Logfile of HijackThis v1.99.1
Scan saved at 19:50:21, on 14.1.2006
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\sstray.exe
D:\PROGRAM FILES\ANTIVIR\AVGUARD.EXE
D:\Program Files\Winamp\winampa.exe
D:\Program Files\AntiVir\AVGNT.EXE
C:\Program Files\Java\jre1.5.0_05\bin\jusched.exe
D:\Program Files\AntiVir\AVWUPSRV.EXE
D:\Ohjelmat\d-tools\daemon.exe
D:\Ohjelmat\quicktime\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\cmd.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Hara\Local Settings\Temp\Temporary Directory 1 for hijackthis.zip\HijackThis.exe
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r
O4 - HKLM\..\Run: [WinampAgent] D:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [AVGCtrl] "D:\Program Files\AntiVir\AVGNT.EXE" /min
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_05\bin\jusched.exe
O4 - HKLM\..\Run: [DAEMON Tools-1033] "D:\Ohjelmat\d-tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [iTunesHelper] "D:\Ohjelmat\quicktime\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Internet Explorer Helper] C:\WINDOWS\System32\scvhost.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [Steam] "d:\pelit\valve\steam\steam.exe" -silent
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - Global Startup: Adobe Reader Speed Launch.lnk = D:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://D:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1129380045858
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: AntiVir Service (AntiVirService) - H BEDV Datentechnik GmbH - D:\PROGRAM FILES\ANTIVIR\AVGUARD.EXE
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AntiVir Update (AVWUpSrv) - H BEDV Datentechnik GmbH, Germany - D:\Program Files\AntiVir\AVWUPSRV.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: MicroSoft Media Tools - Unknown owner - C:\WINDOWS\MSmedia.exe
O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe
Scan saved at 19:50:21, on 14.1.2006
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\sstray.exe
D:\PROGRAM FILES\ANTIVIR\AVGUARD.EXE
D:\Program Files\Winamp\winampa.exe
D:\Program Files\AntiVir\AVGNT.EXE
C:\Program Files\Java\jre1.5.0_05\bin\jusched.exe
D:\Program Files\AntiVir\AVWUPSRV.EXE
D:\Ohjelmat\d-tools\daemon.exe
D:\Ohjelmat\quicktime\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\cmd.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Hara\Local Settings\Temp\Temporary Directory 1 for hijackthis.zip\HijackThis.exe
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r
O4 - HKLM\..\Run: [WinampAgent] D:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [AVGCtrl] "D:\Program Files\AntiVir\AVGNT.EXE" /min
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_05\bin\jusched.exe
O4 - HKLM\..\Run: [DAEMON Tools-1033] "D:\Ohjelmat\d-tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [iTunesHelper] "D:\Ohjelmat\quicktime\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Internet Explorer Helper] C:\WINDOWS\System32\scvhost.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [Steam] "d:\pelit\valve\steam\steam.exe" -silent
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - Global Startup: Adobe Reader Speed Launch.lnk = D:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://D:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1129380045858
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: AntiVir Service (AntiVirService) - H BEDV Datentechnik GmbH - D:\PROGRAM FILES\ANTIVIR\AVGUARD.EXE
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AntiVir Update (AVWUpSrv) - H BEDV Datentechnik GmbH, Germany - D:\Program Files\AntiVir\AVWUPSRV.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: MicroSoft Media Tools - Unknown owner - C:\WINDOWS\MSmedia.exe
O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe
Vastaukset 3
Vanhimmat
Siirrä hjt omaan hakemistoon -> C:\hjt
Fixaa HjT:llä (do a system scan only, merkkaa ja paina fix checked):
O4 - HKLM\..\Run: [Internet Explorer Helper] C:\WINDOWS\System32\scvhost.exe
O23 - Service: MicroSoft Media Tools - Unknown owner - C:\WINDOWS\MSmedia.exe
Sammuta tuo service näin:
käynnistä -> suorita -> services.msc -> ok
Etsi listalta:
MicroSoft Media Tools
Tuplaklikkaa, paina seis ja valitse käynnistymistavaksi "ei käytössä"
Laita piilotiedostot näkyviin, ohje ->
http://keskustelu.afterdawn.com/thread_view.cfm/248944
Hae ewido -> http://www.ewido.net/en/download
Asenna ja päivitä se.
Käynnistä vikasietotilaan (F8 käynnistyksen yhteydessä) ja poista, jos on:
C:\WINDOWS\System32\==>scvhost.exeMSmedia.exe
Logfile of HijackThis v1.99.1
Scan saved at 21:42:53, on 14.1.2006
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Sygate\SPF\smc.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\sstray.exe
D:\Program Files\Winamp\winampa.exe
D:\Program Files\AntiVir\AVGNT.EXE
C:\Program Files\Java\jre1.5.0_05\bin\jusched.exe
D:\Ohjelmat\d-tools\daemon.exe
D:\Ohjelmat\quicktime\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\System32\ctfmon.exe
D:\pelit\valve\steam\steam.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
D:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
D:\PROGRAM FILES\ANTIVIR\AVGUARD.EXE
D:\Program Files\AntiVir\AVWUPSRV.EXE
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\ewido anti-malware\ewidoguard.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Hijackthis\HijackThis.exe
C:\WINDOWS\System32\wuauclt.exe
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r
O4 - HKLM\..\Run: [WinampAgent] D:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [AVGCtrl] "D:\Program Files\AntiVir\AVGNT.EXE" /min
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_05\bin\jusched.exe
O4 - HKLM\..\Run: [DAEMON Tools-1033] "D:\Ohjelmat\d-tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [iTunesHelper] "D:\Ohjelmat\quicktime\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [Steam] "d:\pelit\valve\steam\steam.exe" -silent
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - Global Startup: Adobe Reader Speed Launch.lnk = D:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://D:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1129380045858
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: AntiVir Service (AntiVirService) - H BEDV Datentechnik GmbH - D:\PROGRAM FILES\ANTIVIR\AVGUARD.EXE
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AntiVir Update (AVWUpSrv) - H BEDV Datentechnik GmbH, Germany - D:\Program Files\AntiVir\AVWUPSRV.EXE
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido anti-malware\ewidoguard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe
---------------------------------------------------------
ewido anti-malware - Scan report
---------------------------------------------------------
Created on: 21:39:48, 14.1.2006
Report-Checksum: 6D0D36E4
Scan result:
:mozilla.13:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Sextracker : Cleaned with backup
:mozilla.14:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.15:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.16:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.17:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.18:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.19:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.20:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.21:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.22:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.23:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.24:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.25:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.26:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.27:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.28:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.29:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.30:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.31:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.32:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.33:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.34:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.35:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.36:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.37:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.38:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.39:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.40:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.41:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.42:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.43:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Sexcounter : Cleaned with backup
:mozilla.52:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Atdmt : Cleaned with backup
:mozilla.53:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Addynamix : Cleaned with backup
:mozilla.56:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Doubleclick : Cleaned with backup
:mozilla.59:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Tradedoubler : Cleaned with backup
:mozilla.60:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.86:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Webtrendslive : Cleaned with backup
:mozilla.88:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Googleadservices : Cleaned with backup
:mozilla.89:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Adtech : Cleaned with backup
:mozilla.90:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Adtech : Cleaned with backup
:mozilla.94:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Sexlist : Cleaned with backup
:mozilla.95:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Sexlist : Cleaned with backup
:mozilla.96:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Sexlist : Cleaned with backup
:mozilla.97:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Sexlist : Cleaned with backup
:mozilla.98:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Sexlist : Cleaned with backup
:mozilla.99:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Sexlist : Cleaned with backup
:mozilla.100:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Sexlist : Cleaned with backup
:mozilla.108:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.109:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.110:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.111:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.112:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
:mozilla.114:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Revenue : Cleaned with backup
:mozilla.120:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Com : Cleaned with backup
:mozilla.121:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Com : Cleaned with backup
:mozilla.125:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Statcounter : Cleaned with backup
:mozilla.126:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Statcounter : Cleaned with backup
:mozilla.127:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Statcounter : Cleaned with backup
:mozilla.128:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Statcounter : Cleaned with backup
:mozilla.129:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Statcounter : Cleaned with backup
:mozilla.130:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Statcounter : Cleaned with backup
:mozilla.131:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Statcounter : Cleaned with backup
:mozilla.132:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Statcounter : Cleaned with backup
:mozilla.142:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.143:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
:mozilla.146:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.147:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.155:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Paycounter : Cleaned with backup
:mozilla.160:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Serving-sys : Cleaned with backup
:mozilla.161:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Serving-sys : Cleaned with backup
:mozilla.162:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Serving-sys : Cleaned with backup
:mozilla.163:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Serving-sys : Cleaned with backup
:mozilla.186:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.196:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Masterstats : Cleaned with backup
:mozilla.205:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Questionmarket : Cleaned with backup
:mozilla.214:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Sitestat : Cleaned with backup
:mozilla.216:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Clickzs : Cleaned with backup
:mozilla.217:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Clickzs : Cleaned with backup
:mozilla.218:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Clickzs : Cleaned with backup
:mozilla.219:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Clickzs : Cleaned with backup
:mozilla.220:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
:mozilla.221:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Clickzs : Cleaned with backup
:mozilla.222:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Clickzs : Cleaned with backup
:mozilla.223:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Clickzs : Cleaned with backup
:mozilla.224:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Clickzs : Cleaned with backup
:mozilla.235:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Spylog : Cleaned with backup
:mozilla.265:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Onestat : Cleaned with backup
:mozilla.266:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Onestat : Cleaned with backup
:mozilla.267:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Clickzs : Cleaned with backup
:mozilla.268:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Clickzs : Cleaned with backup
:mozilla.278:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Pro-market : Cleaned with backup
:mozilla.280:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.247realmedia : Cleaned with backup
:mozilla.289:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Centrport : Cleaned with backup
:mozilla.299:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Fastclick : Cleaned with backup
:mozilla.311:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
:mozilla.320:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.321:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.322:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.323:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.324:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.325:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.326:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
:mozilla.329:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Casalemedia : Cleaned with backup
:mozilla.347:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Ivwbox : Cleaned with backup
:mozilla.349:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Tribalfusion : Cleaned with backup
:mozilla.350:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Targetnet : Cleaned with backup
:mozilla.355:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Sitestat : Cleaned with backup
:mozilla.378:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Burstnet : Cleaned with backup
:mozilla.379:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Burstnet : Cleaned with backup
:mozilla.387:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Bridgetrack : Cleaned with backup
:mozilla.388:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Bridgetrack : Cleaned with backup
:mozilla.391:C:\Documents and Settings\Hara\Application Data\Mozilla\Firefox\Profiles\bhfi2gas.default\cookies.txt -> Spyware.Cookie.Trafic : Cleaned with backup
C:\Documents and Settings\Hara\Cookies\hara@atdmt[2].txt -> Spyware.Cookie.Atdmt : Cleaned with backup
C:\Documents and Settings\Hara\Cookies\hara@doubleclick[2].txt -> Spyware.Cookie.Doubleclick : Cleaned with backup
C:\Documents and Settings\Hara\Cookies\hara@serving-sys[2].txt -> Spyware.Cookie.Serving-sys : Cleaned with backup
C:\Documents and Settings\Hara\Cookies\hara@tradedoubler[2].txt -> Spyware.Cookie.Tradedoubler : Cleaned with backup
C:\WINDOWS\system32\rdriv.sys -> Trojan.Rootkit.k : Cleaned with backup
D:\Program Files\AntiVir\INFECTED\RDRIV.SYS.001 -> Trojan.Rootkit.k : Cleaned with backup
D:\Program Files\AntiVir\INFECTED\RDRIV.SYS.002 -> Trojan.Rootkit.k : Cleaned with backup
D:\Program Files\AntiVir\INFECTED\RDRIV.SYS.VIR -> Trojan.Rootkit.k : Cleaned with backup
D:\Program Files\AntiVir\INFECTED\TFTP868.VIR -> Backdoor.Rbot : Cleaned with backup
::Report End
on ok. Nyt kun kone on puhdas, niin käy päivittämässä Windowsisi. Muuten siellä on huomenna jo nuo samat madot.