Kiitos kaikille "lääkäreille", sain tuolla alempana http://keskustelu.suomi24.fi/show.fcgi?category=108&conference=4500000000000628&posting=22000000012887671 jos tavattoman paljon apuja.
Tein kaikki korjaukset ja nyt vasta ajoin Ewidon ja säikähdin; 248 infected objects.........huh...
Tässä raportti siitä, mitä se kertoo ja tuleeko tehdä vielä jotain....
*****************************************
---------------------------------------------------------
ewido anti-malware - Scan report
---------------------------------------------------------
Created on: 17:16:24, 30.12.2005
Report-Checksum: 8CEB63D3
Scan result:
HKLM\SOFTWARE\Classes\AppID\WeatherOnTray.EXE -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\AppID\{0507FDDE-F3B7-49F5-9E8F-C557E991F39B} -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{0774F696-D801-4C18-81A7-A3A32B8BEF19} -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{1E0004EC-5DF0-48C7-A8F0-FBB0488A3D94} -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{1E6AC766-9094-4BCF-ABD3-39E2EAEA5FCD} -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{2178C864-B8BC-41AE-A1FB-EB6A32F87EB1} -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{2A8A997F-BB9F-48F6-AA2B-2762D50F9289} -> Spyware.SmartShopper : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{454B4812-E572-4703-A1BB-63490809EAC0} -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{580A1F3F-89B4-433B-BBDB-B97AEB13F3FC} -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{70BA88C8-DAE8-4CE9-92BB-979C4A75F53B} -> Spyware.GameSpyArcade : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{74CC49F7-EB32-4A08-B204-948962A6E3DB} -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{7E66936C-FEA0-4984-AD26-7B6661AC5B2E} -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{FA16BCE1-5E36-472A-8466-E0CDD5CE00E6} -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbCoreSrv.DynamicProp -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbCoreSrv.DynamicProp\CLSID -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbCoreSrv.DynamicProp\CurVer -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbCoreSrv.DynamicProp.1 -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtCoreSrv.HbtCoreServices -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtCoreSrv.HbtCoreServices\CLSID -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtCoreSrv.HbtCoreServices\CurVer -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtCoreSrv.HbtCoreServices.1 -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtCoreSrv.LfgAx -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtCoreSrv.LfgAx\CLSID -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtCoreSrv.LfgAx\CurVer -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtCoreSrv.LfgAx.1 -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtHostIE.Bho -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtHostIE.Bho\CLSID -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtHostIE.Bho\CurVer -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtHostIE.Bho.1 -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtHostOL.HbtMailAnim -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtHostOL.HbtMailAnim\CLSID -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtHostOL.HbtMailAnim\CurVer -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtHostOL.HbtMailAnim.1 -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtHostOL.HbtWebmailSend -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtHostOL.HbtWebmailSend\CLSID -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtHostOL.HbtWebmailSend\CurVer -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtHostOL.HbtWebmailSend.1 -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbTools.HbtCommBand -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbTools.HbtCommBand\CLSID -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbTools.HbtCommBand\CurVer -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbTools.HbtCommBand.1 -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbTools.HbtTravelCompareBar -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbTools.HbtTravelCompareBar\CLSID -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbTools.HbtTravelCompareBar\CurVer -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbTools.HbtTravelCompareBar.1 -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtSrv.HbtCoreServices -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtSrv.HbtCoreServices\CLSID -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtSrv.HbtCoreServices\CurVer -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtSrv.HbtCoreServices.1 -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtToolbar.HbtHtmlMenuUI -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtToolbar.HbtHtmlMenuUI\CLSID -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtToolbar.HbtHtmlMenuUI\CurVer -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtToolbar.HbtHtmlMenuUI.1 -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtToolbar.HbtToolbarCtl -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtToolbar.HbtToolbarCtl\CLSID -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtToolbar.HbtToolbarCtl\CurVer -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtToolbar.HbtToolbarCtl.1 -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtTools.HbMain -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtTools.HbMain\CLSID -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtTools.HbMain\CurVer -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtTools.HbMain.1 -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{34F4D917-31E4-464C-B8B3-84C1CE76B395} -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{3F04CBF7-CD62-4403-B090-B432DEDCB159} -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{8578D35E-C6C0-4808-9A80-0F6C29A2C423} -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{BC190DA5-0187-4D99-B3AC-6C45EA1B9324} -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\RprtsPSClient.PSExecuter -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\RprtsPSClient.PSExecuter\CLSID -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\RprtsPSClient.PSExecuter\CurVer -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\RprtsPSClient.PSExecuter.1 -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\ShprRprts.HbAx -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\ShprRprts.HbAx\CLSID -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\ShprRprts.HbAx\CurVer -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\ShprRprts.HbAx.1 -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\ShprRprts.HbInfoBand -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\ShprRprts.HbInfoBand\CLSID -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\ShprRprts.HbInfoBand\CurVer -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\ShprRprts.HbInfoBand.1 -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\ShprRprts.IEButton -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\ShprRprts.IEButton\CLSID -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\ShprRprts.IEButton\CurVer -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\ShprRprts.IEButton.1 -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\ShprRprts.IEButtonA -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\ShprRprts.IEButtonA\CLSID -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\ShprRprts.IEButtonA\CurVer -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\ShprRprts.IEButtonA.1 -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\ShprRprts.SmrtShprCtl -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\ShprRprts.SmrtShprCtl\CLSID -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\ShprRprts.SmrtShprCtl\CurVer -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\ShprRprts.SmrtShprCtl.1 -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\TypeLib\{45397063-D7D0-47C2-9508-26487608A298} -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\TypeLib\{71E9CF40-AF72-4B55-BD3F-1FEA2A0EAEA6} -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\TypeLib\{71EFE583-62FE-4419-9918-CA3B683F7B36} -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\TypeLib\{793AF621-5CD0-4B92-B765-6712F6AAF48E} -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\TypeLib\{842D315A-7E1E-448B-96E8-9E76D1820BE2} -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\TypeLib\{9967A873-40F3-4C7E-9239-6C8760F19F61} -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\TypeLib\{B5901229-25CC-43C9-B604-3BB6AC2B48A5} -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\TypeLib\{B9F51D42-CCA0-4408-BB02-D433D1865A3A} -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\TypeLib\{C83DAED4-0611-4F7A-978E-7FEAFCB2F91B} -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\TypeLib\{F8EE014F-B34C-4544-8E45-95A7971D323B} -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\Wallpaper.WallpaperManager -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\Wallpaper.WallpaperManager\CLSID -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\Wallpaper.WallpaperManager\CurVer -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\Wallpaper.WallpaperManager.1 -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\HbTools -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\HbTools\HbTools -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\HbTools\HbTools\Install -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\HbTools\HbTools\MachineInfo -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\HbTools\HbTools\Mail -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\HbTools\HbTools\PI -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\HbTools\HbTools\PI\3.2 -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\HbTools\HbTools\Updates -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\HbTools\HbTools\Upgrade -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\HbTools\HostOI -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\HbTools\HostOI\Mail -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\HbTools\HostOI\options -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\HbTools\HostOI\Updates -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\HbTools\HostOL -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\HbTools\HostOL\Mail -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\HbTools\HostOL\Updates -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\HbTools\Hotbar -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\HbTools\Hotbar\Install -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\HbTools\Install -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\HbTools\Install\CmpMap -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\HbTools\Install\Icons -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\HbTools\Install\Links -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{70BA88C8-DAE8-4CE9-92BB-979C4A75F53B} -> Spyware.GameSpyArcade : Cleaned with backup
HKLM\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{7E66936C-FEA0-4984-AD26-7B6661AC5B2E} -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{946B3E9E-E21A-49c8-9F63-900533FAFE14} -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{946B3E9E-E21A-49c8-9F63-900533FAFE14}\\ClsidExtension -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{E77EDA01-3C56-4a96-8D08-02B42891C169} -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{E77EDA01-3C56-4a96-8D08-02B42891C169}\\ClsidExtension -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\HbToolsOutlookTools -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\HbToolsWebTools -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\ShopperReports -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\ShopperReports\ShopperReports -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\ShopperReports\ShopperReports\PostInstaller -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\Common -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\Common\Time -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\Common\Updates -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\dynamic -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\dynamicFail -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\EUI -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\HtmlPPP -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\ImagesHistory -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\init -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Install -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\links -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Local -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\mail -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\MultiUrl -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\options -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\PI -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\PI\3.2 -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Sample -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Sample\Hist -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Sample\Hist\sg800 -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Sample\Hist\sg801 -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Sample\Hist\sg802 -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Sample\Hist\sg803 -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Sample\Hist\sg807 -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Sample\Hist\sg808 -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Sample\Hist\sg810 -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Sample\Hist\sg811 -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Sample\Hist\sg812 -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Sample\Hist\sg818 -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Sample\Hist\sg819 -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Sample\Hist\sg824 -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Sample\Hist\sg825 -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Sample\Hist\sg826 -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Sample\Hist\sg827 -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Sample\Hist\sg828 -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Sample\Hist\sg829 -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Sample\Hist\sg830 -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Sample\Hist\sg842 -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Sample\Hist\sg843 -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Sample\Hist\sg844 -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Sample\Hist\sg845 -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Sample\Hist\sg847 -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Sample\Hist\sg848 -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Sample\Hist\sg849 -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Sample\Hist\sg856 -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Sample\Hist\sg857 -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Sample\Hist\sg862 -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Sample\Hist\sg863 -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Sample\Hist\sgsbt -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\updates -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\UserInfo -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Weather -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HostOI -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HostOI\links -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HostOI\setting -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HostOI\Updates -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\hostol -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\hostol\links -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\hostol\Mail -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\hostol\setting -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\hostol\soho -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\hostol\Updates -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\Time -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\Time\HostIE -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\Time\HostIE\updates -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\Time\HostOE -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\Time\HostOE\Updates -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\Time\HostOI -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\Time\HostOI\Updates -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\Time\HostOL -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\Time\HostOL\Updates -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\Microsoft\Internet Explorer\Explorer Bars\{2178C864-B8BC-41AE-A1FB-EB6A32F87EB1} -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\Microsoft\Internet Explorer\Explorer Bars\{7E66936C-FEA0-4984-AD26-7B6661AC5B2E} -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{74CC49F7-EB32-4A08-B204-948962A6E3DB} -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{946B3E9E-E21A-49C8-9F63-900533FAFE14} -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E77EDA01-3C56-4A96-8D08-02B42891C169} -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\ShopperReports -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\ShopperReports\ShopperReports -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\ShopperReports\ShopperReports\PostInstaller -> Spyware.HotBar : Cleaned with backup
C:\WINDOWS\system32\P2ESOCKS_1014.0LL -> Trojan.P2E.g : Cleaned with backup
C:\WINDOWS\Downloaded Program Files\gsda.dll -> Dialer.Generic : Cleaned with backup
C:\Documents and Settings\kone\Cookies\[email protected][1].txt -> Spyware.Cookie.Itrack : Cleaned with backup
C:\Documents and Settings\kone\Cookies\[email protected][2].txt -> Spyware.Cookie.Itrack : Cleaned with backup
C:\Documents and Settings\kone\Cookies\kone@burstnet[2].txt -> Spyware.Cookie.Burstnet : Cleaned with backup
C:\Documents and Settings\kone\Cookies\[email protected][1].txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
C:\Documents and Settings\kone\Cookies\[email protected][2].txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
C:\Documents and Settings\kone\Cookies\kone@burstnet[3].txt -> Spyware.Cookie.Burstnet : Cleaned with backup
C:\Documents and Settings\kone\Cookies\[email protected][1].txt -> Spyware.Cookie.Euroclick : Cleaned with backup
C:\Program Files\ShopperReports -> Spyware.HotBar : Cleaned with backup
C:\Program Files\ShopperReports\Bin -> Spyware.HotBar : Cleaned with backup
C:\Program Files\ShopperReports\Bin\1.0.8.0 -> Spyware.HotBar : Cleaned with backup
C:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dll -> Spyware.HotBar : Cleaned with backup
C:\Program Files\ShopperReports\cs -> Spyware.HotBar : Cleaned with backup
C:\Program Files\ShopperReports\cs\persist.dbs -> Spyware.HotBar : Cleaned with backup
C:\Program Files\ShopperReports\Uninstall.exe -> Spyware.HotBar : Cleaned with backup
C:\System Volume Information\_restore{E41B72F0-5EDE-4AA4-8125-A3E3CB541449}\RP373\A0045611.dll -> Spyware.HotBar : Cleaned with backup
C:\System Volume Information\_restore{E41B72F0-5EDE-4AA4-8125-A3E3CB541449}\RP373\A0045633.exe -> Spyware.Hotbar : Cleaned with backup
C:\System Volume Information\_restore{E41B72F0-5EDE-4AA4-8125-A3E3CB541449}\RP373\A0046904.dll -> Dialer.Generic : Cleaned with backup
C:\System Volume Information\_restore{E41B72F0-5EDE-4AA4-8125-A3E3CB541449}\RP373\A0046912.exe -> Adware.Hotbar : Cleaned with backup
C:\System Volume Information\_restore{E41B72F0-5EDE-4AA4-8125-A3E3CB541449}\RP373\A0046914.exe -> Spyware.Hotbar : Cleaned with backup
C:\System Volume Information\_restore{E41B72F0-5EDE-4AA4-8125-A3E3CB541449}\RP373\A0046915.dll -> Spyware.HotBar : Cleaned with backup
C:\System Volume Information\_restore{E41B72F0-5EDE-4AA4-8125-A3E3CB541449}\RP373\A0046917.dll -> Adware.Hotbar : Cleaned with backup
C:\System Volume Information\_restore{E41B72F0-5EDE-4AA4-8125-A3E3CB541449}\RP373\A0046918.exe -> Adware.Hotbar : Cleaned with backup
C:\System Volume Information\_restore{E41B72F0-5EDE-4AA4-8125-A3E3CB541449}\RP373\A0046919.exe -> Spyware.HotBar : Cleaned with backup
C:\System Volume Information\_restore{E41B72F0-5EDE-4AA4-8125-A3E3CB541449}\RP373\A0046925.exe -> Spyware.Hotbar : Cleaned with backup
C:\HJT\backups\backup-20051230-124434-487.dll -> Dialer.Generic : Cleaned with backup
D:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\PRPD0NSJ\WksPatch[1].0xe -> Worm.Welchia.b : Cleaned with backup
D:\WINDOWS\system32\drivers\svchost.0xe -> Worm.Welchia.b : Cleaned with backup
G:\TAPIO\VANHAT VARMUUSKOPIOT\Mika.exe -> Dialer.Generic : Cleaned with backup
G:\TAPIO\Mika.exe -> Dialer.Generic : Cleaned with backup
::Report End
Tein kaikki korjaukset ja nyt vasta ajoin Ewidon ja säikähdin; 248 infected objects.........huh...
Tässä raportti siitä, mitä se kertoo ja tuleeko tehdä vielä jotain....
*****************************************
---------------------------------------------------------
ewido anti-malware - Scan report
---------------------------------------------------------
Created on: 17:16:24, 30.12.2005
Report-Checksum: 8CEB63D3
Scan result:
HKLM\SOFTWARE\Classes\AppID\WeatherOnTray.EXE -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\AppID\{0507FDDE-F3B7-49F5-9E8F-C557E991F39B} -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{0774F696-D801-4C18-81A7-A3A32B8BEF19} -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{1E0004EC-5DF0-48C7-A8F0-FBB0488A3D94} -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{1E6AC766-9094-4BCF-ABD3-39E2EAEA5FCD} -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{2178C864-B8BC-41AE-A1FB-EB6A32F87EB1} -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{2A8A997F-BB9F-48F6-AA2B-2762D50F9289} -> Spyware.SmartShopper : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{454B4812-E572-4703-A1BB-63490809EAC0} -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{580A1F3F-89B4-433B-BBDB-B97AEB13F3FC} -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{70BA88C8-DAE8-4CE9-92BB-979C4A75F53B} -> Spyware.GameSpyArcade : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{74CC49F7-EB32-4A08-B204-948962A6E3DB} -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{7E66936C-FEA0-4984-AD26-7B6661AC5B2E} -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{FA16BCE1-5E36-472A-8466-E0CDD5CE00E6} -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbCoreSrv.DynamicProp -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbCoreSrv.DynamicProp\CLSID -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbCoreSrv.DynamicProp\CurVer -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbCoreSrv.DynamicProp.1 -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtCoreSrv.HbtCoreServices -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtCoreSrv.HbtCoreServices\CLSID -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtCoreSrv.HbtCoreServices\CurVer -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtCoreSrv.HbtCoreServices.1 -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtCoreSrv.LfgAx -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtCoreSrv.LfgAx\CLSID -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtCoreSrv.LfgAx\CurVer -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtCoreSrv.LfgAx.1 -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtHostIE.Bho -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtHostIE.Bho\CLSID -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtHostIE.Bho\CurVer -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtHostIE.Bho.1 -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtHostOL.HbtMailAnim -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtHostOL.HbtMailAnim\CLSID -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtHostOL.HbtMailAnim\CurVer -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtHostOL.HbtMailAnim.1 -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtHostOL.HbtWebmailSend -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtHostOL.HbtWebmailSend\CLSID -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtHostOL.HbtWebmailSend\CurVer -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtHostOL.HbtWebmailSend.1 -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbTools.HbtCommBand -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbTools.HbtCommBand\CLSID -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbTools.HbtCommBand\CurVer -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbTools.HbtCommBand.1 -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbTools.HbtTravelCompareBar -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbTools.HbtTravelCompareBar\CLSID -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbTools.HbtTravelCompareBar\CurVer -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbTools.HbtTravelCompareBar.1 -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtSrv.HbtCoreServices -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtSrv.HbtCoreServices\CLSID -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtSrv.HbtCoreServices\CurVer -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtSrv.HbtCoreServices.1 -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtToolbar.HbtHtmlMenuUI -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtToolbar.HbtHtmlMenuUI\CLSID -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtToolbar.HbtHtmlMenuUI\CurVer -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtToolbar.HbtHtmlMenuUI.1 -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtToolbar.HbtToolbarCtl -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtToolbar.HbtToolbarCtl\CLSID -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtToolbar.HbtToolbarCtl\CurVer -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtToolbar.HbtToolbarCtl.1 -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtTools.HbMain -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtTools.HbMain\CLSID -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtTools.HbMain\CurVer -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\HbtTools.HbMain.1 -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{34F4D917-31E4-464C-B8B3-84C1CE76B395} -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{3F04CBF7-CD62-4403-B090-B432DEDCB159} -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{8578D35E-C6C0-4808-9A80-0F6C29A2C423} -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\Interface\{BC190DA5-0187-4D99-B3AC-6C45EA1B9324} -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\RprtsPSClient.PSExecuter -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\RprtsPSClient.PSExecuter\CLSID -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\RprtsPSClient.PSExecuter\CurVer -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\RprtsPSClient.PSExecuter.1 -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\ShprRprts.HbAx -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\ShprRprts.HbAx\CLSID -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\ShprRprts.HbAx\CurVer -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\ShprRprts.HbAx.1 -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\ShprRprts.HbInfoBand -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\ShprRprts.HbInfoBand\CLSID -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\ShprRprts.HbInfoBand\CurVer -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\ShprRprts.HbInfoBand.1 -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\ShprRprts.IEButton -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\ShprRprts.IEButton\CLSID -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\ShprRprts.IEButton\CurVer -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\ShprRprts.IEButton.1 -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\ShprRprts.IEButtonA -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\ShprRprts.IEButtonA\CLSID -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\ShprRprts.IEButtonA\CurVer -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\ShprRprts.IEButtonA.1 -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\ShprRprts.SmrtShprCtl -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\ShprRprts.SmrtShprCtl\CLSID -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\ShprRprts.SmrtShprCtl\CurVer -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\ShprRprts.SmrtShprCtl.1 -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\TypeLib\{45397063-D7D0-47C2-9508-26487608A298} -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\TypeLib\{71E9CF40-AF72-4B55-BD3F-1FEA2A0EAEA6} -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\TypeLib\{71EFE583-62FE-4419-9918-CA3B683F7B36} -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\TypeLib\{793AF621-5CD0-4B92-B765-6712F6AAF48E} -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\TypeLib\{842D315A-7E1E-448B-96E8-9E76D1820BE2} -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\TypeLib\{9967A873-40F3-4C7E-9239-6C8760F19F61} -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\TypeLib\{B5901229-25CC-43C9-B604-3BB6AC2B48A5} -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\TypeLib\{B9F51D42-CCA0-4408-BB02-D433D1865A3A} -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\TypeLib\{C83DAED4-0611-4F7A-978E-7FEAFCB2F91B} -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\TypeLib\{F8EE014F-B34C-4544-8E45-95A7971D323B} -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\Wallpaper.WallpaperManager -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\Wallpaper.WallpaperManager\CLSID -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\Wallpaper.WallpaperManager\CurVer -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Classes\Wallpaper.WallpaperManager.1 -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\HbTools -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\HbTools\HbTools -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\HbTools\HbTools\Install -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\HbTools\HbTools\MachineInfo -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\HbTools\HbTools\Mail -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\HbTools\HbTools\PI -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\HbTools\HbTools\PI\3.2 -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\HbTools\HbTools\Updates -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\HbTools\HbTools\Upgrade -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\HbTools\HostOI -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\HbTools\HostOI\Mail -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\HbTools\HostOI\options -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\HbTools\HostOI\Updates -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\HbTools\HostOL -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\HbTools\HostOL\Mail -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\HbTools\HostOL\Updates -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\HbTools\Hotbar -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\HbTools\Hotbar\Install -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\HbTools\Install -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\HbTools\Install\CmpMap -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\HbTools\Install\Icons -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\HbTools\Install\Links -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{70BA88C8-DAE8-4CE9-92BB-979C4A75F53B} -> Spyware.GameSpyArcade : Cleaned with backup
HKLM\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{7E66936C-FEA0-4984-AD26-7B6661AC5B2E} -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{946B3E9E-E21A-49c8-9F63-900533FAFE14} -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{946B3E9E-E21A-49c8-9F63-900533FAFE14}\\ClsidExtension -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{E77EDA01-3C56-4a96-8D08-02B42891C169} -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{E77EDA01-3C56-4a96-8D08-02B42891C169}\\ClsidExtension -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\HbToolsOutlookTools -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\HbToolsWebTools -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\ShopperReports -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\ShopperReports\ShopperReports -> Spyware.HotBar : Cleaned with backup
HKLM\SOFTWARE\ShopperReports\ShopperReports\PostInstaller -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\Common -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\Common\Time -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\Common\Updates -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\dynamic -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\dynamicFail -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\EUI -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\HtmlPPP -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\ImagesHistory -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\init -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Install -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\links -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Local -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\mail -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\MultiUrl -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\options -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\PI -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\PI\3.2 -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Sample -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Sample\Hist -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Sample\Hist\sg800 -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Sample\Hist\sg801 -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Sample\Hist\sg802 -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Sample\Hist\sg803 -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Sample\Hist\sg807 -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Sample\Hist\sg808 -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Sample\Hist\sg810 -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Sample\Hist\sg811 -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Sample\Hist\sg812 -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Sample\Hist\sg818 -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Sample\Hist\sg819 -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Sample\Hist\sg824 -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Sample\Hist\sg825 -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Sample\Hist\sg826 -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Sample\Hist\sg827 -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Sample\Hist\sg828 -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Sample\Hist\sg829 -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Sample\Hist\sg830 -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Sample\Hist\sg842 -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Sample\Hist\sg843 -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Sample\Hist\sg844 -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Sample\Hist\sg845 -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Sample\Hist\sg847 -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Sample\Hist\sg848 -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Sample\Hist\sg849 -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Sample\Hist\sg856 -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Sample\Hist\sg857 -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Sample\Hist\sg862 -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Sample\Hist\sg863 -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Sample\Hist\sgsbt -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\updates -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\UserInfo -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HbTools\Weather -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HostOI -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HostOI\links -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HostOI\setting -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\HostOI\Updates -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\hostol -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\hostol\links -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\hostol\Mail -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\hostol\setting -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\hostol\soho -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\hostol\Updates -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\Time -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\Time\HostIE -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\Time\HostIE\updates -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\Time\HostOE -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\Time\HostOE\Updates -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\Time\HostOI -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\Time\HostOI\Updates -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\Time\HostOL -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\HbTools\Time\HostOL\Updates -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\Microsoft\Internet Explorer\Explorer Bars\{2178C864-B8BC-41AE-A1FB-EB6A32F87EB1} -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\Microsoft\Internet Explorer\Explorer Bars\{7E66936C-FEA0-4984-AD26-7B6661AC5B2E} -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{74CC49F7-EB32-4A08-B204-948962A6E3DB} -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{946B3E9E-E21A-49C8-9F63-900533FAFE14} -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E77EDA01-3C56-4A96-8D08-02B42891C169} -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\ShopperReports -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\ShopperReports\ShopperReports -> Spyware.HotBar : Cleaned with backup
HKU\S-1-5-21-1644491937-1637723038-725345543-1004\Software\ShopperReports\ShopperReports\PostInstaller -> Spyware.HotBar : Cleaned with backup
C:\WINDOWS\system32\P2ESOCKS_1014.0LL -> Trojan.P2E.g : Cleaned with backup
C:\WINDOWS\Downloaded Program Files\gsda.dll -> Dialer.Generic : Cleaned with backup
C:\Documents and Settings\kone\Cookies\[email protected][1].txt -> Spyware.Cookie.Itrack : Cleaned with backup
C:\Documents and Settings\kone\Cookies\[email protected][2].txt -> Spyware.Cookie.Itrack : Cleaned with backup
C:\Documents and Settings\kone\Cookies\kone@burstnet[2].txt -> Spyware.Cookie.Burstnet : Cleaned with backup
C:\Documents and Settings\kone\Cookies\[email protected][1].txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
C:\Documents and Settings\kone\Cookies\[email protected][2].txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
C:\Documents and Settings\kone\Cookies\kone@burstnet[3].txt -> Spyware.Cookie.Burstnet : Cleaned with backup
C:\Documents and Settings\kone\Cookies\[email protected][1].txt -> Spyware.Cookie.Euroclick : Cleaned with backup
C:\Program Files\ShopperReports -> Spyware.HotBar : Cleaned with backup
C:\Program Files\ShopperReports\Bin -> Spyware.HotBar : Cleaned with backup
C:\Program Files\ShopperReports\Bin\1.0.8.0 -> Spyware.HotBar : Cleaned with backup
C:\Program Files\ShopperReports\Bin\1.0.8.0\ShprRprt.dll -> Spyware.HotBar : Cleaned with backup
C:\Program Files\ShopperReports\cs -> Spyware.HotBar : Cleaned with backup
C:\Program Files\ShopperReports\cs\persist.dbs -> Spyware.HotBar : Cleaned with backup
C:\Program Files\ShopperReports\Uninstall.exe -> Spyware.HotBar : Cleaned with backup
C:\System Volume Information\_restore{E41B72F0-5EDE-4AA4-8125-A3E3CB541449}\RP373\A0045611.dll -> Spyware.HotBar : Cleaned with backup
C:\System Volume Information\_restore{E41B72F0-5EDE-4AA4-8125-A3E3CB541449}\RP373\A0045633.exe -> Spyware.Hotbar : Cleaned with backup
C:\System Volume Information\_restore{E41B72F0-5EDE-4AA4-8125-A3E3CB541449}\RP373\A0046904.dll -> Dialer.Generic : Cleaned with backup
C:\System Volume Information\_restore{E41B72F0-5EDE-4AA4-8125-A3E3CB541449}\RP373\A0046912.exe -> Adware.Hotbar : Cleaned with backup
C:\System Volume Information\_restore{E41B72F0-5EDE-4AA4-8125-A3E3CB541449}\RP373\A0046914.exe -> Spyware.Hotbar : Cleaned with backup
C:\System Volume Information\_restore{E41B72F0-5EDE-4AA4-8125-A3E3CB541449}\RP373\A0046915.dll -> Spyware.HotBar : Cleaned with backup
C:\System Volume Information\_restore{E41B72F0-5EDE-4AA4-8125-A3E3CB541449}\RP373\A0046917.dll -> Adware.Hotbar : Cleaned with backup
C:\System Volume Information\_restore{E41B72F0-5EDE-4AA4-8125-A3E3CB541449}\RP373\A0046918.exe -> Adware.Hotbar : Cleaned with backup
C:\System Volume Information\_restore{E41B72F0-5EDE-4AA4-8125-A3E3CB541449}\RP373\A0046919.exe -> Spyware.HotBar : Cleaned with backup
C:\System Volume Information\_restore{E41B72F0-5EDE-4AA4-8125-A3E3CB541449}\RP373\A0046925.exe -> Spyware.Hotbar : Cleaned with backup
C:\HJT\backups\backup-20051230-124434-487.dll -> Dialer.Generic : Cleaned with backup
D:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\PRPD0NSJ\WksPatch[1].0xe -> Worm.Welchia.b : Cleaned with backup
D:\WINDOWS\system32\drivers\svchost.0xe -> Worm.Welchia.b : Cleaned with backup
G:\TAPIO\VANHAT VARMUUSKOPIOT\Mika.exe -> Dialer.Generic : Cleaned with backup
G:\TAPIO\Mika.exe -> Dialer.Generic : Cleaned with backup
::Report End
Vastaukset 10
Vanhimmat
Aika hitaasti käynnistyy....
Otin Ewidolla StartUp-listan.
Mitä näistä vois jättää käynnistyksestä pois?
Eikö se nopeuttais jonkin verran?
Tässäpä listaus:
*******************************
---------------------------------------------------------
ewido anti-malware - Startup report
---------------------------------------------------------
Created on: 17:46:29, 30.12.2005
Report-Checksum: 46F04E3F
Reg\HKLM\Run RemoteControl "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
Reg\HKLM\Run SoundMan SOUNDMAN.EXE
Reg\HKLM\Run AdaptecDirectCD "C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe"
Reg\HKLM\Run HPDJ Taskbar Utility C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb08.exe
Reg\HKLM\Run WinampAgent "C:\Program Files\Winamp3\winampa.exe"
Reg\HKLM\Run NeroCheck C:\WINDOWS\system32\NeroCheck.exe
Reg\HKLM\Run F-Secure Manager "g:\program files\F-Secure\Common\FSM32.EXE" /splash
Reg\HKLM\Run TkBellExe "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
Reg\HKLM\Run NvCplDaemon RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
Reg\HKLM\Run nwiz nwiz.exe /install
Reg\HKLM\Run F-Secure TNB "g:\program files\F-Secure\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
Reg\HKLM\Run NvMediaCenter RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
Reg\HKLM\Run
Reg\HKLM\Run Norton Ghost 9.0 D:\Program Files\Norton Ghost 9.0\Agent\GhostTray.exe
Reg\HKLM\Run Siemens SmartSync - ScheduleSync D:\PROGRA~1\siemens\SMARTS~1\SCHEDU~1.EXE
Reg\HKCU\Run ctfmon.exe C:\WINDOWS\system32\ctfmon.exe
Reg\HKCU\Run Performance Center C:\Program Files\Ascentive\Performance Center\APCMain.exe -m
Shell\CommonStartup F-Secure Automatic Update.lnk C:\Documents and Settings\All Users\Käynnistä-valikko\Ohjelmat\Käynnistys\F-Secure Automatic Update.lnk
Shell\CommonStartup Adobe Reader Speed Launch.lnk C:\Documents and Settings\All Users\Käynnistä-valikko\Ohjelmat\Käynnistys\Adobe Reader Speed Launch.lnk
Shell\CommonStartup Windows-työpöytähaku.lnk C:\Documents and Settings\All Users\Käynnistä-valikko\Ohjelmat\Käynnistys\Windows-työpöytähaku.lnk
Shell\UserStartup Webshots.lnk C:\Documents and Settings\kone\Käynnistä-valikko\Ohjelmat\Käynnistys\Webshots.lnk
Ompa sattumia ewidon logissa
mielestäni seuraavat voisi jättää pois käynnistymästä
Reg\HKLM\Run RemoteControl "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
Reg\HKLM\Run AdaptecDirectCD "C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe"
Reg\HKLM\Run WinampAgent "C:\Program Files\Winamp3\winampa.exe"
Reg\HKLM\Run NeroCheck C:\WINDOWS\system32\NeroCheck.exe
Reg\HKLM\Run TkBellExe "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
Reg\HKLM\Run Norton Ghost 9.0 D:\Program Files\Norton Ghost 9.0\Agent\GhostTray.exe
Reg\HKLM\Run Siemens SmartSync - ScheduleSync D:\PROGRA~1\siemens\SMARTS~1\SCHEDU~1.EXE
Reg\HKCU\Run ctfmon.exe C:\WINDOWS\system32\ctfmon.exe
Reg\HKCU\Run Performance Center C:\Program Files\Ascentive\Performance Center\APCMain.exe -m
Shell\CommonStartup Adobe Reader Speed Launch.lnk C:\Documents and Settings\All Users\Käynnistä-valikko\Ohjelmat\Käynnistys\Adobe Reader Speed Launch.lnk
Shell\CommonStartup Windows-työpöytähaku.lnk C:\Documents and Settings\All Users\Käynnistä-valikko\Ohjelmat\Käynnistys\Windows-työpöytähaku.lnk
Shell\UserStartup Webshots.lnk C:\Documents and Settings\kone\Käynnistä-valikko\Ohjelmat\Käynnistys\Webshots.lnk
otappa uusi HJT-loki
Logfile of HijackThis v1.99.1
Scan saved at 19:19:11, on 30.12.2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb08.exe
G:\program files\F-Secure\Common\FSM32.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
D:\Program Files\Norton Ghost 9.0\Agent\GhostTray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fi-fi\bin\WindowsSearch.exe
C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fi-fi\bin\WindowsSearchIndexer.exe
g:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\ewido anti-malware\ewidoguard.exe
g:\program files\F-Secure\BackWeb\7681197\Program\F-Secure Automatic Update.exe
g:\program files\F-Secure\Anti-Virus\fsgk32st.exe
g:\program files\F-Secure\Anti-Virus\FSGK32.EXE
g:\program files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
g:\program files\F-Secure\Common\FSMA32.EXE
C:\WINDOWS\System32\GEARSec.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
g:\program files\F-Secure\Common\FSMB32.EXE
D:\Program Files\Norton Ghost 9.0\Agent\PQV2iSvc.exe
g:\program files\F-Secure\Anti-Virus\fssm32.exe
g:\program files\F-Secure\Common\FCH32.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
g:\program files\F-Secure\Anti-Virus\fsqh.exe
g:\program files\F-Secure\Common\FAMEH32.EXE
g:\program files\F-Secure\Anti-Virus\fsrw.exe
g:\program files\F-Secure\Common\FNRB32.EXE
g:\program files\F-Secure\Anti-Virus\fsav32.exe
g:\program files\F-Secure\FWES\Program\fsdfwd.exe
g:\program files\F-Secure\Common\FIH32.EXE
g:\PROGRA~1\F-Secure\ANTI-S~1\fsaw.exe
g:\program files\F-Secure\FSGUI\fsguidll.exe
G:\INCRED~1\bin\IMApp.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\HJT\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.suomi24.fi/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.soneraplaza.fi
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fi/0SEFIFI/SAOS01
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.suomi24.fi/
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.fi/0SEFIFI/SAOS01?FORM=TOOLBR
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer - toimittaja Sonera Plaza Oy
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.inet.fi:800
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.fi;*.*.fi;*.*.*.fi
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb08.exe
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp3\winampa.exe"
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [F-Secure Manager] "g:\program files\F-Secure\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [F-Secure TNB] "g:\program files\F-Secure\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Performance Center] C:\Program Files\Ascentive\Performance Center\APCMain.exe -m
O4 - Startup: Webshots.lnk = G:\Program Files\Webshots\Launcher.exe
O4 - Global Startup: F-Secure Automatic Update.lnk = G:\Program Files\F-Secure\BackWeb\7681197\program\F-Secure Automatic Update.exe
O4 - Global Startup: Windows-työpöytähaku.lnk = C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fi-fi\bin\WindowsSearch.exe
O8 - Extra context menu item: &Block this popup - g:\program files\F-Secure\Anti-Spyware\blockpopups.htm
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fi-fi\msntb.dll/search.htm
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O8 - Extra context menu item: Vie Microsoft E&xceliin - res://D:\OHJELM~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: IE Shield - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - g:\program files\F-Secure\Anti-Spyware\ieshield.dll
O9 - Extra 'Tools' menuitem: IE Shield... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - g:\program files\F-Secure\Anti-Spyware\ieshield.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: g:\program files\f-secure\fsps\program\fslsp.dll
O10 - Unknown file in Winsock LSP: g:\program files\f-secure\fsps\program\fslsp.dll
O10 - Unknown file in Winsock LSP: g:\program files\f-secure\fsps\program\fslsp.dll
O10 - Unknown file in Winsock LSP: g:\program files\f-secure\fsps\program\fslsp.dll
O10 - Unknown file in Winsock LSP: g:\program files\f-secure\fsps\program\fslsp.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.soneraplaza.fi
O16 - DPF: {11260943-421B-11D0-8EAC-0000C07D88CF} (iPIX ActiveX Control) - http://www.ipix.com/viewers/ipixx.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cab
O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - http://www.cult3d.com/download/cult.cab
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52/20011217/qtinstall.info.apple.com/qt505/fi/win/QuickTimeInstaller.exe
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {54B52E52-8000-4413-BD67-FC7FE24B59F2} (EARTPatchX Class) - http://www.ea.com/downloads/rtpatch/EARTPX.cab
O16 - DPF: {5D9E4B6D-CD17-4D85-99D4-6A52B394EC3B} (WSDownloader Control) - http://www.webshots.com/samplers/WSDownloader.ocx
O16 - DPF: {6E2D6932-3885-4FA2-8DD4-DB63FFE33797} (PhotoPickConvert Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/PhotoSwap/PhtPkCnv.cab
O16 - DPF: {9A54032D-31F7-400D-B184-83B33BDE65FA} (MSN File Upload Control) - http://sc.groups.msn.com/controls/FileUC/MsnUpld.cab
O16 - DPF: {9FC5238F-12C4-454F-B1B5-74599A21DE47} (Webshots Photo Uploader) - http://community.webshots.com/html/WSPhotoUploader.CAB
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {C3DFA998-A486-11D4-AA25-00C04F72DAEB} (MSN Photo Upload Tool) - http://photos.msn.fi/r/neutral/controls/MsnPUpld.cab?5,0,1730,0
O16 - DPF: {C4925E65-7A1E-11D2-8BB4-00A0C9CC72C3} (Virtools WebPlayer Class) - http://a532.g.akamai.net/7/532/6712/fbb462b0963d99/player.virtools.com/downloads/player/Install2.5/Installer.exe
O16 - DPF: {EB387D2F-E27B-4D36-979E-847D1036C65D} (QDiagHUpdateObj Class) - http://h30043.www3.hp.com/sj/en/check/qdiagh.cab?316
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/bin/msnchat45.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: F-Secure Automatic Update (BackWeb Client - 7681197) - F-Secure Automatic Update - g:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido anti-malware\ewidoguard.exe
O23 - Service: F-Secure BackWeb LAN Access - Unknown owner - g:\program files\F-Secure\BackWeb\7681197\Program\fsbwlan.exe (file missing)
O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - g:\program files\F-Secure\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - g:\program files\F-Secure\Common\FNRB32.EXE
O23 - Service: fsbwsys - F-Secure Corp. - g:\program files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - g:\program files\F-Secure\FWES\Program\fsdfwd.exe
O23 - Service: FSMA - F-Secure Corporation - g:\program files\F-Secure\Common\FSMA32.EXE
O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\System32\GEARSec.exe
O23 - Service: IMAPI CD-Burning COM Service (ImapiService) - Roxio Inc. - C:\WINDOWS\System32\ImapiRox.exe
O23 - Service: Norton Ghost - Symantec Corporation - D:\Program Files\Norton Ghost 9.0\Agent\PQV2iSvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
Mä poistin startupista melkein kaikki, mitä ehdotit ja käynnistin koneen. F-Secure ja backup ei käynnisty nyt ollenkaan....
Pitäiskö ajaa netista F-Secure uudelleen, vai....
tossa ei pitänyt olla yhtään f-securen softaa, kokeile palautusta backupista , jos sitten toimii niin ihme.
...hölmö Secure, se vaan vituili.
Taisi loukkaantua, kun otin Ewidon kaveriksi. Buuttasin pari kertaa ja jopas tuli takaisin.
Asia on OK siltä osin siis :)
No nyt ei pellitä.... sä varmaan tarkoitit, että otan uuden login sen jälkeen, kun olin poistanut startupista ohjelmia, jos niin meinasit, niin tässä on tämän hetken tilanne:
Logfile of HijackThis v1.99.1
Scan saved at 20:27:13, on 30.12.2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
g:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\ewido anti-malware\ewidoguard.exe
g:\program files\F-Secure\Anti-Virus\fsgk32st.exe
g:\program files\F-Secure\Anti-Virus\FSGK32.EXE
g:\program files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
g:\program files\F-Secure\Common\FSMA32.EXE
C:\WINDOWS\System32\GEARSec.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
g:\program files\F-Secure\Common\FSMB32.EXE
D:\Program Files\Norton Ghost 9.0\Agent\PQV2iSvc.exe
g:\program files\F-Secure\Anti-Virus\fssm32.exe
C:\WINDOWS\system32\nvsvc32.exe
g:\program files\F-Secure\Common\FCH32.EXE
C:\WINDOWS\System32\svchost.exe
g:\program files\F-Secure\Anti-Virus\fsqh.exe
g:\program files\F-Secure\Common\FAMEH32.EXE
g:\program files\F-Secure\Anti-Virus\fsrw.exe
g:\program files\F-Secure\Anti-Virus\fsav32.exe
g:\program files\F-Secure\Common\FNRB32.EXE
g:\program files\F-Secure\Common\FIH32.EXE
g:\program files\F-Secure\FWES\Program\fsdfwd.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb08.exe
G:\program files\F-Secure\Common\FSM32.EXE
g:\PROGRA~1\F-Secure\ANTI-S~1\fsaw.exe
C:\WINDOWS\system32\RUNDLL32.EXE
G:\Program Files\F-Secure\BackWeb\7681197\program\F-Secure Automatic Update.exe
C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fi-fi\bin\WindowsSearch.exe
g:\program files\F-Secure\FSGUI\fsguidll.exe
G:\PROGRA~1\Webshots\webshots.scr
C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fi-fi\bin\WindowsSearchIndexer.exe
C:\HJT\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.suomi24.fi/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.soneraplaza.fi
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fi/0SEFIFI/SAOS01
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.suomi24.fi/
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.fi/0SEFIFI/SAOS01?FORM=TOOLBR
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer - toimittaja Sonera Plaza Oy
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.inet.fi:800
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.fi;*.*.fi;*.*.*.fi
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb08.exe
O4 - HKLM\..\Run: [F-Secure Manager] "g:\program files\F-Secure\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [F-Secure TNB] "g:\program files\F-Secure\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - Startup: Webshots.lnk = G:\Program Files\Webshots\Launcher.exe
O4 - Global Startup: F-Secure Automatic Update.lnk = G:\Program Files\F-Secure\BackWeb\7681197\program\F-Secure Automatic Update.exe
O4 - Global Startup: Windows-työpöytähaku.lnk = C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fi-fi\bin\WindowsSearch.exe
O8 - Extra context menu item: &Block this popup - g:\program files\F-Secure\Anti-Spyware\blockpopups.htm
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fi-fi\msntb.dll/search.htm
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O8 - Extra context menu item: Vie Microsoft E&xceliin - res://D:\OHJELM~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: IE Shield - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - g:\program files\F-Secure\Anti-Spyware\ieshield.dll
O9 - Extra 'Tools' menuitem: IE Shield... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - g:\program files\F-Secure\Anti-Spyware\ieshield.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: g:\program files\f-secure\fsps\program\fslsp.dll
O10 - Unknown file in Winsock LSP: g:\program files\f-secure\fsps\program\fslsp.dll
O10 - Unknown file in Winsock LSP: g:\program files\f-secure\fsps\program\fslsp.dll
O10 - Unknown file in Winsock LSP: g:\program files\f-secure\fsps\program\fslsp.dll
O10 - Unknown file in Winsock LSP: g:\program files\f-secure\fsps\program\fslsp.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.soneraplaza.fi
O16 - DPF: {11260943-421B-11D0-8EAC-0000C07D88CF} (iPIX ActiveX Control) - http://www.ipix.com/viewers/ipixx.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cab
O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - http://www.cult3d.com/download/cult.cab
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52/20011217/qtinstall.info.apple.com/qt505/fi/win/QuickTimeInstaller.exe
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {54B52E52-8000-4413-BD67-FC7FE24B59F2} (EARTPatchX Class) - http://www.ea.com/downloads/rtpatch/EARTPX.cab
O16 - DPF: {5D9E4B6D-CD17-4D85-99D4-6A52B394EC3B} (WSDownloader Control) - http://www.webshots.com/samplers/WSDownloader.ocx
O16 - DPF: {6E2D6932-3885-4FA2-8DD4-DB63FFE33797} (PhotoPickConvert Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/PhotoSwap/PhtPkCnv.cab
O16 - DPF: {9A54032D-31F7-400D-B184-83B33BDE65FA} (MSN File Upload Control) - http://sc.groups.msn.com/controls/FileUC/MsnUpld.cab
O16 - DPF: {9FC5238F-12C4-454F-B1B5-74599A21DE47} (Webshots Photo Uploader) - http://community.webshots.com/html/WSPhotoUploader.CAB
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {C3DFA998-A486-11D4-AA25-00C04F72DAEB} (MSN Photo Upload Tool) - http://photos.msn.fi/r/neutral/controls/MsnPUpld.cab?5,0,1730,0
O16 - DPF: {C4925E65-7A1E-11D2-8BB4-00A0C9CC72C3} (Virtools WebPlayer Class) - http://a532.g.akamai.net/7/532/6712/fbb462b0963d99/player.virtools.com/downloads/player/Install2.5/Installer.exe
O16 - DPF: {EB387D2F-E27B-4D36-979E-847D1036C65D} (QDiagHUpdateObj Class) - http://h30043.www3.hp.com/sj/en/check/qdiagh.cab?316
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/bin/msnchat45.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: F-Secure Automatic Update (BackWeb Client - 7681197) - F-Secure Automatic Update - g:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido anti-malware\ewidoguard.exe
O23 - Service: F-Secure BackWeb LAN Access - Unknown owner - g:\program files\F-Secure\BackWeb\7681197\Program\fsbwlan.exe (file missing)
O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - g:\program files\F-Secure\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - g:\program files\F-Secure\Common\FNRB32.EXE
O23 - Service: fsbwsys - F-Secure Corp. - g:\program files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - g:\program files\F-Secure\FWES\Program\fsdfwd.exe
O23 - Service: FSMA - F-Secure Corporation - g:\program files\F-Secure\Common\FSMA32.EXE
O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\System32\GEARSec.exe
O23 - Service: IMAPI CD-Burning COM Service (ImapiService) - Roxio Inc. - C:\WINDOWS\System32\ImapiRox.exe
O23 - Service: Norton Ghost - Symantec Corporation - D:\Program Files\Norton Ghost 9.0\Agent\PQV2iSvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
nyt ohjelmalista on sopiva, olet tehnyt oikein
Noiden kaikkien korjausten jälkeen olen värkkäillyt nyt tässä koneella illan ja täytyypä sanoa, että edessäni on kuin täysin toinen mylly.
Hommat pelaa ja mikään ei töki ja virukset ym. örkit on tapettu.
Kiitos, ja jos voisin, lähettäisin vaikka shamppanjapullon uudeksi vuodeksi kiitokseksi.
Kiitos paljon teille, jotka täällä teette arvostettavaa hommaa.
Ja hyvää uutta vuotta.