Mukelot leikkivät koneella ja nyt avattuani internet-yhteydet tulee seuraavanlainen teksti näkyviin:
Kohdetta file:///c.windows/s.htm ei löydy. Varmista että polku tai internet-osoite on oikein.
Sama teksti on myös internet-asetuksissa kotisivun oletuksena, vaikka sen istunnon aikana toiseksi muuttaakin.
Kiitokset jo etukäteen vinkeistä.
Kohdetta file:///c.windows/s.htm ei löydy. Varmista että polku tai internet-osoite on oikein.
Sama teksti on myös internet-asetuksissa kotisivun oletuksena, vaikka sen istunnon aikana toiseksi muuttaakin.
Kiitokset jo etukäteen vinkeistä.
Vastaukset 7
Vanhimmat
Lataa hijackthis ja lähetä loki, niin katsotaan sitä. Ohjeet ja ohjelma löytyy:
http://koti.mbnet.fi/pattaya1/hijackthis.htm
Tässä tulee:
Logfile of HijackThis v1.99.1
Scan saved at 13:33:22, on 5.3.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\ELISAT~1\backweb\4119343\Program\SERVIC~1.EXE
C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fsgk32st.exe
C:\Program Files\Elisa Tietoturvapalvelu\backweb\4119343\program\fsbwsys.exe
C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\FSGK32.EXE
C:\Program Files\Elisa Tietoturvapalvelu\Common\FSMA32.EXE
C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fssm32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Elisa Tietoturvapalvelu\Common\FSMB32.EXE
C:\Program Files\Elisa Tietoturvapalvelu\backweb\4119343\Program\fspex.exe
C:\Program Files\Elisa Tietoturvapalvelu\Common\FCH32.EXE
C:\Program Files\Elisa Tietoturvapalvelu\Common\FAMEH32.EXE
C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fsrw.exe
C:\Program Files\Elisa Tietoturvapalvelu\FSPC\fspc.exe
C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fsav32.exe
C:\Program Files\Elisa Tietoturvapalvelu\FWES\Program\fsdfwd.exe
C:\WINDOWS\System32\hkcmd.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Elisa Tietoturvapalvelu\Common\FSM32.EXE
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\Elisa Tietoturvapalvelu\FSGUI\ispnews.exe
C:\Program Files\Messenger\msmsgs.exe
C:\PROGRA~1\ELISAT~1\ANTI-S~1\fsaw.exe
C:\Program Files\Elisa Tietoturvapalvelu\FSGUI\fsguidll.exe
C:\Documents and Settings\Sami\Työpöytä\Internet Explorer.EXE
C:\Documents and Settings\Sami\Local Settings\Temporary Internet Files\Content.IE5\SDYVC5YB\HijackThis[1].exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\DOCUME~1\Sami\LOCALS~1\Temp\Tilapäinen kansio 1 hijackthis.zip\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fi/0SEFIFI/SAOS01?FORM=TOOLBR
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = file:///C:\WINDOWS\s.htm
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://elisa.net/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.fi/0SEFIFI/SAOS01?FORM=TOOLBR
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer - toimittaja Elisa Internet
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.fi;
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
R3 - Default URLSearchHook is missing
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Class - {E6543B49-6B99-B8A7-BC93-CFC5A94E0928} - C:\WINDOWS\system32\msfy32.dll (file missing)
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [websx] C:\Program Files\websx\int167078.exe -auto
O4 - HKLM\..\Run: [iesl.exe] C:\WINDOWS\system32\iesl.exe
O4 - HKLM\..\Run: [MSNSysRestore] C:\WINDOWS\system32\pc32.exe bg
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Elisa Tietoturvapalvelu\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Elisa Tietoturvapalvelu\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\Elisa Tietoturvapalvelu\FSGUI\FSSW.EXE" /reboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [News Service] "C:\Program Files\Elisa Tietoturvapalvelu\FSGUI\ispnews.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: Elisa Tietoturvapalvelu.lnk = C:\Program Files\Elisa Tietoturvapalvelu\backweb\4119343\Program\fspex.exe
O8 - Extra context menu item: &Estä tämä kohoikkuna - C:\Program Files\Elisa Tietoturvapalvelu\Anti-Spyware\blockpopups.htm
O8 - Extra context menu item: Hae Eniron avulla - res://C:\WINDOWS\System32\ToolBand_FI.dll/MENUSEARCH.HTM
O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Web-suodatin - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Elisa Tietoturvapalvelu\FSPC\fspcmsie.dll
O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Elisa Tietoturvapalvelu\FSPC\fspcmsie.dll
O9 - Extra 'Tools' menuitem: Web-suodatin - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Elisa Tietoturvapalvelu\FSPC\fspcmsie.dll
O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F02} - C:\Program Files\Elisa Tietoturvapalvelu\FSPC\fspcmsie.dll
O9 - Extra 'Tools' menuitem: &Keskeytä Web-sivujen suodatus - {200DB664-75B5-47c0-8B45-A44ACCF73F02} - C:\Program Files\Elisa Tietoturvapalvelu\FSPC\fspcmsie.dll
O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F03} - C:\Program Files\Elisa Tietoturvapalvelu\FSPC\fspcmsie.dll
O9 - Extra 'Tools' menuitem: &Kiellä tämä Web-sivusto - {200DB664-75B5-47c0-8B45-A44ACCF73F03} - C:\Program Files\Elisa Tietoturvapalvelu\FSPC\fspcmsie.dll
O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F04} - C:\Program Files\Elisa Tietoturvapalvelu\FSPC\fspcmsie.dll
O9 - Extra 'Tools' menuitem: &Salli tämä Web-sivusto - {200DB664-75B5-47c0-8B45-A44ACCF73F04} - C:\Program Files\Elisa Tietoturvapalvelu\FSPC\fspcmsie.dll
O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Elisa Tietoturvapalvelu\Anti-Spyware\ieshield.dll
O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Elisa Tietoturvapalvelu\Anti-Spyware\ieshield.dll
O9 - Extra button: Oheistiedot - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Palvelut - {350486A4-C961-4348-905D-26CCEFF2B70E} - http://service.kolumbus.fi/ (file missing) (HKCU)
O9 - Extra button: Tuki - {5C88952E-CBF0-4659-A91D-46F47F111BC4} - http://tuki.elisa.net/ (file missing) (HKCU)
O9 - Extra button: SMS-viesti - {CE6E1DE2-BE7C-4B8E-A36B-918B70D4A26E} - http://sms.kolumbus.fi/ (file missing) (HKCU)
O10 - Broken Internet access because of LSP provider 'winsflt.dll' missing
O14 - IERESET.INF: START_PAGE_URL=http://elisa.net/
O15 - Trusted Zone: http://loggedin.posti.suomi24.fi
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: Elisa Tietoturvapalvelu (BackWeb Plug-in - 4119343) - BackWeb Technologies Inc. - C:\PROGRA~1\ELISAT~1\backweb\4119343\Program\SERVIC~1.EXE
O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fsgk32st.exe
O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\Elisa Tietoturvapalvelu\backweb\4119343\program\fsbwsys.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Elisa Tietoturvapalvelu\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure HTTP Server (fshttps) - F-Secure Corporation - C:\Program Files\Elisa Tietoturvapalvelu\FSPC\fshttps\fshttps.exe
O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\Elisa Tietoturvapalvelu\Common\FSMA32.EXE
Siirrä hijackthis. exe omaan hakemistoon C:n juureen, Esim. C:/HJT/hijackthis.exe
-> Hae Ewido
http://www.ewido.net/en/download/
asenna ja päivitä se.
Scannaa Hijackilla uudesta paikasta ja ruksaa:
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = file:///C:\WINDOWS\s.htm
O2 - BHO: Class - {E6543B49-6B99-B8A7-BC93-CFC5A94E0928} - C:\WINDOWS\system32\msfy32.dll (file missing)
O4 - HKLM\..\Run: [websx] C:\Program Files\websx\int167078.exe -auto
O4 - HKLM\..\Run: [iesl.exe] C:\WINDOWS\system32\iesl.exe
O4 - HKLM\..\Run: [MSNSysRestore] C:\WINDOWS\system32\pc32.exe bg
Sammuta muut ohjelmat ja paina Fix checked.
Käynnistä kone vikasietotilaan ja etsi ja poista jos löytyy:
C:\WINDOWS\s.htm < tiedosto
C:\WINDOWS\system32\msfy32.dll < tiedosto
C:\Program Files\websx\ < hakemisto
C:\WINDOWS\system32\iesl.exe < tiedosto
C:\WINDOWS\system32\pc32.exe < tiedosto
Scannaa Ewidolla ja anna sen poistaa kaikki. Tallenna Ewidon loki.
Käynnistä normaalisti ja lähetä uusi hijack logi ja ewidon logi
Tässä näitä
Logfile of HijackThis v1.99.1
Scan saved at 15:47:00, on 5.3.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\ELISAT~1\backweb\4119343\Program\SERVIC~1.EXE
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\ewido anti-malware\ewidoguard.exe
C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fsgk32st.exe
C:\Program Files\Elisa Tietoturvapalvelu\backweb\4119343\program\fsbwsys.exe
C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\FSGK32.EXE
C:\Program Files\Elisa Tietoturvapalvelu\Common\FSMA32.EXE
C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fssm32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Elisa Tietoturvapalvelu\Common\FSMB32.EXE
C:\Program Files\Elisa Tietoturvapalvelu\Common\FCH32.EXE
C:\Program Files\Elisa Tietoturvapalvelu\Common\FAMEH32.EXE
C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fsrw.exe
C:\Program Files\Elisa Tietoturvapalvelu\FSPC\fspc.exe
C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fsav32.exe
C:\WINDOWS\System32\hkcmd.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Elisa Tietoturvapalvelu\Common\FSM32.EXE
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\PROGRA~1\ELISAT~1\ANTI-S~1\fsaw.exe
C:\Program Files\Elisa Tietoturvapalvelu\FSGUI\ispnews.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Elisa Tietoturvapalvelu\FSGUI\fsguidll.exe
C:\Program Files\Elisa Tietoturvapalvelu\backweb\4119343\Program\fspex.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\DOCUME~1\Sami\LOCALS~1\Temp\Tilapäinen kansio 2 hijackthis.zip\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fi/0SEFIFI/SAOS01?FORM=TOOLBR
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = file:///C:\WINDOWS\s.htm
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://elisa.net/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.fi/0SEFIFI/SAOS01?FORM=TOOLBR
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer - toimittaja Elisa Internet
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.fi;
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
R3 - Default URLSearchHook is missing
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Elisa Tietoturvapalvelu\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Elisa Tietoturvapalvelu\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\Elisa Tietoturvapalvelu\FSGUI\FSSW.EXE" /reboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [News Service] "C:\Program Files\Elisa Tietoturvapalvelu\FSGUI\ispnews.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: Elisa Tietoturvapalvelu.lnk = C:\Program Files\Elisa Tietoturvapalvelu\backweb\4119343\Program\fspex.exe
O8 - Extra context menu item: &Estä tämä kohoikkuna - C:\Program Files\Elisa Tietoturvapalvelu\Anti-Spyware\blockpopups.htm
O8 - Extra context menu item: Hae Eniron avulla - res://C:\WINDOWS\System32\ToolBand_FI.dll/MENUSEARCH.HTM
O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Web-suodatin - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Elisa Tietoturvapalvelu\FSPC\fspcmsie.dll
O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Elisa Tietoturvapalvelu\FSPC\fspcmsie.dll
O9 - Extra 'Tools' menuitem: Web-suodatin - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Elisa Tietoturvapalvelu\FSPC\fspcmsie.dll
O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F02} - C:\Program Files\Elisa Tietoturvapalvelu\FSPC\fspcmsie.dll
O9 - Extra 'Tools' menuitem: &Keskeytä Web-sivujen suodatus - {200DB664-75B5-47c0-8B45-A44ACCF73F02} - C:\Program Files\Elisa Tietoturvapalvelu\FSPC\fspcmsie.dll
O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F03} - C:\Program Files\Elisa Tietoturvapalvelu\FSPC\fspcmsie.dll
O9 - Extra 'Tools' menuitem: &Kiellä tämä Web-sivusto - {200DB664-75B5-47c0-8B45-A44ACCF73F03} - C:\Program Files\Elisa Tietoturvapalvelu\FSPC\fspcmsie.dll
O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F04} - C:\Program Files\Elisa Tietoturvapalvelu\FSPC\fspcmsie.dll
O9 - Extra 'Tools' menuitem: &Salli tämä Web-sivusto - {200DB664-75B5-47c0-8B45-A44ACCF73F04} - C:\Program Files\Elisa Tietoturvapalvelu\FSPC\fspcmsie.dll
O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Elisa Tietoturvapalvelu\Anti-Spyware\ieshield.dll
O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Elisa Tietoturvapalvelu\Anti-Spyware\ieshield.dll
O9 - Extra button: Oheistiedot - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Palvelut - {350486A4-C961-4348-905D-26CCEFF2B70E} - http://service.kolumbus.fi/ (file missing) (HKCU)
O9 - Extra button: Tuki - {5C88952E-CBF0-4659-A91D-46F47F111BC4} - http://tuki.elisa.net/ (file missing) (HKCU)
O9 - Extra button: SMS-viesti - {CE6E1DE2-BE7C-4B8E-A36B-918B70D4A26E} - http://sms.kolumbus.fi/ (file missing) (HKCU)
O10 - Broken Internet access because of LSP provider 'winsflt.dll' missing
O14 - IERESET.INF: START_PAGE_URL=http://elisa.net/
O15 - Trusted Zone: http://loggedin.posti.suomi24.fi
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: Elisa Tietoturvapalvelu (BackWeb Plug-in - 4119343) - BackWeb Technologies Inc. - C:\PROGRA~1\ELISAT~1\backweb\4119343\Program\SERVIC~1.EXE
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido anti-malware\ewidoguard.exe
O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fsgk32st.exe
O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\Elisa Tietoturvapalvelu\backweb\4119343\program\fsbwsys.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Elisa Tietoturvapalvelu\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure HTTP Server (fshttps) - F-Secure Corporation - C:\Program Files\Elisa Tietoturvapalvelu\FSPC\fshttps\fshttps.exe
O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\Elisa Tietoturvapalvelu\Common\FSMA32.EXE
---------------------------------------------------------
ewido anti-malware - Scan report
---------------------------------------------------------
Created on: 15:44:21, 5.3.2006
Report-Checksum: ECEAADC3
Scan result:
HKLM\SOFTWARE\Classes\CLSID\{0FDFA8F1-FED6-2E34-815F-9123143F0CC4} -> Adware.CoolWebSearch : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{11B80E45-BEC0-8756-1DFA-87AE79FA25EC} -> Adware.CoolWebSearch : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{1EF4B271-88F7-7FCA-14A5-1285B4CE846E} -> Adware.CoolWebSearch : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{223F279F-89C2-BB87-373A-00AF1771483F} -> Adware.CoolWebSearch : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{2D884AA4-5362-6D9F-DBFC-16455C462B7B} -> Adware.CoolWebSearch : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{2FD01474-95AC-C3B9-9CEC-BC175DFFB13F} -> Adware.CoolWebSearch : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{2FD3B816-33C8-BA72-72AA-942B7EBA6762} -> Adware.CoolWebSearch : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{331CBE5C-B830-B9E3-563F-ED29D8540207} -> Adware.CoolWebSearch : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{44C9969F-4DCD-2E8D-1242-7959041A25AB} -> Adware.CoolWebSearch : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{4F766EC4-211C-AC42-9FA4-99E5B875A4CF} -> Adware.CoolWebSearch : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{5C41979E-0C08-52D9-D1AE-1F0F1035ABB0} -> Adware.CoolWebSearch : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{5FED6D45-2D6E-9D60-4B64-A4543F387F99} -> Adware.CoolWebSearch : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{610207BA-E8D7-9260-B756-291184C1BFB4} -> Adware.CoolWebSearch : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{6B1BBEFE-396F-6513-80E4-32655D2B89C3} -> Adware.CoolWebSearch : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{741EF1A1-D9CC-94D4-0B32-52C18D0ED509} -> Adware.CoolWebSearch : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{78D30AA1-81A1-DD34-3D72-3AE8D1D60FF3} -> Adware.CoolWebSearch : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{7FF827C3-DF9E-38DE-6A6A-C21E847B30E4} -> Adware.CoolWebSearch : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{847C1672-FB03-7621-DD34-036D3E8460FD} -> Adware.CoolWebSearch : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{8BFBA35A-44BF-8A46-263F-78430DC93768} -> Adware.CoolWebSearch : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{AEB821C4-9592-678C-D11A-D6010FFA6819} -> Adware.CoolWebSearch : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{B005930A-8BCD-92A5-C8EC-32FC64789B27} -> Adware.CoolWebSearch : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{B48EBB4A-407C-EF02-EAB7-76EBB8815E8A} -> Adware.CoolWebSearch : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{B77DD695-38A4-2E2D-B26D-CD29E13B6EE1} -> Adware.CoolWebSearch : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{B8680B1D-2686-D979-4A88-9E2B028772F1} -> Adware.CoolWebSearch : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{BEB8A8DE-743E-9BF5-DBA7-230CFF21DEDA} -> Adware.CoolWebSearch : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{C15D9B6E-7635-EE40-6B05-91AF55B4A5D8} -> Adware.CoolWebSearch : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{CBA73C8C-F1A2-9B6F-0909-143240572D79} -> Adware.CoolWebSearch : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{E1C3C5B8-DB64-9214-3152-74004E9FCB93} -> Adware.CoolWebSearch : Cleaned with backup
HKLM\SOFTWARE\Classes\CLSID\{E2F0712F-9E43-CF54-86D0-C0E27572FBE1} -> Adware.CoolWebSearch : Cleaned with backup
HKLM\SOFTWARE\GMSoft -> Dialer.Generic : Cleaned with backup
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E6543B49-6B99-B8A7-BC93-CFC5A94E0928} -> Adware.CoolWebSearch : Cleaned with backup
HKU\S-1-5-21-989316168-2153557672-688193012-1005\Software\GMSoft -> Dialer.Generic : Cleaned with backup
HKU\S-1-5-21-989316168-2153557672-688193012-1005\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{083BAD41-B411-8FA3-5200-8522A771770B} -> Adware.CoolWebSearch : Cleaned with backup
HKU\S-1-5-21-989316168-2153557672-688193012-1005\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{083BAD41-B411-8FA3-5200-8522A771770B} -> Adware.CoolWebSearch : Cleaned with backup
HKU\S-1-5-21-989316168-2153557672-688193012-1005\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E6543B49-6B99-B8A7-BC93-CFC5A94E0928} -> Adware.CoolWebSearch : Cleaned with backup
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E6543B49-6B99-B8A7-BC93-CFC5A94E0928} -> Adware.CoolWebSearch : Cleaned with backup
C:\Documents and Settings\Sami\Local Settings\Temp\delwbi.tmp -> Downloader.Dluca.an : Cleaned with backup
C:\MsgPlus-254.exe/70000011.exe -> Downloader.Swizzor.af : Cleaned with backup
C:\RECYCLER\S-1-5-21-989316168-2153557672-688193012-1005\Dc1.ini:hcxzg -> Downloader.Agent.bq : Cleaned with backup
C:\RECYCLER\S-1-5-21-989316168-2153557672-688193012-1005\Dc1.ini:htonl -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\002360_.tmp:dpbug -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\002360_.tmp:fgbmt -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\002360_.tmp:otuof -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\002360_.tmp:tsfxb -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\Active Setup Log.BAK:aifbo -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\Active Setup Log.BAK:icmaf -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\Active Setup Log.BAK:kmevc -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\Active Setup Log.BAK:olcsl -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\Active Setup Log.BAK:ulkbq -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\Active Setup Log.BAK:wocvn -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\Active Setup Log.BAK:ybccx -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\Active Setup Log.txt:bvfgg -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\Active Setup Log.txt:juyae -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\addax32.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\addfi32.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\addkf32.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\Alppiruusu.bmp:egbvy -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\Alppiruusu.bmp:vsnus -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\apibr32.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\apiua32.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\appyw32.0ll -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\aqymk.txt:ctume -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\aqymk.txt:mkyld -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\atlgp32.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\ATLML32.0XE -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\atlpb.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\ATLYF.0XE -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\bdrov.txt:bphpl -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\bdrov.txt:brfzn -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\bdrov.txt:pgpjz -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\bdrov.txt:vgeyt -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\bnout.dat:cehcy -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\bootstat.dat:errzu -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\bootstat.dat:gnnuw -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\bootstat.dat:hdjdq -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\bootstat.dat:ojemc -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\btwgc.txt:sdxlc -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\bxpoe.log:kkudl -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\bxpoe.log:oxczd -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\clock.avi:grnyd -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\clock.avi:pnbyy -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\cmsetacl.log:tkyeh -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\cmsetacl.log:vbuaq -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\cmsetacl.log:wkmuw -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\cmsetacl.log:yhpqp -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\cmsetacl.log:zmgch -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\COM .log:fxkuu -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\COM .log:kxdik -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\COM .log:pfiea -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\COM .log:zogaz -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\control(2).ini:kdubx -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\control(2).ini:vqqae -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\control(2).ini:zyfsa -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\control.ini:odngk -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\crey.0ll -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\crfg.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\crhf32.0ll -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\crmw32.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\crug.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\crwv32.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\czmnz.dat:rsqrr -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\D3PQ32.0XE -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\d3yc.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\dahotfix.log:csfxx -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\dahotfix.log:fmmeo -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\dahotfix.log:pntbt -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\dbggf.dat:zepet -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\ddukg.dat:iopop -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\desktop.ini:meiue -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\desktop.ini:wrfzt -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\DirectX.log:ccxdo -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\DirectX.log:sqwbt -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\DirectX.log:vexuu -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\DirectX.log:wndeh -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\ecbol.log:dzqqq -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\ecbol.log:pqhtr -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\ecbol.log:zeyrh -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\explorer.scf:jxkol -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\explorer.scf:wxdma -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\ftaul.log:ylxsz -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\ftswv.txt:htijq -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\ftswv.txt:idwnq -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\ftswv.txt:xglna -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\gsrcv.txt:byvtn -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\gsrcv.txt:tuhrk -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\gsrcv.txt:uvcpw -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\gvwbb.log:lxzvl -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\gvwbb.log:tnnsd -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\Höyhenkuvio.bmp:assen -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\Höyhenkuvio.bmp:lqqbr -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\Höyhenkuvio.bmp:lqqbr -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\Höyhenkuvio.bmp:whkav -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\ienx32.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\ieoo.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\iera32.0ll -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\iis6.log:gatbn -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\iis6.log:iniko -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\iis6.log:ndank -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\iis6.log:sprwj -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\iis6.log:uyngh -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\iowfe.txt:aookg -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\ipci32.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\ipjy.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\ipky.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\iplt.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\jautoexp.dat:amtim -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\jautoexp.dat:cabdl -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\jautoexp.dat:mzgmj -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\jautoexp.dat:wzocv -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\jautoexp.dat:zvkoa -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\javajw.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\javapa32.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\javarm32.0ll -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\javawd.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\Kahvikuppi.bmp:fxfis -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\Kahvikuppi.bmp:kfqoa -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\Kahvikuppi.bmp:npnmn -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\Kalassa.bmp:tpzqb -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB821557.log:bsuzg -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB821557.log:lwpfb -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB821557.log:pysrw -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB821557.log:xzzuq -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\KB823182.log:neizg -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\KB823182.log:vxabf -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\KB823182.log:yjnfu -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB823559.log:mbdmp -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB823559.log:yrfam -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\KB823980.log:ajgyl -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\KB823980.log:ecmvt -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB823980.log:eedwz -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB823980.log:gbzvs -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\KB823980.log:hdcwd -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB823980.log:jssqt -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\KB823980.log:lnwtj -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\KB824105.log:mexfs -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB824105.log:ngtgx -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\KB824105.log:uelgm -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB824105.log:vrnuz -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\KB824141.log:bwulm -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB824141.log:qqqxj -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\KB824141.log:skeny -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB824146.log:aghlb -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB824146.log:erkix -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\KB824146.log:wytqx -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\KB824146.log:zvohq -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB825119.log:jkqqq -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\KB825119.log:shogw -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB828028.log:kzxuv -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB828028.log:mcyzj -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB828028.log:xuoxl -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\KB828035.log:bwqsv -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB828035.log:hyskv -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB828035.log:nqkqs -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB828741.log:grrgs -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB828741.log:hdpoq -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\KB828741.log:kzxhm -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB828741.log:nyzst -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB828741.log:xarwq -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB833987.log:dlhgu -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB833987.log:efozi -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\KB833987.log:ueyyg -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB834707-IE6SP1-20040929.091901.log:ejsdj -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB834707-IE6SP1-20040929.091901.log:lhkwx -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\KB834707.log:ekqqi -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB834707.log:tnncj -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB834707.log:viayt -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\KB835732.log:ldcgp -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB835732.log:sbjih -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB835732.log:yxdqh -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB837001.log:naifs -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB837001.log:qsevr -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB837001.log:rhfox -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB837001.log:vmzlo -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\KB837001.log:xdbsg -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\KB839645.log:naaai -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\KB839645.log:otgwz -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB839645.log:ssvvr -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\KB839645.log:ysnjo -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\KB839645.log:yutfw -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB840315.log:azljl -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\KB840315.log:cidol -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB840315.log:icuom -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\KB840315.log:pofxk -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB840374.log:itxat -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB840374.log:onsrr -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\KB840374.log:qnloc -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB840987.log:eoymf -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\KB840987.log:hlinc -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB840987.log:zdlxj -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB841873.log:btnej -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\KB841873.log:iygje -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\KB841873.log:wffzl -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\KB842773.log:jtgun -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB842773.log:laxqi -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB842773.log:uiiyu -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\KB842773.log:vvhpn -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB867282.log:bktyx -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB867282.log:buhon -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\KB867282.log:jcask -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB867282.log:jvwps -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\KB867282.log:okpll -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB867282.log:xtbjn -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB873333.log:hmlnz -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB873333.log:njghh -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\KB873333.log:ssfhy -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB873333.log:zmkhv -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\KB873339.log:fgqak -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB873339.log:mprrk -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB873339.log:mprrk -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB873339.log:vdfgg -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\KB883357.log:boozz -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\KB883357.log:ixhxt -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB883357.log:kelgy -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\KB883357.log:keoif -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\KB883357.log:smggb -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\KB883357.log:udmez -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB885250.log:mqgip -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB885250.log:zfisd -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB885835.log:eyanx -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB885835.log:wbiaf -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\KB885836.log:agixe -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB885836.log:unjej -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\KB885836.log:zmsei -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\KB886185.log:mewjt -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\KB887742.log:duqau -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\KB887742.log:snoyv -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\KB887742.log:ulbvd -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB888113.log:qitth -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\KB888113.log:rlqxk -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB888113.log:uiahp -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB888302.log:tykpp -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\KB888302.log:xfpov -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\KB890047.log:bcpdx -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB890047.log:endan -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB890047.log:pzexu -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\KB890047.log:wrqnn -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB890047.log:xjkbl -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\KB890175.log:uzezu -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB890859.log:amyhf -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB890859.log:fgkge -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB890923.log:jqbuu -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB890923.log:rilye -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB890923.log:xfmoz -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\KB891781.log:cmbhg -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\KB891781.log:daevv -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\KB893066.log:ksqkt -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB893086.log:hstyj -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\KB893803.log:hggkk -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\KB893803.log:igrlc -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\KB893803.log:iwgti -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\mfcbd32.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\mfcwg.0ll -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\mjkem.log:apghk -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\mjkem.log:lgjab -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\ModemLog_Generic SoftK56.txt:tjoib -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\msdby.log:duiut -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\msdby.log:mgyfg -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\msdby.log:vutcp -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\MSDraw.ini:djakt -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\MSDraw.ini:tzcvy -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\msdy.0ll -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\msgsocm.log:qmnwx -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\msnavpklog.txt:bguee -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\msnsetuplog.txt:ywsqa -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\mswf32.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\muzqy.txt:owlmq -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\mxdbp.dat:doivp -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\netfx.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\netjs.0ll -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\netnz.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\netpp32.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\netxx.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\nsw.log:bhykr -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\nsw.log:boqpu -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\nsw.log:cvvyy -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\nsw.log:inbis -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\nsw.log:okdup -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\nsw.log:qplrb -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\nsw.log:qtnni -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\ntdtcsetup.log:ffsuj -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\ntdtcsetup.log:pbudx -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\ocgen.log:lwthw -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\ocgen.log:rtbtr -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\ocmsn.log:ayqjz -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\ocmsn.log:hjcfc -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\ocmsn.log:qamia -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\OEWABLog.txt:exjrf -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\OEWABLog.txt:mhxpa -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\OEWABLog.txt:vsnsq -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\pcconfig.dat:blrpg -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\pcconfig.dat:ctthu -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\pcconfig.dat:jbzci -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\pcconfig.dat:tuyxf -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\pcconfig.dat:wvuwa -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\Pitsikuvio 16.bmp:fszfj -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\Pitsikuvio 16.bmp:nxess -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\Preeriatuuli.bmp:fjown -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\Preeriatuuli.bmp:lrtcn -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\Preeriatuuli.bmp:uummo -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\Q323255.log:kjihv -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\Q328310.log:bkhsz -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\Q328310.log:ylqdm -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\Q329048.log:cmyva -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\Q329048.log:hbqnr -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\Q329048.log:hwygw -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\Q329048.log:jtefg -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\Q329048.log:mmcac -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\Q329048.log:nvfrq -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\Q329048.log:qogoa -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\Q329048.log:rkxji -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\Q329115.log:awkyj -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\Q329115.log:eswgc -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\Q329170.log:aagxb -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\Q329170.log:khdih -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\Q329170.log:xhrtz -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\Q329170.log:yanor -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\Q329390.log:gvfmb -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\Q329390.log:mthpr -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\Q329390.log:qcrpk -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\Q329834.log:elllw -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\Q329834.log:jmhxg -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\Q329834.log:ksqef -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\Q329834.log:rruqs -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\Q810565.log:bpkho -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\Q810577.log:sutfn -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\Q810577.log:udabe -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\Q810577.log:uiupx -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\Q810577.log:uvhyc -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\Q810577.log:xpiug -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\Q810833.log:bbqyn -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\Q810833.log:iivev -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\Q810833.log:lxnjg -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\Q810833.log:ncmdf -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\Q810833.log:vigbd -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\Q810833.log:zvbky -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\Q811493.log:ajdwu -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\Q811630.log:nheof -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\Q811630.log:xmlan -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\Q811630.log:xmlan -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\Q814033.log:jojyw -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\Q814033.log:vcfnz -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\Q814033.log:zmsea -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\Q815021.log:czkbk -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\Q815021.log:uokic -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\Q815021.log:vdcrc -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\Q815021.log:vmbxc -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\Q817287.log:dyjie -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\Q817287.log:fdaqu -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\Q817287.log:fjxiu -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\Q817287.log:ovbjq -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\Q817606.log:iqkak -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\Q817606.log:irlev -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\Q817606.log:jvxft -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\Q817606.log:jvxft -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\Q817606.log:lgwmb -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\Q828026.log:kxevu -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\Q828026.log:xfruo -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\Q828026.log:yrwxq -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\qpfyi.txt:bvhfk -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\qpfyi.txt:ldgpq -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\qucvr.txt:mpmit -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\REGLOCS(2).OLD:beayi -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\REGLOCS(2).OLD:geifv -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\REGLOCS(2).OLD:idunz -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\regopt.log:ormta -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\regopt.log:yzcxy -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\regopt.log:zxnum -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\Saippuakuplat.bmp:oihfx -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\Saippuakuplat.bmp:qjamw -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\Saippuakuplat.bmp:xgkxt -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\sanja.dat:hgcmk -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\sanja.dat:ksxon -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\sdkka32.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sessmgr.setup.log:lmxtp -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\setupact.log:afwok -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\setupact.log:tfgxn -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\setupapi.log:egwwg -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\setupapi.log:iaoqp -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\setupapi.log:juoub -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\setupapi.log:uurvg -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\setuperr.log:ntahk -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\setuperr.log:seqbm -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\setuperr.log:zmyew -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\SIGVERIF.TXT:lkmzu -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\SIGVERIF.TXT:muvjv -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\SIGVERIF.TXT:tgotm -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\SIGVERIF.TXT:wldsu -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\SIGVERIF.TXT:yezgz -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\SIGVERIF.TXT:zvjzk -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\spupdsvc.log:hlfuh -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\spupdsvc.log:ibefg -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\spupdsvc.log:kxjgo -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\spupdsvc.log:swbkr -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\svcpack.log:oxkgp -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\svcpack.log:qtoze -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\svcpack.log:yezut -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\sysmq32.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\syssw.0ll -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\syssw.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system.ini:amqhj -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\system.ini:knjps -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\system.ini:ltdaf -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\system.ini:mwznp -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\system.ini:nqtnf -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\system.ini:sbdvk -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\system.ini:tluhb -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\system32\addca32.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addji32.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\addmc32.0ll -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\system32\apiib.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\apikg.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\apiog32.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\apirv32.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\apixr32.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\APPRX32.0XE -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\atlda32.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\atlgw.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\atljw32.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\d3di32.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\d3np32.0ll -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\system32\d3wf.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\iedw.0ll -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\system32\ieho32.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\iekl.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\ieot32.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\iexh.0ll -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\system32\ieyk32.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\iezv32.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\ipmx32.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\ipot.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\ipxe.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\ipyi.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\javahk.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\javaia32.0ll -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\system32\JAVAQH32.0XE -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\javasc32.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\javatz.0ll -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\system32\javazu32.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\MFCAV32.0XE -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\mfcta.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\mfcum32.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\mfcxj.0ll -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\system32\MSFY32.0LL -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\system32\msjd.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\msww32.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\msxh.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\nettr.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\ntaw32.0ll -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\system32\ntih32.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\ntop32.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\ntvn.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\ntwq32.0ll -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\system32\sdkcj32.0ll -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\system32\sdkqd.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\sdkww.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\sp2ctr.0xe -> Downloader.Dluca.am : Cleaned with backup
C:\WINDOWS\system32\syspf32.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\system32\wines32.0ll -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\system32\winwe32.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\sysze32.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\T30DebugLogFile.txt:dytmi -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\T30DebugLogFile.txt:kwmsg -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\T30DebugLogFile.txt:sppks -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\T30DebugLogFile.txt:wmpsq -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\tsoc.log:hngdq -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\tsoc.log:ijsna -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\updspapi.log:okwgt -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\updspapi.log:snime -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\updspapi.log:tkcrb -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\vb.ini:tcppd -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\vbaddin(2).ini:bursb -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\vbaddin(2).ini:gmpnu -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\vbaddin(2).ini:ofdev -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\vbaddin(2).ini:tfjxz -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\vbaddin(2).ini:tgvwp -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\vbaddin(2).ini:wbtok -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\vbaddin(2).ini:wsdcp -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\vbaddin(2).ini:zrnyl -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\vbaddin.ini:fcmsy -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\vbaddin.ini:yregc -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\Viherkivi.bmp:axrzg -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\Viherkivi.bmp:rbyqo -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\Viherkivi.bmp:vugtt -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\Viuhkat.bmp:agmid -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\Viuhkat.bmp:byhse -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\Viuhkat.bmp:didot -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\Viuhkat.bmp:drtdo -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\Viuhkat.bmp:qxvge -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\Viuhkat.bmp:rsgen -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\vminst.log:raugi -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\vminst.log:zlzqq -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\vvude.dat:emfcx -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\whmsy.dat:hxpqp -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\whmsy.dat:thhwc -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\wiaservc.log:byyza -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\wiaservc.log:dipaa -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\wiaservc.log:eygqt -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\win.ini:bwfed -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\win.ini:ccdus -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\win.ini:hywlz -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\win.ini:jylkr -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\win.ini:nwoaf -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\win.ini:ohfvq -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\win.ini:xbrug -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\Windows Update.log:ojoyq -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\Windows Update.log:rcurw -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\Windows Update.log:xjmyf -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\Windows Update.log:xtqux -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\WindowsUpdate.log:dohxs -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\WindowsUpdate.log:gbhue -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\winim.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\winjo32.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\winnt.bmp:eatoy -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\winnt.bmp:haxbs -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\winnt.bmp:kcfwy -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\winnt.bmp:srsjm -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\winnt.bmp:tuayd -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\winnt256.bmp:hspsn -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\winvq.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\winwu32.0xe -> Trojan.Agent.bi : Cleaned with backup
C:\WINDOWS\wmprfFIN.prx:pajjp -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\wmsetup.log:djbbh -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\wmsetup.log:jqeyf -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\wmsetup.log:uzpvn -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\WMSysPr9(4).prx:apifb -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\WMSysPr9(4).prx:bwmso -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\WMSysPr9(4).prx:cldmw -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\WMSysPr9(4).prx:ewdrz -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\WMSysPr9(4).prx:nhscm -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\WMSysPr9.prx:stskj -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\WORDPAD(2).INI:dnntp -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\WORDPAD(2).INI:okmue -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\WORDPAD(2).INI:veqhu -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\WORDPAD(2).INI:ypmiw -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\WORDPAD(3).INI:dnntp -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\WORDPAD(3).INI:flqjj -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\WORDPAD(3).INI:veqhu -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\WORDPAD.INI:tdukf -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\xdttn.dat:nmges -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\xpsp1hfm.log:affcm -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\xpsp1hfm.log:ikkmj -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\xpsp1hfm.log:ltcut -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\ykeyy.txt:jrpst -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\Zapoteekki.bmp:dredr -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\Zapoteekki.bmp:dzigm -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\Zapoteekki.bmp:gnzju -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\Zapoteekki.bmp:rupjw -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\Zapoteekki.bmp:rxlip -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\znzuz.txt:ecybr -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\zwogv.log:exxdb -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\_default(2).pif:akfov -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\_default(2).pif:aobmg -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\_default(2).pif:axinz -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\_default(2).pif:befvo -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\_default(2).pif:bgiai -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\_default(2).pif:bgubu -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\_default(2).pif:bhtkx -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\_default(2).pif:bnpza -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\_default(2).pif:bomyd -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\_default(2).pif:bzymm -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\_default(2).pif:ccfnx -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\_default(2).pif:clpms -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\_default(2).pif:cpkps -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\_default(2).pif:cpoqi -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\_default(2).pif:cvqfx -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\_default(2).pif:cxrkw -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\_default(2).pif:djrzw -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\_default(2).pif:dkncs -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\_default(2).pif:dlfpz -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\_default(2).pif:dlwsj -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\_default(2).pif:dswnz -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\_default(2).pif:dtzvm -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\_default(2).pif:etaoe -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\_default(2).pif:euhav -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\_default(2).pif:eukds -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\_default(2).pif:eynuz -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\_default(2).pif:faqdj -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\_default(2).pif:fbprw -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\_default(2).pif:ffdxo -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\_default(2).pif:fjnio -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\_default(2).pif:fjuwq -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\_default(2).pif:fjymw -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\_default(2).pif:fkoid -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\_default(2).pif:fmsfo -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\_default(2).pif:foegk -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\_default(2).pif:fppnt -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\_default(2).pif:fsmyg -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\_default(2).pif:fteol -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\_default(2).pif:ftqjw -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\_default(2).pif:fzruw -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\_default(2).pif:gbdkz -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\_default(2).pif:geynk -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\_default(2).pif:gfzcb -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\_default(2).pif:gmluf -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\_default(2).pif:grccg -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\_default(2).pif:hdvcm -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\_default(2).pif:hegbk -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\_default(2).pif:hevko -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\_default(2).pif:hhavb -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\_default(2).pif:hmaha -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\_default(2).pif:hpdhr -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\_default(2).pif:hvksr -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\_default(2).pif:hzcsm -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\_default(3).pif:axinz -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\_default(3).pif:befvo -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\_default(3).pif:bomyd -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\_default(3).pif:bzymm -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\_default(3).pif:clpms -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\_default(3).pif:cpkps -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\_default(3).pif:djrzw -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\_default(3).pif:dkncs -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\_default(3).pif:eukds -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\_default(3).pif:faqdj -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\_default(3).pif:fbprw -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\_default(3).pif:ffdxo -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\_default(3).pif:fjnio -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\_default(3).pif:fjuwq -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\_default(3).pif:fkoid -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\_default(3).pif:fmsfo -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\_default(3).pif:foegk -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\_default(3).pif:fppnt -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\_default(3).pif:ftqjw -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\_default(3).pif:gbdkz -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\_default(3).pif:geynk -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\_default(3).pif:gfzcb -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\_default(3).pif:grccg -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\_default(3).pif:hpdhr -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\_default(3).pif:iiiyl -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\_default(3).pif:ikllk -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\_default(3).pif:iluen -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\_default(3).pif:imjvk -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\_default(3).pif:iwpif -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\_default(3).pif:jbpkz -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\_default(3).pif:jcasa -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\_default(3).pif:jgmhh -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\_default(3).pif:kdquw -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\_default(3).pif:kezhc -> Downloader.Agent.bc : Cleaned with backup
C:\WINDOWS\_default(3).pif:kryxi -> Downloader.Agent.bq : Cleaned with backup
C:\WINDOWS\_default(3).pif:lnufg -> Downloader.Ag
Löytipä Ewido paljon.
Hijackthis on vieläkin väärässä paikassa:
C:\DOCUME~1\Sami\LOCALS~1\Temp\Tilapäinen kansio 2 hijackthis.zip\HijackThis.exe
Siirrä se ed. ohjeeni mukaan.
Scannaa hijackilla ja merkitse ja fixaa tuo:
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = file:///C:\WINDOWS\s.htm
Boottaa kone.
Jos ongelma ei poistunut , niin laita uusi hijack logi, niin teemme sitten muuta.
Fixaa tämä vikasietotilassa(eli käynnistä vikasietotilaan ja fixaa se HjT:llä siellä), niin voi lähteäkin:
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = file:///C:\WINDOWS\s.htm
Ja poista -> C:\WINDOWS\==>s.htm
tai jos tuo on Fortnight.E niin se lähtee Pandan onlinescannerilla
http://enterprises.pandasoftware.com/products/activescan/
tai tuolla Pandan poistotyökalulla.
http://enterprises.pandasoftware.com/virus_info/encyclopedia/overview.aspx?lst=sol&idvirus=39917