelu\backweb\4119343\Program\fspex.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &Estä tämä kohoikkuna - C:\Program Files\Elisa Tietoturvapalvelu\Anti-Spyware\blockpopups.htm
O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZNfox000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2\bin\npjpi142.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2\bin\npjpi142.dll
O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Elisa Tietoturvapalvelu\Anti-Spyware\ieshield.dll
O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Elisa Tietoturvapalvelu\Anti-Spyware\ieshield.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1113313901726
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab31267.cab
O23 - Service: Elisa Tietoturvapalvelu (BackWeb Plug-in - 4119343) - BackWeb Technologies Inc. - C:\PROGRA~1\ELISAT~1\backweb\4119343\Program\SERVIC~1.EXE
O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fsgk32st.exe
O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\Elisa Tietoturvapalvelu\backweb\4119343\program\fsbwsys.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Elisa Tietoturvapalvelu\FWES\Program\fsdfwd.exe
O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\Elisa Tietoturvapalvelu\Common\FSMA32.EXE
O23 - Service: HP Configuration Interface Service (HPConfig) - Hewlett-Packard - C:\WINDOWS\system32\HPConfig.exe
O23 - Service: HPWirelessMgr - Hewlett-Packard Co. - C:\Program Files\HPQ\Notebook Utilities\HPWirelessMgr.exe
O23 - Service: LXBTCustomerConnect - Unknown owner - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXBTserv.exe (file missing)
O23 - Service: System Startup Service (SvcProc) - Unknown owner - C:\WINDOWS\svcproc.exe (file missing)
Logfile of HijackThis v1.99.1
Scan saved at 23:23:22, on 24.11.2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\ELISAT~1\backweb\4119343\Program\SERVIC~1.EXE
C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fsgk32st.exe
C:\Program Files\Elisa Tietoturvapalvelu\backweb\4119343\program\fsbwsys.exe
C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\FSGK32.EXE
C:\Program Files\Elisa Tietoturvapalvelu\Common\FSMA32.EXE
C:\WINDOWS\system32\HPConfig.exe
C:\Program Files\Elisa Tietoturvapalvelu\Common\FSMB32.EXE
C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fssm32.exe
C:\Program Files\HPQ\Notebook Utilities\HPWirelessMgr.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Elisa Tietoturvapalvelu\backweb\4119343\Program\fspex.exe
C:\Program Files\Elisa Tietoturvapalvelu\Common\FCH32.EXE
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\HPQ\One-Touch\OneTouch.EXE
C:\Program Files\Elisa Tietoturvapalvelu\Common\FSM32.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Elisa Tietoturvapalvelu\FSGUI\ispnews.exe
C:\Program Files\Winamp\winampa.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Elisa Tietoturvapalvelu\Common\FAMEH32.EXE
C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fsrw.exe
C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fsav32.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Elisa Tietoturvapalvelu\FWES\Program\fsdfwd.exe
C:\PROGRA~1\ELISAT~1\ANTI-S~1\fsaw.exe
C:\Program Files\Elisa Tietoturvapalvelu\FSGUI\fsguidll.exe
C:\Documents and Settings\Janne\Työpöytä\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.idklckfvindjzwkwwze.com/nsJnYVcie4NCrLV21zsufCM7xQv_TFU4kZHdTdPqTmw.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll
O2 - BHO: AuroraHandlerObj Class - {4AA870AC-8427-42a4-B92E-ECD956197489} - C:\WINDOWS\AuroraHandler.dll (file missing)
O2 - BHO: wb - {55BE9F0D-6CAF-4c3e-B125-5A13A8C9D0EC} - C:\WINDOWS\system32\nsk2B.dll (file missing)
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: IRiras Class - {95C60327-8E17-44D6-98EB-7EB70CC606DD} - C:\WINDOWS\system32\irasqgou.dll (file missing)
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fi\msntb.dll
O2 - BHO: (no name) - {E6EFE250-1124-C460-745C-29DE521F4810} - C:\DOCUME~1\Janne\APPLIC~1\01spam\Thatprogram.exe (file missing)
O2 - BHO: RichEditor Class - {F79A2C4B-8776-4ED7-8B2F-4786A4A3500A} - C:\WINDOWS\system32\richedtr.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fi\msntb.dll
O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [TV Now] C:\Program Files\HPQ\Notebook Utilities\TvNow.exe /RK
O4 - HKLM\..\Run: [Display Settings] C:\Program Files\HPQ\Notebook Utilities\hptasks.exe /s
O4 - HKLM\..\Run: [QT4HPOT] C:\Program Files\HPQ\One-Touch\OneTouch.EXE
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Elisa Tietoturvapalvelu\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Elisa Tietoturvapalvelu\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\Elisa Tietoturvapalvelu\FSGUI\FSSW.EXE" /reboot
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Lexmark Fax Solutions\fm3032.exe" /s
O4 - HKLM\..\Run: [richup] C:\WINDOWS\system32\richup.exe
O4 - HKLM\..\Run: [News Service] "C:\Program Files\Elisa Tietoturvapalvelu\FSGUI\ispnews.exe"
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Global Startup: Elisa Tietoturvapalvelu.lnk = C:\Program Files\Elisa Tietoturvapalvelu\backweb\4119343\Program\fspex.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &Estä tämä kohoikkuna - C:\Program Files\Elisa Tietoturvapalvelu\Anti-Spyware\blockpopups.htm
O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZNfox000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2\bin\npjpi142.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2\bin\npjpi142.dll
O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Elisa Tietoturvapalvelu\Anti-Spyware\ieshield.dll
O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Elisa Tietoturvapalvelu\Anti-Spyware\ieshield.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1113313901726
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab31267.cab
O23 - Service: Elisa Tietoturvapalvelu (BackWeb Plug-in - 4119343) - BackWeb Technologies Inc. - C:\PROGRA~1\ELISAT~1\backweb\4119343\Program\SERVIC~1.EXE
O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fsgk32st.exe
O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\Elisa Tietoturvapalvelu\backweb\4119343\program\fsbwsys.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Elisa Tietoturvapalvelu\FWES\Program\fsdfwd.exe
O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\Elisa Tietoturvapalvelu\Common\FSMA32.EXE
O23 - Service: HP Configuration Interface Service (HPConfig) - Hewlett-Packard - C:\WINDOWS\system32\HPConfig.exe
O23 - Service: HPWirelessMgr - Hewlett-Packard Co. - C:\Program Files\HPQ\Notebook Utilities\HPWirelessMgr.exe
O23 - Service: LXBTCustomerConnect - Unknown owner - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXBTserv.exe (file missing)
O23 - Service: System Startup Service (SvcProc) - Unknown owner - C:\WINDOWS\svcproc.exe (file missing)
Vastaukset 12
Vanhimmat
Siirrä HjT omaan kansioonsa -> C:\hjt\HijackThis.exe
Fixaa HjT:llä (do a system scan only, merkkaa ja paina fix checked):
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.idklckfvindjzwkwwze.com/nsJnYVcie4NCrLV21zsufCM7xQv_TFU4kZHdTdPqTmw.html
O2 - BHO: AuroraHandlerObj Class - {4AA870AC-8427-42a4-B92E-ECD956197489} - C:\WINDOWS\AuroraHandler.dll (file missing)
O2 - BHO: wb - {55BE9F0D-6CAF-4c3e-B125-5A13A8C9D0EC} - C:\WINDOWS\system32\nsk2B.dll (file missing)
O2 - BHO: IRiras Class - {95C60327-8E17-44D6-98EB-7EB70CC606DD} - C:\WINDOWS\system32\irasqgou.dll (file missing)
O2 - BHO: (no name) - {E6EFE250-1124-C460-745C-29DE521F4810} - C:\DOCUME~1\Janne\APPLIC~1\01spam\Thatprogram.exe (file missing)
O2 - BHO: RichEditor Class - {F79A2C4B-8776-4ED7-8B2F-4786A4A3500A} - C:\WINDOWS\system32\richedtr.dll
O4 - HKLM\..\Run: [richup] C:\WINDOWS\system32\richup.exe
O23 - Service: System Startup Service (SvcProc) - Unknown owner - C:\WINDOWS\svcproc.exe (file missing)
Sitten suorita -> services.msc. Etsi listalta
System Startup Service, tuplaklikkaa, paina seis ja valitse käynnistymistavaksi "ei käytössä"
Laita piilotiedostot näkyviin, ohje -> http://keskustelu.afterdawn.com/thread_view.cfm/248944
Käynnistä vikasietotilaan (F8 käynnistyksen yhteydessä) ja poista:
C:\WINDOWS\==>AuroraHandler.dllnsk2B.dllirasqgou.dllrichedtr.dllrichup.exesvcproc.exe http://www.ewido.net/en/download
Asenna, päivitä, skannaa, anna poistaa, mitä löytää,tallenna raportti. Lähetä ewidon raportti ja uusi HjT-loki.
Poistetaan? Menen vikasietotilaan, mutta miten pystyn tai minne menen poistamaan
C:\WINDOWS\==>AuroraHandler.dllnsk2B.dllirasqgou.dllrichedtr.dllrichup.exesvcproc.exe
Poista ne siellä vikasietotilassa vaikka Resurssienhallinnan kautta(käynnistä -> apuohjelmat -> resurssienhallinta). Noita kaikkia ei välttämättä ole.
Logfile of HijackThis v1.99.1
Scan saved at 12:44:04, on 25.11.2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\ELISAT~1\backweb\4119343\Program\SERVIC~1.EXE
C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fsgk32st.exe
C:\Program Files\Elisa Tietoturvapalvelu\backweb\4119343\program\fsbwsys.exe
C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\FSGK32.EXE
C:\Program Files\Elisa Tietoturvapalvelu\Common\FSMA32.EXE
C:\WINDOWS\system32\HPConfig.exe
C:\Program Files\Elisa Tietoturvapalvelu\Common\FSMB32.EXE
C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fssm32.exe
C:\Program Files\HPQ\Notebook Utilities\HPWirelessMgr.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Elisa Tietoturvapalvelu\Common\FCH32.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Elisa Tietoturvapalvelu\Common\FAMEH32.EXE
C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fsrw.exe
C:\Program Files\Elisa Tietoturvapalvelu\FWES\Program\fsdfwd.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fsav32.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\HPQ\One-Touch\OneTouch.EXE
C:\Program Files\Elisa Tietoturvapalvelu\Common\FSM32.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\PROGRA~1\ELISAT~1\ANTI-S~1\fsaw.exe
C:\Program Files\Elisa Tietoturvapalvelu\FSGUI\ispnews.exe
C:\Program Files\Winamp\winampa.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Elisa Tietoturvapalvelu\backweb\4119343\Program\fspex.exe
C:\Program Files\Elisa Tietoturvapalvelu\FSGUI\fsguidll.exe
C:\Program Files\ewido\security suite\ewidoguard.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\HJT\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.idklckfvindjzwkwwze.com/nsJnYVcie4NCrLV21zsufCM7xQv_TFU4kZHdTdPqTmw.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fi\msntb.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fi\msntb.dll
O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [TV Now] C:\Program Files\HPQ\Notebook Utilities\TvNow.exe /RK
O4 - HKLM\..\Run: [Display Settings] C:\Program Files\HPQ\Notebook Utilities\hptasks.exe /s
O4 - HKLM\..\Run: [QT4HPOT] C:\Program Files\HPQ\One-Touch\OneTouch.EXE
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Elisa Tietoturvapalvelu\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Elisa Tietoturvapalvelu\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\Elisa Tietoturvapalvelu\FSGUI\FSSW.EXE" /reboot
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Lexmark Fax Solutions\fm3032.exe" /s
O4 - HKLM\..\Run: [News Service] "C:\Program Files\Elisa Tietoturvapalvelu\FSGUI\ispnews.exe"
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [richup] C:\WINDOWS\system32\richup.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Global Startup: Elisa Tietoturvapalvelu.lnk = C:\Program Files\Elisa Tietoturvapalvelu\backweb\4119343\Program\fspex.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &Estä tämä kohoikkuna - C:\Program Files\Elisa Tietoturvapalvelu\Anti-Spyware\blockpopups.htm
O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZNfox000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2\bin\npjpi142.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2\bin\npjpi142.dll
O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Elisa Tietoturvapalvelu\Anti-Spyware\ieshield.dll
O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Elisa Tietoturvapalvelu\Anti-Spyware\ieshield.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1113313901726
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab31267.cab
O23 - Service: Elisa Tietoturvapalvelu (BackWeb Plug-in - 4119343) - BackWeb Technologies Inc. - C:\PROGRA~1\ELISAT~1\backweb\4119343\Program\SERVIC~1.EXE
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido\security suite\ewidoguard.exe
O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fsgk32st.exe
O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\Elisa Tietoturvapalvelu\backweb\4119343\program\fsbwsys.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Elisa Tietoturvapalvelu\FWES\Program\fsdfwd.exe
O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\Elisa Tietoturvapalvelu\Common\FSMA32.EXE
O23 - Service: HP Configuration Interface Service (HPConfig) - Hewlett-Packard - C:\WINDOWS\system32\HPConfig.exe
O23 - Service: HPWirelessMgr - Hewlett-Packard Co. - C:\Program Files\HPQ\Notebook Utilities\HPWirelessMgr.exe
O23 - Service: LXBTCustomerConnect - Unknown owner - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXBTserv.exe (file missing)
--------------------------------------------------------
ewido security suite - Scan report
---------------------------------------------------------
Created on: 12:42:11, 25.11.2005
Report-Checksum: D93FE5F9
Scan result:
HKU\S-1-5-21-1004336348-1580818891-1202660629-1004\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00A6FAF1-072E-44CF-8957-5838F569A31D} -> Spyware.MyWebSearch : Cleaned with backup
HKU\S-1-5-21-1004336348-1580818891-1202660629-1004\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EA1-A523-4961-B6BB-170DE4475CCA} -> Spyware.MyWebSearch : Cleaned with backup
:mozilla.10:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Doubleclick : Cleaned with backup
:mozilla.23:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Tradedoubler : Cleaned with backup
:mozilla.24:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Tradedoubler : Cleaned with backup
:mozilla.25:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Tradedoubler : Cleaned with backup
:mozilla.26:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Tradedoubler : Cleaned with backup
:mozilla.27:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.28:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.114:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.115:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.116:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.117:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.118:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.119:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.129:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.130:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.131:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.132:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.133:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.134:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.135:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.136:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.137:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.138:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.139:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.140:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.141:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.142:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.143:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.144:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.145:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.146:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.147:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.148:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.149:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.150:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.151:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.152:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.153:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.154:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.155:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.156:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.157:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.158:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.159:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.160:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.161:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.162:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.163:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.164:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.165:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.166:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.167:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.168:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.169:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.170:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.171:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.172:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.173:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.174:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.175:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.176:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.177:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.183:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup
:mozilla.184:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup
:mozilla.185:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup
:mozilla.186:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup
:mozilla.191:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Targetnet : Cleaned with backup
:mozilla.192:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Targetnet : Cleaned with backup
:mozilla.201:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Adtech : Cleaned with backup
:mozilla.202:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Adtech : Cleaned with backup
:mozilla.226:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.227:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.228:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.229:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.230:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.231:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.232:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.233:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.234:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.235:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.236:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.237:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.239:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexlist : Cleaned with backup
:mozilla.240:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexlist : Cleaned with backup
:mozilla.241:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexlist : Cleaned with backup
:mozilla.242:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexlist : Cleaned with backup
:mozilla.243:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexlist : Cleaned with backup
:mozilla.244:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexlist : Cleaned with backup
:mozilla.245:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexlist : Cleaned with backup
:mozilla.246:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexlist : Cleaned with backup
:mozilla.247:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexlist : Cleaned with backup
:mozilla.248:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexlist : Cleaned with backup
:mozilla.249:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexlist : Cleaned with backup
:mozilla.250:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexlist : Cleaned with backup
:mozilla.251:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexlist : Cleaned with backup
:mozilla.252:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexlist : Cleaned with backup
:mozilla.253:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexlist : Cleaned with backup
:mozilla.254:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexlist : Cleaned with backup
:mozilla.255:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexlist : Cleaned with backup
:mozilla.267:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.280:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Revenue : Cleaned with backup
:mozilla.299:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Adbrite : Cleaned with backup
:mozilla.307:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Paycounter : Cleaned with backup
:mozilla.310:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Masterstats : Cleaned with backup
:mozilla.321:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Statcounter : Cleaned with backup
:mozilla.322:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Statcounter : Cleaned with backup
:mozilla.323:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Statcounter : Cleaned with backup
:mozilla.324:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Statcounter : Cleaned with backup
:mozilla.325:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Statcounter : Cleaned with backup
:mozilla.326:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Statcounter : Cleaned with backup
:mozilla.327:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Statcounter : Cleaned with backup
:mozilla.328:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Statcounter : Cleaned with backup
:mozilla.335:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.336:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.337:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.338:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.339:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.340:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.341:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.342:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.343:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.344:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.345:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.346:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.347:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.348:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.349:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.350:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.351:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.352:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.353:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.354:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.355:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.356:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.357:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.358:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.359:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.360:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.361:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.362:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.363:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.364:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.365:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.366:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.367:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.368:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.369:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.370:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.371:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.372:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.373:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.374:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.375:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.376:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.377:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.378:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.379:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.380:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.381:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.382:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.383:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.384:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.391:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Atdmt : Cleaned with backup
:mozilla.399:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Casalemedia : Cleaned with backup
:mozilla.400:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Casalemedia : Cleaned with backup
:mozilla.401:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Casalemedia : Cleaned with backup
:mozilla.402:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.403:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.407:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Webtrendslive : Cleaned with backup
:mozilla.408:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Webtrendslive : Cleaned with backup
:mozilla.409:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Webtrendslive : Cleaned with backup
:mozilla.413:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Clickzs : Cleaned with backup
:mozilla.414:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Clickzs : Cleaned with backup
:mozilla.416:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Clickzs : Cleaned with backup
:mozilla.417:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Clickzs : Cleaned with backup
:mozilla.418:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Pointroll : Cleaned with backup
:mozilla.419:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Pointroll : Cleaned with backup
:mozilla.420:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Pointroll : Cleaned with backup
:mozilla.433:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.434:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.443:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Googleadservices : Cleaned with backup
:mozilla.455:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.456:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.457:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.458:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.459:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
:mozilla.468:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Spylog : Cleaned with backup
:mozilla.486:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.538:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Adbrite : Cleaned with backup
:mozilla.539:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Adbrite : Cleaned with backup
:mozilla.540:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Adbrite : Cleaned with backup
:mozilla.554:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Clickzs : Cleaned with backup
:mozilla.555:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Clickzs : Cleaned with backup
:mozilla.584:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.604:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Questionmarket : Cleaned with backup
:mozilla.611:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Liveperson : Cleaned with backup
:mozilla.612:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Liveperson : Cleaned with backup
:mozilla.613:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Tribalfusion : Cleaned with backup
:mozilla.633:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Clickhype : Cleaned with backup
:mozilla.643:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.644:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.645:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.650:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Adserver : Cleaned with backup
:mozilla.651:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Adserver : Cleaned with backup
:mozilla.652:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Adserver : Cleaned with backup
:mozilla.653:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Adserver : Cleaned with backup
:mozilla.659:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Ivwbox : Cleaned with backup
:mozilla.710:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Clickzs : Cleaned with backup
:mozilla.711:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Clickzs : Cleaned with backup
:mozilla.729:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Onestat : Cleaned with backup
:mozilla.730:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Onestat : Cleaned with backup
:mozilla.731:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Onestat : Cleaned with backup
:mozilla.735:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Cqcounter : Cleaned with backup
:mozilla.765:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Valueclick : Cleaned with backup
:mozilla.766:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Bluestreak : Cleaned with backup
:mozilla.768:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Hitslink : Cleaned with backup
:mozilla.769:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Hitslink : Cleaned with backup
:mozilla.770:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Hitslink : Cleaned with backup
:mozilla.771:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Hitslink : Cleaned with backup
:mozilla.773:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.781:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.786:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Liveperson : Cleaned with backup
:mozilla.787:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Liveperson : Cleaned with backup
:mozilla.803:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.804:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.805:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.815:C:\Documents and Settings\Janne\Application Data\Mozilla\Firefox\Profiles\0ufw03ib.default\cookies.txt -> Spyware.Cookie.Findwhat : Cleaned with backup
C:\Documents and Settings\Janne\Local Settings\Temporary Internet Files\Content.IE5\EJH1XD4W\SS-dll-current[1].dll -> Spyware.SafeSurfing : Cleaned with backup
:mozilla.9:C:\Documents and Settings\Niina\Application Data\Mozilla\Firefox\Profiles\7gkuptc1.default\cookies.txt -> Spyware.Cookie.Doubleclick : Cleaned with backup
:mozilla.16:C:\Documents and Settings\Niina\Application Data\Mozilla\Firefox\Profiles\7gkuptc1.default\cookies.txt -> Spyware.Cookie.Tradedoubler : Cleaned with backup
:mozilla.17:C:\Documents and Settings\Niina\Application Data\Mozilla\Firefox\Profiles\7gkuptc1.default\cookies.txt -> Spyware.Cookie.Tradedoubler : Cleaned with backup
:mozilla.22:C:\Documents and Settings\Niina\Application Data\Mozilla\Firefox\Profiles\7gkuptc1.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.23:C:\Documents and Settings\Niina\Application Data\Mozilla\Firefox\Profiles\7gkuptc1.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.24:C:\Documents and Settings\Niina\Application Data\Mozilla\Firefox\Profiles\7gkuptc1.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.35:C:\Documents and Settings\Niina\Application Data\Mozilla\Firefox\Profiles\7gkuptc1.default\cookies.txt -> Spyware.Cookie.Coremetrics : Cleaned with backup
:mozilla.44:C:\Documents and Settings\Niina\Application Data\Mozilla\Firefox\Profiles\7gkuptc1.default\cookies.txt -> Spyware.Cookie.Atdmt : Cleaned with backup
:mozilla.71:C:\Documents and Settings\Niina\Application Data\Mozilla\Firefox\Profiles\7gkuptc1.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.72:C:\Documents and Settings\Niina\Application Data\Mozilla\Firefox\Profiles\7gkuptc1.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.73:C:\Documents and Settings\Niina\Application Data\Mozilla\Firefox\Profiles\7gkuptc1.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.74:C:\Documents and Settings\Niina\Application Data\Mozilla\Firefox\Profiles\7gkuptc1.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.75:C:\Documents and Settings\Niina\Application Data\Mozilla\Firefox\Profiles\7gkuptc1.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.76:C:\Documents and Settings\Niina\Application Data\Mozilla\Firefox\Profiles\7gkuptc1.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.78:C:\Documents and Settings\Niina\Application Data\Mozilla\Firefox\Profiles\7gkuptc1.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.79:C:\Documents and Settings\Niina\Application Data\Mozilla\Firefox\Profiles\7gkuptc1.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.80:C:\Documents and Settings\Niina\Application Data\Mozilla\Firefox\Profiles\7gkuptc1.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.81:C:\Documents and Settings\Niina\Application Data\Mozilla\Firefox\Profiles\7gkuptc1.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.82:C:\Documents and Settings\Niina\Application Data\Mozilla\Firefox\Profiles\7gkuptc1.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.83:C:\Documents and Settings\Niina\Application Data\Mozilla\Firefox\Profiles\7gkuptc1.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.84:C:\Documents and Settings\Niina\Application Data\Mozilla\Firefox\Profiles\7gkuptc1.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.85:C:\Documents and Settings\Niina\Application Data\Mozilla\Firefox\Profiles\7gkuptc1.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.86:C:\Documents and Settings\Niina\Application Data\Mozilla\Firefox\Profiles\7gkuptc1.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.91:C:\Documents and Settings\Niina\Application Data\Mozilla\Firefox\Profiles\7gkuptc1.default\cookies.txt -> Spyware.Cookie.Revenue : Cleaned with backup
:mozilla.94:C:\Documents and Settings\Niina\Application Data\Mozilla\Firefox\Profiles\7gkuptc1.default\cookies.txt -> Spyware.Cookie.Targetnet : Cleaned with backup
:mozilla.97:C:\Documents and Settings\Niina\Application Data\Mozilla\Firefox\Profiles\7gkuptc1.default\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup
:mozilla.98:C:\Documents and Settings\Niina\Application Data\Mozilla\Firefox\Profiles\7gkuptc1.default\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup
:mozilla.99:C:\Documents and Settings\Niina\Application Data\Mozilla\Firefox\Profiles\7gkuptc1.default\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup
:mozilla.100:C:\Documents and Settings\Niina\Application Data\Mozilla\Firefox\Profiles\7gkuptc1.default\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup
:mozilla.101:C:\Documents and Settings\Niina\Application Data\Mozilla\Firefox\Profiles\7gkuptc1.default\cookies.txt -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.6:C:\Documents and Settings\Vieras\Application Data\Mozilla\Firefox\Profiles\yyrahsr1.default\cookies.txt -> Spyware.Cookie.Targetnet : Cleaned with backup
:mozilla.8:C:\Documents and Settings\Vieras\Application Data\Mozilla\Firefox\Profiles\yyrahsr1.default\cookies.txt -> Spyware.Cookie.Targetnet : Cleaned with backup
:mozilla.22:C:\Documents and Settings\Vieras\Application Data\Mozilla\Firefox\Profiles\yyrahsr1.default\cookies.txt -> Spyware.Cookie.Revenue : Cleaned with backup
:mozilla.23:C:\Documents and Settings\Vieras\Application Data\Mozilla\Firefox\Profiles\yyrahsr1.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
-> : Error during cleaning
:mozilla.25:C:\Documents and Settings\Vieras\Application Data\Mozilla\Firefox\Profiles\yyrahsr1.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.26:C:\Documents and Settings\Vieras\Application Data\Mozilla\Firefox\Profiles\yyrahsr1.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.27:C:\Documents and Settings\Vieras\Application Data\Mozilla\Firefox\Profiles\yyrahsr1.default\cookies.txt -> Spyware.Cookie.Doubleclick : Cleaned with backup
:mozilla.28:C:\Documents and Settings\Vieras\Application Data\Mozilla\Firefox\Profiles\yyrahsr1.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.29:C:\Documents and Settings\Vieras\Application Data\Mozilla\Firefox\Profiles\yyrahsr1.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.30:C:\Documents and Settings\Vieras\Application Data\Mozilla\Firefox\Profiles\yyrahsr1.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.31:C:\Documents and Settings\Vieras\Application Data\Mozilla\Firefox\Profiles\yyrahsr1.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.32:C:\Documents and Settings\Vieras\Application Data\Mozilla\Firefox\Profiles\yyrahsr1.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.33:C:\Documents and Settings\Vieras\Application Data\Mozilla\Firefox\Profiles\yyrahsr1.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.34:C:\Documents and Settings\Vieras\Application Data\Mozilla\Firefox\Profiles\yyrahsr1.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.35:C:\Documents and Settings\Vieras\Application Data\Mozilla\Firefox\Profiles\yyrahsr1.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.36:C:\Documents and Settings\Vieras\Application Data\Mozilla\Firefox\Profiles\yyrahsr1.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.37:C:\Documents and Settings\Vieras\Application Data\Mozilla\Firefox\Profiles\yyrahsr1.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.38:C:\Documents and Settings\Vieras\Application Data\Mozilla\Firefox\Profiles\yyrahsr1.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.39:C:\Documents and Settings\Vieras\Application Data\Mozilla\Firefox\Profiles\yyrahsr1.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.40:C:\Documents and Settings\Vieras\Application Data\Mozilla\Firefox\Profiles\yyrahsr1.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.41:C:\Documents and Settings\Vieras\Application Data\Mozilla\Firefox\Profiles\yyrahsr1.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.42:C:\Documents and Settings\Vieras\Application Data\Mozilla\Firefox\Profiles\yyrahsr1.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.43:C:\Documents and Settings\Vieras\Application Data\Mozilla\Firefox\Profiles\yyrahsr1.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.44:C:\Documents and Settings\Vieras\Application Data\Mozilla\Firefox\Profiles\yyrahsr1.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.45:C:\Documents and Settings\Vieras\Application Data\Mozilla\Firefox\Profiles\yyrahsr1.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.46:C:\Documents and Settings\Vieras\Application Data\Mozilla\Firefox\Profiles\yyrahsr1.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.47:C:\Documents and Settings\Vieras\Application Data\Mozilla\Firefox\Profiles\yyrahsr1.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.48:C:\Documents and Settings\Vieras\Application Data\Mozilla\Firefox\Profiles\yyrahsr1.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.49:C:\Documents and Settings\Vieras\Application Data\Mozilla\Firefox\Profiles\yyrahsr1.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.50:C:\Documents and Settings\Vieras\Application Data\Mozilla\Firefox\Profiles\yyrahsr1.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.51:C:\Documents and Settings\Vieras\Application Data\Mozilla\Firefox\Profiles\yyrahsr1.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.52:C:\Documents and Settings\Vieras\Application Data\Mozilla\Firefox\Profiles\yyrahsr1.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.53:C:\Documents and Settings\Vieras\Application Data\Mozilla\Firefox\Profiles\yyrahsr1.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.54:C:\Documents and Settings\Vieras\Application Data\Mozilla\Firefox\Profiles\yyrahsr1.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.55:C:\Documents and Settings\Vieras\Application Data\Mozilla\Firefox\Profiles\yyrahsr1.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.56:C:\Documents and Settings\Vieras\Application Data\Mozilla\Firefox\Profiles\yyrahsr1.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.57:C:\Documents and Settings\Vieras\Application Data\Mozilla\Firefox\Profiles\yyrahsr1.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.58:C:\Documents and Settings\Vieras\Application Data\Mozilla\Firefox\Profiles\yyrahsr1.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.59:C:\Documents and Settings\Vieras\Application Data\Mozilla\Firefox\Profiles\yyrahsr1.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.60:C:\Documents and Settings\Vieras\Application Data\Mozilla\Firefox\Profiles\yyrahsr1.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.61:C:\Documents and Settings\Vieras\Application Data\Mozilla\Firefox\Profiles\yyrahsr1.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.62:C:\Documents and Settings\Vieras\Application Data\Mozilla\Firefox\Profiles\yyrahsr1.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.63:C:\Documents and Settings\Vieras\Application Data\Mozilla\Firefox\Profiles\yyrahsr1.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.64:C:\Documents and Settings\Vieras\Application Data\Mozilla\Firefox\Profiles\yyrahsr1.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.65:C:\Documents and Settings\Vieras\Application Data\Mozilla\Firefox\Profiles\yyrahsr1.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.66:C:\Documents and Settings\Vieras\Application Data\Mozilla\Firefox\Profiles\yyrahsr1.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.67:C:\Documents and Settings\Vieras\Application Data\Mozilla\Firefox\Profiles\yyrahsr1.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.68:C:\Documents and Settings\Vieras\Application Data\Mozilla\Firefox\Profiles\yyrahsr1.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.69:C:\Documents and Settings\Vieras\Application Data\Mozilla\Firefox\Profiles\yyrahsr1.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.70:C:\Documents and Settings\Vieras\Application Data\Mozilla\Firefox\Profiles\yyrahsr1.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.71:C:\Documents and Settings\Vieras\Application Data\Mozilla\Firefox\Profiles\yyrahsr1.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.72:C:\Documents and Settings\Vieras\Application Data\Mozilla\Firefox\Profiles\yyrahsr1.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.73:C:\Documents and Settings\Vieras\Application Data\Mozilla\Firefox\Profiles\yyrahsr1.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.74:C:\Documents and Settings\Vieras\Application Data\Mozilla\Firefox\Profiles\yyrahsr1.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.75:C:\Documents and Settings\Vieras\Application Data\Mozilla\Firefox\Profiles\yyrahsr1.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.76:C:\Documents and Settings\Vieras\Application Data\Mozilla\Firefox\Profiles\yyrahsr1.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.77:C:\Documents and Settings\Vieras\Application Data\Mozilla\Firefox\Profiles\yyrahsr1.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.78:C:\Documents and Settings\Vieras\Application Data\Mozilla\Firefox\Profiles\yyrahsr1.default\cookies.txt -> Spyware.Cookie.Tradedoubler : Cleaned with backup
:mozilla.85:C:\Documents and Settings\Vieras\Application Data\Mozilla\Firefox\Profiles\yyrahsr1.default\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup
:mozilla.86:C:\Documents and Settings\Vieras\Application Data\Mozilla\Firefox\Profiles\yyrahsr1.default\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup
:mozilla.87:C:\Documents and Settings\Vieras\Application Data\Mozilla\Firefox\Profiles\yyrahsr1.default\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup
:mozilla.88:C:\Documents and Settings\Vieras\Application Data\Mozilla\Firefox\Profiles\yyrahsr1.default\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup
:mozilla.102:C:\Documents and Settings\Vieras\Application Data\Mozilla\Firefox\Profiles\yyrahsr1.default\cookies.txt -> Spyware.Cookie.Adtech : Cleaned with backup
:mozilla.103:C:\Documents and Settings\Vieras\Application Data\Mozilla\Firefox\Profiles\yyrahsr1.default\cookies.txt -> Spyware.Cookie.Adtech : Cleaned with backup
C:\Documents and Settings\Vieras\Cookies\vieras@abetterinternet[1].txt -> Spyware.Cookie.Abetterinternet : Cleaned with backup
C:\Program Files\Uninstall My Web Search.dll -> Spyware.MyWebSearch : Cleaned with backup
C:\WINDOWS\system32\irasyncd.exe -> Spyware.SafeSurfing : Cleaned with backup
C:\WINDOWS\system32\lanbrup.exe -> Spyware.SafeSurfing : Cleaned with backup
C:\WINDOWS\system32\rastmon.dll -> Spyware.SafeSurfing : Cleaned with backup
C:\WINDOWS\system32\redtrsha.dll -> Spyware.SafeSurfing : Cleaned with backup
C:\WINDOWS\system32\wirelanb.dll -> Spyware.SafeSurfing : Cleaned with backup
::Report End
Fixaa nämä:
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.idklckfvindjzwkwwze.com/nsJnYVcie4NCrLV21zsufCM7xQv_TFU4kZHdTdPqTmw.html
O4 - HKLM\..\Run: [richup] C:\WINDOWS\system32\richup.exe
O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZNfox000
Hae -> http://metallica.geekstogo.com/findlop.zip
Pura ja tuplaklikkaa findlop.bat
Logi löytyy tuolta C:\findlop.txt, lähetä se tänne.
Elisan tietoturvalta "havaittu järjestelmänmuutos" Sallinko muutoksen vai estänkö?
Jos noiden fixien yhteydessä tulee, niin salli.
[TRACE] Enumerating jobs and queues
[TRACE] Activating job 'A2A11C34912691C4.job'
[TRACE] Printing all job properties
ApplicationName: 'c:\docume~1\janne\applic~1\atomsect\safe debug chin.exe'
Parameters: ''
WorkingDirectory: ''
Comment: ''
Creator: 'Janne'
Priority: NORMAL
MaxRunTime: 259200000 (3d 0:00:00)
IdleWait: 10
IdleDeadline: 60
MostRecentRun: 11/08/2005 16:00:00
NextRun: 11/25/2005 14:00:00
StartError: 0x80070002
ExitCode: 0
Status: SCHED_S_TASK_READY
ScheduledWorkItem Flags:
DeleteWhenDone = 0
Suspend = 0
StartOnlyIfIdle = 0
KillOnIdleEnd = 0
RestartOnIdleResume = 0
DontStartIfOnBatteries = 0
KillIfGoingOnBatteries = 0
RunOnlyIfLoggedOn = 1
SystemRequired = 0
Hidden = 1
TaskFlags: 0
1 Trigger
Trigger 0:
Type: Daily
DaysInterval: 1
StartDate: 10/12/2000
EndDate: 00/00/0000
StartTime: 00:00
MinutesDuration: 1440
MinutesInterval: 60
Flags:
HasEndDate = 0
KillAtDuration = 0
Disabled = 0
[TRACE] Activating job 'Scheduled scanning task.job'
[TRACE] Printing all job properties
ApplicationName: 'C:\PROGRA~1\ELISAT~1\ANTI-V~1\fsav.exe'
Parameters: ' /HARD /ARCHIVE /DISINF /SCHED /NOBREAK /REPORT=C:\PROGRA~1\ELISAT~1\ANTI-V~1\report.txt '
WorkingDirectory: 'C:\PROGRA~1\ELISAT~1\ANTI-V~1'
Comment: 'F-Secure Anti-Virus -ohjelman lisäämä tehtävä.'
Creator: 'SYSTEM'
Priority: NORMAL
MaxRunTime: INFINITE
IdleWait: 5
IdleDeadline: 999
MostRecentRun: 11/25/2005 0:21:25
NextRun: 11/26/2005 0:00:00
StartError: S_OK
ExitCode: 0x2
Status: SCHED_S_TASK_READY
ScheduledWorkItem Flags:
DeleteWhenDone = 0
Suspend = 0
StartOnlyIfIdle = 1
KillOnIdleEnd = 0
RestartOnIdleResume = 0
DontStartIfOnBatteries = 0
KillIfGoingOnBatteries = 0
RunOnlyIfLoggedOn = 0
SystemRequired = 0
Hidden = 0
TaskFlags: 0
1 Trigger
Trigger 0:
Type: Daily
DaysInterval: 1
StartDate: 11/25/2005
EndDate: 00/00/0000
StartTime: 00:00
MinutesDuration: 0
MinutesInterval: 0
Flags:
HasEndDate = 0
KillAtDuration = 0
Disabled = 0
Hae KillBox
http://www.bleepingcomputer.com/files/spyware/KillBox.zip
Pura,avaa ja täppi kohtaan Delete on Reboot
Sitte kopioi rivit tosta alapuolelta
C:\WINDOWS\Tasks\A2A11C34912691C4.job
Sitten KillBoxissa ylhäältä File > Paste from Clipboard
Sen jälkeen paina Delete (punainen, jossa on valkonen X)
Vastaa myöntävästi kysymyksiin ja jos kone ei itestään käynnisty uudestaan,niin käynnistä se.
Lähetä sen jälkeen uus Hijack-logi.
Logfile of HijackThis v1.99.1
Scan saved at 13:28:42, on 25.11.2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\ELISAT~1\backweb\4119343\Program\SERVIC~1.EXE
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\Program Files\ewido\security suite\ewidoguard.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\HPQ\One-Touch\OneTouch.EXE
C:\Program Files\Elisa Tietoturvapalvelu\Common\FSM32.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Winamp\winampa.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fsgk32st.exe
C:\Program Files\Elisa Tietoturvapalvelu\backweb\4119343\program\fsbwsys.exe
C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\FSGK32.EXE
C:\Program Files\Elisa Tietoturvapalvelu\Common\FSMA32.EXE
C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fssm32.exe
C:\WINDOWS\system32\HPConfig.exe
C:\Program Files\Elisa Tietoturvapalvelu\Common\FSMB32.EXE
C:\Program Files\HPQ\Notebook Utilities\HPWirelessMgr.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Elisa Tietoturvapalvelu\Common\FCH32.EXE
C:\Program Files\Elisa Tietoturvapalvelu\Common\FAMEH32.EXE
C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fsrw.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fsav32.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Elisa Tietoturvapalvelu\backweb\4119343\Program\fspex.exe
C:\Program Files\Elisa Tietoturvapalvelu\FWES\Program\fsdfwd.exe
C:\PROGRA~1\ELISAT~1\ANTI-S~1\fsaw.exe
C:\Program Files\Elisa Tietoturvapalvelu\FSGUI\fsguidll.exe
C:\HJT\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.idklckfvindjzwkwwze.com/nsJnYVcie4NCrLV21zsufCM7xQv_TFU4kZHdTdPqTmw.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fi\msntb.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fi\msntb.dll
O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [TV Now] C:\Program Files\HPQ\Notebook Utilities\TvNow.exe /RK
O4 - HKLM\..\Run: [Display Settings] C:\Program Files\HPQ\Notebook Utilities\hptasks.exe /s
O4 - HKLM\..\Run: [QT4HPOT] C:\Program Files\HPQ\One-Touch\OneTouch.EXE
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Elisa Tietoturvapalvelu\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Elisa Tietoturvapalvelu\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\Elisa Tietoturvapalvelu\FSGUI\FSSW.EXE" /reboot
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Lexmark Fax Solutions\fm3032.exe" /s
O4 - HKLM\..\Run: [News Service] "C:\Program Files\Elisa Tietoturvapalvelu\FSGUI\ispnews.exe"
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [richup] C:\WINDOWS\system32\richup.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Global Startup: Elisa Tietoturvapalvelu.lnk = C:\Program Files\Elisa Tietoturvapalvelu\backweb\4119343\Program\fspex.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &Estä tämä kohoikkuna - C:\Program Files\Elisa Tietoturvapalvelu\Anti-Spyware\blockpopups.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2\bin\npjpi142.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2\bin\npjpi142.dll
O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Elisa Tietoturvapalvelu\Anti-Spyware\ieshield.dll
O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Elisa Tietoturvapalvelu\Anti-Spyware\ieshield.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1113313901726
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab31267.cab
O23 - Service: Elisa Tietoturvapalvelu (BackWeb Plug-in - 4119343) - BackWeb Technologies Inc. - C:\PROGRA~1\ELISAT~1\backweb\4119343\Program\SERVIC~1.EXE
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido\security suite\ewidoguard.exe
O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fsgk32st.exe
O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\Elisa Tietoturvapalvelu\backweb\4119343\program\fsbwsys.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Elisa Tietoturvapalvelu\FWES\Program\fsdfwd.exe
O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\Elisa Tietoturvapalvelu\Common\FSMA32.EXE
O23 - Service: HP Configuration Interface Service (HPConfig) - Hewlett-Packard - C:\WINDOWS\system32\HPConfig.exe
O23 - Service: HPWirelessMgr - Hewlett-Packard Co. - C:\Program Files\HPQ\Notebook Utilities\HPWirelessMgr.exe
O23 - Service: LXBTCustomerConnect - Unknown owner - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXBTserv.exe (file missing)
Sammuta TeaTimer.exe tehtävienhallinnasta fixauksen ajaksi, se estää ainakin ton 04-rivin
fixauksen.
Fixaa:
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.idklckfvindjzwkwwze.com/nsJnYVcie4NCrLV21zsufCM7xQv_TFU4kZHdTdPqTmw.html
O4 - HKLM\..\Run: [richup] C:\WINDOWS\system32\richup.exe
Käynnistä uudelleen ja lähetä uusi HjT-loki.
Teksti "estetty mahdollinen selaimen kaappaus"
Tässä uusi
Logfile of HijackThis v1.99.1
Scan saved at 14:10:32, on 25.11.2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\ELISAT~1\backweb\4119343\Program\SERVIC~1.EXE
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\Program Files\ewido\security suite\ewidoguard.exe
C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fsgk32st.exe
C:\Program Files\Elisa Tietoturvapalvelu\backweb\4119343\program\fsbwsys.exe
C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\FSGK32.EXE
C:\Program Files\Elisa Tietoturvapalvelu\Common\FSMA32.EXE
C:\WINDOWS\system32\HPConfig.exe
C:\Program Files\Elisa Tietoturvapalvelu\Common\FSMB32.EXE
C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fssm32.exe
C:\Program Files\HPQ\Notebook Utilities\HPWirelessMgr.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Elisa Tietoturvapalvelu\Common\FCH32.EXE
C:\Program Files\Elisa Tietoturvapalvelu\Common\FAMEH32.EXE
C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fsrw.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Elisa Tietoturvapalvelu\FWES\Program\fsdfwd.exe
C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fsav32.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\HPQ\One-Touch\OneTouch.EXE
C:\Program Files\Elisa Tietoturvapalvelu\Common\FSM32.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Elisa Tietoturvapalvelu\FSGUI\ispnews.exe
C:\Program Files\Winamp\winampa.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Elisa Tietoturvapalvelu\backweb\4119343\Program\fspex.exe
C:\PROGRA~1\ELISAT~1\ANTI-S~1\fsaw.exe
C:\Program Files\Elisa Tietoturvapalvelu\FSGUI\fsguidll.exe
C:\HJT\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.idklckfvindjzwkwwze.com/nsJnYVcie4NCrLV21zsufCM7xQv_TFU4kZHdTdPqTmw.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fi\msntb.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fi\msntb.dll
O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [TV Now] C:\Program Files\HPQ\Notebook Utilities\TvNow.exe /RK
O4 - HKLM\..\Run: [Display Settings] C:\Program Files\HPQ\Notebook Utilities\hptasks.exe /s
O4 - HKLM\..\Run: [QT4HPOT] C:\Program Files\HPQ\One-Touch\OneTouch.EXE
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Elisa Tietoturvapalvelu\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Elisa Tietoturvapalvelu\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\Elisa Tietoturvapalvelu\FSGUI\FSSW.EXE" /reboot
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Lexmark Fax Solutions\fm3032.exe" /s
O4 - HKLM\..\Run: [News Service] "C:\Program Files\Elisa Tietoturvapalvelu\FSGUI\ispnews.exe"
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Global Startup: Elisa Tietoturvapalvelu.lnk = C:\Program Files\Elisa Tietoturvapalvelu\backweb\4119343\Program\fspex.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &Estä tämä kohoikkuna - C:\Program Files\Elisa Tietoturvapalvelu\Anti-Spyware\blockpopups.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2\bin\npjpi142.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2\bin\npjpi142.dll
O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Elisa Tietoturvapalvelu\Anti-Spyware\ieshield.dll
O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Elisa Tietoturvapalvelu\Anti-Spyware\ieshield.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1113313901726
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab31267.cab
O23 - Service: Elisa Tietoturvapalvelu (BackWeb Plug-in - 4119343) - BackWeb Technologies Inc. - C:\PROGRA~1\ELISAT~1\backweb\4119343\Program\SERVIC~1.EXE
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido\security suite\ewidoguard.exe
O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fsgk32st.exe
O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\Elisa Tietoturvapalvelu\backweb\4119343\program\fsbwsys.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Elisa Tietoturvapalvelu\FWES\Program\fsdfwd.exe
O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\Elisa Tietoturvapalvelu\Common\FSMA32.EXE
O23 - Service: HP Configuration Interface Service (HPConfig) - Hewlett-Packard - C:\WINDOWS\system32\HPConfig.exe
O23 - Service: HPWirelessMgr - Hewlett-Packard Co. - C:\Program Files\HPQ\Notebook Utilities\HPWirelessMgr.exe
O23 - Service: LXBTCustomerConnect - Unknown owner - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXBTserv.exe (file missing)