Log file

Pulassa23.3.2006 klo 9.47

Moi, voisiko joku katsoa tan mun filen?

Logfile of HijackThis v1.99.1
Scan saved at 9:45:31, on 23.3.2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Trend Micro\PC-cillin 2002\pccguide.exe
C:\Program Files\Trend Micro\PC-cillin 2002\PCCClient.exe
C:\Program Files\Trend Micro\PC-cillin 2002\Pop3trap.exe
C:\WINDOWS\System32\devldr32.exe
C:\Program Files\Media Gateway\MediaGateway.exe
C:\Program Files\Trend Micro\PC-cillin 2002\WebTrap.EXE
C:\program files\180search assistant\180sa.exe
C:\WINDOWS\etb\pokapoka79.exe
C:\PROGRA~1\ezula\mmod.exe
C:\PROGRA~1\Web Offer\wo.exe
C:\Program Files\Media Access\MediaAccess.exe
C:\Program Files\Media Access\MediaAccK.exe
C:\Program Files\Trend Micro\PC-cillin 2002\Tmntsrv.exe
C:\Program Files\Trend Micro\PC-cillin 2002\PCCPFW.exe
C:\Program Files\Adobe\Acrobat 5.0\Reader\AcroRd32.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\HiJackThis\HijackThis.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = WWW.kolumbus.fi
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [pccguide.exe] "C:\Program Files\Trend Micro\PC-cillin 2002\pccguide.exe"
O4 - HKLM\..\Run: [PCCClient.exe] "C:\Program Files\Trend Micro\PC-cillin 2002\PCCClient.exe"
O4 - HKLM\..\Run: [Pop3trap.exe] "C:\Program Files\Trend Micro\PC-cillin 2002\Pop3trap.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\Updreg.exe
O4 - HKLM\..\Run: [Microsoft LSASS Network File] C:\WINDOWS\System32\KLSASS.exe
O4 - HKLM\..\Run: [Explorer] C:\WINDOWS\System32\expIorer.exe
O4 - HKLM\..\Run: [Wuupdate] C:\WINDOWS\System32\smmss.exe
O4 - HKLM\..\Run: [I downloaded pirated Software from P2P and now I post my Hijack log whining] C:\WINDOWS\System32\Civilization 4 crack.exe
O4 - HKLM\..\Run: [Media Gateway] C:\Program Files\Media Gateway\MediaGateway.exe
O4 - HKLM\..\Run: [180sa] c:\program files\180search assistant\180sa.exe
O4 - HKLM\..\Run: [inetsxyj] C:\WINDOWS\inetsxyj.exe
O4 - HKLM\..\Run: [Media Access] C:\Program Files\Media Access\MediaAccK.exe
O4 - HKLM\..\Run: [System service79] C:\WINDOWS\etb\pokapoka79.exe
O4 - HKCU\..\Run: [eZmmod] C:\PROGRA~1\ezula\mmod.exe
O4 - HKCU\..\Run: [eZWO] C:\PROGRA~1\Web Offer\wo.exe
O4 - HKCU\..\RunOnce: [Web Offer] C:\WINDOWS\System32\smmss.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: PC-cillin PersonalFirewall (PCCPFW) - Trend Micro Inc. - C:\Program Files\Trend Micro\PC-cillin 2002\PCCPFW.exe
O23 - Service: Trend NT Realtime Service (Tmntsrv) - Trend Micro Inc. - C:\Program Files\Trend Micro\PC-cillin 2002\Tmntsrv.exe

6649

Äänestä

Vastaukset 6

Vanhimmat

Kuakko23.3.2006 klo 10.22

expIorer.exe, pokapoka ja muuta kaikkea. Odota Gururuja kunnes kerkiävät auttamaan. Itsellä ei taidot riitä.

Äänestä

Fixaaja23.3.2006 klo 10.39

Poista ohjauspaneelista (lisää/poista sovellus), jos on:

Media Gateway
180search assistant
Media Access
ezula
Web Offer

Fixaa HjT:llä (do a system scan only, merkkaa ja paina fix checked):

O4 - HKLM\..\Run: [Microsoft LSASS Network File] C:\WINDOWS\System32\KLSASS.exe
O4 - HKLM\..\Run: [Explorer] C:\WINDOWS\System32\expIorer.exe
O4 - HKLM\..\Run: [Wuupdate] C:\WINDOWS\System32\smmss.exe
O4 - HKLM\..\Run: [I downloaded pirated Software from P2P and now I post my Hijack log whining] C:\WINDOWS\System32\Civilization 4 crack.exe
O4 - HKLM\..\Run: [Media Gateway] C:\Program Files\Media Gateway\MediaGateway.exe
O4 - HKLM\..\Run: [180sa] c:\program files\180search assistant\180sa.exe
O4 - HKLM\..\Run: [inetsxyj] C:\WINDOWS\inetsxyj.exe
O4 - HKLM\..\Run: [Media Access] C:\Program Files\Media Access\MediaAccK.exe
O4 - HKLM\..\Run: [System service79] C:\WINDOWS\etb\pokapoka79.exe
O4 - HKCU\..\Run: [eZmmod] C:\PROGRA~1\ezula\mmod.exe
O4 - HKCU\..\Run: [eZWO] C:\PROGRA~1\Web Offer\wo.exe
O4 - HKCU\..\RunOnce: [Web Offer] C:\WINDOWS\System32\smmss.exe

Poista jos löytyy:

C:\WINDOWS\System32\KLSASS.exe
C:\WINDOWS\System32\expIorer.exe
C:\WINDOWS\System32\smmss.exe
C:\WINDOWS\System32\Civilization 4 crack.exe
C:\Program Files\Media Gateway
c:\program files\180search assistant
C:\WINDOWS\inetsxyj.exe
C:\Program Files\Media Access
C:\PROGRA~1\ezula
C:\PROGRA~1\Web Offer

Lataa LQfix.exe© jommastakummasta linkistä:[list]

http://www.downloads.subratam.org/LQfix.exe
http://miekiemoes.geekstogo.com/tools/LQfix.exe

[*]Tallenna työpöydälle.
[*]Tupla-klikkaa [b]LQfix.exe[/b] ja klikkaa Next > Next > Install.
[*]Jätä asetukset kuten ne on, [b]jos vaihdat ne, korjaus epäonnistuu![/b]
[*]Tarvitset aktiivisen Internet-yhteyden, joten varmista ettet ole estämässä mitään yhteyttä nyt.
[*]Varmista että "[b]Launch LQfix[/b]" boxi on rastitettu.
[*]Klikkaa [b]Finish[/b] valintaa, fixi alkaa.
[*]Seuraa ohjeita screeniltä.
[*]Koneesi käynnistyy uusiksi kun työkalu on fixannut.
[*]Ole kärsivällinen uudelleenkäynnistymisen jälkeen, taustalla on scripti käynnissä.[/list]

Lataa Aproposkorjaus seuraavasta linkistä;

http://swandog46.geekstogo.com/aproposfix.exe

Tallenna se työpöydällesi mutta älä tee sillä mitään vielä.

Käynnistä kone vikasietotilassa;

1) Käynnistä uudelleen
2) Hakkaa F8;a ennen kuin Windowsin latauskuva tulee.
3) Pitäisi ilmestyä valikko
4) Valitse ensimmäinen optio; käynnistä Vikasietotilassa

Tuplaklikkaa aproposfix.exe ja unzippaa se työpöydälle. Avaa AproposFix kansio työpöydältäsi ja käynnistä RunThis.bat. Seuraa ohjeita.

Kun se on valmis, boottaa normaalisti Windowsiin, ja postita uusi HijackThis loki ja sen mukana kaikki sisältö log.txt filusta AproposFix kansion sisältä.

Äänestä

Pulassa23.3.2006 klo 12.47
Logfile of HijackThis v1.99.1
Scan saved at 12:46:09, on 23.3.2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Trend Micro\PC-cillin 2002\pccguide.exe
C:\Program Files\Trend Micro\PC-cillin 2002\PCCClient.exe
C:\Program Files\Trend Micro\PC-cillin 2002\Pop3trap.exe
C:\WINDOWS\System32\devldr32.exe
C:\Program Files\Trend Micro\PC-cillin 2002\WebTrap.EXE
C:\Program Files\Trend Micro\PC-cillin 2002\Tmntsrv.exe
C:\Program Files\Trend Micro\PC-cillin 2002\PCCPFW.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\HiJackThis\HijackThis.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = WWW.kolumbus.fi
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [pccguide.exe] "C:\Program Files\Trend Micro\PC-cillin 2002\pccguide.exe"
O4 - HKLM\..\Run: [PCCClient.exe] "C:\Program Files\Trend Micro\PC-cillin 2002\PCCClient.exe"
O4 - HKLM\..\Run: [Pop3trap.exe] "C:\Program Files\Trend Micro\PC-cillin 2002\Pop3trap.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\Updreg.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: PC-cillin PersonalFirewall (PCCPFW) - Trend Micro Inc. - C:\Program Files\Trend Micro\PC-cillin 2002\PCCPFW.exe
O23 - Service: Trend NT Realtime Service (Tmntsrv) - Trend Micro Inc. - C:\Program Files\Trend Micro\PC-cillin 2002\Tmntsrv.exe

Log of AproposFix v1.1

************

Running from directory:
C:\Documents and Settings\J„rjestelm„nvalvoja\Ty”p”yt„\aproposfix

************

Registry entries found:

************

No service found!

Removing hidden folder:
No folder found!

Deleting files:

Backing up files:
Done!

Removing registry entries:

REGEDIT4

Done!

Finished!

Tommoset tuli
Äänestä
Fixaaja23.3.2006 klo 13.08
Pulassa kirjoitti:
Logfile of HijackThis v1.99.1
Scan saved at 12:46:09, on 23.3.2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Trend Micro\PC-cillin 2002\pccguide.exe
C:\Program Files\Trend Micro\PC-cillin 2002\PCCClient.exe
C:\Program Files\Trend Micro\PC-cillin 2002\Pop3trap.exe
C:\WINDOWS\System32\devldr32.exe
C:\Program Files\Trend Micro\PC-cillin 2002\WebTrap.EXE
C:\Program Files\Trend Micro\PC-cillin 2002\Tmntsrv.exe
C:\Program Files\Trend Micro\PC-cillin 2002\PCCPFW.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\HiJackThis\HijackThis.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = WWW.kolumbus.fi
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [pccguide.exe] "C:\Program Files\Trend Micro\PC-cillin 2002\pccguide.exe"
O4 - HKLM\..\Run: [PCCClient.exe] "C:\Program Files\Trend Micro\PC-cillin 2002\PCCClient.exe"
O4 - HKLM\..\Run: [Pop3trap.exe] "C:\Program Files\Trend Micro\PC-cillin 2002\Pop3trap.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\Updreg.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: PC-cillin PersonalFirewall (PCCPFW) - Trend Micro Inc. - C:\Program Files\Trend Micro\PC-cillin 2002\PCCPFW.exe
O23 - Service: Trend NT Realtime Service (Tmntsrv) - Trend Micro Inc. - C:\Program Files\Trend Micro\PC-cillin 2002\Tmntsrv.exe

Log of AproposFix v1.1

************

Running from directory:
C:\Documents and Settings\J„rjestelm„nvalvoja\Ty”p”yt„\aproposfix

************

Registry entries found:

************

No service found!

Removing hidden folder:
No folder found!

Deleting files:

Backing up files:
Done!

Removing registry entries:

REGEDIT4

Done!

Finished!

Tommoset tuli
Lokit näyttää hyvältä.

Vetäses ewido vielä päälle, täällä ohjeet ->
http://keskustelu.afterdawn.com/thread_view.cfm/269186

Asenna ja päivitä se.

Käynnistä vikasietotilaan, skannaa, anna poistaa mitä löytää, tallenna raportti.

Käynnistä uudelleen ja lähetä ewidon raportti.
Äänestä
Pulassa23.3.2006 klo 13.40
Fixaaja kirjoitti:
Lokit näyttää hyvältä.

Vetäses ewido vielä päälle, täällä ohjeet ->
http://keskustelu.afterdawn.com/thread_view.cfm/269186

Asenna ja päivitä se.

Käynnistä vikasietotilaan, skannaa, anna poistaa mitä löytää, tallenna raportti.

Käynnistä uudelleen ja lähetä ewidon raportti.
Mokasin vahan ton scannauksen kanssa.. Suljin vahingossa ikkunan kesken scannin.. Tassa on osittainen reportti ja quaratinessa on reilu 70 tiedostoa..

ewido anti-malware - Scan report
---------------------------------------------------------

Created on:         13:39:02, 23.3.2006
Report-Checksum:      7CD15B3B

Scan result:

   C:\Documents and Settings\Järjestelmänvalvoja\Local Settings\Temp\res1.tmp -> Adware.180Solutions : Cleaned with backup
   C:\Documents and Settings\Järjestelmänvalvoja\Local Settings\Temp\res10.tmp -> Adware.180Solutions : Cleaned with backup
   C:\Documents and Settings\Järjestelmänvalvoja\Local Settings\Temp\res131.tmp -> Adware.180Solutions : Cleaned with backup
   C:\Documents and Settings\Järjestelmänvalvoja\Local Settings\Temp\tmp332546156.tmp -> Dropper.Agent.za : Cleaned with backup
   C:\Documents and Settings\Järjestelmänvalvoja\svc.exe -> Adware.WinAD : Cleaned with backup
   C:\Documents and Settings\Järjestelmänvalvoja\wind.exe -> Adware.WinAD : Cleaned with backup
   C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\012LMNO7\setup_file[1].exe -> Dropper.Agent.za : Cleaned with backup
   C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\012LMNO7\setup_file[2].exe -> Dropper.Agent.za : Cleaned with backup
   C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\012LMNO7\setup_file[3].exe -> Dropper.Agent.za : Cleaned with backup
   C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\012LMNO7\setup_file[4].exe -> Dropper.Agent.za : Cleaned with backup
   C:\Program Files\Firaxis Games\Sid Meier's Civilization 4\Civilization 4 Crack.exe -> Trojan.VB.afr : Cleaned with backup
   C:\Program Files\Firaxis Games\Sid Meier's Civilization 4\tmpfile.dat -> Trojan.KillFiles.in : Cleaned with backup
   C:\Program Files\Real\RealOne Player\RealPlayer V9.0 (RealOne) Full Ver.EXE/RealPlayer V9.0 (RealOne) Full Ver\RealOnePlayer.exe -> Dropper.Pakes : Cleaned with backup
   C:\WINDOWS\desktop.html -> Not-A-Virus.Hoax.Win32.Aflac.a : Cleaned with backup
   C:\WINDOWS\QU1UIEF0aGxvbiAyOTAw\asappsrv.dll -> Adware.CommAd : Cleaned with backup
   C:\WINDOWS\QU1UIEF0aGxvbiAyOTAw\command.exe -> Adware.CommAd : Cleaned with backup
   C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\0523492F\setup_file[1].exe -> Dropper.Agent.za : Cleaned with backup
   C:\WINDOWS\system32\expIorer.exe -> Dropper.Pakes : Cleaned with backup
   C:\WINDOWS\system32\howiper.exe -> Trojan.Qhost.df : Cleaned with backup
   C:\WINDOWS\system32\idownload.exe -> Downloader.Small.buy : Cleaned with backup
   C:\WINDOWS\system32\rzspy.exe -> Adware.Raze : Cleaned with backup
   C:\WINDOWS\system32\username.exe -> Adware.EliteBar : Cleaned with backup
   E:\Ohjelmat, Ajurit & Päivitykset\RealPlayer 9.0\RealPlayer V9.0 (RealOne) Full Ver.EXE/RealPlayer V9.0 (RealOne) Full Ver\RealOnePlayer.exe -> Dropper.Pakes : Cleaned with backup
   E:\Omat Tiedostot\Finished\Civilization 4 Crack.exe -> Trojan.VB.afr : Cleaned with backup
   E:\Omat Tiedostot\Finished\Civilization.4.Crack.by.MasterCrack.rar/Civilization 4 Crack.exe -> Trojan.VB.afr : Cleaned with backup
   E:\Omat Tiedostot\Finished\Civilization.4.Crack.by.MasterCrack.rar/tmpfile.dat -> Trojan.KillFiles.in : Cleaned with backup

::Report End
Äänestä
Fixaaja23.3.2006 klo 14.36
Pulassa kirjoitti:
Mokasin vahan ton scannauksen kanssa.. Suljin vahingossa ikkunan kesken scannin.. Tassa on osittainen reportti ja quaratinessa on reilu 70 tiedostoa..

ewido anti-malware - Scan report
---------------------------------------------------------

Created on:         13:39:02, 23.3.2006
Report-Checksum:      7CD15B3B

Scan result:

   C:\Documents and Settings\Järjestelmänvalvoja\Local Settings\Temp\res1.tmp -> Adware.180Solutions : Cleaned with backup
   C:\Documents and Settings\Järjestelmänvalvoja\Local Settings\Temp\res10.tmp -> Adware.180Solutions : Cleaned with backup
   C:\Documents and Settings\Järjestelmänvalvoja\Local Settings\Temp\res131.tmp -> Adware.180Solutions : Cleaned with backup
   C:\Documents and Settings\Järjestelmänvalvoja\Local Settings\Temp\tmp332546156.tmp -> Dropper.Agent.za : Cleaned with backup
   C:\Documents and Settings\Järjestelmänvalvoja\svc.exe -> Adware.WinAD : Cleaned with backup
   C:\Documents and Settings\Järjestelmänvalvoja\wind.exe -> Adware.WinAD : Cleaned with backup
   C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\012LMNO7\setup_file[1].exe -> Dropper.Agent.za : Cleaned with backup
   C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\012LMNO7\setup_file[2].exe -> Dropper.Agent.za : Cleaned with backup
   C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\012LMNO7\setup_file[3].exe -> Dropper.Agent.za : Cleaned with backup
   C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\012LMNO7\setup_file[4].exe -> Dropper.Agent.za : Cleaned with backup
   C:\Program Files\Firaxis Games\Sid Meier's Civilization 4\Civilization 4 Crack.exe -> Trojan.VB.afr : Cleaned with backup
   C:\Program Files\Firaxis Games\Sid Meier's Civilization 4\tmpfile.dat -> Trojan.KillFiles.in : Cleaned with backup
   C:\Program Files\Real\RealOne Player\RealPlayer V9.0 (RealOne) Full Ver.EXE/RealPlayer V9.0 (RealOne) Full Ver\RealOnePlayer.exe -> Dropper.Pakes : Cleaned with backup
   C:\WINDOWS\desktop.html -> Not-A-Virus.Hoax.Win32.Aflac.a : Cleaned with backup
   C:\WINDOWS\QU1UIEF0aGxvbiAyOTAw\asappsrv.dll -> Adware.CommAd : Cleaned with backup
   C:\WINDOWS\QU1UIEF0aGxvbiAyOTAw\command.exe -> Adware.CommAd : Cleaned with backup
   C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\0523492F\setup_file[1].exe -> Dropper.Agent.za : Cleaned with backup
   C:\WINDOWS\system32\expIorer.exe -> Dropper.Pakes : Cleaned with backup
   C:\WINDOWS\system32\howiper.exe -> Trojan.Qhost.df : Cleaned with backup
   C:\WINDOWS\system32\idownload.exe -> Downloader.Small.buy : Cleaned with backup
   C:\WINDOWS\system32\rzspy.exe -> Adware.Raze : Cleaned with backup
   C:\WINDOWS\system32\username.exe -> Adware.EliteBar : Cleaned with backup
   E:\Ohjelmat, Ajurit & Päivitykset\RealPlayer 9.0\RealPlayer V9.0 (RealOne) Full Ver.EXE/RealPlayer V9.0 (RealOne) Full Ver\RealOnePlayer.exe -> Dropper.Pakes : Cleaned with backup
   E:\Omat Tiedostot\Finished\Civilization 4 Crack.exe -> Trojan.VB.afr : Cleaned with backup
   E:\Omat Tiedostot\Finished\Civilization.4.Crack.by.MasterCrack.rar/Civilization 4 Crack.exe -> Trojan.VB.afr : Cleaned with backup
   E:\Omat Tiedostot\Finished\Civilization.4.Crack.by.MasterCrack.rar/tmpfile.dat -> Trojan.KillFiles.in : Cleaned with backup

::Report End
Poista tämä hakemisto:

C:\WINDOWS\QU1UIEF0aGxvbiAyOTAw

Hae hoster ->
http://www.funkytoad.com/download/hoster.zip

Pura zippi ja tuplaklikkaa hoster.exe

Paina "Restore original hosts" tms.(nimi voi olla vähän erilainen) ja ok.

Sen karanteenin voit tyhjentää.
Äänestä

Odottaa vastausta

Näihin keskusteluihin ei ole vielä vastattu. Ole ensimmäinen.

Ilmoitukset

Log file

Muut lukivat myös

Vastaukset 6

Odottaa vastausta

Luetuimmat keskustelut

Kommentoi aloitusta

Ilmoita asiaton sisältö

Ilmoitus lähetetty

Jaa keskustelu