Pyydän apuanne

Hei viisaat,
Alla Hijackthis logi isäni koneesta. Näkyykö vikaa? Nettiselain avaa aina uden clcktobegin -mainoksen... ja kone on toooooosi hidas. AdAware löytää jotain, mutta ei onistu poistamaan lopullisesti

Kiitän paljon.

Logfile of HijackThis v1.99.1
Scan saved at 12:56:10, on 8.2.2006
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\HPConfig.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\system32\RadioSvr.exe
C:\WINDOWS\System32\S3tray2.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Hewlett-Packard\HP Notebook Utilities\hptasks.exe
C:\PROGRA~1\HEWLET~1\ONE-TO~1\OneTouch.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Norton AntiVirus\SAVScan.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\ATK\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mtv3.fi/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mtv3.fi/
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.hp.com/info/homepage-o
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O2 - BHO: bitlocker - {01EB5130-FC0C-4d75-B9CE-4801B1B854F5} - C:\WINDOWS\System32\nsr7.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [CARPService] carpserv.exe
O4 - HKLM\..\Run: [S3TRAY2] S3tray2.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [HP TV Now] C:\Program Files\Hewlett-Packard\HP TV Now\HpTvNow.exe /RK
O4 - HKLM\..\Run: [HP Display Settings] C:\Program Files\Hewlett-Packard\HP Notebook Utilities\hptasks.exe /s
O4 - HKLM\..\Run: [QT4HPOT] C:\PROGRA~1\HEWLET~1\ONE-TO~1\OneTouch.EXE
O4 - HKLM\..\Run: [HP Presentation Ready] C:\Program Files\Hewlett-Packard\HP Presentation Ready\PresRdy.exe -r
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O14 - IERESET.INF: START_PAGE_URL=http://www.mtv3.fi/
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: HP Configuration Interface Service (HPConfig) - Hewlett-Packard - C:\WINDOWS\system32\HPConfig.exe
O23 - Service: HP RF Device Service (HpRfDev) - Hewlett-Packard - C:\WINDOWS\system32\HpRfDev.exe
O23 - Service: Norton AntiVirus -ohjelman automaattinen suojaus (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: RadioSvr - Hewlett-Packard - C:\WINDOWS\system32\RadioSvr.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
3288
Äänestä

Muut lukivat myös

Vastaukset 3

Vanhimmat

Merkka tuo sulje selain ja paina Fix checked

O2 - BHO: bitlocker - {01EB5130-FC0C-4d75-B9CE-4801B1B854F5} - C:\WINDOWS\System32\nsr7.dll

mitä Aware löytää pistä vaikka sen logi.

Äänestä
  • Kiitos avustasi!

    Alla AdAwaren logi:


    Ad-Aware SE Build 1.06r1
    Logfile Created on:8. helmikuuta 2006 13:13:17
    Created with Ad-Aware SE Personal, free for private use.
    Using definitions file:SE1R90 03.02.2006
    »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

    References detected during the scan:
    »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
    MRU List(TAC index:0):9 total references
    Tracking Cookie(TAC index:3):3 total references
    »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

    Ad-Aware SE Settings
    ===========================
    Set : Search for negligible risk entries
    Set : Search for low-risk threats
    Set : Safe mode (always request confirmation)
    Set : Scan active processes
    Set : Scan registry
    Set : Deep-scan registry
    Set : Scan my IE Favorites for banned URLs
    Set : Scan within archives
    Set : Scan my Hosts file

    Extended Ad-Aware SE Settings
    ===========================
    Set : Unload recognized processes & modules during scan
    Set : Scan registry for all users instead of current user only
    Set : Always try to unload modules before deletion
    Set : During removal, unload Explorer and IE if necessary
    Set : Let Windows remove files in use at next reboot
    Set : Delete quarantined objects after restoring
    Set : Include basic Ad-Aware settings in log file
    Set : Include additional Ad-Aware settings in log file
    Set : Include reference summary in log file
    Set : Include alternate data stream details in log file
    Set : Play sound at scan completion if scan locates critical objects


    8.2.2006 13:13:17 - Scan started. (Custom mode)

    Listing running processes
    »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

    #:1 [smss.exe]
    FilePath : \SystemRoot\System32\
    ProcessID : 552
    ThreadCreationTime : 8.2.2006 9:20:46
    BasePriority : Normal


    #:2 [csrss.exe]
    FilePath : \??\C:\WINDOWS\system32\
    ProcessID : 616
    ThreadCreationTime : 8.2.2006 9:20:47
    BasePriority : Normal


    #:3 [winlogon.exe]
    FilePath : \??\C:\WINDOWS\system32\
    ProcessID : 640
    ThreadCreationTime : 8.2.2006 9:20:50
    BasePriority : High


    #:4 [services.exe]
    FilePath : C:\WINDOWS\system32\
    ProcessID : 684
    ThreadCreationTime : 8.2.2006 9:20:54
    BasePriority : Normal
    FileVersion : 5.1.2600.0 (xpclient.010817-1148)
    ProductVersion : 5.1.2600.0
    ProductName : Microsoft® Windows® -käyttöjärjestelmä
    CompanyName : Microsoft Corporation
    FileDescription : Palvelu- ja ohjainohjelma
    InternalName : services.exe
    LegalCopyright : © Microsoft Corporation. Kaikki oikeudet pidätetään.
    OriginalFilename : services.exe

    #:5 [lsass.exe]
    FilePath : C:\WINDOWS\system32\
    ProcessID : 696
    ThreadCreationTime : 8.2.2006 9:20:54
    BasePriority : Normal
    FileVersion : 5.1.2600.0 (xpclient.010817-1148)
    ProductVersion : 5.1.2600.0
    ProductName : Microsoft® Windows® Operating System
    CompanyName : Microsoft Corporation
    FileDescription : LSA Shell (Export Version)
    InternalName : lsass.exe
    LegalCopyright : © Microsoft Corporation. All rights reserved.
    OriginalFilename : lsass.exe

    #:6 [svchost.exe]
    FilePath : C:\WINDOWS\system32\
    ProcessID : 880
    ThreadCreationTime : 8.2.2006 9:20:56
    BasePriority : Normal
    FileVersion : 5.1.2600.0 (xpclient.010817-1148)
    ProductVersion : 5.1.2600.0
    ProductName : Microsoft® Windows® Operating System
    CompanyName : Microsoft Corporation
    FileDescription : Generic Host Process for Win32 Services
    InternalName : svchost.exe
    LegalCopyright : © Microsoft Corporation. All rights reserved.
    OriginalFilename : svchost.exe

    #:7 [svchost.exe]
    FilePath : C:\WINDOWS\System32\
    ProcessID : 1000
    ThreadCreationTime : 8.2.2006 9:20:57
    BasePriority : Normal
    FileVersion : 5.1.2600.0 (xpclient.010817-1148)
    ProductVersion : 5.1.2600.0
    ProductName : Microsoft® Windows® Operating System
    CompanyName : Microsoft Corporation
    FileDescription : Generic Host Process for Win32 Services
    InternalName : svchost.exe
    LegalCopyright : © Microsoft Corporation. All rights reserved.
    OriginalFilename : svchost.exe

    #:8 [svchost.exe]
    FilePath : C:\WINDOWS\System32\
    ProcessID : 1200
    ThreadCreationTime : 8.2.2006 9:20:58
    BasePriority : Normal
    FileVersion : 5.1.2600.0 (xpclient.010817-1148)
    ProductVersion : 5.1.2600.0
    ProductName : Microsoft® Windows® Operating System
    CompanyName : Microsoft Corporation
    FileDescription : Generic Host Process for Win32 Services
    InternalName : svchost.exe
    LegalCopyright : © Microsoft Corporation. All rights reserved.
    OriginalFilename : svchost.exe

    #:9 [svchost.exe]
    FilePath : C:\WINDOWS\System32\
    ProcessID : 1212
    ThreadCreationTime : 8.2.2006 9:20:58
    BasePriority : Normal
    FileVersion : 5.1.2600.0 (xpclient.010817-1148)
    ProductVersion : 5.1.2600.0
    ProductName : Microsoft® Windows® Operating System
    CompanyName : Microsoft Corporation
    FileDescription : Generic Host Process for Win32 Services
    InternalName : svchost.exe
    LegalCopyright : © Microsoft Corporation. All rights reserved.
    OriginalFilename : svchost.exe

    #:10 [ccsetmgr.exe]
    FilePath : C:\Program Files\Common Files\Symantec Shared\
    ProcessID : 1660
    ThreadCreationTime : 8.2.2006 9:21:00
    BasePriority : Normal
    FileVersion : 2.1.9.3
    ProductVersion : 2.1.9.3
    ProductName : Common Client
    CompanyName : Symantec Corporation
    FileDescription : Common Client Settings Manager Service
    InternalName : ccSetMgr
    LegalCopyright : Copyright (c) 2000-2003 Symantec Corporation. All rights reserved.
    OriginalFilename : ccSetMgr.exe

    #:11 [explorer.exe]
    FilePath : C:\WINDOWS\
    ProcessID : 1936
    ThreadCreationTime : 8.2.2006 9:21:01
    BasePriority : Normal
    FileVersion : 6.00.2600.0000 (xpclient.010817-1148)
    ProductVersion : 6.00.2600.0000
    ProductName : Microsoft® Windows® -käyttöjärjestelmä
    CompanyName : Microsoft Corporation
    FileDescription : Resurssienhallinta
    InternalName : explorer
    LegalCopyright : © Microsoft Corporation. All rights reserved.
    OriginalFilename : EXPLORER.EXE

    #:12 [ccevtmgr.exe]
    FilePath : C:\Program Files\Common Files\Symantec Shared\
    ProcessID : 1968
    ThreadCreationTime : 8.2.2006 9:21:02
    BasePriority : Normal
    FileVersion : 2.1.9.3
    ProductVersion : 2.1.9.3
    ProductName : Common Client
    CompanyName : Symantec Corporation
    FileDescription : Common Client Event Manager Service
    InternalName : ccEvtMgr
    LegalCopyright : Copyright (c) 2000-2003 Symantec Corporation. All rights reserved.
    OriginalFilename : ccEvtMgr.exe

    #:13 [spoolsv.exe]
    FilePath : C:\WINDOWS\system32\
    ProcessID : 232
    ThreadCreationTime : 8.2.2006 9:21:07
    BasePriority : Normal
    FileVersion : 5.1.2600.0 (XPClient.010817-1148)
    ProductVersion : 5.1.2600.0
    ProductName : Microsoft® Windows® Operating System
    CompanyName : Microsoft Corporation
    FileDescription : Spooler SubSystem App
    InternalName : spoolsv.exe
    LegalCopyright : © Microsoft Corporation. All rights reserved.
    OriginalFilename : spoolsv.exe

    #:14 [hpconfig.exe]
    FilePath : C:\WINDOWS\system32\
    ProcessID : 372
    ThreadCreationTime : 8.2.2006 9:21:08
    BasePriority : Normal
    FileVersion : 3, 0, 0, 7
    ProductVersion : 3, 0, 0, 7
    ProductName : HPConfig Module
    CompanyName : Hewlett-Packard
    FileDescription : HPConfig Module
    InternalName : HPConfig
    LegalCopyright : Hewlett-Packard Copyright (C) 1999-2002
    OriginalFilename : HPConfig.EXE
    Comments : HP Configuration Interface Service

    #:15 [navapsvc.exe]
    FilePath : C:\Program Files\Norton AntiVirus\
    ProcessID : 412
    ThreadCreationTime : 8.2.2006 9:21:08
    BasePriority : Normal
    FileVersion : 10.00.2
    ProductVersion : 10.00.2
    ProductName : Norton AntiVirus
    CompanyName : Symantec Corporation
    FileDescription : Norton AntiVirus Auto-Protect Service
    InternalName : NAVAPSVC
    LegalCopyright : Norton AntiVirus 2004 for Windows 98/ME/2000/XP Copyright (c) 2003 Symantec Corporation. All rights reserved.
    OriginalFilename : NAVAPSVC.EXE

    #:16 [radiosvr.exe]
    FilePath : C:\WINDOWS\system32\
    ProcessID : 460
    ThreadCreationTime : 8.2.2006 9:21:09
    BasePriority : Normal
    FileVersion : 1, 0, 0, 4
    ProductVersion : 1, 0, 0, 4
    ProductName : RadioSvr Module
    CompanyName : Hewlett-Packard
    FileDescription : RadioSvr Module
    InternalName : RadioSvr
    LegalCopyright : Copyright © Hewlett-Packard, 2001
    OriginalFilename : RadioSvr.EXE

    #:17 [s3tray2.exe]
    FilePath : C:\WINDOWS\System32\
    ProcessID : 960
    ThreadCreationTime : 8.2.2006 9:21:16
    BasePriority : Normal
    FileVersion : 1.00.18-0214
    ProductVersion : 1.00.18-0214
    ProductName : S3 Graphics Utilities
    CompanyName : S3 Graphics, Inc.
    FileDescription : s3contrl
    InternalName : s3contrl
    LegalCopyright : Copyright © 2001-2002 S3 Graphics, Inc.
    LegalTrademarks : S3 is a registered trademark of S3 Incorporated
    OriginalFilename : s3contrl.exe

    #:18 [syntplpr.exe]
    FilePath : C:\Program Files\Synaptics\SynTP\
    ProcessID : 992
    ThreadCreationTime : 8.2.2006 9:21:17
    BasePriority : Normal
    FileVersion : 6.2.0 31Jan02
    ProductVersion : 6.2.0 31Jan02
    ProductName : Progressive Touch
    CompanyName : Synaptics, Inc.
    FileDescription : TouchPad Driver Helper Application
    InternalName : SynTPLpr
    LegalCopyright : Copyright (C) Synaptics, Inc. 1996-2002
    OriginalFilename : SynTPLpr.exe

    #:19 [syntpenh.exe]
    FilePath : C:\Program Files\Synaptics\SynTP\
    ProcessID : 1104
    ThreadCreationTime : 8.2.2006 9:21:18
    BasePriority : Normal
    FileVersion : 6.2.0 31Jan02
    ProductVersion : 6.2.0 31Jan02
    ProductName : Progressive Touch
    CompanyName : Synaptics, Inc.
    FileDescription : Synaptics TouchPad Enhancements
    InternalName : Scrolleroo
    LegalCopyright : Copyright (C) Synaptics, Inc. 1996-2002
    OriginalFilename : SynTPEnh.exe

    #:20 [hptasks.exe]
    FilePath : C:\Program Files\Hewlett-Packard\HP Notebook Utilities\
    ProcessID : 1308
    ThreadCreationTime : 8.2.2006 9:21:20
    BasePriority : Normal
    FileVersion : 1, 12, 0, 5
    ProductVersion : 1, 12, 0, 5
    ProductName : Hewlett-Packard HP Notebook Utilities
    CompanyName : Hewlett-Packard
    FileDescription : hptasks
    InternalName : hptasks
    LegalCopyright : Copyright © 2001-2002, Hewlett-Packard
    OriginalFilename : hptasks.exe

    #:21 [onetouch.exe]
    FilePath : C:\PROGRA~1\HEWLET~1\ONE-TO~1\
    ProcessID : 744
    ThreadCreationTime : 8.2.2006 9:21:21
    BasePriority : Normal
    FileVersion : 1.00
    ProductVersion : 1.00
    ProductName : Dritek System Inc. OneTouch 2.9.2001 ( VC60 )
    CompanyName : Dritek System Inc.
    FileDescription : HP One-Touch
    InternalName : OneTouch
    LegalCopyright : Copyright © 2001 Dritek System Inc.
    OriginalFilename : OneTouch.exe

    #:22 [ccapp.exe]
    FilePath : C:\Program Files\Common Files\Symantec Shared\
    ProcessID : 1348
    ThreadCreationTime : 8.2.2006 9:21:22
    BasePriority : Normal
    FileVersion : 2.1.9.3
    ProductVersion : 2.1.9.3
    ProductName : Common Client
    CompanyName : Symantec Corporation
    FileDescription : Common Client User Session
    InternalName : ccApp
    LegalCopyright : Copyright (c) 2000-2003 Symantec Corporation. All rights reserved.
    OriginalFilename : ccApp.exe

    #:23 [zlclient.exe]
    FilePath : C:\Program Files\Zone Labs\ZoneAlarm\
    ProcessID : 1452
    ThreadCreationTime : 8.2.2006 9:21:30
    BasePriority : Normal
    FileVersion : 6.1.737.000
    ProductVersion : 6.1.737.000
    ProductName : Zone Labs Client
    CompanyName : Zone Labs, LLC
    FileDescription : Zone Labs Client
    InternalName : zlclient
    LegalCopyright : Copyright © 1998-2005, Zone Labs, LLC
    OriginalFilename : zlclient.exe

    #:24 [vsmon.exe]
    FilePath : C:\WINDOWS\system32\ZoneLabs\
    ProcessID : 1060
    ThreadCreationTime : 8.2.2006 9:23:36
    BasePriority : Normal
    FileVersion : 6.1.737.000
    ProductVersion : 6.1.737.000
    ProductName : TrueVector Service
    CompanyName : Zone Labs, LLC
    FileDescription : TrueVector Service
    InternalName : vsmon
    LegalCopyright : Copyright © 1998-2005, Zone Labs, LLC
    OriginalFilename : vsmon.exe

    #:25 [wuauclt.exe]
    FilePath : C:\WINDOWS\System32\
    ProcessID : 584
    ThreadCreationTime : 8.2.2006 9:23:41
    BasePriority : Normal
    FileVersion : 5.8.0.2469 built by: lab01_n(wmbla)
    ProductVersion : 5.8.0.2469
    ProductName : Microsoft® Windows® -käyttöjärjestelmä
    CompanyName : Microsoft Corporation
    FileDescription : Automaattiset päivitykset
    InternalName : wuauclt.exe
    LegalCopyright : © Microsoft Corporation. Kaikki oikeudet pidätetään.
    OriginalFilename : wuauclt.exe

    #:26 [savscan.exe]
    FilePath : C:\Program Files\Norton AntiVirus\
    ProcessID : 1472
    ThreadCreationTime : 8.2.2006 9:23:55
    BasePriority : Normal

    ProductVersion : 9.2
    ProductName : Symantec AntiVirus AutoProtect
    CompanyName : Symantec Corporation
    FileDescription : Symantec AntiVirus Scanner
    InternalName : SAVSCAN
    LegalCopyright : Copyright (c) 2004 Symantec Corporation
    OriginalFilename : SAVSCAN.EXE

    #:27 [ad-aware.exe]
    FilePath : C:\Program Files\Lavasoft\Ad-Aware SE Personal\
    ProcessID : 2400
    ThreadCreationTime : 8.2.2006 11:12:49
    BasePriority : Normal
    FileVersion : 6.2.0.236
    ProductVersion : SE 106
    ProductName : Lavasoft Ad-Aware SE
    CompanyName : Lavasoft Sweden
    FileDescription : Ad-Aware SE Core application
    InternalName : Ad-Aware.exe
    LegalCopyright : Copyright © Lavasoft AB Sweden
    OriginalFilename : Ad-Aware.exe
    Comments : All Rights Reserved

    #:28 [iexplore.exe]
    FilePath : C:\Program Files\Internet Explorer\
    ProcessID : 364
    ThreadCreationTime : 8.2.2006 11:12:52
    BasePriority : Normal
    FileVersion : 6.00.2600.0000 (xpclient.010817-1148)
    ProductVersion : 6.00.2600.0000
    ProductName : Microsoft® Windows® -käyttöjärjestelmä
    CompanyName : Microsoft Corporation
    FileDescription : Internet Explorer
    InternalName : iexplore
    LegalCopyright : © Microsoft Corporation. All rights reserved.
    OriginalFilename : IEXPLORE.EXE

    Memory scan result:
    »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
    New critical objects: 0
    Objects found so far: 0


    Started registry scan
    »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

    Registry Scan result:
    »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
    New critical objects: 0
    Objects found so far: 0


    Started deep registry scan
    »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

    Deep registry scan result:
    »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
    New critical objects: 0
    Objects found so far: 0

    MRU List Object Recognized!
    Location: : C:\Documents and Settings\Alli ja Sakari\recent
    Description : list of recently opened documents


    MRU List Object Recognized!
    Location: : software\microsoft\directdraw\mostrecentapplication
    Description : most recent application to use microsoft directdraw


    MRU List Object Recognized!
    Location: : S-1-5-21-1647371527-2826650621-2974146706-1006\software\microsoft\internet explorer
    Description : last download directory used in microsoft internet explorer


    MRU List Object Recognized!
    Location: : S-1-5-21-1647371527-2826650621-2974146706-1006\software\microsoft\internet explorer\typedurls
    Description : list of recently entered addresses in microsoft internet explorer


    MRU List Object Recognized!
    Location: : S-1-5-21-1647371527-2826650621-2974146706-1006\software\microsoft\windows\currentversion\applets\regedit
    Description : last key accessed using the microsoft registry editor


    MRU List Object Recognized!
    Location: : S-1-5-21-1647371527-2826650621-2974146706-1006\software\microsoft\windows\currentversion\explorer\comdlg32\lastvisitedmru
    Description : list of recent programs opened


    MRU List Object Recognized!
    Location: : S-1-5-21-1647371527-2826650621-2974146706-1006\software\microsoft\windows\currentversion\explorer\comdlg32\opensavemru
    Description : list of recently saved files, stored according to file extension


    MRU List Object Recognized!
    Location: : S-1-5-21-1647371527-2826650621-2974146706-1006\software\microsoft\windows\currentversion\explorer\recentdocs
    Description : list of recent documents opened


    MRU List Object Recognized!
    Location: : S-1-5-21-1647371527-2826650621-2974146706-1006\software\microsoft\windows\currentversion\explorer\runmru
    Description : mru list for items opened in start | run



    Started Tracking Cookie scan
    »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»


    Tracking Cookie Object Recognized!
    Type : IECache Entry
    Data : alli ja sakari@cgi-bin[1].txt
    TAC Rating : 3
    Category : Data Miner
    Comment : Hits:2
    Value : Cookie:alli ja [email protected]/cgi-bin
    Expires : 19.1.2009 1:00:00
    LastSync : Hits:2
    UseCount : 0
    Hits : 2

    Tracking Cookie Object Recognized!
    Type : IECache Entry
    Data : alli ja sakari@doubleclick[1].txt
    TAC Rating : 3
    Category : Data Miner
    Comment : Hits:5
    Value : Cookie:alli ja [email protected]/
    Expires : 7.2.2009 12:41:18
    LastSync : Hits:5
    UseCount : 0
    Hits : 5

    Tracking Cookie Object Recognized!
    Type : IECache Entry
    Data : alli ja sakari@tradedoubler[1].txt
    TAC Rating : 3
    Category : Data Miner
    Comment : Hits:3
    Value : Cookie:alli ja [email protected]/
    Expires : 3.2.2026 13:10:02
    LastSync : Hits:3
    UseCount : 0
    Hits : 3

    Tracking cookie scan result:
    »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
    New critical objects: 3
    Objects found so far: 12



    Deep scanning and examining files (C:)
    »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

    Disk Scan Result for C:\
    »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
    New critical objects: 0
    Objects found so far: 12


    Scanning Hosts file......
    Hosts file location:"C:\WINDOWS\system32\drivers\etc\hosts".
    »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

    Hosts file scan result:
    »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
    1 entries scanned.
    New critical objects:0
    Objects found so far: 12




    Performing conditional scans...
    »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

    Conditional scan result:
    »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
    New critical objects: 0
    Objects found so far: 12

    13:24:41 Scan Complete

    Summary Of This Scan
    »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
    Total scanning time:00:11:23.883
    Objects scanned:103129
    Objects identified:3
    Objects ignored:0
    New critical objects:3

    Äänestä

  • Miguel Casagrande kirjoitti:

    Kiitos avustasi!

    Alla AdAwaren logi:


    Ad-Aware SE Build 1.06r1
    Logfile Created on:8. helmikuuta 2006 13:13:17
    Created with Ad-Aware SE Personal, free for private use.
    Using definitions file:SE1R90 03.02.2006
    »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

    References detected during the scan:
    »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
    MRU List(TAC index:0):9 total references
    Tracking Cookie(TAC index:3):3 total references
    »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

    Ad-Aware SE Settings
    ===========================
    Set : Search for negligible risk entries
    Set : Search for low-risk threats
    Set : Safe mode (always request confirmation)
    Set : Scan active processes
    Set : Scan registry
    Set : Deep-scan registry
    Set : Scan my IE Favorites for banned URLs
    Set : Scan within archives
    Set : Scan my Hosts file

    Extended Ad-Aware SE Settings
    ===========================
    Set : Unload recognized processes & modules during scan
    Set : Scan registry for all users instead of current user only
    Set : Always try to unload modules before deletion
    Set : During removal, unload Explorer and IE if necessary
    Set : Let Windows remove files in use at next reboot
    Set : Delete quarantined objects after restoring
    Set : Include basic Ad-Aware settings in log file
    Set : Include additional Ad-Aware settings in log file
    Set : Include reference summary in log file
    Set : Include alternate data stream details in log file
    Set : Play sound at scan completion if scan locates critical objects


    8.2.2006 13:13:17 - Scan started. (Custom mode)

    Listing running processes
    »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

    #:1 [smss.exe]
    FilePath : \SystemRoot\System32\
    ProcessID : 552
    ThreadCreationTime : 8.2.2006 9:20:46
    BasePriority : Normal


    #:2 [csrss.exe]
    FilePath : \??\C:\WINDOWS\system32\
    ProcessID : 616
    ThreadCreationTime : 8.2.2006 9:20:47
    BasePriority : Normal


    #:3 [winlogon.exe]
    FilePath : \??\C:\WINDOWS\system32\
    ProcessID : 640
    ThreadCreationTime : 8.2.2006 9:20:50
    BasePriority : High


    #:4 [services.exe]
    FilePath : C:\WINDOWS\system32\
    ProcessID : 684
    ThreadCreationTime : 8.2.2006 9:20:54
    BasePriority : Normal
    FileVersion : 5.1.2600.0 (xpclient.010817-1148)
    ProductVersion : 5.1.2600.0
    ProductName : Microsoft® Windows® -käyttöjärjestelmä
    CompanyName : Microsoft Corporation
    FileDescription : Palvelu- ja ohjainohjelma
    InternalName : services.exe
    LegalCopyright : © Microsoft Corporation. Kaikki oikeudet pidätetään.
    OriginalFilename : services.exe

    #:5 [lsass.exe]
    FilePath : C:\WINDOWS\system32\
    ProcessID : 696
    ThreadCreationTime : 8.2.2006 9:20:54
    BasePriority : Normal
    FileVersion : 5.1.2600.0 (xpclient.010817-1148)
    ProductVersion : 5.1.2600.0
    ProductName : Microsoft® Windows® Operating System
    CompanyName : Microsoft Corporation
    FileDescription : LSA Shell (Export Version)
    InternalName : lsass.exe
    LegalCopyright : © Microsoft Corporation. All rights reserved.
    OriginalFilename : lsass.exe

    #:6 [svchost.exe]
    FilePath : C:\WINDOWS\system32\
    ProcessID : 880
    ThreadCreationTime : 8.2.2006 9:20:56
    BasePriority : Normal
    FileVersion : 5.1.2600.0 (xpclient.010817-1148)
    ProductVersion : 5.1.2600.0
    ProductName : Microsoft® Windows® Operating System
    CompanyName : Microsoft Corporation
    FileDescription : Generic Host Process for Win32 Services
    InternalName : svchost.exe
    LegalCopyright : © Microsoft Corporation. All rights reserved.
    OriginalFilename : svchost.exe

    #:7 [svchost.exe]
    FilePath : C:\WINDOWS\System32\
    ProcessID : 1000
    ThreadCreationTime : 8.2.2006 9:20:57
    BasePriority : Normal
    FileVersion : 5.1.2600.0 (xpclient.010817-1148)
    ProductVersion : 5.1.2600.0
    ProductName : Microsoft® Windows® Operating System
    CompanyName : Microsoft Corporation
    FileDescription : Generic Host Process for Win32 Services
    InternalName : svchost.exe
    LegalCopyright : © Microsoft Corporation. All rights reserved.
    OriginalFilename : svchost.exe

    #:8 [svchost.exe]
    FilePath : C:\WINDOWS\System32\
    ProcessID : 1200
    ThreadCreationTime : 8.2.2006 9:20:58
    BasePriority : Normal
    FileVersion : 5.1.2600.0 (xpclient.010817-1148)
    ProductVersion : 5.1.2600.0
    ProductName : Microsoft® Windows® Operating System
    CompanyName : Microsoft Corporation
    FileDescription : Generic Host Process for Win32 Services
    InternalName : svchost.exe
    LegalCopyright : © Microsoft Corporation. All rights reserved.
    OriginalFilename : svchost.exe

    #:9 [svchost.exe]
    FilePath : C:\WINDOWS\System32\
    ProcessID : 1212
    ThreadCreationTime : 8.2.2006 9:20:58
    BasePriority : Normal
    FileVersion : 5.1.2600.0 (xpclient.010817-1148)
    ProductVersion : 5.1.2600.0
    ProductName : Microsoft® Windows® Operating System
    CompanyName : Microsoft Corporation
    FileDescription : Generic Host Process for Win32 Services
    InternalName : svchost.exe
    LegalCopyright : © Microsoft Corporation. All rights reserved.
    OriginalFilename : svchost.exe

    #:10 [ccsetmgr.exe]
    FilePath : C:\Program Files\Common Files\Symantec Shared\
    ProcessID : 1660
    ThreadCreationTime : 8.2.2006 9:21:00
    BasePriority : Normal
    FileVersion : 2.1.9.3
    ProductVersion : 2.1.9.3
    ProductName : Common Client
    CompanyName : Symantec Corporation
    FileDescription : Common Client Settings Manager Service
    InternalName : ccSetMgr
    LegalCopyright : Copyright (c) 2000-2003 Symantec Corporation. All rights reserved.
    OriginalFilename : ccSetMgr.exe

    #:11 [explorer.exe]
    FilePath : C:\WINDOWS\
    ProcessID : 1936
    ThreadCreationTime : 8.2.2006 9:21:01
    BasePriority : Normal
    FileVersion : 6.00.2600.0000 (xpclient.010817-1148)
    ProductVersion : 6.00.2600.0000
    ProductName : Microsoft® Windows® -käyttöjärjestelmä
    CompanyName : Microsoft Corporation
    FileDescription : Resurssienhallinta
    InternalName : explorer
    LegalCopyright : © Microsoft Corporation. All rights reserved.
    OriginalFilename : EXPLORER.EXE

    #:12 [ccevtmgr.exe]
    FilePath : C:\Program Files\Common Files\Symantec Shared\
    ProcessID : 1968
    ThreadCreationTime : 8.2.2006 9:21:02
    BasePriority : Normal
    FileVersion : 2.1.9.3
    ProductVersion : 2.1.9.3
    ProductName : Common Client
    CompanyName : Symantec Corporation
    FileDescription : Common Client Event Manager Service
    InternalName : ccEvtMgr
    LegalCopyright : Copyright (c) 2000-2003 Symantec Corporation. All rights reserved.
    OriginalFilename : ccEvtMgr.exe

    #:13 [spoolsv.exe]
    FilePath : C:\WINDOWS\system32\
    ProcessID : 232
    ThreadCreationTime : 8.2.2006 9:21:07
    BasePriority : Normal
    FileVersion : 5.1.2600.0 (XPClient.010817-1148)
    ProductVersion : 5.1.2600.0
    ProductName : Microsoft® Windows® Operating System
    CompanyName : Microsoft Corporation
    FileDescription : Spooler SubSystem App
    InternalName : spoolsv.exe
    LegalCopyright : © Microsoft Corporation. All rights reserved.
    OriginalFilename : spoolsv.exe

    #:14 [hpconfig.exe]
    FilePath : C:\WINDOWS\system32\
    ProcessID : 372
    ThreadCreationTime : 8.2.2006 9:21:08
    BasePriority : Normal
    FileVersion : 3, 0, 0, 7
    ProductVersion : 3, 0, 0, 7
    ProductName : HPConfig Module
    CompanyName : Hewlett-Packard
    FileDescription : HPConfig Module
    InternalName : HPConfig
    LegalCopyright : Hewlett-Packard Copyright (C) 1999-2002
    OriginalFilename : HPConfig.EXE
    Comments : HP Configuration Interface Service

    #:15 [navapsvc.exe]
    FilePath : C:\Program Files\Norton AntiVirus\
    ProcessID : 412
    ThreadCreationTime : 8.2.2006 9:21:08
    BasePriority : Normal
    FileVersion : 10.00.2
    ProductVersion : 10.00.2
    ProductName : Norton AntiVirus
    CompanyName : Symantec Corporation
    FileDescription : Norton AntiVirus Auto-Protect Service
    InternalName : NAVAPSVC
    LegalCopyright : Norton AntiVirus 2004 for Windows 98/ME/2000/XP Copyright (c) 2003 Symantec Corporation. All rights reserved.
    OriginalFilename : NAVAPSVC.EXE

    #:16 [radiosvr.exe]
    FilePath : C:\WINDOWS\system32\
    ProcessID : 460
    ThreadCreationTime : 8.2.2006 9:21:09
    BasePriority : Normal
    FileVersion : 1, 0, 0, 4
    ProductVersion : 1, 0, 0, 4
    ProductName : RadioSvr Module
    CompanyName : Hewlett-Packard
    FileDescription : RadioSvr Module
    InternalName : RadioSvr
    LegalCopyright : Copyright © Hewlett-Packard, 2001
    OriginalFilename : RadioSvr.EXE

    #:17 [s3tray2.exe]
    FilePath : C:\WINDOWS\System32\
    ProcessID : 960
    ThreadCreationTime : 8.2.2006 9:21:16
    BasePriority : Normal
    FileVersion : 1.00.18-0214
    ProductVersion : 1.00.18-0214
    ProductName : S3 Graphics Utilities
    CompanyName : S3 Graphics, Inc.
    FileDescription : s3contrl
    InternalName : s3contrl
    LegalCopyright : Copyright © 2001-2002 S3 Graphics, Inc.
    LegalTrademarks : S3 is a registered trademark of S3 Incorporated
    OriginalFilename : s3contrl.exe

    #:18 [syntplpr.exe]
    FilePath : C:\Program Files\Synaptics\SynTP\
    ProcessID : 992
    ThreadCreationTime : 8.2.2006 9:21:17
    BasePriority : Normal
    FileVersion : 6.2.0 31Jan02
    ProductVersion : 6.2.0 31Jan02
    ProductName : Progressive Touch
    CompanyName : Synaptics, Inc.
    FileDescription : TouchPad Driver Helper Application
    InternalName : SynTPLpr
    LegalCopyright : Copyright (C) Synaptics, Inc. 1996-2002
    OriginalFilename : SynTPLpr.exe

    #:19 [syntpenh.exe]
    FilePath : C:\Program Files\Synaptics\SynTP\
    ProcessID : 1104
    ThreadCreationTime : 8.2.2006 9:21:18
    BasePriority : Normal
    FileVersion : 6.2.0 31Jan02
    ProductVersion : 6.2.0 31Jan02
    ProductName : Progressive Touch
    CompanyName : Synaptics, Inc.
    FileDescription : Synaptics TouchPad Enhancements
    InternalName : Scrolleroo
    LegalCopyright : Copyright (C) Synaptics, Inc. 1996-2002
    OriginalFilename : SynTPEnh.exe

    #:20 [hptasks.exe]
    FilePath : C:\Program Files\Hewlett-Packard\HP Notebook Utilities\
    ProcessID : 1308
    ThreadCreationTime : 8.2.2006 9:21:20
    BasePriority : Normal
    FileVersion : 1, 12, 0, 5
    ProductVersion : 1, 12, 0, 5
    ProductName : Hewlett-Packard HP Notebook Utilities
    CompanyName : Hewlett-Packard
    FileDescription : hptasks
    InternalName : hptasks
    LegalCopyright : Copyright © 2001-2002, Hewlett-Packard
    OriginalFilename : hptasks.exe

    #:21 [onetouch.exe]
    FilePath : C:\PROGRA~1\HEWLET~1\ONE-TO~1\
    ProcessID : 744
    ThreadCreationTime : 8.2.2006 9:21:21
    BasePriority : Normal
    FileVersion : 1.00
    ProductVersion : 1.00
    ProductName : Dritek System Inc. OneTouch 2.9.2001 ( VC60 )
    CompanyName : Dritek System Inc.
    FileDescription : HP One-Touch
    InternalName : OneTouch
    LegalCopyright : Copyright © 2001 Dritek System Inc.
    OriginalFilename : OneTouch.exe

    #:22 [ccapp.exe]
    FilePath : C:\Program Files\Common Files\Symantec Shared\
    ProcessID : 1348
    ThreadCreationTime : 8.2.2006 9:21:22
    BasePriority : Normal
    FileVersion : 2.1.9.3
    ProductVersion : 2.1.9.3
    ProductName : Common Client
    CompanyName : Symantec Corporation
    FileDescription : Common Client User Session
    InternalName : ccApp
    LegalCopyright : Copyright (c) 2000-2003 Symantec Corporation. All rights reserved.
    OriginalFilename : ccApp.exe

    #:23 [zlclient.exe]
    FilePath : C:\Program Files\Zone Labs\ZoneAlarm\
    ProcessID : 1452
    ThreadCreationTime : 8.2.2006 9:21:30
    BasePriority : Normal
    FileVersion : 6.1.737.000
    ProductVersion : 6.1.737.000
    ProductName : Zone Labs Client
    CompanyName : Zone Labs, LLC
    FileDescription : Zone Labs Client
    InternalName : zlclient
    LegalCopyright : Copyright © 1998-2005, Zone Labs, LLC
    OriginalFilename : zlclient.exe

    #:24 [vsmon.exe]
    FilePath : C:\WINDOWS\system32\ZoneLabs\
    ProcessID : 1060
    ThreadCreationTime : 8.2.2006 9:23:36
    BasePriority : Normal
    FileVersion : 6.1.737.000
    ProductVersion : 6.1.737.000
    ProductName : TrueVector Service
    CompanyName : Zone Labs, LLC
    FileDescription : TrueVector Service
    InternalName : vsmon
    LegalCopyright : Copyright © 1998-2005, Zone Labs, LLC
    OriginalFilename : vsmon.exe

    #:25 [wuauclt.exe]
    FilePath : C:\WINDOWS\System32\
    ProcessID : 584
    ThreadCreationTime : 8.2.2006 9:23:41
    BasePriority : Normal
    FileVersion : 5.8.0.2469 built by: lab01_n(wmbla)
    ProductVersion : 5.8.0.2469
    ProductName : Microsoft® Windows® -käyttöjärjestelmä
    CompanyName : Microsoft Corporation
    FileDescription : Automaattiset päivitykset
    InternalName : wuauclt.exe
    LegalCopyright : © Microsoft Corporation. Kaikki oikeudet pidätetään.
    OriginalFilename : wuauclt.exe

    #:26 [savscan.exe]
    FilePath : C:\Program Files\Norton AntiVirus\
    ProcessID : 1472
    ThreadCreationTime : 8.2.2006 9:23:55
    BasePriority : Normal

    ProductVersion : 9.2
    ProductName : Symantec AntiVirus AutoProtect
    CompanyName : Symantec Corporation
    FileDescription : Symantec AntiVirus Scanner
    InternalName : SAVSCAN
    LegalCopyright : Copyright (c) 2004 Symantec Corporation
    OriginalFilename : SAVSCAN.EXE

    #:27 [ad-aware.exe]
    FilePath : C:\Program Files\Lavasoft\Ad-Aware SE Personal\
    ProcessID : 2400
    ThreadCreationTime : 8.2.2006 11:12:49
    BasePriority : Normal
    FileVersion : 6.2.0.236
    ProductVersion : SE 106
    ProductName : Lavasoft Ad-Aware SE
    CompanyName : Lavasoft Sweden
    FileDescription : Ad-Aware SE Core application
    InternalName : Ad-Aware.exe
    LegalCopyright : Copyright © Lavasoft AB Sweden
    OriginalFilename : Ad-Aware.exe
    Comments : All Rights Reserved

    #:28 [iexplore.exe]
    FilePath : C:\Program Files\Internet Explorer\
    ProcessID : 364
    ThreadCreationTime : 8.2.2006 11:12:52
    BasePriority : Normal
    FileVersion : 6.00.2600.0000 (xpclient.010817-1148)
    ProductVersion : 6.00.2600.0000
    ProductName : Microsoft® Windows® -käyttöjärjestelmä
    CompanyName : Microsoft Corporation
    FileDescription : Internet Explorer
    InternalName : iexplore
    LegalCopyright : © Microsoft Corporation. All rights reserved.
    OriginalFilename : IEXPLORE.EXE

    Memory scan result:
    »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
    New critical objects: 0
    Objects found so far: 0


    Started registry scan
    »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

    Registry Scan result:
    »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
    New critical objects: 0
    Objects found so far: 0


    Started deep registry scan
    »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

    Deep registry scan result:
    »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
    New critical objects: 0
    Objects found so far: 0

    MRU List Object Recognized!
    Location: : C:\Documents and Settings\Alli ja Sakari\recent
    Description : list of recently opened documents


    MRU List Object Recognized!
    Location: : software\microsoft\directdraw\mostrecentapplication
    Description : most recent application to use microsoft directdraw


    MRU List Object Recognized!
    Location: : S-1-5-21-1647371527-2826650621-2974146706-1006\software\microsoft\internet explorer
    Description : last download directory used in microsoft internet explorer


    MRU List Object Recognized!
    Location: : S-1-5-21-1647371527-2826650621-2974146706-1006\software\microsoft\internet explorer\typedurls
    Description : list of recently entered addresses in microsoft internet explorer


    MRU List Object Recognized!
    Location: : S-1-5-21-1647371527-2826650621-2974146706-1006\software\microsoft\windows\currentversion\applets\regedit
    Description : last key accessed using the microsoft registry editor


    MRU List Object Recognized!
    Location: : S-1-5-21-1647371527-2826650621-2974146706-1006\software\microsoft\windows\currentversion\explorer\comdlg32\lastvisitedmru
    Description : list of recent programs opened


    MRU List Object Recognized!
    Location: : S-1-5-21-1647371527-2826650621-2974146706-1006\software\microsoft\windows\currentversion\explorer\comdlg32\opensavemru
    Description : list of recently saved files, stored according to file extension


    MRU List Object Recognized!
    Location: : S-1-5-21-1647371527-2826650621-2974146706-1006\software\microsoft\windows\currentversion\explorer\recentdocs
    Description : list of recent documents opened


    MRU List Object Recognized!
    Location: : S-1-5-21-1647371527-2826650621-2974146706-1006\software\microsoft\windows\currentversion\explorer\runmru
    Description : mru list for items opened in start | run



    Started Tracking Cookie scan
    »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»


    Tracking Cookie Object Recognized!
    Type : IECache Entry
    Data : alli ja sakari@cgi-bin[1].txt
    TAC Rating : 3
    Category : Data Miner
    Comment : Hits:2
    Value : Cookie:alli ja [email protected]/cgi-bin
    Expires : 19.1.2009 1:00:00
    LastSync : Hits:2
    UseCount : 0
    Hits : 2

    Tracking Cookie Object Recognized!
    Type : IECache Entry
    Data : alli ja sakari@doubleclick[1].txt
    TAC Rating : 3
    Category : Data Miner
    Comment : Hits:5
    Value : Cookie:alli ja [email protected]/
    Expires : 7.2.2009 12:41:18
    LastSync : Hits:5
    UseCount : 0
    Hits : 5

    Tracking Cookie Object Recognized!
    Type : IECache Entry
    Data : alli ja sakari@tradedoubler[1].txt
    TAC Rating : 3
    Category : Data Miner
    Comment : Hits:3
    Value : Cookie:alli ja [email protected]/
    Expires : 3.2.2026 13:10:02
    LastSync : Hits:3
    UseCount : 0
    Hits : 3

    Tracking cookie scan result:
    »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
    New critical objects: 3
    Objects found so far: 12



    Deep scanning and examining files (C:)
    »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

    Disk Scan Result for C:\
    »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
    New critical objects: 0
    Objects found so far: 12


    Scanning Hosts file......
    Hosts file location:"C:\WINDOWS\system32\drivers\etc\hosts".
    »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

    Hosts file scan result:
    »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
    1 entries scanned.
    New critical objects:0
    Objects found so far: 12




    Performing conditional scans...
    »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

    Conditional scan result:
    »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
    New critical objects: 0
    Objects found so far: 12

    13:24:41 Scan Complete

    Summary Of This Scan
    »»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
    Total scanning time:00:11:23.883
    Objects scanned:103129
    Objects identified:3
    Objects ignored:0
    New critical objects:3

    logi on ok,ihan normaalia nuo Tracking Cookie

    Äänestä

Kommentoi aloitusta


Miguel Casagrande kirjoitti:

Hei viisaat,
Alla Hijackthis logi isäni koneesta. Näkyykö vikaa? Nettiselain avaa aina uden clcktobegin -mainoksen... ja kone on toooooosi hidas. AdAware löytää jotain, mutta ei onistu poistamaan lopullisesti

Kiitän paljon.

Logfile of HijackThis v1.99.1
Scan saved at 12:56:10, on 8.2.2006
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\HPConfig.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\system32\RadioSvr.exe
C:\WINDOWS\System32\S3tray2.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Hewlett-Packard\HP Notebook Utilities\hptasks.exe
C:\PROGRA~1\HEWLET~1\ONE-TO~1\OneTouch.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Norton AntiVirus\SAVScan.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\ATK\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mtv3.fi/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mtv3.fi/
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.hp.com/info/homepage-o
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O2 - BHO: bitlocker - {01EB5130-FC0C-4d75-B9CE-4801B1B854F5} - C:\WINDOWS\System32\nsr7.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [CARPService] carpserv.exe
O4 - HKLM\..\Run: [S3TRAY2] S3tray2.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [HP TV Now] C:\Program Files\Hewlett-Packard\HP TV Now\HpTvNow.exe /RK
O4 - HKLM\..\Run: [HP Display Settings] C:\Program Files\Hewlett-Packard\HP Notebook Utilities\hptasks.exe /s
O4 - HKLM\..\Run: [QT4HPOT] C:\PROGRA~1\HEWLET~1\ONE-TO~1\OneTouch.EXE
O4 - HKLM\..\Run: [HP Presentation Ready] C:\Program Files\Hewlett-Packard\HP Presentation Ready\PresRdy.exe -r
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O14 - IERESET.INF: START_PAGE_URL=http://www.mtv3.fi/
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: HP Configuration Interface Service (HPConfig) - Hewlett-Packard - C:\WINDOWS\system32\HPConfig.exe
O23 - Service: HP RF Device Service (HpRfDev) - Hewlett-Packard - C:\WINDOWS\system32\HpRfDev.exe
O23 - Service: Norton AntiVirus -ohjelman automaattinen suojaus (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: RadioSvr - Hewlett-Packard - C:\WINDOWS\system32\RadioSvr.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

Anonyymi
5000

Ilmoita asiaton sisältö

  • Sisältää materiaalia, joka on loukkaavaa, herjaavaa, rasistista, uhkailevaa tai ahdistelevaa.

  • Materiaali sisältää nimiä, yhteystietoja tai muita henkilökohtaisia tietoja. Julkisuuden henkilöistä, julkisissa viroissa toimivista ihmisistä sekä yritysten vastuuhenkilöistä saa keskustella työhön liittyen. Myös yksityiselämään liittyvistä asioista voi keskustella siltä osin, kuin niistä on julkisesti kerrottu.

  • Sisältää lapsille haitallista tai heiltä kiellettyä materiaalia. Seksuaalinen sisältö on sallittua aiheeseen tarkoitetuilla palstoilla, joiden ikäraja on 18 vuotta.

  • Lainvastaista sisältöä voi olla mm. yksityiselämää loukkaavan tiedon levitys, kiihottaminen kansanryhmää vastaan, laiton uhkaaminen, alaikäisiin liittyvä seksuaalinen sisältö/grooming, petokset, identiteettivarkaudet, kunnianloukkaukset ja tekijänoikeusrikkomukset.

  • Sisältö ei liity palstan tai keskusteluketjun aiheeseen.

  • Viesti ei ole suomea tai ruotsia (pl. International Forums), se sisältää mainontaa, se sisältää tekijänoikeuksin suojattua materiaalia, se on massapostitus tai jokin muu syy.

Jaa keskustelu