Rekisteröidy

Ilmoitukset

Ladataan…

    Näytä kaikki

    HJT logi

    Nyt rupes kaikki tökkiin,tännekkin kesti kauan ennen kun pääsi.
    Pitäis varmaan paljon poistaa.


    Logfile of HijackThis v1.99.1
    Scan saved at 10:37:42, on 24.2.2006
    Platform: Windows XP SP1 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\System32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Ahead\InCD\InCDsrv.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\LEXBCES.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\LEXPPS.EXE
    C:\WINDOWS\SOUNDMAN.EXE
    C:\Program Files\Ahead\InCD\InCD.exe
    C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0R2.EXE
    C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe
    E:\Picasa2\PicasaMediaDetector.exe
    C:\windows\eee2.exe
    C:\windows\winsysban11.exe
    C:\Program Files\dna Nettiturva\Common\FSM32.EXE
    C:\WINDOWS\System32\ctfmon.exe
    C:\PROGRA~1\DNANET~1\backweb\4653381\Program\SERVIC~1.EXE
    C:\Program Files\dna Nettiturva\Anti-Virus\fsgk32st.exe
    C:\Program Files\dna Nettiturva\Anti-Virus\FSGK32.EXE
    C:\Program Files\dna Nettiturva\backweb\4653381\program\fsbwsys.exe
    C:\Program Files\dna Nettiturva\backweb\4653381\Program\dna Nettiturva.exe
    C:\Program Files\dna Nettiturva\Anti-Virus\fssm32.exe
    C:\Program Files\dna Nettiturva\Common\FSMA32.EXE
    C:\Program Files\dna Nettiturva\Common\FSMB32.EXE
    C:\Program Files\Network Monitor\netmon.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\dna Nettiturva\Common\FCH32.EXE
    C:\Program Files\dna Nettiturva\Common\FAMEH32.EXE
    C:\Program Files\dna Nettiturva\Anti-Virus\fsrw.exe
    C:\Program Files\dna Nettiturva\Anti-Virus\fsav32.exe
    C:\Program Files\dna Nettiturva\FWES\Program\fsdfwd.exe
    C:\PROGRA~1\DNANET~1\ANTI-S~1\fsaw.exe
    C:\Program Files\dna Nettiturva\FSGUI\fsguidll.exe
    C:\HJT\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dnainternet.fi/
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.suomi.net:8080
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
    O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [EPSON Stylus C86 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0R2.EXE /P23 "EPSON Stylus C86 Series" /O6 "USB002" /M "Stylus C86"
    O4 - HKLM\..\Run: [Picasa Media Detector] E:\Picasa2\PicasaMediaDetector.exe
    O4 - HKLM\..\Run: [Windows Security Protocol] win32sprot.exe
    O4 - HKLM\..\Run: [AdobeReaderPro] svxhost.exe
    O4 - HKLM\..\Run: [Spooler SubSystem App] C:\WINDOWS\System32\spooIsv.exe
    O4 - HKLM\..\Run: [Local Security Authority Service] C:\WINDOWS\System32\Isass.exe
    O4 - HKLM\..\Run: [ahmb] c:\windows\eee2.exe
    O4 - HKLM\..\Run: [ahkw] C:\windows\eee2.exe
    O4 - HKLM\..\Run: [winsysupd] C:\windows\winsysupd11.exe
    O4 - HKLM\..\Run: [gimmygames] C:\\gimmygames11.exe
    O4 - HKLM\..\Run: [winsysban] C:\windows\winsysban11.exe
    O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\dna Nettiturva\Common\FSM32.EXE" /splash
    O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\dna Nettiturva\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
    O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\dna Nettiturva\FSGUI\FSSW.EXE" /reboot
    O4 - HKLM\..\Run: [News Service] "C:\Program Files\dna Nettiturva\FSGUI\ispnews.exe"
    O4 - HKLM\..\RunServices: [Windows Security Protocol] win32sprot.exe
    O4 - HKLM\..\RunServices: [AdobeReaderPro] svxhost.exe
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
    O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
    O4 - HKCU\..\Run: [Windows Security Protocol] win32sprot.exe
    O4 - HKCU\..\Run: [Dedc] "C:\Program Files\ocec\nehe.exe" -vt yazb
    O4 - HKCU\..\Run: [uwfw] C:\PROGRA~1\COMMON~1\uwfw\uwfwm.exe
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: dna Nettiturva.lnk = C:\Program Files\dna Nettiturva\backweb\4653381\Program\dna Nettiturva.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
    O8 - Extra context menu item: &Estä tämä kohoikkuna - C:\Program Files\dna Nettiturva\Anti-Spyware\blockpopups.htm
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\dna Nettiturva\Anti-Spyware\ieshield.dll
    O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\dna Nettiturva\Anti-Spyware\ieshield.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
    O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
    O16 - DPF: {288C5F13-7E52-4ADA-A32E-F5BF9D125F99} (CR64Loader Object) - http://www.miniclip.com/inflaterball/miniclipGameLoader.dll
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1126939608390
    O17 - HKLM\System\CCS\Services\Tcpip\..\{7EBAA797-5164-451D-AAF2-390F912046BF}: NameServer = 212.50.131.153 213.139.190.3
    O20 - Winlogon Notify: WindowsUpdate - C:\WINDOWS\system32\isakeng.dll (file missing)
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
    O23 - Service: dna Nettiturva (BackWeb Plug-in - 4653381) - BackWeb Technologies Inc. - C:\PROGRA~1\DNANET~1\backweb\4653381\Program\SERVIC~1.EXE
    O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corp. - C:\Program Files\dna Nettiturva\Anti-Virus\fsgk32st.exe
    O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\dna Nettiturva\backweb\4653381\program\fsbwsys.exe
    O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\dna Nettiturva\FWES\Program\fsdfwd.exe
    O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\dna Nettiturva\Common\FSMA32.EXE
    O23 - Service: InCD Helper (InCDsrv) - Ahead Software AG - C:\Program Files\Ahead\InCD\InCDsrv.exe
    O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
    O23 - Service: Network Monitor - Unknown owner - C:\Program Files\Network Monitor\netmon.exe
    13615
    Äänestä

    Muut lukivat myös

    Vastaukset 13

    Vanhimmat

    Hoidossa...

    Äänestä

    • Onhan sulle pari örkkiä luikahtanu koneelle.

      Lataa ewido:
      http://www.ewido.net/en/download/
      asenna ja päivitä, ohje:
      http://keskustelu.afterdawn.com/thread_view.cfm/269186

      Poista ohjauspaneelin lisää/poista sovelluksista seuraavat jos löytyy:

      ocec
      uwfw

      Avaa HijackThis, paina do a system scan only ja merkkaa nämä:

      O4 - HKLM\..\Run: [Windows Security Protocol] win32sprot.exe
      O4 - HKLM\..\Run: [AdobeReaderPro] svxhost.exe
      O4 - HKLM\..\Run: [Spooler SubSystem App] C:\WINDOWS\System32\spooIsv.exe
      O4 - HKLM\..\Run: [Local Security Authority Service] C:\WINDOWS\System32\Isass.exe
      O4 - HKLM\..\Run: [ahmb] c:\windows\eee2.exe
      O4 - HKLM\..\Run: [ahkw] C:\windows\eee2.exe
      O4 - HKLM\..\Run: [winsysupd] C:\windows\winsysupd11.exe
      O4 - HKLM\..\Run: [gimmygames] C:\\gimmygames11.exe
      O4 - HKLM\..\Run: [winsysban] C:\windows\winsysban11.exe
      O4 - HKLM\..\RunServices: [Windows Security Protocol] win32sprot.exe
      O4 - HKLM\..\RunServices: [AdobeReaderPro] svxhost.exe
      O4 - HKCU\..\Run: [Windows Security Protocol] win32sprot.exe
      O4 - HKCU\..\Run: [Dedc] "C:\Program Files\ocec\nehe.exe" -vt yazb
      O4 - HKCU\..\Run: [uwfw] C:\PROGRA~1\COMMON~1\uwfw\uwfwm.exe
      O23 - Service: Network Monitor - Unknown owner - C:\Program Files\Network Monitor\netmon.exe

      Ja paina fix cheked ja sulje HijackThis.

      Seuraavaksi paina vasemmasta alakulmasta Käynnistä -> Suorita -> Kirjoita:

      sc delete Network Monitor

      Ja klikkaa ok.

      Seuraavaksi käynnistä kone vikasietotilaan, eli näpytä F8:a käynnistyksen yhteydessä.

      Laita piilotiedostot näkyville:

      * Klikkaa Käynnistä.
      * Avaa Oma Tietokone.
      * Valitse Työkalut ylämenusta ja klikkaa Kansion asetukset.
      * Valitse Näytä välilehti.
      * Piilotiedostot/kansiot kohdalla valitse Näytä piilotetut tiedostot ja kansiot.
      * Poista rasti ruudusta -> Piilota suojatut käyttöjärjestelmätiedostot
      * Klikkaa Kyllä varmistaaksesi muutokset.
      * Klikkaa OK.

      Poista seuraavat tiedostot tai kansiot. Käytä etsi toimintoa niiden etimiseen mihin en ole laittanut mitään polkuja:

      win32sprot.exe
      svxhost.exe
      gimmygames11.exe
      C:\WINDOWS\System32\->spooIsv.exe
      C:\WINDOWS\System32\->isass.exe eee2.exe
      C:\windows\->winsysupd11.exe
      C:\windows\->winsysban11.exe
      C:\Program Files\->ocec
      C:\PROGRA~1\COMMON~1\->uwfw
      C:\Program Files\->Network Monitor

      Aja tämän jälkeen ewidolla full system scan ja tallenna raportti.

      Käynnistä tietokone normaalisti uudelleen ja ota piilotiedostot pois näkyvistä

      Lähetä uusi hijackthis loki ja ewidon raportti.

      Äänestä

    • Jurpo kirjoitti:

      Onhan sulle pari örkkiä luikahtanu koneelle.

      Lataa ewido:
      http://www.ewido.net/en/download/
      asenna ja päivitä, ohje:
      http://keskustelu.afterdawn.com/thread_view.cfm/269186

      Poista ohjauspaneelin lisää/poista sovelluksista seuraavat jos löytyy:

      ocec
      uwfw

      Avaa HijackThis, paina do a system scan only ja merkkaa nämä:

      O4 - HKLM\..\Run: [Windows Security Protocol] win32sprot.exe
      O4 - HKLM\..\Run: [AdobeReaderPro] svxhost.exe
      O4 - HKLM\..\Run: [Spooler SubSystem App] C:\WINDOWS\System32\spooIsv.exe
      O4 - HKLM\..\Run: [Local Security Authority Service] C:\WINDOWS\System32\Isass.exe
      O4 - HKLM\..\Run: [ahmb] c:\windows\eee2.exe
      O4 - HKLM\..\Run: [ahkw] C:\windows\eee2.exe
      O4 - HKLM\..\Run: [winsysupd] C:\windows\winsysupd11.exe
      O4 - HKLM\..\Run: [gimmygames] C:\\gimmygames11.exe
      O4 - HKLM\..\Run: [winsysban] C:\windows\winsysban11.exe
      O4 - HKLM\..\RunServices: [Windows Security Protocol] win32sprot.exe
      O4 - HKLM\..\RunServices: [AdobeReaderPro] svxhost.exe
      O4 - HKCU\..\Run: [Windows Security Protocol] win32sprot.exe
      O4 - HKCU\..\Run: [Dedc] "C:\Program Files\ocec\nehe.exe" -vt yazb
      O4 - HKCU\..\Run: [uwfw] C:\PROGRA~1\COMMON~1\uwfw\uwfwm.exe
      O23 - Service: Network Monitor - Unknown owner - C:\Program Files\Network Monitor\netmon.exe

      Ja paina fix cheked ja sulje HijackThis.

      Seuraavaksi paina vasemmasta alakulmasta Käynnistä -> Suorita -> Kirjoita:

      sc delete Network Monitor

      Ja klikkaa ok.

      Seuraavaksi käynnistä kone vikasietotilaan, eli näpytä F8:a käynnistyksen yhteydessä.

      Laita piilotiedostot näkyville:

      * Klikkaa Käynnistä.
      * Avaa Oma Tietokone.
      * Valitse Työkalut ylämenusta ja klikkaa Kansion asetukset.
      * Valitse Näytä välilehti.
      * Piilotiedostot/kansiot kohdalla valitse Näytä piilotetut tiedostot ja kansiot.
      * Poista rasti ruudusta -> Piilota suojatut käyttöjärjestelmätiedostot
      * Klikkaa Kyllä varmistaaksesi muutokset.
      * Klikkaa OK.

      Poista seuraavat tiedostot tai kansiot. Käytä etsi toimintoa niiden etimiseen mihin en ole laittanut mitään polkuja:

      win32sprot.exe
      svxhost.exe
      gimmygames11.exe
      C:\WINDOWS\System32\->spooIsv.exe
      C:\WINDOWS\System32\->isass.exe eee2.exe
      C:\windows\->winsysupd11.exe
      C:\windows\->winsysban11.exe
      C:\Program Files\->ocec
      C:\PROGRA~1\COMMON~1\->uwfw
      C:\Program Files\->Network Monitor

      Aja tämän jälkeen ewidolla full system scan ja tallenna raportti.

      Käynnistä tietokone normaalisti uudelleen ja ota piilotiedostot pois näkyvistä

      Lähetä uusi hijackthis loki ja ewidon raportti.

      Fiksaa tää rivi vielä Hijakilla.

      O20 - Winlogon Notify: WindowsUpdate - C:\WINDOWS\system32\isakeng.dll (file missing)

      Äänestä

    • Jurpo kirjoitti:

      Fiksaa tää rivi vielä Hijakilla.

      O20 - Winlogon Notify: WindowsUpdate - C:\WINDOWS\system32\isakeng.dll (file missing)

      HijackThiskillä poistettu.
      Ewidon asennus onnistu vasta lopussa.
      Kaikkia poistettavia kansioita ja tiedostoja en löytänyt.Mutta katoppa logi ja raportti


      Logfile of HijackThis v1.99.1
      Scan saved at 18:59:46, on 24.2.2006
      Platform: Windows XP SP1 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\System32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Ahead\InCD\InCDsrv.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\LEXBCES.EXE
      C:\WINDOWS\system32\LEXPPS.EXE
      C:\WINDOWS\SOUNDMAN.EXE
      C:\Program Files\Ahead\InCD\InCD.exe
      C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe
      C:\Program Files\QuickTime\qttask.exe
      C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe
      E:\Picasa2\PicasaMediaDetector.exe
      C:\Program Files\dna Nettiturva\Common\FSM32.EXE
      C:\WINDOWS\System32\ctfmon.exe
      C:\PROGRA~1\DNANET~1\backweb\4653381\Program\SERVIC~1.EXE
      C:\Program Files\dna Nettiturva\Anti-Virus\fsgk32st.exe
      C:\Program Files\dna Nettiturva\Anti-Virus\FSGK32.EXE
      C:\Program Files\dna Nettiturva\backweb\4653381\program\fsbwsys.exe
      C:\Program Files\dna Nettiturva\Anti-Virus\fssm32.exe
      C:\Program Files\dna Nettiturva\backweb\4653381\Program\dna Nettiturva.exe
      C:\Program Files\dna Nettiturva\Common\FSMA32.EXE
      C:\Program Files\dna Nettiturva\Common\FSMB32.EXE
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\dna Nettiturva\Common\FCH32.EXE
      C:\Program Files\dna Nettiturva\Common\FAMEH32.EXE
      C:\Program Files\dna Nettiturva\Anti-Virus\fsrw.exe
      C:\Program Files\dna Nettiturva\Anti-Virus\fsav32.exe
      C:\Program Files\dna Nettiturva\FWES\Program\fsdfwd.exe
      C:\PROGRA~1\DNANET~1\ANTI-S~1\fsaw.exe
      C:\Program Files\dna Nettiturva\FSGUI\fsguidll.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Documents and Settings\Järjestelmänvalvoja\Local Settings\Temporary Internet Files\Content.IE5\O92Z01MZ\ewido-setup[1].exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\HJT\HijackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dnainternet.fi/
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.suomi.net:8080
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
      O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
      O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
      O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
      O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe"
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [EPSON Stylus C86 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0R2.EXE /P23 "EPSON Stylus C86 Series" /O6 "USB002" /M "Stylus C86"
      O4 - HKLM\..\Run: [Picasa Media Detector] E:\Picasa2\PicasaMediaDetector.exe
      O4 - HKLM\..\Run: [AdobeReaderPro] svxhost.exe
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\dna Nettiturva\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\dna Nettiturva\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
      O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\dna Nettiturva\FSGUI\FSSW.EXE" /reboot
      O4 - HKLM\..\Run: [News Service] "C:\Program Files\dna Nettiturva\FSGUI\ispnews.exe"
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
      O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
      O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      O4 - Global Startup: dna Nettiturva.lnk = C:\Program Files\dna Nettiturva\backweb\4653381\Program\dna Nettiturva.exe
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
      O8 - Extra context menu item: &Estä tämä kohoikkuna - C:\Program Files\dna Nettiturva\Anti-Spyware\blockpopups.htm
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\dna Nettiturva\Anti-Spyware\ieshield.dll
      O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\dna Nettiturva\Anti-Spyware\ieshield.dll
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
      O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
      O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cab
      O16 - DPF: {288C5F13-7E52-4ADA-A32E-F5BF9D125F99} (CR64Loader Object) - http://www.miniclip.com/inflaterball/miniclipGameLoader.dll
      O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1126939608390
      O17 - HKLM\System\CCS\Services\Tcpip\..\{7EBAA797-5164-451D-AAF2-390F912046BF}: NameServer = 212.50.131.153 213.139.190.3
      O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
      O23 - Service: dna Nettiturva (BackWeb Plug-in - 4653381) - BackWeb Technologies Inc. - C:\PROGRA~1\DNANET~1\backweb\4653381\Program\SERVIC~1.EXE
      O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corp. - C:\Program Files\dna Nettiturva\Anti-Virus\fsgk32st.exe
      O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\dna Nettiturva\backweb\4653381\program\fsbwsys.exe
      O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\dna Nettiturva\FWES\Program\fsdfwd.exe
      O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\dna Nettiturva\Common\FSMA32.EXE
      O23 - Service: InCD Helper (InCDsrv) - Ahead Software AG - C:\Program Files\Ahead\InCD\InCDsrv.exe
      O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
      O23 - Service: Taustatulostusohjain (Spooler) - Unknown owner - C:\WINDOWS\system32\spoolsv.exe (file missing)



      ewido anti-malware - Scan report
      ---------------------------------------------------------

      Created on:         19:34:32, 24.2.2006
      Report-Checksum:      9DF7BF7E

      Scan result:

         HKLM\SOFTWARE\Classes\CLSID\{6001CDF7-6F45-471b-A203-0225615E35A7} -> Adware.Generic : Cleaned without backup
         :mozilla.17:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Profiles\default\j536nccu.slt\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned without backup
         :mozilla.20:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Profiles\default\j536nccu.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned without backup
         C:\Documents and Settings\Järjestelmänvalvoja\Cookies\järjestelmä[email protected][1].txt -> TrackingCookie.Yieldmanager : Cleaned without backup
         C:\Documents and Settings\Järjestelmänvalvoja\Cookies\järjestelmänvalvoja@com[2].txt -> TrackingCookie.Com : Cleaned without backup
         C:\Documents and Settings\Järjestelmänvalvoja\Cookies\järjestelmä[email protected][1].txt -> TrackingCookie.Masterstats : Cleaned without backup
         C:\Documents and Settings\Järjestelmänvalvoja\Cookies\järjestelmänvalvoja@komtrack[2].txt -> TrackingCookie.Komtrack : Cleaned without backup
         C:\Documents and Settings\Järjestelmänvalvoja\Cookies\järjestelmänvalvoja@pay4klick[1].txt -> TrackingCookie.Pay4klick : Cleaned without backup
         C:\FINDnFIX\keys1\NirComLine.exe -> Not-A-Virus.RemoteAdmin.Win32.NirCmdLine.14 : Cleaned without backup
         C:\RECYCLER\S-1-5-21-1085031214-1220945662-839522115-500\Dc42.exe -> Adware.MediaMotor : Cleaned without backup
         C:\RECYCLER\S-1-5-21-1085031214-1220945662-839522115-500\Dc47\netmon.exe -> Not-A-Virus.Monitor.Win32.NetMon.a : Cleaned without backup
         C:\WINDOWS\Downloaded Program Files\elite.ocx -> Adware.MediaMotor : Cleaned without backup
         C:\WINDOWS\eeedo.exe/eee2.exe -> Adware.MediaMotor : Cleaned without backup
         C:\WINDOWS\icont.exe -> Adware.AdURL : Cleaned without backup
         C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\GXMJ0PMJ\876057[1].exe -> Adware.Mirar : Cleaned without backup
         C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\KT6B8T6V\mediaview[1].cab/elite.ocx -> Adware.MediaMotor : Cleaned without backup
         C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\KTA70HUV\eeedo[1].exe/eee2.exe -> Adware.MediaMotor : Cleaned without backup
         C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\KTA70HUV\mm63[1].ocx -> Adware.MediaMotor : Cleaned without backup
         C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\SH67WHQV\nein[1].exe -> Downloader.Small.bgl : Cleaned without backup
         C:\WINDOWS\system32\mv8ol9l31.dll -> Adware.Look2Me : Cleaned without backup
         C:\WINDOWS\system32\TFTP2912 -> Backdoor.Rbot : Cleaned without backup
         C:\WINDOWS\Temp\bw2.com -> Adware.AdURL : Cleaned without backup
         C:\WINDOWS\Temp\ICD1.tmp\elite.ocx -> Adware.MediaMotor : Cleaned without backup


      ::Report End

      Äänestä

    • mik kirjoitti:

      HijackThiskillä poistettu.
      Ewidon asennus onnistu vasta lopussa.
      Kaikkia poistettavia kansioita ja tiedostoja en löytänyt.Mutta katoppa logi ja raportti


      Logfile of HijackThis v1.99.1
      Scan saved at 18:59:46, on 24.2.2006
      Platform: Windows XP SP1 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\System32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Ahead\InCD\InCDsrv.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\LEXBCES.EXE
      C:\WINDOWS\system32\LEXPPS.EXE
      C:\WINDOWS\SOUNDMAN.EXE
      C:\Program Files\Ahead\InCD\InCD.exe
      C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe
      C:\Program Files\QuickTime\qttask.exe
      C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe
      E:\Picasa2\PicasaMediaDetector.exe
      C:\Program Files\dna Nettiturva\Common\FSM32.EXE
      C:\WINDOWS\System32\ctfmon.exe
      C:\PROGRA~1\DNANET~1\backweb\4653381\Program\SERVIC~1.EXE
      C:\Program Files\dna Nettiturva\Anti-Virus\fsgk32st.exe
      C:\Program Files\dna Nettiturva\Anti-Virus\FSGK32.EXE
      C:\Program Files\dna Nettiturva\backweb\4653381\program\fsbwsys.exe
      C:\Program Files\dna Nettiturva\Anti-Virus\fssm32.exe
      C:\Program Files\dna Nettiturva\backweb\4653381\Program\dna Nettiturva.exe
      C:\Program Files\dna Nettiturva\Common\FSMA32.EXE
      C:\Program Files\dna Nettiturva\Common\FSMB32.EXE
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\dna Nettiturva\Common\FCH32.EXE
      C:\Program Files\dna Nettiturva\Common\FAMEH32.EXE
      C:\Program Files\dna Nettiturva\Anti-Virus\fsrw.exe
      C:\Program Files\dna Nettiturva\Anti-Virus\fsav32.exe
      C:\Program Files\dna Nettiturva\FWES\Program\fsdfwd.exe
      C:\PROGRA~1\DNANET~1\ANTI-S~1\fsaw.exe
      C:\Program Files\dna Nettiturva\FSGUI\fsguidll.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Documents and Settings\Järjestelmänvalvoja\Local Settings\Temporary Internet Files\Content.IE5\O92Z01MZ\ewido-setup[1].exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\HJT\HijackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dnainternet.fi/
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.suomi.net:8080
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
      O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
      O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
      O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
      O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe"
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [EPSON Stylus C86 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0R2.EXE /P23 "EPSON Stylus C86 Series" /O6 "USB002" /M "Stylus C86"
      O4 - HKLM\..\Run: [Picasa Media Detector] E:\Picasa2\PicasaMediaDetector.exe
      O4 - HKLM\..\Run: [AdobeReaderPro] svxhost.exe
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\dna Nettiturva\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\dna Nettiturva\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
      O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\dna Nettiturva\FSGUI\FSSW.EXE" /reboot
      O4 - HKLM\..\Run: [News Service] "C:\Program Files\dna Nettiturva\FSGUI\ispnews.exe"
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
      O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
      O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      O4 - Global Startup: dna Nettiturva.lnk = C:\Program Files\dna Nettiturva\backweb\4653381\Program\dna Nettiturva.exe
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
      O8 - Extra context menu item: &Estä tämä kohoikkuna - C:\Program Files\dna Nettiturva\Anti-Spyware\blockpopups.htm
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\dna Nettiturva\Anti-Spyware\ieshield.dll
      O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\dna Nettiturva\Anti-Spyware\ieshield.dll
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
      O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
      O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cab
      O16 - DPF: {288C5F13-7E52-4ADA-A32E-F5BF9D125F99} (CR64Loader Object) - http://www.miniclip.com/inflaterball/miniclipGameLoader.dll
      O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1126939608390
      O17 - HKLM\System\CCS\Services\Tcpip\..\{7EBAA797-5164-451D-AAF2-390F912046BF}: NameServer = 212.50.131.153 213.139.190.3
      O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
      O23 - Service: dna Nettiturva (BackWeb Plug-in - 4653381) - BackWeb Technologies Inc. - C:\PROGRA~1\DNANET~1\backweb\4653381\Program\SERVIC~1.EXE
      O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corp. - C:\Program Files\dna Nettiturva\Anti-Virus\fsgk32st.exe
      O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\dna Nettiturva\backweb\4653381\program\fsbwsys.exe
      O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\dna Nettiturva\FWES\Program\fsdfwd.exe
      O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\dna Nettiturva\Common\FSMA32.EXE
      O23 - Service: InCD Helper (InCDsrv) - Ahead Software AG - C:\Program Files\Ahead\InCD\InCDsrv.exe
      O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
      O23 - Service: Taustatulostusohjain (Spooler) - Unknown owner - C:\WINDOWS\system32\spoolsv.exe (file missing)



      ewido anti-malware - Scan report
      ---------------------------------------------------------

      Created on:         19:34:32, 24.2.2006
      Report-Checksum:      9DF7BF7E

      Scan result:

         HKLM\SOFTWARE\Classes\CLSID\{6001CDF7-6F45-471b-A203-0225615E35A7} -> Adware.Generic : Cleaned without backup
         :mozilla.17:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Profiles\default\j536nccu.slt\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned without backup
         :mozilla.20:C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Mozilla\Profiles\default\j536nccu.slt\cookies.txt -> TrackingCookie.2o7 : Cleaned without backup
         C:\Documents and Settings\Järjestelmänvalvoja\Cookies\järjestelmä[email protected][1].txt -> TrackingCookie.Yieldmanager : Cleaned without backup
         C:\Documents and Settings\Järjestelmänvalvoja\Cookies\järjestelmänvalvoja@com[2].txt -> TrackingCookie.Com : Cleaned without backup
         C:\Documents and Settings\Järjestelmänvalvoja\Cookies\järjestelmä[email protected][1].txt -> TrackingCookie.Masterstats : Cleaned without backup
         C:\Documents and Settings\Järjestelmänvalvoja\Cookies\järjestelmänvalvoja@komtrack[2].txt -> TrackingCookie.Komtrack : Cleaned without backup
         C:\Documents and Settings\Järjestelmänvalvoja\Cookies\järjestelmänvalvoja@pay4klick[1].txt -> TrackingCookie.Pay4klick : Cleaned without backup
         C:\FINDnFIX\keys1\NirComLine.exe -> Not-A-Virus.RemoteAdmin.Win32.NirCmdLine.14 : Cleaned without backup
         C:\RECYCLER\S-1-5-21-1085031214-1220945662-839522115-500\Dc42.exe -> Adware.MediaMotor : Cleaned without backup
         C:\RECYCLER\S-1-5-21-1085031214-1220945662-839522115-500\Dc47\netmon.exe -> Not-A-Virus.Monitor.Win32.NetMon.a : Cleaned without backup
         C:\WINDOWS\Downloaded Program Files\elite.ocx -> Adware.MediaMotor : Cleaned without backup
         C:\WINDOWS\eeedo.exe/eee2.exe -> Adware.MediaMotor : Cleaned without backup
         C:\WINDOWS\icont.exe -> Adware.AdURL : Cleaned without backup
         C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\GXMJ0PMJ\876057[1].exe -> Adware.Mirar : Cleaned without backup
         C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\KT6B8T6V\mediaview[1].cab/elite.ocx -> Adware.MediaMotor : Cleaned without backup
         C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\KTA70HUV\eeedo[1].exe/eee2.exe -> Adware.MediaMotor : Cleaned without backup
         C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\KTA70HUV\mm63[1].ocx -> Adware.MediaMotor : Cleaned without backup
         C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\SH67WHQV\nein[1].exe -> Downloader.Small.bgl : Cleaned without backup
         C:\WINDOWS\system32\mv8ol9l31.dll -> Adware.Look2Me : Cleaned without backup
         C:\WINDOWS\system32\TFTP2912 -> Backdoor.Rbot : Cleaned without backup
         C:\WINDOWS\Temp\bw2.com -> Adware.AdURL : Cleaned without backup
         C:\WINDOWS\Temp\ICD1.tmp\elite.ocx -> Adware.MediaMotor : Cleaned without backup


      ::Report End

      Yks jäi kummittelemaan, mutta koitataampa tämmöstä:

      Lataa killbox:
      http://www.bleepingcomputer.com/files/spyware/KillBox.zip

      Tallenna se työpöydälle.

      Fiksaa hijakilla tämä

      O4 - HKLM\..\Run: [AdobeReaderPro] svxhost.exe

      Avaa killbox ja paina sitä pientä kansiota ja etsi sillä tämä:

      svxhost.exe

      (Jos et muista missä se on, niin etsi se taas uudestaan etsi toiminnolla ja kopio tiedoston polku suoraan valkoiseen laatikkoon)

      Sitten laitat rastin kohtaan Delete on reboot ja paina punaista nappia (delete file)

      Sitten käynnistä kone uudelleen kun se niin ilmoittaa, jos ei ilmoita käynnistä itse.

      Ja lähetä taas uusi hijackthis loki.

      Äänestä

    • Jurpo kirjoitti:

      Yks jäi kummittelemaan, mutta koitataampa tämmöstä:

      Lataa killbox:
      http://www.bleepingcomputer.com/files/spyware/KillBox.zip

      Tallenna se työpöydälle.

      Fiksaa hijakilla tämä

      O4 - HKLM\..\Run: [AdobeReaderPro] svxhost.exe

      Avaa killbox ja paina sitä pientä kansiota ja etsi sillä tämä:

      svxhost.exe

      (Jos et muista missä se on, niin etsi se taas uudestaan etsi toiminnolla ja kopio tiedoston polku suoraan valkoiseen laatikkoon)

      Sitten laitat rastin kohtaan Delete on reboot ja paina punaista nappia (delete file)

      Sitten käynnistä kone uudelleen kun se niin ilmoittaa, jos ei ilmoita käynnistä itse.

      Ja lähetä taas uusi hijackthis loki.

      Windouksen etsi toiminto ei löydä sitä(svxhost.exe).
      Tässä taas logi.
      Epsonin tulostin kadonnut,lisää toimintoa ei voi suorittaa.

      Logfile of HijackThis v1.99.1
      Scan saved at 15:59:17, on 25.2.2006
      Platform: Windows XP SP1 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\System32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Ahead\InCD\InCDsrv.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\LEXBCES.EXE
      C:\WINDOWS\system32\LEXPPS.EXE
      C:\WINDOWS\SOUNDMAN.EXE
      C:\Program Files\Ahead\InCD\InCD.exe
      C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe
      C:\Program Files\QuickTime\qttask.exe
      C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe
      E:\Picasa2\PicasaMediaDetector.exe
      C:\Program Files\dna Nettiturva\Common\FSM32.EXE
      C:\WINDOWS\System32\ctfmon.exe
      C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      C:\PROGRA~1\DNANET~1\backweb\4653381\Program\SERVIC~1.EXE
      C:\Program Files\ewido anti-malware\ewidoctrl.exe
      C:\Program Files\ewido anti-malware\ewidoguard.exe
      C:\Program Files\dna Nettiturva\backweb\4653381\Program\dna Nettiturva.exe
      C:\Program Files\dna Nettiturva\Anti-Virus\fsgk32st.exe
      C:\Program Files\dna Nettiturva\Anti-Virus\FSGK32.EXE
      C:\Program Files\dna Nettiturva\backweb\4653381\program\fsbwsys.exe
      C:\Program Files\dna Nettiturva\Common\FSMA32.EXE
      C:\Program Files\dna Nettiturva\Anti-Virus\fssm32.exe
      C:\Program Files\dna Nettiturva\Common\FSMB32.EXE
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\dna Nettiturva\Common\FCH32.EXE
      C:\Program Files\dna Nettiturva\Common\FAMEH32.EXE
      C:\Program Files\dna Nettiturva\Anti-Virus\fsrw.exe
      C:\Program Files\dna Nettiturva\Anti-Virus\fsav32.exe
      C:\Program Files\dna Nettiturva\FWES\Program\fsdfwd.exe
      C:\PROGRA~1\DNANET~1\ANTI-S~1\fsaw.exe
      C:\Program Files\dna Nettiturva\FSGUI\fsguidll.exe
      C:\WINDOWS\System32\wuauclt.exe
      C:\HJT\HijackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dnainternet.fi/
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.suomi.net:8080
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
      O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
      O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
      O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
      O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe"
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [EPSON Stylus C86 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0R2.EXE /P23 "EPSON Stylus C86 Series" /O6 "USB002" /M "Stylus C86"
      O4 - HKLM\..\Run: [Picasa Media Detector] E:\Picasa2\PicasaMediaDetector.exe
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\dna Nettiturva\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\dna Nettiturva\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
      O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\dna Nettiturva\FSGUI\FSSW.EXE" /reboot
      O4 - HKLM\..\Run: [News Service] "C:\Program Files\dna Nettiturva\FSGUI\ispnews.exe"
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
      O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
      O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      O4 - Global Startup: dna Nettiturva.lnk = C:\Program Files\dna Nettiturva\backweb\4653381\Program\dna Nettiturva.exe
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
      O8 - Extra context menu item: &Estä tämä kohoikkuna - C:\Program Files\dna Nettiturva\Anti-Spyware\blockpopups.htm
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\dna Nettiturva\Anti-Spyware\ieshield.dll
      O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\dna Nettiturva\Anti-Spyware\ieshield.dll
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
      O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
      O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cab
      O16 - DPF: {288C5F13-7E52-4ADA-A32E-F5BF9D125F99} (CR64Loader Object) - http://www.miniclip.com/inflaterball/miniclipGameLoader.dll
      O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1126939608390
      O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
      O23 - Service: dna Nettiturva (BackWeb Plug-in - 4653381) - BackWeb Technologies Inc. - C:\PROGRA~1\DNANET~1\backweb\4653381\Program\SERVIC~1.EXE
      O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
      O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido anti-malware\ewidoguard.exe
      O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corp. - C:\Program Files\dna Nettiturva\Anti-Virus\fsgk32st.exe
      O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\dna Nettiturva\backweb\4653381\program\fsbwsys.exe
      O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\dna Nettiturva\FWES\Program\fsdfwd.exe
      O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\dna Nettiturva\Common\FSMA32.EXE
      O23 - Service: InCD Helper (InCDsrv) - Ahead Software AG - C:\Program Files\Ahead\InCD\InCDsrv.exe
      O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
      O23 - Service: Taustatulostusohjain (Spooler) - Unknown owner - C:\WINDOWS\system32\spoolsv.exe (file missing)

      Äänestä

    • mik kirjoitti:

      Windouksen etsi toiminto ei löydä sitä(svxhost.exe).
      Tässä taas logi.
      Epsonin tulostin kadonnut,lisää toimintoa ei voi suorittaa.

      Logfile of HijackThis v1.99.1
      Scan saved at 15:59:17, on 25.2.2006
      Platform: Windows XP SP1 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\System32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Ahead\InCD\InCDsrv.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\LEXBCES.EXE
      C:\WINDOWS\system32\LEXPPS.EXE
      C:\WINDOWS\SOUNDMAN.EXE
      C:\Program Files\Ahead\InCD\InCD.exe
      C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe
      C:\Program Files\QuickTime\qttask.exe
      C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe
      E:\Picasa2\PicasaMediaDetector.exe
      C:\Program Files\dna Nettiturva\Common\FSM32.EXE
      C:\WINDOWS\System32\ctfmon.exe
      C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      C:\PROGRA~1\DNANET~1\backweb\4653381\Program\SERVIC~1.EXE
      C:\Program Files\ewido anti-malware\ewidoctrl.exe
      C:\Program Files\ewido anti-malware\ewidoguard.exe
      C:\Program Files\dna Nettiturva\backweb\4653381\Program\dna Nettiturva.exe
      C:\Program Files\dna Nettiturva\Anti-Virus\fsgk32st.exe
      C:\Program Files\dna Nettiturva\Anti-Virus\FSGK32.EXE
      C:\Program Files\dna Nettiturva\backweb\4653381\program\fsbwsys.exe
      C:\Program Files\dna Nettiturva\Common\FSMA32.EXE
      C:\Program Files\dna Nettiturva\Anti-Virus\fssm32.exe
      C:\Program Files\dna Nettiturva\Common\FSMB32.EXE
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\dna Nettiturva\Common\FCH32.EXE
      C:\Program Files\dna Nettiturva\Common\FAMEH32.EXE
      C:\Program Files\dna Nettiturva\Anti-Virus\fsrw.exe
      C:\Program Files\dna Nettiturva\Anti-Virus\fsav32.exe
      C:\Program Files\dna Nettiturva\FWES\Program\fsdfwd.exe
      C:\PROGRA~1\DNANET~1\ANTI-S~1\fsaw.exe
      C:\Program Files\dna Nettiturva\FSGUI\fsguidll.exe
      C:\WINDOWS\System32\wuauclt.exe
      C:\HJT\HijackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dnainternet.fi/
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.suomi.net:8080
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
      O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
      O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
      O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
      O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe"
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [EPSON Stylus C86 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0R2.EXE /P23 "EPSON Stylus C86 Series" /O6 "USB002" /M "Stylus C86"
      O4 - HKLM\..\Run: [Picasa Media Detector] E:\Picasa2\PicasaMediaDetector.exe
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\dna Nettiturva\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\dna Nettiturva\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
      O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\dna Nettiturva\FSGUI\FSSW.EXE" /reboot
      O4 - HKLM\..\Run: [News Service] "C:\Program Files\dna Nettiturva\FSGUI\ispnews.exe"
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
      O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
      O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      O4 - Global Startup: dna Nettiturva.lnk = C:\Program Files\dna Nettiturva\backweb\4653381\Program\dna Nettiturva.exe
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
      O8 - Extra context menu item: &Estä tämä kohoikkuna - C:\Program Files\dna Nettiturva\Anti-Spyware\blockpopups.htm
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\dna Nettiturva\Anti-Spyware\ieshield.dll
      O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\dna Nettiturva\Anti-Spyware\ieshield.dll
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
      O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
      O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cab
      O16 - DPF: {288C5F13-7E52-4ADA-A32E-F5BF9D125F99} (CR64Loader Object) - http://www.miniclip.com/inflaterball/miniclipGameLoader.dll
      O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1126939608390
      O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
      O23 - Service: dna Nettiturva (BackWeb Plug-in - 4653381) - BackWeb Technologies Inc. - C:\PROGRA~1\DNANET~1\backweb\4653381\Program\SERVIC~1.EXE
      O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
      O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido anti-malware\ewidoguard.exe
      O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corp. - C:\Program Files\dna Nettiturva\Anti-Virus\fsgk32st.exe
      O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\dna Nettiturva\backweb\4653381\program\fsbwsys.exe
      O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\dna Nettiturva\FWES\Program\fsdfwd.exe
      O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\dna Nettiturva\Common\FSMA32.EXE
      O23 - Service: InCD Helper (InCDsrv) - Ahead Software AG - C:\Program Files\Ahead\InCD\InCDsrv.exe
      O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
      O23 - Service: Taustatulostusohjain (Spooler) - Unknown owner - C:\WINDOWS\system32\spoolsv.exe (file missing)

      Eli käynnistä koneesi vielä kerran uudestaan, ei tartte tehä mitään muuta ja katotaan että lähtikö
      se örkki pois ja sen jälkeen katotaan sitä epsonin tulostinta.

      Äänestä

    • Jurpo kirjoitti:

      Eli käynnistä koneesi vielä kerran uudestaan, ei tartte tehä mitään muuta ja katotaan että lähtikö
      se örkki pois ja sen jälkeen katotaan sitä epsonin tulostinta.

      Ja lähetä uus loki käynnistyksen jälkeen.

      Äänestä

    • Jurpo kirjoitti:

      Ja lähetä uus loki käynnistyksen jälkeen.

      Logfile of HijackThis v1.99.1
      Scan saved at 16:37:27, on 25.2.2006
      Platform: Windows XP SP1 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\System32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Ahead\InCD\InCDsrv.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\LEXBCES.EXE
      C:\WINDOWS\system32\LEXPPS.EXE
      C:\WINDOWS\SOUNDMAN.EXE
      C:\Program Files\Ahead\InCD\InCD.exe
      C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe
      C:\Program Files\QuickTime\qttask.exe
      C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe
      E:\Picasa2\PicasaMediaDetector.exe
      C:\Program Files\dna Nettiturva\Common\FSM32.EXE
      C:\WINDOWS\System32\ctfmon.exe
      C:\PROGRA~1\DNANET~1\backweb\4653381\Program\SERVIC~1.EXE
      C:\Program Files\ewido anti-malware\ewidoctrl.exe
      C:\Program Files\ewido anti-malware\ewidoguard.exe
      C:\Program Files\dna Nettiturva\backweb\4653381\Program\dna Nettiturva.exe
      C:\Program Files\dna Nettiturva\Anti-Virus\fsgk32st.exe
      C:\Program Files\dna Nettiturva\Anti-Virus\FSGK32.EXE
      C:\Program Files\dna Nettiturva\backweb\4653381\program\fsbwsys.exe
      C:\Program Files\dna Nettiturva\Common\FSMA32.EXE
      C:\Program Files\dna Nettiturva\Anti-Virus\fssm32.exe
      C:\Program Files\dna Nettiturva\Common\FSMB32.EXE
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\dna Nettiturva\Common\FCH32.EXE
      C:\Program Files\dna Nettiturva\Common\FAMEH32.EXE
      C:\Program Files\dna Nettiturva\Anti-Virus\fsrw.exe
      C:\Program Files\dna Nettiturva\FWES\Program\fsdfwd.exe
      C:\Program Files\dna Nettiturva\Anti-Virus\fsav32.exe
      C:\PROGRA~1\DNANET~1\ANTI-S~1\fsaw.exe
      C:\Program Files\dna Nettiturva\FSGUI\fsguidll.exe
      C:\WINDOWS\System32\wuauclt.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\HJT\HijackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dnainternet.fi/
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.suomi.net:8080
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
      O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
      O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
      O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
      O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe"
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [EPSON Stylus C86 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0R2.EXE /P23 "EPSON Stylus C86 Series" /O6 "USB002" /M "Stylus C86"
      O4 - HKLM\..\Run: [Picasa Media Detector] E:\Picasa2\PicasaMediaDetector.exe
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\dna Nettiturva\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\dna Nettiturva\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
      O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\dna Nettiturva\FSGUI\FSSW.EXE" /reboot
      O4 - HKLM\..\Run: [News Service] "C:\Program Files\dna Nettiturva\FSGUI\ispnews.exe"
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
      O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
      O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      O4 - Global Startup: dna Nettiturva.lnk = C:\Program Files\dna Nettiturva\backweb\4653381\Program\dna Nettiturva.exe
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
      O8 - Extra context menu item: &Estä tämä kohoikkuna - C:\Program Files\dna Nettiturva\Anti-Spyware\blockpopups.htm
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\dna Nettiturva\Anti-Spyware\ieshield.dll
      O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\dna Nettiturva\Anti-Spyware\ieshield.dll
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
      O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
      O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cab
      O16 - DPF: {288C5F13-7E52-4ADA-A32E-F5BF9D125F99} (CR64Loader Object) - http://www.miniclip.com/inflaterball/miniclipGameLoader.dll
      O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1126939608390
      O17 - HKLM\System\CCS\Services\Tcpip\..\{7EBAA797-5164-451D-AAF2-390F912046BF}: NameServer = 212.50.131.153 213.139.190.3
      O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
      O23 - Service: dna Nettiturva (BackWeb Plug-in - 4653381) - BackWeb Technologies Inc. - C:\PROGRA~1\DNANET~1\backweb\4653381\Program\SERVIC~1.EXE
      O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
      O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido anti-malware\ewidoguard.exe
      O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corp. - C:\Program Files\dna Nettiturva\Anti-Virus\fsgk32st.exe
      O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\dna Nettiturva\backweb\4653381\program\fsbwsys.exe
      O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\dna Nettiturva\FWES\Program\fsdfwd.exe
      O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\dna Nettiturva\Common\FSMA32.EXE
      O23 - Service: InCD Helper (InCDsrv) - Ahead Software AG - C:\Program Files\Ahead\InCD\InCDsrv.exe
      O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
      O23 - Service: Taustatulostusohjain (Spooler) - Unknown owner - C:\WINDOWS\system32\spoolsv.exe (file missing)

      Äänestä

    • mik kirjoitti:

      Logfile of HijackThis v1.99.1
      Scan saved at 16:37:27, on 25.2.2006
      Platform: Windows XP SP1 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\System32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Ahead\InCD\InCDsrv.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\LEXBCES.EXE
      C:\WINDOWS\system32\LEXPPS.EXE
      C:\WINDOWS\SOUNDMAN.EXE
      C:\Program Files\Ahead\InCD\InCD.exe
      C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe
      C:\Program Files\QuickTime\qttask.exe
      C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe
      E:\Picasa2\PicasaMediaDetector.exe
      C:\Program Files\dna Nettiturva\Common\FSM32.EXE
      C:\WINDOWS\System32\ctfmon.exe
      C:\PROGRA~1\DNANET~1\backweb\4653381\Program\SERVIC~1.EXE
      C:\Program Files\ewido anti-malware\ewidoctrl.exe
      C:\Program Files\ewido anti-malware\ewidoguard.exe
      C:\Program Files\dna Nettiturva\backweb\4653381\Program\dna Nettiturva.exe
      C:\Program Files\dna Nettiturva\Anti-Virus\fsgk32st.exe
      C:\Program Files\dna Nettiturva\Anti-Virus\FSGK32.EXE
      C:\Program Files\dna Nettiturva\backweb\4653381\program\fsbwsys.exe
      C:\Program Files\dna Nettiturva\Common\FSMA32.EXE
      C:\Program Files\dna Nettiturva\Anti-Virus\fssm32.exe
      C:\Program Files\dna Nettiturva\Common\FSMB32.EXE
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\dna Nettiturva\Common\FCH32.EXE
      C:\Program Files\dna Nettiturva\Common\FAMEH32.EXE
      C:\Program Files\dna Nettiturva\Anti-Virus\fsrw.exe
      C:\Program Files\dna Nettiturva\FWES\Program\fsdfwd.exe
      C:\Program Files\dna Nettiturva\Anti-Virus\fsav32.exe
      C:\PROGRA~1\DNANET~1\ANTI-S~1\fsaw.exe
      C:\Program Files\dna Nettiturva\FSGUI\fsguidll.exe
      C:\WINDOWS\System32\wuauclt.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\HJT\HijackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dnainternet.fi/
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.suomi.net:8080
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
      O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
      O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
      O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
      O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe"
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [EPSON Stylus C86 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0R2.EXE /P23 "EPSON Stylus C86 Series" /O6 "USB002" /M "Stylus C86"
      O4 - HKLM\..\Run: [Picasa Media Detector] E:\Picasa2\PicasaMediaDetector.exe
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\dna Nettiturva\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\dna Nettiturva\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
      O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\dna Nettiturva\FSGUI\FSSW.EXE" /reboot
      O4 - HKLM\..\Run: [News Service] "C:\Program Files\dna Nettiturva\FSGUI\ispnews.exe"
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
      O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
      O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      O4 - Global Startup: dna Nettiturva.lnk = C:\Program Files\dna Nettiturva\backweb\4653381\Program\dna Nettiturva.exe
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
      O8 - Extra context menu item: &Estä tämä kohoikkuna - C:\Program Files\dna Nettiturva\Anti-Spyware\blockpopups.htm
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\dna Nettiturva\Anti-Spyware\ieshield.dll
      O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\dna Nettiturva\Anti-Spyware\ieshield.dll
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
      O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
      O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cab
      O16 - DPF: {288C5F13-7E52-4ADA-A32E-F5BF9D125F99} (CR64Loader Object) - http://www.miniclip.com/inflaterball/miniclipGameLoader.dll
      O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1126939608390
      O17 - HKLM\System\CCS\Services\Tcpip\..\{7EBAA797-5164-451D-AAF2-390F912046BF}: NameServer = 212.50.131.153 213.139.190.3
      O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
      O23 - Service: dna Nettiturva (BackWeb Plug-in - 4653381) - BackWeb Technologies Inc. - C:\PROGRA~1\DNANET~1\backweb\4653381\Program\SERVIC~1.EXE
      O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
      O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido anti-malware\ewidoguard.exe
      O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corp. - C:\Program Files\dna Nettiturva\Anti-Virus\fsgk32st.exe
      O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\dna Nettiturva\backweb\4653381\program\fsbwsys.exe
      O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\dna Nettiturva\FWES\Program\fsdfwd.exe
      O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\dna Nettiturva\Common\FSMA32.EXE
      O23 - Service: InCD Helper (InCDsrv) - Ahead Software AG - C:\Program Files\Ahead\InCD\InCDsrv.exe
      O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
      O23 - Service: Taustatulostusohjain (Spooler) - Unknown owner - C:\WINDOWS\system32\spoolsv.exe (file missing)

      Loki on puhdas, mutta oliko sinulla vielä ongelmia sen tulostimen kanssa?

      Äänestä

    • Jurpo kirjoitti:

      Loki on puhdas, mutta oliko sinulla vielä ongelmia sen tulostimen kanssa?

      Joo,on hävinnyt tulostin.
      Lisää tulostin valikosta antaa ilmoituksen (toimintoa ei voi suorittaa loppuun).Eli en pääse asentamaan tulostinta.
      Liekkö F-securen (eristyksillä) vaikutusta joita piti aikaisemmin tehdä kokoajan?

      Äänestä

    • mik kirjoitti:

      Joo,on hävinnyt tulostin.
      Lisää tulostin valikosta antaa ilmoituksen (toimintoa ei voi suorittaa loppuun).Eli en pääse asentamaan tulostinta.
      Liekkö F-securen (eristyksillä) vaikutusta joita piti aikaisemmin tehdä kokoajan?

      Valitettavasti en voi auttaa siihen, mutta kysy apua vaikka tältä foorumilta jostain muualta, tai vaikkapa täältä:
      http://keskustelu.afterdawn.com/forum_view.cfm/121

      Äänestä

    Odottaa vastausta

    Näihin keskusteluihin ei ole vielä vastattu. Ole ensimmäinen.

    Luetuimmat keskustelut

    Kommentoi aloitusta

    mik kirjoitti:

    Nyt rupes kaikki tökkiin,tännekkin kesti kauan ennen kun pääsi.
    Pitäis varmaan paljon poistaa.


    Logfile of HijackThis v1.99.1
    Scan saved at 10:37:42, on 24.2.2006
    Platform: Windows XP SP1 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\System32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Ahead\InCD\InCDsrv.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\LEXBCES.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\LEXPPS.EXE
    C:\WINDOWS\SOUNDMAN.EXE
    C:\Program Files\Ahead\InCD\InCD.exe
    C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0R2.EXE
    C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe
    E:\Picasa2\PicasaMediaDetector.exe
    C:\windows\eee2.exe
    C:\windows\winsysban11.exe
    C:\Program Files\dna Nettiturva\Common\FSM32.EXE
    C:\WINDOWS\System32\ctfmon.exe
    C:\PROGRA~1\DNANET~1\backweb\4653381\Program\SERVIC~1.EXE
    C:\Program Files\dna Nettiturva\Anti-Virus\fsgk32st.exe
    C:\Program Files\dna Nettiturva\Anti-Virus\FSGK32.EXE
    C:\Program Files\dna Nettiturva\backweb\4653381\program\fsbwsys.exe
    C:\Program Files\dna Nettiturva\backweb\4653381\Program\dna Nettiturva.exe
    C:\Program Files\dna Nettiturva\Anti-Virus\fssm32.exe
    C:\Program Files\dna Nettiturva\Common\FSMA32.EXE
    C:\Program Files\dna Nettiturva\Common\FSMB32.EXE
    C:\Program Files\Network Monitor\netmon.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\dna Nettiturva\Common\FCH32.EXE
    C:\Program Files\dna Nettiturva\Common\FAMEH32.EXE
    C:\Program Files\dna Nettiturva\Anti-Virus\fsrw.exe
    C:\Program Files\dna Nettiturva\Anti-Virus\fsav32.exe
    C:\Program Files\dna Nettiturva\FWES\Program\fsdfwd.exe
    C:\PROGRA~1\DNANET~1\ANTI-S~1\fsaw.exe
    C:\Program Files\dna Nettiturva\FSGUI\fsguidll.exe
    C:\HJT\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dnainternet.fi/
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.suomi.net:8080
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
    O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [EPSON Stylus C86 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0R2.EXE /P23 "EPSON Stylus C86 Series" /O6 "USB002" /M "Stylus C86"
    O4 - HKLM\..\Run: [Picasa Media Detector] E:\Picasa2\PicasaMediaDetector.exe
    O4 - HKLM\..\Run: [Windows Security Protocol] win32sprot.exe
    O4 - HKLM\..\Run: [AdobeReaderPro] svxhost.exe
    O4 - HKLM\..\Run: [Spooler SubSystem App] C:\WINDOWS\System32\spooIsv.exe
    O4 - HKLM\..\Run: [Local Security Authority Service] C:\WINDOWS\System32\Isass.exe
    O4 - HKLM\..\Run: [ahmb] c:\windows\eee2.exe
    O4 - HKLM\..\Run: [ahkw] C:\windows\eee2.exe
    O4 - HKLM\..\Run: [winsysupd] C:\windows\winsysupd11.exe
    O4 - HKLM\..\Run: [gimmygames] C:\\gimmygames11.exe
    O4 - HKLM\..\Run: [winsysban] C:\windows\winsysban11.exe
    O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\dna Nettiturva\Common\FSM32.EXE" /splash
    O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\dna Nettiturva\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
    O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\dna Nettiturva\FSGUI\FSSW.EXE" /reboot
    O4 - HKLM\..\Run: [News Service] "C:\Program Files\dna Nettiturva\FSGUI\ispnews.exe"
    O4 - HKLM\..\RunServices: [Windows Security Protocol] win32sprot.exe
    O4 - HKLM\..\RunServices: [AdobeReaderPro] svxhost.exe
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
    O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
    O4 - HKCU\..\Run: [Windows Security Protocol] win32sprot.exe
    O4 - HKCU\..\Run: [Dedc] "C:\Program Files\ocec\nehe.exe" -vt yazb
    O4 - HKCU\..\Run: [uwfw] C:\PROGRA~1\COMMON~1\uwfw\uwfwm.exe
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: dna Nettiturva.lnk = C:\Program Files\dna Nettiturva\backweb\4653381\Program\dna Nettiturva.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
    O8 - Extra context menu item: &Estä tämä kohoikkuna - C:\Program Files\dna Nettiturva\Anti-Spyware\blockpopups.htm
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\dna Nettiturva\Anti-Spyware\ieshield.dll
    O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\dna Nettiturva\Anti-Spyware\ieshield.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
    O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
    O16 - DPF: {288C5F13-7E52-4ADA-A32E-F5BF9D125F99} (CR64Loader Object) - http://www.miniclip.com/inflaterball/miniclipGameLoader.dll
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1126939608390
    O17 - HKLM\System\CCS\Services\Tcpip\..\{7EBAA797-5164-451D-AAF2-390F912046BF}: NameServer = 212.50.131.153 213.139.190.3
    O20 - Winlogon Notify: WindowsUpdate - C:\WINDOWS\system32\isakeng.dll (file missing)
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
    O23 - Service: dna Nettiturva (BackWeb Plug-in - 4653381) - BackWeb Technologies Inc. - C:\PROGRA~1\DNANET~1\backweb\4653381\Program\SERVIC~1.EXE
    O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corp. - C:\Program Files\dna Nettiturva\Anti-Virus\fsgk32st.exe
    O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\dna Nettiturva\backweb\4653381\program\fsbwsys.exe
    O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\dna Nettiturva\FWES\Program\fsdfwd.exe
    O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\dna Nettiturva\Common\FSMA32.EXE
    O23 - Service: InCD Helper (InCDsrv) - Ahead Software AG - C:\Program Files\Ahead\InCD\InCDsrv.exe
    O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
    O23 - Service: Network Monitor - Unknown owner - C:\Program Files\Network Monitor\netmon.exe

    Anonyymi
    5000

    Ilmoita asiaton sisältö

    • Sisältää materiaalia, joka on loukkaavaa, herjaavaa, rasistista, uhkailevaa tai ahdistelevaa.

    • Materiaali sisältää nimiä, yhteystietoja tai muita henkilökohtaisia tietoja. Julkisuuden henkilöistä, julkisissa viroissa toimivista ihmisistä sekä yritysten vastuuhenkilöistä saa keskustella työhön liittyen. Myös yksityiselämään liittyvistä asioista voi keskustella siltä osin, kuin niistä on julkisesti kerrottu.

    • Sisältää lapsille haitallista tai heiltä kiellettyä materiaalia. Seksuaalinen sisältö on sallittua aiheeseen tarkoitetuilla palstoilla, joiden ikäraja on 18 vuotta.

    • Lainvastaista sisältöä voi olla mm. yksityiselämää loukkaavan tiedon levitys, kiihottaminen kansanryhmää vastaan, laiton uhkaaminen, alaikäisiin liittyvä seksuaalinen sisältö/grooming, petokset, identiteettivarkaudet, kunnianloukkaukset ja tekijänoikeusrikkomukset.

    • Sisältö ei liity palstan tai keskusteluketjun aiheeseen.

    • Viesti ei ole suomea tai ruotsia (pl. International Forums), se sisältää mainontaa, se sisältää tekijänoikeuksin suojattua materiaalia, se on massapostitus tai jokin muu syy.

    Jaa keskustelu