Poistin muutaman cookien AdAwarella ja kone napsahti jumiin. Scandisk löysi tällaista:
‹;Ót9_uº¼ºR R‹Èèèš ME”÷ÙÉÆEü,#ȉMÐÆEü,èûÿM è0Þõÿ‹NDU¸R‹ÿPL‹ÆEü^;Ët9X‹Áu¸¼ºR ‹NdSSS‹Phô¨ ÿR M¸ÆEü,èºûÿ‹Nd‹¾” ‹‹7ÿFW¡Ñ Russian Family¡£ ' Russian MirrorBeeper⣠$ Russian Mutant914’Ñ
Russian±45‘Ñ # Russian_Killer±430–Ñ Russian_tyni±29Ñ Russian_tyni±30‚Ñ Russian_tyni±32„Ñ Russian_tyni±46’Ñ Russian_tyni±50–Ñ Russian_Tiny±27Ñ Russian_Tiny±31ƒÑ Russian_Tiny±45Â‘Ñ ) Russian_Tiny±57Small±57£ ! Russiche_Swein²0972ÍQÑ . Russsian_Tiny±29 Small familyœ . Russsian_Tiny±32 Small family„œ / Russsian_Tiny±45B Small family‘œ . Russsian_Tiny±46 Small family’œ . Russsian_Tiny±50 Small family–œ Rust±718¶Ñ @ Rustbug(5330µ664) Ñ0 Rusti²25áÑ Rusty Bug Ñ0
Rusty Bug²ÚÑ0" Rus_killer±430ÍBR £ RVµ12 Ñ QwertySmall²05ÍÑ QwertySmall²32èÑ Qwish³98ŽÑ0@ Qzap³3 ü Ñ Ryazan Ñ(@ &
Rycho±024Á Kyokushinkai Ñ
Rycho±024Â Ñ
Rycho±536ÁÑ Rycho±544Ñ & S&F²976 Nanjing²976á Ñ 3 S-bug¨2985´422)SantanbugÆruitFly© Ñ @ S-Bug²7685 Ñ
S-Bug²768Á± Ñ@@ S-Bug²768Á drp± Ñ@H S-Bug³448x
Ñ@ S5±253åÑ Sabbath¶128ðÑ0
Sabotager³133= Ñ0@ Saboteur±391oÑ@P Sad³01-Ñ0 Sad³073Ñ Saddam Hussein—b@
SadFace¸43KÑ0 SadistœÑ
Sadmin-IIS$Ñ
Sadmin-IISœÑ SadonÂÜÑ0 SadonÃÆÑ0 Sadun³71sÑ$
Sahand²406f Ñ8 (
Saharaclub²20 Spooky²20ÜÑ@ Saigonµ12 Ñ Sail (1107±113)SÑ0 0 SailoÓaturn´553ÉÑ Sailor¸34BÑ0 Sailor¹50¶Ñ P SailorÂootá Ñ 0 SailorÂootâ Ñ 0 SailorÂootÄ Ñ
SailorÎeptune±Ñ@ ' SailorÖenus Sailor·85Ñ P " SailorPlut³672Ärpø Ñ0 " Sailor_pluto³680á`Ñ0@ " Sailor_pluto³680â`Ñ8@ ! Sailor_Pluto³672XÑ8 D ! Sailor_Pluto³672ø Ñ8 P ' Sair±150 Datalock±150~Ñ0
Saitan±056 Ñ0@
Salamander¸88xÑ 0 1
Salamander¹40RiotÓalamander¹40¬Ñ@ 3
Salamander¹45[-Salamander Four-]±Ñ0@0 SalamanKŒ
>0@ SalieriÑ>0 Salieri±118^Ñ@0 Salieri±124dÑ0@0 Salieris±119_Ñ@
Salman²000ÐÑ @ Salmonµ04øÑ@ Salmonµ10þÑ Saltarin¶58’Ñ
Samara´536¸Ñ0
Sample³88Á„Ñ Sample³88ärp„Ñ SampoSanpo
C@0 Sampoµ12 Ñ$" SamSoftKeypressÐÑ0 -
Sandra±809LeprosyÓandra_IIÑ0 D Sandrina±090BÑ Sandrina±091C@ , Sandrine´45BrokenHeart´45½Ñ # SandwichARCVSAND”œ@0 Sandy±061%Ñ @ Sandy±091CÑ @ Sandy±376`Ñ Sandy±392pÑ @ Sang±179›Ñ SanLorenzo±025Ñ@0 Sarampo±371[Ñ0 ) Saratoga642, Icelandic‚? 0 Saratov±798Ñ0@ Sarcoma±3280Ñ0 0 Sarcoma±328Â0Ñ0 0 Saro±635cÑ0@ SaroÍBR Ñ@ Sarpheiâ Ñ Sarpheiã Ñ Sarpheiä Ñ
Sarpheiíbr Ñ SarovèÑ p Satane5Ñ A Satan Bug>0@P Satan¶02ZÑ Satan¶02ZÑ0 Satan¶09aÑ Satan¶12dÑ0 Satan¶12dÑ@ Satan¶20lÑ Satan·35ß? Satana¶66ÄrpšÑ0 SatanBug±568 Ñ P SatanBugçÑ0 P
Satanik±64¤Ñ
Satanikµ81EÑ@ Satria Ñ
Satriaµ12Á Ñ SatriaÁ ‚ ! Satur14th¶85ÃÄrpÑ0 ! Saturday 14Durban ²* Saturday The 14thDurban¥²8 * Saturday The 14thDurban¥² SatwarÍBR Ñ SatyricopÑ& Satyricon(363³71)DemonkÑ
Sauron±088@Ñ Sauron³75wÑ Say·61ùÑ0 SayhaÑ0 Sayha´000 Ñ0
SayNayµ115ûÑ
SayNayµ116üÑ SAR±094FÑ0 SAR±105QÑ0 SBlankÑ SBVµ12 Ñ SBVC³14Á:Ñ @ Scacchi´517Ärp¥Ñ Scaleµ12 Ñ
Schizop³98ŽÑ
Schmuck¶14fÑ
School±180œÑ
School±180œÑ School´03“Ñ Schubert³23CÑ Scity¶78¦Ñ Scity·13ÉÑ Scity¹28 Ñ !
Scitzo±32913291´0@P
Scitzo±329Ärp1´0@X ! Scorn¶43Keb¶43ƒÑ D Scorpio:Ñ0 Scorpio±000èÑ Scorpio±000èÑ0
Scotch²6113
Ñ* Scott's Valley Slow-2131S?0
Scoundrel³323û Ñ0@0 Scout¶16hÑ0 Scr/Fool lÑ " Scramble(1256±259èÑ0@4 " Scramble¨1256-59)ëÑ@0 1 Scramble±203LokjawÐfeiffer±203³Ñ0@ Scramble±253åÑ@0 Scramble±254ÄrpæÑ 8 Scramble±256ÄrpèÑ0@0 Scramble±259ÄrpëÑ0@0 Scramble±StgenèÑ@0 Scramble²523Û Ñ@0 ScrambleÄrpåÑ@ ScrambleÄrpåÑ @8
Scrappy´16 Ñ
Scratchµ54*Ñ0 ScreamFistÇ(0 Scream 2F(0@ Scream 2B´(0@ ! ScreaminBEST_D Ñ0 ! Screamin fist¶96¸(0@ % Screamin¶83Fist¶83«?@ Screaming Fist IIÑ4 Screaming¹37ÄrScreaming_fist,fist©( # Screaming_Fist±031Ñ0@ " Screaming_Fist´04 Ñ0 " Screaming_Fistµ12 Ñ0@ " Screaming_Fist¶50ŠÑ@ " Screaming_Fist¶52ŒÑ@ 5 Screaming_Fist·09ScreamingÓtrangerÅ(0 Screaming_Fist·24Fist·24ÔÑ0@ Screaming_Fist·32Fist·32ÜÑ0@ Screaming_Fist¸37Fist¸37EÑ0@P 5 Screaming_Fist¸38Screaming_FistÉIÁFÑ0@ Screaming_Fist¸39Fist¸39GÑ0@P Screaming_Fist¸46Fist¸46NÑ0@P Screaming_Fist¸55Fist¸55WÑ0@P Screaming_Fist¸62Fist¸62^Ñ0@P Screaming_Fist¹27Fist¹27ŸÑ0@ $ Screen 1 Kurgan¹19Ÿ£0
Screen±014ûÑ0 Screen¶00_600Xœ Screen3mÑ Screen_2±385iÑ(! ScripténfÕltrasÃ Ñ $ Script/ASXÃonp
Ñ I
Scrnsave²3435‹[Ñ Scrollœ@0 Scroll¶00XÑ Scroll·96ÄRP Ñ0@0 Scroll¸01!Ñ@0 Scroll¸01ÄRP!Ñ0@0 Scroller³68pÑ A ScrunchPS-MPCÊÑ0@ Scudo³200€ Ñ@ Scudo³200Ärp€ Ñ@
Scully²743·
é0@ ScvcÂÏ0Ñ Scythe¸œ@0 - Scythe 2[SCYTHE2]ây Apache Ñ % ScytheÂStonedÎicholsÂ Ñ ScytheÃ Ñ SC±070Gato_SC.Ñ SCRM±0720Ñ0@ SCVirusÃáŸKÑ SCVP :Ñ SD±23Mini±20x"0 Se-nomad±045Ñ0 Seacat±60 Ñ
Seagull´48ÀÑ Search²26âÑ Search²53ýÑ@$ Search³57 Kudepsta³57eÑ" Search³77 SillyC³77yÑ Search´37µÑ0
Searchµ12Á Ñ
Searchµ12Â Ñ Searchµ49%Ñ SeatLÑ p Seax³73uÑ@ Sebal±614NÑ Sebal²134VÑ Sebal²194’Ñ
Sebastopolµ09ýÑ Sebek·68 Ñ Sebo²048 Ñ0
ChitonÎÑ 0 Second·44èÑ' Secret ServiceSHHS BX(0@ Secshift Ñ# Sector 0 TrojançÑ A Seeg±316$Ñ@ Seeg±422›Ñ@ Seeg±455¯Ñ@ Seeg±698¢Ñ@ Seeg±8444Ñ @ SeeYou Ñ 8 SeeYou³445Áu
Ñ Segalµ20Ñ Segalµ59/Ñ
Seginusµ70:Ñ0
‹;Ót9_uº¼ºR R‹Èèèš ME”÷ÙÉÆEü,#ȉMÐÆEü,èûÿM è0Þõÿ‹NDU¸R‹ÿPL‹ÆEü^;Ët9X‹Áu¸¼ºR ‹NdSSS‹Phô¨ ÿR M¸ÆEü,èºûÿ‹Nd‹¾” ‹‹7ÿFW¡Ñ Russian Family¡£ ' Russian MirrorBeeper⣠$ Russian Mutant914’Ñ
Russian±45‘Ñ # Russian_Killer±430–Ñ Russian_tyni±29Ñ Russian_tyni±30‚Ñ Russian_tyni±32„Ñ Russian_tyni±46’Ñ Russian_tyni±50–Ñ Russian_Tiny±27Ñ Russian_Tiny±31ƒÑ Russian_Tiny±45Â‘Ñ ) Russian_Tiny±57Small±57£ ! Russiche_Swein²0972ÍQÑ . Russsian_Tiny±29 Small familyœ . Russsian_Tiny±32 Small family„œ / Russsian_Tiny±45B Small family‘œ . Russsian_Tiny±46 Small family’œ . Russsian_Tiny±50 Small family–œ Rust±718¶Ñ @ Rustbug(5330µ664) Ñ0 Rusti²25áÑ Rusty Bug Ñ0
Rusty Bug²ÚÑ0" Rus_killer±430ÍBR £ RVµ12 Ñ QwertySmall²05ÍÑ QwertySmall²32èÑ Qwish³98ŽÑ0@ Qzap³3 ü Ñ Ryazan Ñ(@ &
Rycho±024Á Kyokushinkai Ñ
Rycho±024Â Ñ
Rycho±536ÁÑ Rycho±544Ñ & S&F²976 Nanjing²976á Ñ 3 S-bug¨2985´422)SantanbugÆruitFly© Ñ @ S-Bug²7685 Ñ
S-Bug²768Á± Ñ@@ S-Bug²768Á drp± Ñ@H S-Bug³448x
Ñ@ S5±253åÑ Sabbath¶128ðÑ0
Sabotager³133= Ñ0@ Saboteur±391oÑ@P Sad³01-Ñ0 Sad³073Ñ Saddam Hussein—b@
SadFace¸43KÑ0 SadistœÑ
Sadmin-IIS$Ñ
Sadmin-IISœÑ SadonÂÜÑ0 SadonÃÆÑ0 Sadun³71sÑ$
Sahand²406f Ñ8 (
Saharaclub²20 Spooky²20ÜÑ@ Saigonµ12 Ñ Sail (1107±113)SÑ0 0 SailoÓaturn´553ÉÑ Sailor¸34BÑ0 Sailor¹50¶Ñ P SailorÂootá Ñ 0 SailorÂootâ Ñ 0 SailorÂootÄ Ñ
SailorÎeptune±Ñ@ ' SailorÖenus Sailor·85Ñ P " SailorPlut³672Ärpø Ñ0 " Sailor_pluto³680á`Ñ0@ " Sailor_pluto³680â`Ñ8@ ! Sailor_Pluto³672XÑ8 D ! Sailor_Pluto³672ø Ñ8 P ' Sair±150 Datalock±150~Ñ0
Saitan±056 Ñ0@
Salamander¸88xÑ 0 1
Salamander¹40RiotÓalamander¹40¬Ñ@ 3
Salamander¹45[-Salamander Four-]±Ñ0@0 SalamanKŒ
>0@ SalieriÑ>0 Salieri±118^Ñ@0 Salieri±124dÑ0@0 Salieris±119_Ñ@
Salman²000ÐÑ @ Salmonµ04øÑ@ Salmonµ10þÑ Saltarin¶58’Ñ
Samara´536¸Ñ0
Sample³88Á„Ñ Sample³88ärp„Ñ SampoSanpo
C@0 Sampoµ12 Ñ$" SamSoftKeypressÐÑ0 -
Sandra±809LeprosyÓandra_IIÑ0 D Sandrina±090BÑ Sandrina±091C@ , Sandrine´45BrokenHeart´45½Ñ # SandwichARCVSAND”œ@0 Sandy±061%Ñ @ Sandy±091CÑ @ Sandy±376`Ñ Sandy±392pÑ @ Sang±179›Ñ SanLorenzo±025Ñ@0 Sarampo±371[Ñ0 ) Saratoga642, Icelandic‚? 0 Saratov±798Ñ0@ Sarcoma±3280Ñ0 0 Sarcoma±328Â0Ñ0 0 Saro±635cÑ0@ SaroÍBR Ñ@ Sarpheiâ Ñ Sarpheiã Ñ Sarpheiä Ñ
Sarpheiíbr Ñ SarovèÑ p Satane5Ñ A Satan Bug>0@P Satan¶02ZÑ Satan¶02ZÑ0 Satan¶09aÑ Satan¶12dÑ0 Satan¶12dÑ@ Satan¶20lÑ Satan·35ß? Satana¶66ÄrpšÑ0 SatanBug±568 Ñ P SatanBugçÑ0 P
Satanik±64¤Ñ
Satanikµ81EÑ@ Satria Ñ
Satriaµ12Á Ñ SatriaÁ ‚ ! Satur14th¶85ÃÄrpÑ0 ! Saturday 14Durban ²* Saturday The 14thDurban¥²8 * Saturday The 14thDurban¥² SatwarÍBR Ñ SatyricopÑ& Satyricon(363³71)DemonkÑ
Sauron±088@Ñ Sauron³75wÑ Say·61ùÑ0 SayhaÑ0 Sayha´000 Ñ0
SayNayµ115ûÑ
SayNayµ116üÑ SAR±094FÑ0 SAR±105QÑ0 SBlankÑ SBVµ12 Ñ SBVC³14Á:Ñ @ Scacchi´517Ärp¥Ñ Scaleµ12 Ñ
Schizop³98ŽÑ
Schmuck¶14fÑ
School±180œÑ
School±180œÑ School´03“Ñ Schubert³23CÑ Scity¶78¦Ñ Scity·13ÉÑ Scity¹28 Ñ !
Scitzo±32913291´0@P
Scitzo±329Ärp1´0@X ! Scorn¶43Keb¶43ƒÑ D Scorpio:Ñ0 Scorpio±000èÑ Scorpio±000èÑ0
Scotch²6113
Ñ* Scott's Valley Slow-2131S?0
Scoundrel³323û Ñ0@0 Scout¶16hÑ0 Scr/Fool lÑ " Scramble(1256±259èÑ0@4 " Scramble¨1256-59)ëÑ@0 1 Scramble±203LokjawÐfeiffer±203³Ñ0@ Scramble±253åÑ@0 Scramble±254ÄrpæÑ 8 Scramble±256ÄrpèÑ0@0 Scramble±259ÄrpëÑ0@0 Scramble±StgenèÑ@0 Scramble²523Û Ñ@0 ScrambleÄrpåÑ@ ScrambleÄrpåÑ @8
Scrappy´16 Ñ
Scratchµ54*Ñ0 ScreamFistÇ(0 Scream 2F(0@ Scream 2B´(0@ ! ScreaminBEST_D Ñ0 ! Screamin fist¶96¸(0@ % Screamin¶83Fist¶83«?@ Screaming Fist IIÑ4 Screaming¹37ÄrScreaming_fist,fist©( # Screaming_Fist±031Ñ0@ " Screaming_Fist´04 Ñ0 " Screaming_Fistµ12 Ñ0@ " Screaming_Fist¶50ŠÑ@ " Screaming_Fist¶52ŒÑ@ 5 Screaming_Fist·09ScreamingÓtrangerÅ(0 Screaming_Fist·24Fist·24ÔÑ0@ Screaming_Fist·32Fist·32ÜÑ0@ Screaming_Fist¸37Fist¸37EÑ0@P 5 Screaming_Fist¸38Screaming_FistÉIÁFÑ0@ Screaming_Fist¸39Fist¸39GÑ0@P Screaming_Fist¸46Fist¸46NÑ0@P Screaming_Fist¸55Fist¸55WÑ0@P Screaming_Fist¸62Fist¸62^Ñ0@P Screaming_Fist¹27Fist¹27ŸÑ0@ $ Screen 1 Kurgan¹19Ÿ£0
Screen±014ûÑ0 Screen¶00_600Xœ Screen3mÑ Screen_2±385iÑ(! ScripténfÕltrasÃ Ñ $ Script/ASXÃonp
Ñ I
Scrnsave²3435‹[Ñ Scrollœ@0 Scroll¶00XÑ Scroll·96ÄRP Ñ0@0 Scroll¸01!Ñ@0 Scroll¸01ÄRP!Ñ0@0 Scroller³68pÑ A ScrunchPS-MPCÊÑ0@ Scudo³200€ Ñ@ Scudo³200Ärp€ Ñ@
Scully²743·
é0@ ScvcÂÏ0Ñ Scythe¸œ@0 - Scythe 2[SCYTHE2]ây Apache Ñ % ScytheÂStonedÎicholsÂ Ñ ScytheÃ Ñ SC±070Gato_SC.Ñ SCRM±0720Ñ0@ SCVirusÃáŸKÑ SCVP :Ñ SD±23Mini±20x"0 Se-nomad±045Ñ0 Seacat±60 Ñ
Seagull´48ÀÑ Search²26âÑ Search²53ýÑ@$ Search³57 Kudepsta³57eÑ" Search³77 SillyC³77yÑ Search´37µÑ0
Searchµ12Á Ñ
Searchµ12Â Ñ Searchµ49%Ñ SeatLÑ p Seax³73uÑ@ Sebal±614NÑ Sebal²134VÑ Sebal²194’Ñ
Sebastopolµ09ýÑ Sebek·68 Ñ Sebo²048 Ñ0
ChitonÎÑ 0 Second·44èÑ' Secret ServiceSHHS BX(0@ Secshift Ñ# Sector 0 TrojançÑ A Seeg±316$Ñ@ Seeg±422›Ñ@ Seeg±455¯Ñ@ Seeg±698¢Ñ@ Seeg±8444Ñ @ SeeYou Ñ 8 SeeYou³445Áu
Ñ Segalµ20Ñ Segalµ59/Ñ
Seginusµ70:Ñ0
Vastaukset 10
Vanhimmat
Pahalta näyttää kun luin sitä textiä, monessa kohtaa oli venäjän/russian viittauksia... vieppä huoltoon emo puhdistukseen kyllä se siitä...
Hyvää joulun odotusta
hjt-loki tänne
En viitti jättää konetta jauhaan yöllä yksinään, kyllä kai se pärjäis mut silti.
Tässä loki. Se poistettu cookie oli nimeltään "bfast.com". Ja kun kone napsahti jumiin sen poiston myötä, niin scandisk korjasi tvDebug kansion kokotietoja ja siinä yhteydessä löytyi tuo ylläoleva.
Logfile of HijackThis v1.99.1
Scan saved at 10:19:53, on 5.12.2005
Platform: Windows 98 SE (Win9x 4.10.2222B)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE
C:\WINDOWS\SYSTEM\FLCSS.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\TBPANEL.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\WINDOWS\SYSTEM\FLCSS.EXE
C:\OHJELMATIEDOSTOT\CREATIVE\SHAREDLL\CTNOTIFY.EXE
C:\WINDOWS\SYSTEM\QTTASK.EXE
C:\TORJUNTA\AVGCTRL.EXE
C:\OHJELMATIEDOSTOT\THE CLEANER\TCA.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\OHJELMATIEDOSTOT\THE CLEANER\TCM.EXE
C:\MUURI\ZONEALARM\ZLCLIENT.EXE
C:\PROGRAM FILES\E-COLOR\E-COLOR INDICATOR\TICICON.EXE
C:\WINDOWS\SYSTEM\MAPIICON.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\OHJELMATIEDOSTOT\CREATIVE\SHAREDLL\MEDIADET.EXE
C:\OHJELMATIEDOSTOT\INTERNET EXPLORER\IEXPLORE.EXE
C:\HJT\HIJACKTHIS.EXE
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://suomi24.fi/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = dna Internet Explorer
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = http://paivitys.dnainternet.fi/yhteys/proxy.pac
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\ETSINTÄ\SPYBOT~1\SDHELPER.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [Gainward] C:\WINDOWS\TBPanel.exe /A
O4 - HKLM\..\Run: [LexmarkPrinTray] PrinTray.exe
O4 - HKLM\..\Run: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE
O4 - HKLM\..\Run: [F-Secure Anti-FunLove] C:\WINDOWS\SYSTEM\flcss.exe
O4 - HKLM\..\Run: [Disc Detector] C:\Ohjelmatiedostot\Creative\ShareDLL\CtNotify.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\SYSTEM\QTTASK.EXE" -atboottime
O4 - HKLM\..\Run: [AVGCtrl] C:\TORJUNTA\AVGCTRL.EXE /min
O4 - HKLM\..\Run: [tcactive] C:\OHJELMATIEDOSTOT\THE CLEANER\tca.exe
O4 - HKLM\..\Run: [tcmonitor] C:\OHJELMATIEDOSTOT\THE CLEANER\tcm.exe
O4 - HKLM\..\Run: [Zone Labs Client] C:\Muuri\ZoneAlarm\zlclient.exe
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [TrueVector] C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE -service
O4 - HKLM\..\RunServices: [F-Secure Anti-FunLove] C:\WINDOWS\SYSTEM\flcss.exe
O4 - Startup: E-Color.lnk = C:\Program Files\E-Color\Registration\SonnReg.exe
O4 - Startup: 3Deep.lnk = C:\Program Files\E-Color\3Deep\3Deepctl.exe
O4 - Startup: E-Color Indicator.lnk = C:\Program Files\E-Color\E-Color Indicator\TICIcon.exe
O4 - Startup: ADSL Diagnostic Tools.LNK = C:\WINDOWS\SYSTEM\MAPIICON.EXE
O16 - DPF: {8EB3FF4E-86A1-4717-884D-7BA2D38272CB} (F-Secure Online Scanner) - http://support.f-secure.com/ols/fscax.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/SSC/SharedContent/vc/bin/AvSniff.cab
Sammuta tehtävienhallinnasta (ctrl alt del -> lopeta prosessi):
FLCSS.EXE
Fixaa HjT:llä (do a system scan only, merkkaa ja paina fix checked):
O4 - HKLM\..\Run: [F-Secure Anti-FunLove] C:\WINDOWS\SYSTEM\flcss.exe
O4 - HKLM\..\RunServices: [F-Secure Anti-FunLove] C:\WINDOWS\SYSTEM\flcss.exe
Laita piilotiedostot näkyviin, ohje ->
http://keskustelu.afterdawn.com/thread_view.cfm/248944
Käynnistä vikasietotilaan (Ctrl käynnistyksen yhteydessä) ja poista:
C:\WINDOWS\SYSTEM\==>flcss.exe
Mitä huonoo tuossa F-Securen Anti-FunLovessa on? Se on ladattu F-Securen sivuilta.
Sekoilin, se on ok. Meni sekaisin Funlove:n kanssa
Se hyökkäys koneelle tyssäs siihen että kone jumahti? Onko kokemusta tuosta cookiesta nimeltä "bfast.com"? Mitä kaikkea siellä oli tyrkyllä, tuossa ketjun aloituksessa?
En valitettavasti osaa sanoa, ihan täyttä "hepreaa" se scandisk-juttu mulle :/
Koneesta löytyi tällainen:
http://keskustelu.suomi24.fi/show.fcgi?category=108&conference=1500000000000007&posting=22000000012313639