Rekisteröidy

Ilmoitukset

Ladataan…

    Näytä kaikki

    logia logia

    juu jos joku ystävällisesti jaksaa tätä logia tarkistaa

    Logfile of HijackThis v1.99.1
    Scan saved at 19:10:53, on 17.1.2006
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\CA\SharedComponents\CA_LIC\lic98rmt.exe
    C:\Program Files\CA\eTrust SCM\Bin\CRepSrv.exe
    C:\Program Files\CA\eTrust SCM\Bin\DCollSrv.exe
    C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe
    C:\Program Files\CA\SharedComponents\eTrust Common Services\Bin\ECSQDMN.exe
    C:\Program Files\CA\SharedComponents\ScanGateway\icihttp.exe
    C:\Program Files\CA\SharedComponents\CA_LIC\LogWatNT.exe
    C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
    C:\Program Files\Symantec_Client_Security\Symantec Client Firewall\NISUM.EXE
    C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\CA\eTrust SCM\Bin\QmgrSrv.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Symantec_Client_Security\Symantec Client Firewall\SymPxSvc.exe
    C:\Program Files\CA\SharedComponents\eTrust Common Services\Bin\ECSSAFMGR.exe
    C:\PROGRA~1\SYMANT~1\SYMANT~2\IAMAPP.EXE
    C:\Program Files\Symantec_Client_Security\Symantec Client Firewall\NISSERV.EXE
    C:\Program Files\Microsoft Hardware\Keyboard\type32.exe
    C:\Program Files\TeleWell\TW-EA100B ADSL USB\CnxDslTb.exe
    C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
    C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\MSN Messenger\MsnMsgr.Exe
    C:\Program Files\Java\jre1.5.0_01\bin\jucheck.exe
    C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
    C:\Program Files\Symantec_Client_Security\Symantec Client Firewall\ATRACK.EXE
    C:\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer,(Default) = http://fastsearchweb.com/srh.php?q=%s
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.suomi24.fi
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.suomi24.fi
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.suomi24.fi
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.suomi24.fi
    R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = about:blank
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Sonera Internet
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.fi;*.*.fi;*.*.*.fi;
    R3 - URLSearchHook: (no name) - {4116316779-DBF5-52C7-0EB3-431615D240FB9} - TemplateDongle.dll (file missing)
    O1 - Hosts: 195.238.201.224 kotikone.ohjelmistot.com
    O1 - Hosts: 195.238.201.224 samikoti.ohjelmistot.com
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
    O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
    O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fi\msntb.dll
    O2 - BHO: (no name) - {CC3B4E56-EFAE-45CB-941E-B39B54DD28A2} - C:\WINDOWS\System32\rcpie.dll (file missing)
    O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fi\msntb.dll
    O4 - HKLM\..\Run: [iamapp] C:\PROGRA~1\SYMANT~1\SYMANT~2\IAMAPP.EXE
    O4 - HKLM\..\Run: [IntelliType] "C:\Program Files\Microsoft Hardware\Keyboard\type32.exe"
    O4 - HKLM\..\Run: [CnxDslTaskBar] C:\Program Files\TeleWell\TW-EA100B ADSL USB\CnxDslTb.exe
    O4 - HKLM\..\Run: [DNSCacheBoost] C:\WINDOWS\System32\dnsping.exe
    O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
    O4 - HKLM\..\RunServices: [Microsoft Update Machine] Winregs32.exe
    O4 - HKLM\..\RunServices: [Patches Value] WinGamed.exe
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
    O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
    O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
    O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O14 - IERESET.INF: START_PAGE_URL=http://www.soneraplaza.fi
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
    O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
    O17 - HKLM\System\CCS\Services\Tcpip\..\{343D00A6-4444-4773-9D41-3D58C37752D5}: NameServer = 69.50.166.94,69.31.80.244
    O17 - HKLM\System\CCS\Services\Tcpip\..\{ACE690C4-6138-48F5-B833-AD4AFEFA0672}: NameServer = 69.50.166.94,193.210.19.19
    O20 - Winlogon Notify: NavLogon - C:\WINDOWS\System32\NavLogon.dll
    O23 - Service: CA License Client (CA_LIC_CLNT) - Computer Associates International Inc. - C:\Program Files\CA\SharedComponents\CA_LIC\lic98rmt.exe
    O23 - Service: CA License Server (CA_LIC_SRVR) - Computer Associates International Inc. - C:\Program Files\CA\SharedComponents\CA_LIC\lic98rmtd.exe
    O23 - Service: COM System Application (COMSysApp) - Conexant Systems Inc. - (no file)
    O23 - Service: eTrust SCM Central Reporter (CRepSrv) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust SCM\Bin\CRepSrv.exe
    O23 - Service: eTrust SCM Data Collector (DCollSrv) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust SCM\Bin\DCollSrv.exe
    O23 - Service: DefWatch - Symantec Corporation - C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe
    O23 - Service: eTrust Common Services Log Daemon (ECSLOGD) - Computer Associates International, Inc. - C:\Program Files\CA\SharedComponents\eTrust Common Services\Bin\ECSLOGD.exe
    O23 - Service: eTrust Common Services Store-And-Forward Manager (ECSSAFMGR) - Computer Associates International, Inc. - C:\Program Files\CA\SharedComponents\eTrust Common Services\Bin\ECSSAFMGR.exe
    O23 - Service: eTrust Common Services (Transport) (eCS_Transport) - Computer Associates International, Inc. - C:\Program Files\CA\SharedComponents\eTrust Common Services\Bin\ECSQDMN.exe
    O23 - Service: eTFWService - Computer Associates International, Inc. - C:\Program Files\CA\SharedComponents\eTrust Common Services\Bin\eTFWService.exe
    O23 - Service: eTrust SCM for HTTP (eTrust Antivirus Gateway HTTP) - Computer Associates - C:\Program Files\CA\SharedComponents\ScanGateway\icihttp.exe
    O23 - Service: Event Log Watch (LogWatch) - Computer Associates - C:\Program Files\CA\SharedComponents\CA_LIC\LogWatNT.exe
    O23 - Service: Symantec Client Firewall Service (NISSERV) - Symantec Corporation - C:\Program Files\Symantec_Client_Security\Symantec Client Firewall\NISSERV.EXE
    O23 - Service: Symantec Client Firewall Accounts Manager (NISUM) - Symantec Corporation - C:\Program Files\Symantec_Client_Security\Symantec Client Firewall\NISUM.EXE
    O23 - Service: Symantec AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe
    O23 - Service: eTrust SCM Quarantine Manager (QMgrSrv) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust SCM\Bin\QmgrSrv.exe
    O23 - Service: Symantec Client Firewall Proxy Service (SymPxSvc) - Symantec Corporation - C:\Program Files\Symantec_Client_Security\Symantec Client Firewall\SymPxSvc.exe
    6458
    Äänestä

    Muut lukivat myös

    Vastaukset 6

    Vanhimmat

    Onko 2 antivirusta käynnissä

    Norton ja eTrust

    sammuta toinen niistä.

    Pistä se Hijackki omaan kansioon.
    Merkka nuo sulje selain ja paina Fix checked

    R3 - URLSearchHook: (no name) - {4116316779-DBF5-52C7-0EB3-431615D240FB9} - TemplateDongle.dll (file missing)
    O2 - BHO: (no name) - {CC3B4E56-EFAE-45CB-941E-B39B54DD28A2} - C:\WINDOWS\System32\rcpie.dll (file missing)
    O4 - HKLM\..\RunServices: [Microsoft Update Machine] Winregs32.exe
    O4 - HKLM\..\RunServices: [Patches Value] WinGamed.exe

    jos tuo on ite määritelty niin anna olla muuten merkki siihen myös

    R1 - HKCU\Software\Microsoft\Internet Explorer,(Default) = http://fastsearchweb.com/srh.php?q=%s

    Äänestä

    • Logfile of HijackThis v1.99.1
      Scan saved at 20:18:00, on 17.1.2006
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\CA\SharedComponents\CA_LIC\lic98rmt.exe
      C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe
      C:\Program Files\CA\SharedComponents\CA_LIC\LogWatNT.exe
      C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
      C:\Program Files\Symantec_Client_Security\Symantec Client Firewall\NISUM.EXE
      C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Symantec_Client_Security\Symantec Client Firewall\SymPxSvc.exe
      C:\PROGRA~1\SYMANT~1\SYMANT~2\IAMAPP.EXE
      C:\Program Files\Symantec_Client_Security\Symantec Client Firewall\NISSERV.EXE
      C:\Program Files\Microsoft Hardware\Keyboard\type32.exe
      C:\Program Files\TeleWell\TW-EA100B ADSL USB\CnxDslTb.exe
      C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
      C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\MSN Messenger\MsnMsgr.Exe
      C:\Program Files\Java\jre1.5.0_01\bin\jucheck.exe
      C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
      C:\Program Files\Symantec_Client_Security\Symantec Client Firewall\ATRACK.EXE
      C:\Program Files\Mozilla Firefox\firefox.exe
      C:\hjt\HijackThis.exe
      C:\WINDOWS\system32\msiexec.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer,(Default) = http://fastsearchweb.com/srh.php?q=%s
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.suomi24.fi
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.suomi24.fi
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.suomi24.fi
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.suomi24.fi
      R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = about:blank
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.fi;*.*.fi;*.*.*.fi;
      O1 - Hosts: 195.238.201.224 kotikone.ohjelmistot.com
      O1 - Hosts: 195.238.201.224 samikoti.ohjelmistot.com
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
      O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fi\msntb.dll
      O4 - HKLM\..\Run: [iamapp] C:\PROGRA~1\SYMANT~1\SYMANT~2\IAMAPP.EXE
      O4 - HKLM\..\Run: [IntelliType] "C:\Program Files\Microsoft Hardware\Keyboard\type32.exe"
      O4 - HKLM\..\Run: [CnxDslTaskBar] C:\Program Files\TeleWell\TW-EA100B ADSL USB\CnxDslTb.exe
      O4 - HKLM\..\Run: [DNSCacheBoost] C:\WINDOWS\System32\dnsping.exe
      O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
      O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
      O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
      O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O14 - IERESET.INF: START_PAGE_URL=http://www.soneraplaza.fi
      O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
      O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
      O17 - HKLM\System\CCS\Services\Tcpip\..\{343D00A6-4444-4773-9D41-3D58C37752D5}: NameServer = 69.50.166.94,69.31.80.244
      O17 - HKLM\System\CCS\Services\Tcpip\..\{ACE690C4-6138-48F5-B833-AD4AFEFA0672}: NameServer = 69.50.166.94,193.210.19.19
      O20 - Winlogon Notify: NavLogon - C:\WINDOWS\System32\NavLogon.dll
      O23 - Service: CA License Client (CA_LIC_CLNT) - Computer Associates International Inc. - C:\Program Files\CA\SharedComponents\CA_LIC\lic98rmt.exe
      O23 - Service: CA License Server (CA_LIC_SRVR) - Computer Associates International Inc. - C:\Program Files\CA\SharedComponents\CA_LIC\lic98rmtd.exe
      O23 - Service: COM+ System Application (COMSysApp) - Conexant Systems Inc. - (no file)
      O23 - Service: DefWatch - Symantec Corporation - C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe
      O23 - Service: Event Log Watch (LogWatch) - Computer Associates - C:\Program Files\CA\SharedComponents\CA_LIC\LogWatNT.exe
      O23 - Service: Symantec Client Firewall Service (NISSERV) - Symantec Corporation - C:\Program Files\Symantec_Client_Security\Symantec Client Firewall\NISSERV.EXE
      O23 - Service: Symantec Client Firewall Accounts Manager (NISUM) - Symantec Corporation - C:\Program Files\Symantec_Client_Security\Symantec Client Firewall\NISUM.EXE
      O23 - Service: Symantec AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe
      O23 - Service: Symantec Client Firewall Proxy Service (SymPxSvc) - Symantec Corporation - C:\Program Files\Symantec_Client_Security\Symantec Client Firewall\SymPxSvc.exe

      Äänestä

    • hellDesk kirjoitti:

      Logfile of HijackThis v1.99.1
      Scan saved at 20:18:00, on 17.1.2006
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\CA\SharedComponents\CA_LIC\lic98rmt.exe
      C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe
      C:\Program Files\CA\SharedComponents\CA_LIC\LogWatNT.exe
      C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
      C:\Program Files\Symantec_Client_Security\Symantec Client Firewall\NISUM.EXE
      C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Symantec_Client_Security\Symantec Client Firewall\SymPxSvc.exe
      C:\PROGRA~1\SYMANT~1\SYMANT~2\IAMAPP.EXE
      C:\Program Files\Symantec_Client_Security\Symantec Client Firewall\NISSERV.EXE
      C:\Program Files\Microsoft Hardware\Keyboard\type32.exe
      C:\Program Files\TeleWell\TW-EA100B ADSL USB\CnxDslTb.exe
      C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
      C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\MSN Messenger\MsnMsgr.Exe
      C:\Program Files\Java\jre1.5.0_01\bin\jucheck.exe
      C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
      C:\Program Files\Symantec_Client_Security\Symantec Client Firewall\ATRACK.EXE
      C:\Program Files\Mozilla Firefox\firefox.exe
      C:\hjt\HijackThis.exe
      C:\WINDOWS\system32\msiexec.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer,(Default) = http://fastsearchweb.com/srh.php?q=%s
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.suomi24.fi
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.suomi24.fi
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.suomi24.fi
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.suomi24.fi
      R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = about:blank
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.fi;*.*.fi;*.*.*.fi;
      O1 - Hosts: 195.238.201.224 kotikone.ohjelmistot.com
      O1 - Hosts: 195.238.201.224 samikoti.ohjelmistot.com
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
      O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fi\msntb.dll
      O4 - HKLM\..\Run: [iamapp] C:\PROGRA~1\SYMANT~1\SYMANT~2\IAMAPP.EXE
      O4 - HKLM\..\Run: [IntelliType] "C:\Program Files\Microsoft Hardware\Keyboard\type32.exe"
      O4 - HKLM\..\Run: [CnxDslTaskBar] C:\Program Files\TeleWell\TW-EA100B ADSL USB\CnxDslTb.exe
      O4 - HKLM\..\Run: [DNSCacheBoost] C:\WINDOWS\System32\dnsping.exe
      O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
      O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
      O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
      O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O14 - IERESET.INF: START_PAGE_URL=http://www.soneraplaza.fi
      O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
      O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
      O17 - HKLM\System\CCS\Services\Tcpip\..\{343D00A6-4444-4773-9D41-3D58C37752D5}: NameServer = 69.50.166.94,69.31.80.244
      O17 - HKLM\System\CCS\Services\Tcpip\..\{ACE690C4-6138-48F5-B833-AD4AFEFA0672}: NameServer = 69.50.166.94,193.210.19.19
      O20 - Winlogon Notify: NavLogon - C:\WINDOWS\System32\NavLogon.dll
      O23 - Service: CA License Client (CA_LIC_CLNT) - Computer Associates International Inc. - C:\Program Files\CA\SharedComponents\CA_LIC\lic98rmt.exe
      O23 - Service: CA License Server (CA_LIC_SRVR) - Computer Associates International Inc. - C:\Program Files\CA\SharedComponents\CA_LIC\lic98rmtd.exe
      O23 - Service: COM+ System Application (COMSysApp) - Conexant Systems Inc. - (no file)
      O23 - Service: DefWatch - Symantec Corporation - C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe
      O23 - Service: Event Log Watch (LogWatch) - Computer Associates - C:\Program Files\CA\SharedComponents\CA_LIC\LogWatNT.exe
      O23 - Service: Symantec Client Firewall Service (NISSERV) - Symantec Corporation - C:\Program Files\Symantec_Client_Security\Symantec Client Firewall\NISSERV.EXE
      O23 - Service: Symantec Client Firewall Accounts Manager (NISUM) - Symantec Corporation - C:\Program Files\Symantec_Client_Security\Symantec Client Firewall\NISUM.EXE
      O23 - Service: Symantec AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe
      O23 - Service: Symantec Client Firewall Proxy Service (SymPxSvc) - Symantec Corporation - C:\Program Files\Symantec_Client_Security\Symantec Client Firewall\SymPxSvc.exe

      Fix:saa vielä tuo jäi huomaamatta eka varvilla

      O4 - HKLM\..\Run: [DNSCacheBoost] C:\WINDOWS\System32\dnsping.exe

      Äänestä

    • Juu kirjoitti:

      Fix:saa vielä tuo jäi huomaamatta eka varvilla

      O4 - HKLM\..\Run: [DNSCacheBoost] C:\WINDOWS\System32\dnsping.exe

      Miksi toi osoite vie noin kauas:
      O17 - HKLM\System\CCS\Services\Tcpip\..\{ACE690C4-6138-48F5-B833-AD4AFEFA0672}: NameServer = 69.50.166.94,193.210.19.19

      Jotain tietoa harrastuksista löytyi:
      http://spam.gunters.org/archive/2005/10/08/intercage-still-not-taking-their-medicine


      OrgName: InterCage, Inc.
      OrgID: INTER-359
      Address: 1955 Monument Blvd.
      Address: 236
      City: Concord
      StateProv: CA
      PostalCode: 94520
      Country: US

      ReferralServer: rwhois://rwhois.intercage.com:4321/

      NetRange: 69.50.160.0 - 69.50.191.255
      CIDR: 69.50.160.0/19
      NetName: INTERCAGE-NETWORK-GROUP
      NetHandle: NET-69-50-160-0-1
      Parent: NET-69-0-0-0-0
      NetType: Direct Allocation
      NameServer: MAIL.ATRIVO.COM
      NameServer: PAVEL.ATRIVO.COM
      Comment:
      RegDate: 2003-06-04
      Updated: 2005-09-01

      OrgAbuseHandle: ABUSE735-ARIN
      OrgAbuseName: Abuse Department
      OrgAbusePhone: 1-925-550-3947
      OrgAbuseEmail: [email protected]

      OrgNOCHandle: NETWO670-ARIN
      OrgNOCName: Network Operations
      OrgNOCPhone: 1-925-550-3947
      OrgNOCEmail: [email protected]

      OrgTechHandle: INE4-ARIN
      OrgTechName: IP Network Engineering
      OrgTechPhone: 1-925-550-3947
      OrgTechEmail: [email protected]

      ARIN WHOIS database, last updated 2006-01-16 19:10
      Enter ? for additional hints on searching ARIN's WHOIS database.

      Äänestä

    • Fox kirjoitti:

      Miksi toi osoite vie noin kauas:
      O17 - HKLM\System\CCS\Services\Tcpip\..\{ACE690C4-6138-48F5-B833-AD4AFEFA0672}: NameServer = 69.50.166.94,193.210.19.19

      Jotain tietoa harrastuksista löytyi:
      http://spam.gunters.org/archive/2005/10/08/intercage-still-not-taking-their-medicine


      OrgName: InterCage, Inc.
      OrgID: INTER-359
      Address: 1955 Monument Blvd.
      Address: 236
      City: Concord
      StateProv: CA
      PostalCode: 94520
      Country: US

      ReferralServer: rwhois://rwhois.intercage.com:4321/

      NetRange: 69.50.160.0 - 69.50.191.255
      CIDR: 69.50.160.0/19
      NetName: INTERCAGE-NETWORK-GROUP
      NetHandle: NET-69-50-160-0-1
      Parent: NET-69-0-0-0-0
      NetType: Direct Allocation
      NameServer: MAIL.ATRIVO.COM
      NameServer: PAVEL.ATRIVO.COM
      Comment:
      RegDate: 2003-06-04
      Updated: 2005-09-01

      OrgAbuseHandle: ABUSE735-ARIN
      OrgAbuseName: Abuse Department
      OrgAbusePhone: 1-925-550-3947
      OrgAbuseEmail: [email protected]

      OrgNOCHandle: NETWO670-ARIN
      OrgNOCName: Network Operations
      OrgNOCPhone: 1-925-550-3947
      OrgNOCEmail: [email protected]

      OrgTechHandle: INE4-ARIN
      OrgTechName: IP Network Engineering
      OrgTechPhone: 1-925-550-3947
      OrgTechEmail: [email protected]

      ARIN WHOIS database, last updated 2006-01-16 19:10
      Enter ? for additional hints on searching ARIN's WHOIS database.

      > Miksi toi osoite vie noin kauas: <

      Ei tietoo

      Äänestä

    Odottaa vastausta

    Näihin keskusteluihin ei ole vielä vastattu. Ole ensimmäinen.

    Luetuimmat keskustelut

    Kommentoi aloitusta

    MicroSoft HellDesk kirjoitti:

    juu jos joku ystävällisesti jaksaa tätä logia tarkistaa

    Logfile of HijackThis v1.99.1
    Scan saved at 19:10:53, on 17.1.2006
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\CA\SharedComponents\CA_LIC\lic98rmt.exe
    C:\Program Files\CA\eTrust SCM\Bin\CRepSrv.exe
    C:\Program Files\CA\eTrust SCM\Bin\DCollSrv.exe
    C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe
    C:\Program Files\CA\SharedComponents\eTrust Common Services\Bin\ECSQDMN.exe
    C:\Program Files\CA\SharedComponents\ScanGateway\icihttp.exe
    C:\Program Files\CA\SharedComponents\CA_LIC\LogWatNT.exe
    C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
    C:\Program Files\Symantec_Client_Security\Symantec Client Firewall\NISUM.EXE
    C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\CA\eTrust SCM\Bin\QmgrSrv.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Symantec_Client_Security\Symantec Client Firewall\SymPxSvc.exe
    C:\Program Files\CA\SharedComponents\eTrust Common Services\Bin\ECSSAFMGR.exe
    C:\PROGRA~1\SYMANT~1\SYMANT~2\IAMAPP.EXE
    C:\Program Files\Symantec_Client_Security\Symantec Client Firewall\NISSERV.EXE
    C:\Program Files\Microsoft Hardware\Keyboard\type32.exe
    C:\Program Files\TeleWell\TW-EA100B ADSL USB\CnxDslTb.exe
    C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
    C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\MSN Messenger\MsnMsgr.Exe
    C:\Program Files\Java\jre1.5.0_01\bin\jucheck.exe
    C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
    C:\Program Files\Symantec_Client_Security\Symantec Client Firewall\ATRACK.EXE
    C:\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer,(Default) = http://fastsearchweb.com/srh.php?q=%s
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.suomi24.fi
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.suomi24.fi
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.suomi24.fi
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.suomi24.fi
    R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = about:blank
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by Sonera Internet
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.fi;*.*.fi;*.*.*.fi;
    R3 - URLSearchHook: (no name) - {4116316779-DBF5-52C7-0EB3-431615D240FB9} - TemplateDongle.dll (file missing)
    O1 - Hosts: 195.238.201.224 kotikone.ohjelmistot.com
    O1 - Hosts: 195.238.201.224 samikoti.ohjelmistot.com
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
    O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
    O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fi\msntb.dll
    O2 - BHO: (no name) - {CC3B4E56-EFAE-45CB-941E-B39B54DD28A2} - C:\WINDOWS\System32\rcpie.dll (file missing)
    O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fi\msntb.dll
    O4 - HKLM\..\Run: [iamapp] C:\PROGRA~1\SYMANT~1\SYMANT~2\IAMAPP.EXE
    O4 - HKLM\..\Run: [IntelliType] "C:\Program Files\Microsoft Hardware\Keyboard\type32.exe"
    O4 - HKLM\..\Run: [CnxDslTaskBar] C:\Program Files\TeleWell\TW-EA100B ADSL USB\CnxDslTb.exe
    O4 - HKLM\..\Run: [DNSCacheBoost] C:\WINDOWS\System32\dnsping.exe
    O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_01\bin\jusched.exe
    O4 - HKLM\..\RunServices: [Microsoft Update Machine] Winregs32.exe
    O4 - HKLM\..\RunServices: [Patches Value] WinGamed.exe
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
    O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
    O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
    O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin\npjpi150_01.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O14 - IERESET.INF: START_PAGE_URL=http://www.soneraplaza.fi
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
    O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
    O17 - HKLM\System\CCS\Services\Tcpip\..\{343D00A6-4444-4773-9D41-3D58C37752D5}: NameServer = 69.50.166.94,69.31.80.244
    O17 - HKLM\System\CCS\Services\Tcpip\..\{ACE690C4-6138-48F5-B833-AD4AFEFA0672}: NameServer = 69.50.166.94,193.210.19.19
    O20 - Winlogon Notify: NavLogon - C:\WINDOWS\System32\NavLogon.dll
    O23 - Service: CA License Client (CA_LIC_CLNT) - Computer Associates International Inc. - C:\Program Files\CA\SharedComponents\CA_LIC\lic98rmt.exe
    O23 - Service: CA License Server (CA_LIC_SRVR) - Computer Associates International Inc. - C:\Program Files\CA\SharedComponents\CA_LIC\lic98rmtd.exe
    O23 - Service: COM System Application (COMSysApp) - Conexant Systems Inc. - (no file)
    O23 - Service: eTrust SCM Central Reporter (CRepSrv) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust SCM\Bin\CRepSrv.exe
    O23 - Service: eTrust SCM Data Collector (DCollSrv) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust SCM\Bin\DCollSrv.exe
    O23 - Service: DefWatch - Symantec Corporation - C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe
    O23 - Service: eTrust Common Services Log Daemon (ECSLOGD) - Computer Associates International, Inc. - C:\Program Files\CA\SharedComponents\eTrust Common Services\Bin\ECSLOGD.exe
    O23 - Service: eTrust Common Services Store-And-Forward Manager (ECSSAFMGR) - Computer Associates International, Inc. - C:\Program Files\CA\SharedComponents\eTrust Common Services\Bin\ECSSAFMGR.exe
    O23 - Service: eTrust Common Services (Transport) (eCS_Transport) - Computer Associates International, Inc. - C:\Program Files\CA\SharedComponents\eTrust Common Services\Bin\ECSQDMN.exe
    O23 - Service: eTFWService - Computer Associates International, Inc. - C:\Program Files\CA\SharedComponents\eTrust Common Services\Bin\eTFWService.exe
    O23 - Service: eTrust SCM for HTTP (eTrust Antivirus Gateway HTTP) - Computer Associates - C:\Program Files\CA\SharedComponents\ScanGateway\icihttp.exe
    O23 - Service: Event Log Watch (LogWatch) - Computer Associates - C:\Program Files\CA\SharedComponents\CA_LIC\LogWatNT.exe
    O23 - Service: Symantec Client Firewall Service (NISSERV) - Symantec Corporation - C:\Program Files\Symantec_Client_Security\Symantec Client Firewall\NISSERV.EXE
    O23 - Service: Symantec Client Firewall Accounts Manager (NISUM) - Symantec Corporation - C:\Program Files\Symantec_Client_Security\Symantec Client Firewall\NISUM.EXE
    O23 - Service: Symantec AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\Program Files\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe
    O23 - Service: eTrust SCM Quarantine Manager (QMgrSrv) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust SCM\Bin\QmgrSrv.exe
    O23 - Service: Symantec Client Firewall Proxy Service (SymPxSvc) - Symantec Corporation - C:\Program Files\Symantec_Client_Security\Symantec Client Firewall\SymPxSvc.exe

    Anonyymi
    5000

    Ilmoita asiaton sisältö

    • Sisältää materiaalia, joka on loukkaavaa, herjaavaa, rasistista, uhkailevaa tai ahdistelevaa.

    • Materiaali sisältää nimiä, yhteystietoja tai muita henkilökohtaisia tietoja. Julkisuuden henkilöistä, julkisissa viroissa toimivista ihmisistä sekä yritysten vastuuhenkilöistä saa keskustella työhön liittyen. Myös yksityiselämään liittyvistä asioista voi keskustella siltä osin, kuin niistä on julkisesti kerrottu.

    • Sisältää lapsille haitallista tai heiltä kiellettyä materiaalia. Seksuaalinen sisältö on sallittua aiheeseen tarkoitetuilla palstoilla, joiden ikäraja on 18 vuotta.

    • Lainvastaista sisältöä voi olla mm. yksityiselämää loukkaavan tiedon levitys, kiihottaminen kansanryhmää vastaan, laiton uhkaaminen, alaikäisiin liittyvä seksuaalinen sisältö/grooming, petokset, identiteettivarkaudet, kunnianloukkaukset ja tekijänoikeusrikkomukset.

    • Sisältö ei liity palstan tai keskusteluketjun aiheeseen.

    • Viesti ei ole suomea tai ruotsia (pl. International Forums), se sisältää mainontaa, se sisältää tekijänoikeuksin suojattua materiaalia, se on massapostitus tai jokin muu syy.

    Jaa keskustelu