Rekisteröidy

Ilmoitukset

Ladataan…

    Näytä kaikki

    Logia pukkaa

    koneen käynnistäminen on alkanut kestään pirun kauan , mutta itse en löydä mitään ylimääräistä "sontaa"
    tässä logi:

    Logfile of HijackThis v1.99.1
    Scan saved at 17:19:16, on 27.12.2005
    Platform: Windows XP SP1 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\System32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
    C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    C:\Program Files\Norton Personal Firewall\ISSVC.exe
    C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
    C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
    C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Norton AntiVirus\navapsvc.exe
    C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    C:\Program Files\Common Files\Symantec Shared\ccApp.exe
    C:\Program Files\Google\Gmail Notifier\gnotify.exe
    C:\Program Files\D-Tools\daemon.exe
    C:\WINDOWS\System32\ctfmon.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\Program Files\Norton AntiVirus\SAVScan.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
    C:\Program Files\Mozilla Firefox 1.0\firefox.exe
    C:\HjT\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fi/
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.wlannet.com:3128
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
    O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
    O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
    O4 - HKLM\..\Run: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] C:\Program Files\Google\Gmail Notifier\gnotify.exe
    O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
    O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1095850967234
    O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
    O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
    O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    O23 - Service: iPod-palvelu (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: ISSvc (ISSVC) - Symantec Corporation - C:\Program Files\Norton Personal Firewall\ISSVC.exe
    O23 - Service: Norton AntiVirus Auto-Protect -palvelu (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
    O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
    O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
    O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
    O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
    O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
    O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
    281126
    Äänestä

    Muut lukivat myös

    Vastaukset 28

    Vanhimmat

    Loki on ok. Levyn eheytys ja rekisterin siivous ym. tehty?

    Äänestä

    • teen nyt ks. toimenpiteet... kiitos sinulle :)

      Äänestä

    • Tuomas kirjoitti:

      teen nyt ks. toimenpiteet... kiitos sinulle :)

      http://koti.mbnet.fi/pattaya1/escanmwav.htm

      lataa, asenna, päivitä tapa2 ja laita täpit merkkauksien mukaan.

      jos ala ikkunaan virukset tulee jotain niin laita se tänne.
      kopiointi ohjeet löytyy sivulta.

      Äänestä

    • Tuomas kirjoitti:

      teen nyt ks. toimenpiteet... kiitos sinulle :)

      wordlan taloyhtiön liitymä.
      Siinä se suurin syy hitauteen on.

      Äänestä

    • escan kirjoitti:

      wordlan taloyhtiön liitymä.
      Siinä se suurin syy hitauteen on.

      http://www.wlannet.com

      Äänestä

    • escan kirjoitti:

      näin lyhenteet sekoo. ;)

      mutta laittelen logia sitten kun on scannannut loppuun asti.

      Äänestä

    • Tuomas kirjoitti:

      mutta laittelen logia sitten kun on scannannut loppuun asti.

      ohjelma.... f-securen apulainen. :)

      Äänestä

    • escan kirjoitti:

      ohjelma.... f-securen apulainen. :)

      File C:\WINDOWS\System32\ntdll.exe infected by "Trojan-Dropper.Win32.Agent.qz" Virus. Action Taken: File Deleted.
      File C:\Documents and Settings\Mikko.MIKKO-TKQC0BND2\Local Settings\Temp\upd.exe tagged as not-a-virus:RiskTool.Win32.PsKill.1101. No Action Taken.
      File C:\Documents and Settings\Mikko.MIKKO-TKQC0BND2\Application Data\SecuROM\UserData\???????????p???????? infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Mikko.MIKKO-TKQC0BND2\Application Data\SecuROM\UserData\???????????p??????????? infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Program Files\Norton AntiVirus\Quarantine\04BE18FD.dll tagged as not-a-virus:AdWare.Win32.EliteBar.an. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\0E012ACC.exe infected by "Trojan-Dropper.Win32.Agent.qz" Virus. Action Taken: File Deleted.
      File C:\Program Files\Norton AntiVirus\Quarantine\704B7058.tmp tagged as not-a-virus:AdWare.Win32.EliteBar.an. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\45744405.tmp tagged as not-a-virus:AdWare.Win32.EliteBar.an. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\72146661.dll infected by "Trojan.Win32.EliteBar.a" Virus. Action Taken: File Deleted.
      File C:\Program Files\Norton AntiVirus\Quarantine\05F7167F.exe infected by "Trojan-Dropper.Win32.Agent.qz" Virus. Action Taken: File Deleted.
      File C:\Program Files\Norton AntiVirus\Quarantine\6C067754.tmp tagged as not-a-virus:AdWare.Win32.EliteBar.an. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\6D8A7BA8.tmp tagged as not-a-virus:AdWare.Win32.EliteBar.an. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\6F74158D.tmp tagged as not-a-virus:AdWare.Win32.EliteBar.an. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\6FDA2B1E.tmp tagged as not-a-virus:AdWare.Win32.EliteBar.an. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\381D4598.tmp tagged as not-a-virus:AdWare.Win32.EliteBar.an. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\73025921.tmp tagged as not-a-virus:AdWare.Win32.EliteBar.an. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\3A1E0564.tmp tagged as not-a-virus:AdWare.Win32.EliteBar.an. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\3C6D34D9.tmp tagged as not-a-virus:AdWare.Win32.EliteBar.an. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\3EBC644F.tmp tagged as not-a-virus:AdWare.Win32.EliteBar.an. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\410E3DC1.tmp tagged as not-a-virus:AdWare.Win32.EliteBar.an. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\37B92C00.dll infected by "Trojan-Downloader.Win32.Agent.tv" Virus. Action Taken: File Deleted.
      File C:\Program Files\Norton AntiVirus\Quarantine\635723BC.dll infected by "Trojan.Win32.EliteBar.c" Virus. Action Taken: File Deleted.
      File C:\Program Files\Norton AntiVirus\Quarantine\37B92C00.exe infected by "Trojan.Win32.EliteBar.c" Virus. Action Taken: File Deleted.
      File C:\Program Files\Norton AntiVirus\Quarantine\37BC55FC.exe infected by "Trojan.Win32.EliteBar.c" Virus. Action Taken: File Deleted.
      File C:\Program Files\Norton AntiVirus\Quarantine\37BC55FC.dll infected by "Trojan.Win32.EliteBar.c" Virus. Action Taken: File Deleted.
      File C:\Program Files\Norton AntiVirus\Quarantine\292001BC.dll infected by "Trojan-Downloader.Win32.Agent.tv" Virus. Action Taken: File Deleted.
      File C:\Program Files\Norton AntiVirus\Quarantine\38E96CB2.exe infected by "Trojan.Win32.EliteBar.c" Virus. Action Taken: File Deleted.
      File C:\Program Files\Norton AntiVirus\Quarantine\39B641CF.exe infected by "Trojan.Win32.EliteBar.c" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{7B86A473-AABE-432A-83D8-04663E6706BB}\RP458\A0055731.exe infected by "Trojan-Dropper.Win32.Agent.qz" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{7B86A473-AABE-432A-83D8-04663E6706BB}\RP458\A0055734.exe infected by "Trojan-Dropper.Win32.Agent.qz" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{7B86A473-AABE-432A-83D8-04663E6706BB}\RP458\A0055735.dll infected by "Trojan.Win32.EliteBar.a" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{7B86A473-AABE-432A-83D8-04663E6706BB}\RP458\A0055736.exe infected by "Trojan-Dropper.Win32.Agent.qz" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{7B86A473-AABE-432A-83D8-04663E6706BB}\RP458\A0055737.dll infected by "Trojan-Downloader.Win32.Agent.tv" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{7B86A473-AABE-432A-83D8-04663E6706BB}\RP458\A0055738.dll infected by "Trojan.Win32.EliteBar.c" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{7B86A473-AABE-432A-83D8-04663E6706BB}\RP458\A0055739.exe infected by "Trojan.Win32.EliteBar.c" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{7B86A473-AABE-432A-83D8-04663E6706BB}\RP458\A0055740.exe infected by "Trojan.Win32.EliteBar.c" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{7B86A473-AABE-432A-83D8-04663E6706BB}\RP458\A0055741.dll infected by "Trojan.Win32.EliteBar.c" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{7B86A473-AABE-432A-83D8-04663E6706BB}\RP458\A0055742.dll infected by "Trojan-Downloader.Win32.Agent.tv" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{7B86A473-AABE-432A-83D8-04663E6706BB}\RP458\A0055743.exe infected by "Trojan.Win32.EliteBar.c" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{7B86A473-AABE-432A-83D8-04663E6706BB}\RP458\A0055744.exe infected by "Trojan.Win32.EliteBar.c" Virus. Action Taken: File Deleted.
      File C:\ICQ2003Decrypt.dll tagged as not-a-virus:PSWTool.Win32.ICQ.l. No Action Taken.
      File D:\jaot\Programs\Codekit\DivXPro511Adware.exe tagged as not-a-virus:AdWare.Win32.Gator.3202. No Action Taken.
      File D:\kamaa\Foty\2 polaczone cipki.jpg infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\ICQ2003Decrypt.dll tagged as not-a-virus:PSWTool.Win32.ICQ.l. No Action Taken.

      Äänestä

    • Tuomas kirjoitti:

      File C:\WINDOWS\System32\ntdll.exe infected by "Trojan-Dropper.Win32.Agent.qz" Virus. Action Taken: File Deleted.
      File C:\Documents and Settings\Mikko.MIKKO-TKQC0BND2\Local Settings\Temp\upd.exe tagged as not-a-virus:RiskTool.Win32.PsKill.1101. No Action Taken.
      File C:\Documents and Settings\Mikko.MIKKO-TKQC0BND2\Application Data\SecuROM\UserData\???????????p???????? infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Mikko.MIKKO-TKQC0BND2\Application Data\SecuROM\UserData\???????????p??????????? infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Program Files\Norton AntiVirus\Quarantine\04BE18FD.dll tagged as not-a-virus:AdWare.Win32.EliteBar.an. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\0E012ACC.exe infected by "Trojan-Dropper.Win32.Agent.qz" Virus. Action Taken: File Deleted.
      File C:\Program Files\Norton AntiVirus\Quarantine\704B7058.tmp tagged as not-a-virus:AdWare.Win32.EliteBar.an. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\45744405.tmp tagged as not-a-virus:AdWare.Win32.EliteBar.an. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\72146661.dll infected by "Trojan.Win32.EliteBar.a" Virus. Action Taken: File Deleted.
      File C:\Program Files\Norton AntiVirus\Quarantine\05F7167F.exe infected by "Trojan-Dropper.Win32.Agent.qz" Virus. Action Taken: File Deleted.
      File C:\Program Files\Norton AntiVirus\Quarantine\6C067754.tmp tagged as not-a-virus:AdWare.Win32.EliteBar.an. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\6D8A7BA8.tmp tagged as not-a-virus:AdWare.Win32.EliteBar.an. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\6F74158D.tmp tagged as not-a-virus:AdWare.Win32.EliteBar.an. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\6FDA2B1E.tmp tagged as not-a-virus:AdWare.Win32.EliteBar.an. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\381D4598.tmp tagged as not-a-virus:AdWare.Win32.EliteBar.an. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\73025921.tmp tagged as not-a-virus:AdWare.Win32.EliteBar.an. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\3A1E0564.tmp tagged as not-a-virus:AdWare.Win32.EliteBar.an. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\3C6D34D9.tmp tagged as not-a-virus:AdWare.Win32.EliteBar.an. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\3EBC644F.tmp tagged as not-a-virus:AdWare.Win32.EliteBar.an. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\410E3DC1.tmp tagged as not-a-virus:AdWare.Win32.EliteBar.an. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\37B92C00.dll infected by "Trojan-Downloader.Win32.Agent.tv" Virus. Action Taken: File Deleted.
      File C:\Program Files\Norton AntiVirus\Quarantine\635723BC.dll infected by "Trojan.Win32.EliteBar.c" Virus. Action Taken: File Deleted.
      File C:\Program Files\Norton AntiVirus\Quarantine\37B92C00.exe infected by "Trojan.Win32.EliteBar.c" Virus. Action Taken: File Deleted.
      File C:\Program Files\Norton AntiVirus\Quarantine\37BC55FC.exe infected by "Trojan.Win32.EliteBar.c" Virus. Action Taken: File Deleted.
      File C:\Program Files\Norton AntiVirus\Quarantine\37BC55FC.dll infected by "Trojan.Win32.EliteBar.c" Virus. Action Taken: File Deleted.
      File C:\Program Files\Norton AntiVirus\Quarantine\292001BC.dll infected by "Trojan-Downloader.Win32.Agent.tv" Virus. Action Taken: File Deleted.
      File C:\Program Files\Norton AntiVirus\Quarantine\38E96CB2.exe infected by "Trojan.Win32.EliteBar.c" Virus. Action Taken: File Deleted.
      File C:\Program Files\Norton AntiVirus\Quarantine\39B641CF.exe infected by "Trojan.Win32.EliteBar.c" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{7B86A473-AABE-432A-83D8-04663E6706BB}\RP458\A0055731.exe infected by "Trojan-Dropper.Win32.Agent.qz" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{7B86A473-AABE-432A-83D8-04663E6706BB}\RP458\A0055734.exe infected by "Trojan-Dropper.Win32.Agent.qz" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{7B86A473-AABE-432A-83D8-04663E6706BB}\RP458\A0055735.dll infected by "Trojan.Win32.EliteBar.a" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{7B86A473-AABE-432A-83D8-04663E6706BB}\RP458\A0055736.exe infected by "Trojan-Dropper.Win32.Agent.qz" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{7B86A473-AABE-432A-83D8-04663E6706BB}\RP458\A0055737.dll infected by "Trojan-Downloader.Win32.Agent.tv" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{7B86A473-AABE-432A-83D8-04663E6706BB}\RP458\A0055738.dll infected by "Trojan.Win32.EliteBar.c" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{7B86A473-AABE-432A-83D8-04663E6706BB}\RP458\A0055739.exe infected by "Trojan.Win32.EliteBar.c" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{7B86A473-AABE-432A-83D8-04663E6706BB}\RP458\A0055740.exe infected by "Trojan.Win32.EliteBar.c" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{7B86A473-AABE-432A-83D8-04663E6706BB}\RP458\A0055741.dll infected by "Trojan.Win32.EliteBar.c" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{7B86A473-AABE-432A-83D8-04663E6706BB}\RP458\A0055742.dll infected by "Trojan-Downloader.Win32.Agent.tv" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{7B86A473-AABE-432A-83D8-04663E6706BB}\RP458\A0055743.exe infected by "Trojan.Win32.EliteBar.c" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{7B86A473-AABE-432A-83D8-04663E6706BB}\RP458\A0055744.exe infected by "Trojan.Win32.EliteBar.c" Virus. Action Taken: File Deleted.
      File C:\ICQ2003Decrypt.dll tagged as not-a-virus:PSWTool.Win32.ICQ.l. No Action Taken.
      File D:\jaot\Programs\Codekit\DivXPro511Adware.exe tagged as not-a-virus:AdWare.Win32.Gator.3202. No Action Taken.
      File D:\kamaa\Foty\2 polaczone cipki.jpg infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\ICQ2003Decrypt.dll tagged as not-a-virus:PSWTool.Win32.ICQ.l. No Action Taken.

      http://www.ewido.net/en/download/

      Asenna, päivitä ja aja Complete system scan. Laita senkin loki tänne

      Äänestä

    • Ewidolla kirjoitti:

      http://www.ewido.net/en/download/

      Asenna, päivitä ja aja Complete system scan. Laita senkin loki tänne

      Sullahan ei ole edes sp2:sta koneella. Nyt hopi hopi Windowsin updateen mars =)

      Äänestä

    • Tuomas kirjoitti:

      File C:\WINDOWS\System32\ntdll.exe infected by "Trojan-Dropper.Win32.Agent.qz" Virus. Action Taken: File Deleted.
      File C:\Documents and Settings\Mikko.MIKKO-TKQC0BND2\Local Settings\Temp\upd.exe tagged as not-a-virus:RiskTool.Win32.PsKill.1101. No Action Taken.
      File C:\Documents and Settings\Mikko.MIKKO-TKQC0BND2\Application Data\SecuROM\UserData\???????????p???????? infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Mikko.MIKKO-TKQC0BND2\Application Data\SecuROM\UserData\???????????p??????????? infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Program Files\Norton AntiVirus\Quarantine\04BE18FD.dll tagged as not-a-virus:AdWare.Win32.EliteBar.an. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\0E012ACC.exe infected by "Trojan-Dropper.Win32.Agent.qz" Virus. Action Taken: File Deleted.
      File C:\Program Files\Norton AntiVirus\Quarantine\704B7058.tmp tagged as not-a-virus:AdWare.Win32.EliteBar.an. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\45744405.tmp tagged as not-a-virus:AdWare.Win32.EliteBar.an. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\72146661.dll infected by "Trojan.Win32.EliteBar.a" Virus. Action Taken: File Deleted.
      File C:\Program Files\Norton AntiVirus\Quarantine\05F7167F.exe infected by "Trojan-Dropper.Win32.Agent.qz" Virus. Action Taken: File Deleted.
      File C:\Program Files\Norton AntiVirus\Quarantine\6C067754.tmp tagged as not-a-virus:AdWare.Win32.EliteBar.an. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\6D8A7BA8.tmp tagged as not-a-virus:AdWare.Win32.EliteBar.an. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\6F74158D.tmp tagged as not-a-virus:AdWare.Win32.EliteBar.an. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\6FDA2B1E.tmp tagged as not-a-virus:AdWare.Win32.EliteBar.an. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\381D4598.tmp tagged as not-a-virus:AdWare.Win32.EliteBar.an. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\73025921.tmp tagged as not-a-virus:AdWare.Win32.EliteBar.an. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\3A1E0564.tmp tagged as not-a-virus:AdWare.Win32.EliteBar.an. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\3C6D34D9.tmp tagged as not-a-virus:AdWare.Win32.EliteBar.an. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\3EBC644F.tmp tagged as not-a-virus:AdWare.Win32.EliteBar.an. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\410E3DC1.tmp tagged as not-a-virus:AdWare.Win32.EliteBar.an. No Action Taken.
      File C:\Program Files\Norton AntiVirus\Quarantine\37B92C00.dll infected by "Trojan-Downloader.Win32.Agent.tv" Virus. Action Taken: File Deleted.
      File C:\Program Files\Norton AntiVirus\Quarantine\635723BC.dll infected by "Trojan.Win32.EliteBar.c" Virus. Action Taken: File Deleted.
      File C:\Program Files\Norton AntiVirus\Quarantine\37B92C00.exe infected by "Trojan.Win32.EliteBar.c" Virus. Action Taken: File Deleted.
      File C:\Program Files\Norton AntiVirus\Quarantine\37BC55FC.exe infected by "Trojan.Win32.EliteBar.c" Virus. Action Taken: File Deleted.
      File C:\Program Files\Norton AntiVirus\Quarantine\37BC55FC.dll infected by "Trojan.Win32.EliteBar.c" Virus. Action Taken: File Deleted.
      File C:\Program Files\Norton AntiVirus\Quarantine\292001BC.dll infected by "Trojan-Downloader.Win32.Agent.tv" Virus. Action Taken: File Deleted.
      File C:\Program Files\Norton AntiVirus\Quarantine\38E96CB2.exe infected by "Trojan.Win32.EliteBar.c" Virus. Action Taken: File Deleted.
      File C:\Program Files\Norton AntiVirus\Quarantine\39B641CF.exe infected by "Trojan.Win32.EliteBar.c" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{7B86A473-AABE-432A-83D8-04663E6706BB}\RP458\A0055731.exe infected by "Trojan-Dropper.Win32.Agent.qz" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{7B86A473-AABE-432A-83D8-04663E6706BB}\RP458\A0055734.exe infected by "Trojan-Dropper.Win32.Agent.qz" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{7B86A473-AABE-432A-83D8-04663E6706BB}\RP458\A0055735.dll infected by "Trojan.Win32.EliteBar.a" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{7B86A473-AABE-432A-83D8-04663E6706BB}\RP458\A0055736.exe infected by "Trojan-Dropper.Win32.Agent.qz" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{7B86A473-AABE-432A-83D8-04663E6706BB}\RP458\A0055737.dll infected by "Trojan-Downloader.Win32.Agent.tv" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{7B86A473-AABE-432A-83D8-04663E6706BB}\RP458\A0055738.dll infected by "Trojan.Win32.EliteBar.c" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{7B86A473-AABE-432A-83D8-04663E6706BB}\RP458\A0055739.exe infected by "Trojan.Win32.EliteBar.c" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{7B86A473-AABE-432A-83D8-04663E6706BB}\RP458\A0055740.exe infected by "Trojan.Win32.EliteBar.c" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{7B86A473-AABE-432A-83D8-04663E6706BB}\RP458\A0055741.dll infected by "Trojan.Win32.EliteBar.c" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{7B86A473-AABE-432A-83D8-04663E6706BB}\RP458\A0055742.dll infected by "Trojan-Downloader.Win32.Agent.tv" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{7B86A473-AABE-432A-83D8-04663E6706BB}\RP458\A0055743.exe infected by "Trojan.Win32.EliteBar.c" Virus. Action Taken: File Deleted.
      File C:\System Volume Information\_restore{7B86A473-AABE-432A-83D8-04663E6706BB}\RP458\A0055744.exe infected by "Trojan.Win32.EliteBar.c" Virus. Action Taken: File Deleted.
      File C:\ICQ2003Decrypt.dll tagged as not-a-virus:PSWTool.Win32.ICQ.l. No Action Taken.
      File D:\jaot\Programs\Codekit\DivXPro511Adware.exe tagged as not-a-virus:AdWare.Win32.Gator.3202. No Action Taken.
      File D:\kamaa\Foty\2 polaczone cipki.jpg infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\ICQ2003Decrypt.dll tagged as not-a-virus:PSWTool.Win32.ICQ.l. No Action Taken.

      File C:\Documents and Settings\Mikko.MIKKO-TKQC0BND2\Local Settings\Temp\ >>>>upd.exe

      Äänestä

    • winupdate kirjoitti:

      Sullahan ei ole edes sp2:sta koneella. Nyt hopi hopi Windowsin updateen mars =)

      koska siitä taitaapi olla enemmän haittaa kuin hyötyä :)

      Äänestä

    • Ewidolla kirjoitti:

      http://www.ewido.net/en/download/

      Asenna, päivitä ja aja Complete system scan. Laita senkin loki tänne

      4 cookieta jotka poistin

      Äänestä

    • pois kirjoitti:

      File C:\Documents and Settings\Mikko.MIKKO-TKQC0BND2\Local Settings\Temp\ >>>>upd.exe

      Spybot on aika surkea, ad-aware, M$ Antispyware ja ewido ovat paljon parempia ja nimenomaan tässä järjestyksessä.

      Äänestä

    • Fixaaja kirjoitti:

      Spybot on aika surkea, ad-aware, M$ Antispyware ja ewido ovat paljon parempia ja nimenomaan tässä järjestyksessä.

      ole löytänytkään

      mutta jos se vaika niitais tuon gatorin.
      ja ehkä muutakin.

      Äänestä

    • escan kirjoitti:

      ole löytänytkään

      mutta jos se vaika niitais tuon gatorin.
      ja ehkä muutakin.

      Tämä gator -> File D:\jaot\Programs\Codekit\DivXPro511Adware.exe tagged as not-a-virus:AdWare.Win32.Gator.3202. No Action Taken.

      lähtee yksinkertaisesti poistamalla ko. tiedosto

      Se on vain mukana tuossa divxpron asennuspaketissa.

      Äänestä

    • Fixaaja kirjoitti:

      Tämä gator -> File D:\jaot\Programs\Codekit\DivXPro511Adware.exe tagged as not-a-virus:AdWare.Win32.Gator.3202. No Action Taken.

      lähtee yksinkertaisesti poistamalla ko. tiedosto

      Se on vain mukana tuossa divxpron asennuspaketissa.

      löytyyköhän logista vielä jotain?

      Äänestä

    • Tuomas kirjoitti:

      löytyyköhän logista vielä jotain?

      Jos tyhjensit tuon Nortonin karanteenin(C:\Program Files\Norton AntiVirus\Quarantine) ja väliaikaistiedostot.

      Äänestä

    • Fixaaja kirjoitti:

      Jos tyhjensit tuon Nortonin karanteenin(C:\Program Files\Norton AntiVirus\Quarantine) ja väliaikaistiedostot.

      ne on poistettu

      Äänestä

    • Fixaaja kirjoitti:

      Jos tyhjensit tuon Nortonin karanteenin(C:\Program Files\Norton AntiVirus\Quarantine) ja väliaikaistiedostot.

      File C:\ICQ2003Decrypt.dll tagged as not-a-virus:PSWTool.Win32.ICQ.l. No Action Taken.

      Äänestä

    • ???? kirjoitti:

      File C:\ICQ2003Decrypt.dll tagged as not-a-virus:PSWTool.Win32.ICQ.l. No Action Taken.

      joka viettää nykyään aikaansa roskiksessa :)

      Äänestä

    • Tuomas kirjoitti:

      joka viettää nykyään aikaansa roskiksessa :)

      taitaa kones mennä jo kovaa kyytiä, että ei perässä pysy :))

      Äänestä

    • Tuomas kirjoitti:

      lataappas se ja scannaa

      escan, ad-aware, virustorjunta, spywareblaster ja palomuuri tietenkin :)))

      Äänestä

    • Fixaaja kirjoitti:

      Ei tarvitse poistaa, se ei ole örkki, ns. riskware.

      haki ja haki eikö soisi löytävänsä.

      Äänestä

    Odottaa vastausta

    Näihin keskusteluihin ei ole vielä vastattu. Ole ensimmäinen.

    Luetuimmat keskustelut

    Kommentoi aloitusta

    Tuomas kirjoitti:

    koneen käynnistäminen on alkanut kestään pirun kauan , mutta itse en löydä mitään ylimääräistä "sontaa"
    tässä logi:

    Logfile of HijackThis v1.99.1
    Scan saved at 17:19:16, on 27.12.2005
    Platform: Windows XP SP1 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\System32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
    C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    C:\Program Files\Norton Personal Firewall\ISSVC.exe
    C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
    C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
    C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Norton AntiVirus\navapsvc.exe
    C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    C:\Program Files\Common Files\Symantec Shared\ccApp.exe
    C:\Program Files\Google\Gmail Notifier\gnotify.exe
    C:\Program Files\D-Tools\daemon.exe
    C:\WINDOWS\System32\ctfmon.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\Program Files\Norton AntiVirus\SAVScan.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
    C:\Program Files\Mozilla Firefox 1.0\firefox.exe
    C:\HjT\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fi/
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.wlannet.com:3128
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
    O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
    O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
    O4 - HKLM\..\Run: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] C:\Program Files\Google\Gmail Notifier\gnotify.exe
    O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
    O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1095850967234
    O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
    O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
    O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    O23 - Service: iPod-palvelu (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: ISSvc (ISSVC) - Symantec Corporation - C:\Program Files\Norton Personal Firewall\ISSVC.exe
    O23 - Service: Norton AntiVirus Auto-Protect -palvelu (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
    O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
    O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
    O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
    O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
    O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
    O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

    Anonyymi
    5000

    Ilmoita asiaton sisältö

    • Sisältää materiaalia, joka on loukkaavaa, herjaavaa, rasistista, uhkailevaa tai ahdistelevaa.

    • Materiaali sisältää nimiä, yhteystietoja tai muita henkilökohtaisia tietoja. Julkisuuden henkilöistä, julkisissa viroissa toimivista ihmisistä sekä yritysten vastuuhenkilöistä saa keskustella työhön liittyen. Myös yksityiselämään liittyvistä asioista voi keskustella siltä osin, kuin niistä on julkisesti kerrottu.

    • Sisältää lapsille haitallista tai heiltä kiellettyä materiaalia. Seksuaalinen sisältö on sallittua aiheeseen tarkoitetuilla palstoilla, joiden ikäraja on 18 vuotta.

    • Lainvastaista sisältöä voi olla mm. yksityiselämää loukkaavan tiedon levitys, kiihottaminen kansanryhmää vastaan, laiton uhkaaminen, alaikäisiin liittyvä seksuaalinen sisältö/grooming, petokset, identiteettivarkaudet, kunnianloukkaukset ja tekijänoikeusrikkomukset.

    • Sisältö ei liity palstan tai keskusteluketjun aiheeseen.

    • Viesti ei ole suomea tai ruotsia (pl. International Forums), se sisältää mainontaa, se sisältää tekijänoikeuksin suojattua materiaalia, se on massapostitus tai jokin muu syy.

    Jaa keskustelu