tässä on logi Logfile of HijackThis v1.99.1
Scan saved at 22:39:20, on 28.3.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\acs.exe
C:\PROGRA~1\ELISAT~1\backweb\4119343\Program\SERVIC~1.EXE
C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fsgk32st.exe
C:\Program Files\Elisa Tietoturvapalvelu\backweb\4119343\program\fsbwsys.exe
C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\FSGK32.EXE
C:\Program Files\Elisa Tietoturvapalvelu\Common\FSMA32.EXE
C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fssm32.exe
C:\Program Files\Elisa Tietoturvapalvelu\Common\FSMB32.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Elisa Tietoturvapalvelu\Common\FCH32.EXE
C:\Program Files\Elisa Tietoturvapalvelu\Common\FAMEH32.EXE
C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fsrw.exe
C:\Program Files\Elisa Tietoturvapalvelu\FWES\Program\fsdfwd.exe
C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fsav32.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\keyhook.exe
C:\Program Files\Arcade\PCMService.exe
C:\Program Files\Launch Manager\QtZgAcer.EXE
C:\Program Files\Atheros\ACU.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Elisa Tietoturvapalvelu\Common\FSM32.EXE
C:\Program Files\Elisa Tietoturvapalvelu\FSGUI\ispnews.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\MYWEBS~1\bar\9.bin\mwsoemon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\sistray.exe
C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fi-fi\bin\WindowsSearch.exe
C:\Program Files\Elisa Tietoturvapalvelu\backweb\4119343\Program\fspex.exe
C:\Program Files\OpenOffice.org 2.0\program\soffice.exe
C:\Program Files\OpenOffice.org 2.0\program\soffice.BIN
C:\PROGRA~1\ELISAT~1\ANTI-S~1\fsaw.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Elisa Tietoturvapalvelu\FSGUI\fsguidll.exe
C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fi-fi\bin\WindowsSearchIndexer.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
C:\Program Files\acer\eRecovery\Monitor.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
C:\Program Files\Elisa Tietoturvapalvelu\FSGUI\fsavgui.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\hjt\HijackThis.exe
C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fi-fi\bin\WindowsSearchFilter.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://elisa.net/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://elisa.net/
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://elisa.net/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer - Toimittaja Elisa Internet
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.fi;
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: BitComet Toolbar Helper - {6A373B7E-496E-424f-A9BE-486A5E9AB018} - C:\Program Files\BitComet Toolbar\v2.0.0.4\BitComet_Toolbar.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: MSN Search -työkalurivi Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fi-fi\msntb.dll
O3 - Toolbar: MSN Search -työkalurivi - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fi-fi\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: BitComet Toolbar - {2E608F70-C430-4bc5-96F6-608E02EBA5B2} - C:\Program Files\BitComet Toolbar\v2.0.0.4\BitComet_Toolbar.dll
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
O4 - HKLM\..\Run: [SiS Windows KeyHook] C:\WINDOWS\system32\keyhook.exe
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Arcade\PCMService.exe"
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [LManager] C:\Program Files\Launch Manager\QtZgAcer.EXE
O4 - HKLM\..\Run: [eRecoveryService] C:\Windows\System32\Check.exe
O4 - HKLM\..\Run: [ACU] "C:\Program Files\Atheros\ACU.exe" -nogui
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Elisa Tietoturvapalvelu\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Elisa Tietoturvapalvelu\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\Elisa Tietoturvapalvelu\FSGUI\FSSW.EXE" /reboot
O4 - HKLM\..\Run: [News Service] "C:\Program Files\Elisa Tietoturvapalvelu\FSGUI\ispnews.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\RunOnce: [MyWebSearch bar Uninstall] rundll32 C:\PROGRA~1\UNINST~1.DLL,O -2
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe"
O4 - Startup: OpenOffice.org 2.0.lnk = C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe
O4 - Global Startup: Utility Tray.lnk = C:\WINDOWS\system32\sistray.exe
O4 - Global Startup: NkbMonitor.exe.lnk = C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
O4 - Global Startup: hpoddt01.exe.lnk = ?
O4 - Global Startup: hp psc 1000 series.lnk = ?
O4 - Global Startup: hpothb07.tif
O4 - Global Startup: hpothb07.dat
O4 - Global Startup: Windows-työpöytähaku.lnk = C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fi-fi\bin\WindowsSearch.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Elisa Tietoturvapalvelu.lnk = C:\Program Files\Elisa Tietoturvapalvelu\backweb\4119343\Program\fspex.exe
O8 - Extra context menu item: &Estä tämä kohoikkuna - C:\Program Files\Elisa Tietoturvapalvelu\Anti-Spyware\blockpopups.htm
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fi-fi\msntb.dll/search.htm
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZNfox000
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Avaa uuteen etuvälilehteen - res://C:\Program Files\MSN Toolbar Suite\TAB\02.05.0000.1105\fi-fi\msntabres.dll/230?156e9f9453a34bc4bddb0cbf087a06
O8 - Extra context menu item: Avaa uuteen taustavälilehteen - res://C:\Program Files\MSN Toolbar Suite\TAB\02.05.0000.1105\fi-fi\msntabres.dll/229?156e9f9453a34bc4bddb0cbf087a06
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Elisa Tietoturvapalvelu\Anti-Spyware\ieshield.dll
O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Elisa Tietoturvapalvelu\Anti-Spyware\ieshield.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Palvelut - {3D99D7E5-F420-44D0-89CD-DC5C4A778292} - http://service.kolumbus.fi/ (file missing) (HKCU)
O9 - Extra button: Tuki - {4756FBB9-D31B-46EC-BFB2-A1174E501853} - http://tuki.elisa.net/ (file missing) (HKCU)
O9 - Extra button: SMS-viesti - {BB967B2C-BEB3-45FA-AB78-2FE714FB2A32} - http://sms.kolumbus.fi/ (file missing) (HKCU)
O14 - IERESET.INF: START_PAGE_URL=http://elisa.net/
O15 - Trusted Zone: http://*.download.microsoft.com
O15 - Trusted Zone: http://*.update.microsoft.com
O15 - Trusted Zone: http://*.windowsupdate.com
O15 - Trusted Zone: http://*.windowsupdate.microsoft.com
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: Atheros Configuration Service (ACS) - Unknown owner - C:\WINDOWS\system32\acs.exe
O23 - Service: Notebook Manager Service (anbmService) - OSA Technologies Inc. - C:\Acer\eManager\anbmServ.exe
O23 - Service: Elisa Tietoturvapalvelu (BackWeb Plug-in - 4119343) - BackWeb Technologies Inc. - C:\PROGRA~1\ELISAT~1\backweb\4119343\Program\SERVIC~1.EXE
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corp. - C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fsgk32st.exe
O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\Elisa Tietoturvapalvelu\backweb\4119343\program\fsbwsys.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Elisa Tietoturvapalvelu\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\Elisa Tietoturvapalvelu\Common\FSMA32.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
Scan saved at 22:39:20, on 28.3.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\acs.exe
C:\PROGRA~1\ELISAT~1\backweb\4119343\Program\SERVIC~1.EXE
C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fsgk32st.exe
C:\Program Files\Elisa Tietoturvapalvelu\backweb\4119343\program\fsbwsys.exe
C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\FSGK32.EXE
C:\Program Files\Elisa Tietoturvapalvelu\Common\FSMA32.EXE
C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fssm32.exe
C:\Program Files\Elisa Tietoturvapalvelu\Common\FSMB32.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Elisa Tietoturvapalvelu\Common\FCH32.EXE
C:\Program Files\Elisa Tietoturvapalvelu\Common\FAMEH32.EXE
C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fsrw.exe
C:\Program Files\Elisa Tietoturvapalvelu\FWES\Program\fsdfwd.exe
C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fsav32.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\keyhook.exe
C:\Program Files\Arcade\PCMService.exe
C:\Program Files\Launch Manager\QtZgAcer.EXE
C:\Program Files\Atheros\ACU.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Elisa Tietoturvapalvelu\Common\FSM32.EXE
C:\Program Files\Elisa Tietoturvapalvelu\FSGUI\ispnews.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\MYWEBS~1\bar\9.bin\mwsoemon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\sistray.exe
C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fi-fi\bin\WindowsSearch.exe
C:\Program Files\Elisa Tietoturvapalvelu\backweb\4119343\Program\fspex.exe
C:\Program Files\OpenOffice.org 2.0\program\soffice.exe
C:\Program Files\OpenOffice.org 2.0\program\soffice.BIN
C:\PROGRA~1\ELISAT~1\ANTI-S~1\fsaw.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Elisa Tietoturvapalvelu\FSGUI\fsguidll.exe
C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fi-fi\bin\WindowsSearchIndexer.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
C:\Program Files\acer\eRecovery\Monitor.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
C:\Program Files\Elisa Tietoturvapalvelu\FSGUI\fsavgui.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\hjt\HijackThis.exe
C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fi-fi\bin\WindowsSearchFilter.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://elisa.net/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://elisa.net/
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://elisa.net/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer - Toimittaja Elisa Internet
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.fi;
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: BitComet Toolbar Helper - {6A373B7E-496E-424f-A9BE-486A5E9AB018} - C:\Program Files\BitComet Toolbar\v2.0.0.4\BitComet_Toolbar.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: MSN Search -työkalurivi Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fi-fi\msntb.dll
O3 - Toolbar: MSN Search -työkalurivi - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fi-fi\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: BitComet Toolbar - {2E608F70-C430-4bc5-96F6-608E02EBA5B2} - C:\Program Files\BitComet Toolbar\v2.0.0.4\BitComet_Toolbar.dll
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
O4 - HKLM\..\Run: [SiS Windows KeyHook] C:\WINDOWS\system32\keyhook.exe
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Arcade\PCMService.exe"
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [LManager] C:\Program Files\Launch Manager\QtZgAcer.EXE
O4 - HKLM\..\Run: [eRecoveryService] C:\Windows\System32\Check.exe
O4 - HKLM\..\Run: [ACU] "C:\Program Files\Atheros\ACU.exe" -nogui
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Elisa Tietoturvapalvelu\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Elisa Tietoturvapalvelu\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\Elisa Tietoturvapalvelu\FSGUI\FSSW.EXE" /reboot
O4 - HKLM\..\Run: [News Service] "C:\Program Files\Elisa Tietoturvapalvelu\FSGUI\ispnews.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\RunOnce: [MyWebSearch bar Uninstall] rundll32 C:\PROGRA~1\UNINST~1.DLL,O -2
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe"
O4 - Startup: OpenOffice.org 2.0.lnk = C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe
O4 - Global Startup: Utility Tray.lnk = C:\WINDOWS\system32\sistray.exe
O4 - Global Startup: NkbMonitor.exe.lnk = C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
O4 - Global Startup: hpoddt01.exe.lnk = ?
O4 - Global Startup: hp psc 1000 series.lnk = ?
O4 - Global Startup: hpothb07.tif
O4 - Global Startup: hpothb07.dat
O4 - Global Startup: Windows-työpöytähaku.lnk = C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fi-fi\bin\WindowsSearch.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Elisa Tietoturvapalvelu.lnk = C:\Program Files\Elisa Tietoturvapalvelu\backweb\4119343\Program\fspex.exe
O8 - Extra context menu item: &Estä tämä kohoikkuna - C:\Program Files\Elisa Tietoturvapalvelu\Anti-Spyware\blockpopups.htm
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fi-fi\msntb.dll/search.htm
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZNfox000
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Avaa uuteen etuvälilehteen - res://C:\Program Files\MSN Toolbar Suite\TAB\02.05.0000.1105\fi-fi\msntabres.dll/230?156e9f9453a34bc4bddb0cbf087a06
O8 - Extra context menu item: Avaa uuteen taustavälilehteen - res://C:\Program Files\MSN Toolbar Suite\TAB\02.05.0000.1105\fi-fi\msntabres.dll/229?156e9f9453a34bc4bddb0cbf087a06
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Elisa Tietoturvapalvelu\Anti-Spyware\ieshield.dll
O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Elisa Tietoturvapalvelu\Anti-Spyware\ieshield.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Palvelut - {3D99D7E5-F420-44D0-89CD-DC5C4A778292} - http://service.kolumbus.fi/ (file missing) (HKCU)
O9 - Extra button: Tuki - {4756FBB9-D31B-46EC-BFB2-A1174E501853} - http://tuki.elisa.net/ (file missing) (HKCU)
O9 - Extra button: SMS-viesti - {BB967B2C-BEB3-45FA-AB78-2FE714FB2A32} - http://sms.kolumbus.fi/ (file missing) (HKCU)
O14 - IERESET.INF: START_PAGE_URL=http://elisa.net/
O15 - Trusted Zone: http://*.download.microsoft.com
O15 - Trusted Zone: http://*.update.microsoft.com
O15 - Trusted Zone: http://*.windowsupdate.com
O15 - Trusted Zone: http://*.windowsupdate.microsoft.com
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: Atheros Configuration Service (ACS) - Unknown owner - C:\WINDOWS\system32\acs.exe
O23 - Service: Notebook Manager Service (anbmService) - OSA Technologies Inc. - C:\Acer\eManager\anbmServ.exe
O23 - Service: Elisa Tietoturvapalvelu (BackWeb Plug-in - 4119343) - BackWeb Technologies Inc. - C:\PROGRA~1\ELISAT~1\backweb\4119343\Program\SERVIC~1.EXE
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corp. - C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fsgk32st.exe
O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\Elisa Tietoturvapalvelu\backweb\4119343\program\fsbwsys.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Elisa Tietoturvapalvelu\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\Elisa Tietoturvapalvelu\Common\FSMA32.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
Vastaukset 49
Vanhimmat
Ok, katson tämän, palaan mahdollisimman pian.
Moi taas.
*Ladataan avuksi siivousohjelma nimeltä Ewido,
tuolla ohjeet:
http://www.virustorjunta.net/modules.php?name=Forums&file=viewtopic&t=3914
Asenna ohjeiden mukaan.
Päivitä se valmiiksi.
Älä käytä vielä.
*Klikkaa Käynnistä, Asetukset, Ohjauspaneeli.
Avaa Lisää/poista-sovellus, etsi:
MyWebSearch bar
MyWebSearch bar Uninstall
Voi löytyä tämäkin:
MyWebSearch email plugin
Poista ne.
*Käynnistä Hijackthis, klikkaa Do a system scan only,
merkkaa nuo rivit:
O4 - HKLM\..\RunOnce: [MyWebSearch bar Uninstall] rundll32 C:\PROGRA~1\UNINST~1.DLL,O -2
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jh tml?p=ZNfox000
Sammuta muut ohjelmaikkunat paitsi Hijackthis ja klikkaa
Fix checked.
Sammuta Hijackthis.
*Käynnistä windows uudelleen, nyt vikasietotilaan:
Kun kuulet koneen piippaavan, painele F8,
Seuraavaksi pitäisi ilmestyä tekstivalikko,
Valitse valikosta nuolinäppäimillä Vikasietotila.
*Laita tiedostopäätteet näkyviin:
Klikkaa Käynnistä.
Avaa Asetukset.
Valitse Ohjauspaneeli
Valitse Kansion asetukset.
Valitse Näytä välilehti.
Poista rasti ruudusta ->Piilota tunnettujen tiedostojen päätteet
Klikkaa Käytä varmistaaksesi muutokset.
Klikkaa OK sulkeaksesi ikkunan.
*Etsi resurssienhallinnalla nuo hakemistot/tiedostot ja poista ne,
myös roskiksesta:
C:\PROGRA~1\UNINST~1.DLL,O -2
virutorjunta.net pitää rekata jos Ewidoa sieltä kautta lataa vaihtohto:
http://keskustelu.afterdawn.com/thread_view.cfm/269186
Jotain taas unohtui, hyvä kun paikkasit. Se oli alunperin oikein, mutta linkki meni rikki ja kopsasin väärän sivuston.
mitiä.
kiitos näistä tiedoista. yritän saada jotain aikaseks...
Sori toi linkkikämmi, onneksi juggis oli tarkkana.
Rekisteröityminenkään virustorjunta.nettiin ei ole huono idea.
miltä näyttää Logfile of HijackThis v1.99.1
Scan saved at 9:30:28, on 29.3.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\acs.exe
C:\PROGRA~1\ELISAT~1\backweb\4119343\Program\SERVIC~1.EXE
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\ewido anti-malware\ewidoguard.exe
C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fsgk32st.exe
C:\Program Files\Elisa Tietoturvapalvelu\backweb\4119343\program\fsbwsys.exe
C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\FSGK32.EXE
C:\Program Files\Elisa Tietoturvapalvelu\Common\FSMA32.EXE
C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fssm32.exe
C:\Program Files\Elisa Tietoturvapalvelu\Common\FSMB32.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Elisa Tietoturvapalvelu\Common\FCH32.EXE
C:\Program Files\Elisa Tietoturvapalvelu\Common\FAMEH32.EXE
C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fsrw.exe
C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fsav32.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\keyhook.exe
C:\Program Files\Arcade\PCMService.exe
C:\Program Files\Launch Manager\QtZgAcer.EXE
C:\Program Files\Atheros\ACU.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Elisa Tietoturvapalvelu\Common\FSM32.EXE
C:\Program Files\Elisa Tietoturvapalvelu\FSGUI\ispnews.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\PROGRA~1\ELISAT~1\ANTI-S~1\fsaw.exe
C:\Program Files\Elisa Tietoturvapalvelu\FSGUI\fsguidll.exe
C:\WINDOWS\system32\sistray.exe
C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
C:\Program Files\acer\eRecovery\Monitor.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fi-fi\bin\WindowsSearch.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\Elisa Tietoturvapalvelu\backweb\4119343\Program\fspex.exe
C:\Program Files\OpenOffice.org 2.0\program\soffice.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
C:\Program Files\OpenOffice.org 2.0\program\soffice.BIN
C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fi-fi\bin\WindowsSearchIndexer.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
C:\Program Files\Elisa Tietoturvapalvelu\FWES\Program\fsdfwd.exe
C:\hjt\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://elisa.net/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://elisa.net/
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://elisa.net/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer - Toimittaja Elisa Internet
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.fi;
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: BitComet Toolbar Helper - {6A373B7E-496E-424f-A9BE-486A5E9AB018} - C:\Program Files\BitComet Toolbar\v2.0.0.4\BitComet_Toolbar.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: MSN Search -työkalurivi Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fi-fi\msntb.dll
O3 - Toolbar: MSN Search -työkalurivi - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fi-fi\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: BitComet Toolbar - {2E608F70-C430-4bc5-96F6-608E02EBA5B2} - C:\Program Files\BitComet Toolbar\v2.0.0.4\BitComet_Toolbar.dll
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
O4 - HKLM\..\Run: [SiS Windows KeyHook] C:\WINDOWS\system32\keyhook.exe
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Arcade\PCMService.exe"
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [LManager] C:\Program Files\Launch Manager\QtZgAcer.EXE
O4 - HKLM\..\Run: [eRecoveryService] C:\Windows\System32\Check.exe
O4 - HKLM\..\Run: [ACU] "C:\Program Files\Atheros\ACU.exe" -nogui
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Elisa Tietoturvapalvelu\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Elisa Tietoturvapalvelu\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\Elisa Tietoturvapalvelu\FSGUI\FSSW.EXE" /reboot
O4 - HKLM\..\Run: [News Service] "C:\Program Files\Elisa Tietoturvapalvelu\FSGUI\ispnews.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe"
O4 - Startup: OpenOffice.org 2.0.lnk = C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe
O4 - Global Startup: Utility Tray.lnk = C:\WINDOWS\system32\sistray.exe
O4 - Global Startup: NkbMonitor.exe.lnk = C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
O4 - Global Startup: hpoddt01.exe.lnk = ?
O4 - Global Startup: hp psc 1000 series.lnk = ?
O4 - Global Startup: hpothb07.tif
O4 - Global Startup: hpothb07.dat
O4 - Global Startup: Windows-työpöytähaku.lnk = C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fi-fi\bin\WindowsSearch.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Elisa Tietoturvapalvelu.lnk = C:\Program Files\Elisa Tietoturvapalvelu\backweb\4119343\Program\fspex.exe
O8 - Extra context menu item: &Estä tämä kohoikkuna - C:\Program Files\Elisa Tietoturvapalvelu\Anti-Spyware\blockpopups.htm
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fi-fi\msntb.dll/search.htm
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Avaa uuteen etuvälilehteen - res://C:\Program Files\MSN Toolbar Suite\TAB\02.05.0000.1105\fi-fi\msntabres.dll/230?156e9f9453a34bc4bddb0cbf087a06
O8 - Extra context menu item: Avaa uuteen taustavälilehteen - res://C:\Program Files\MSN Toolbar Suite\TAB\02.05.0000.1105\fi-fi\msntabres.dll/229?156e9f9453a34bc4bddb0cbf087a06
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Elisa Tietoturvapalvelu\Anti-Spyware\ieshield.dll
O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Elisa Tietoturvapalvelu\Anti-Spyware\ieshield.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Palvelut - {3D99D7E5-F420-44D0-89CD-DC5C4A778292} - http://service.kolumbus.fi/ (file missing) (HKCU)
O9 - Extra button: Tuki - {4756FBB9-D31B-46EC-BFB2-A1174E501853} - http://tuki.elisa.net/ (file missing) (HKCU)
O9 - Extra button: SMS-viesti - {BB967B2C-BEB3-45FA-AB78-2FE714FB2A32} - http://sms.kolumbus.fi/ (file missing) (HKCU)
O14 - IERESET.INF: START_PAGE_URL=http://elisa.net/
O15 - Trusted Zone: http://*.download.microsoft.com
O15 - Trusted Zone: http://*.update.microsoft.com
O15 - Trusted Zone: http://*.windowsupdate.com
O15 - Trusted Zone: http://*.windowsupdate.microsoft.com
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: Atheros Configuration Service (ACS) - Unknown owner - C:\WINDOWS\system32\acs.exe
O23 - Service: Notebook Manager Service (anbmService) - OSA Technologies Inc. - C:\Acer\eManager\anbmServ.exe
O23 - Service: Elisa Tietoturvapalvelu (BackWeb Plug-in - 4119343) - BackWeb Technologies Inc. - C:\PROGRA~1\ELISAT~1\backweb\4119343\Program\SERVIC~1.EXE
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido anti-malware\ewidoguard.exe
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corp. - C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fsgk32st.exe
O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\Elisa Tietoturvapalvelu\backweb\4119343\program\fsbwsys.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Elisa Tietoturvapalvelu\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\Elisa Tietoturvapalvelu\Common\FSMA32.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
---------------------------------------------------------
ewido anti-malware - Scan report
---------------------------------------------------------
Created on: 9:18:21, 29.3.2006
Report-Checksum: A29DEEFC
Scan result:
:mozilla.20:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Tradedoubler : Ignored
:mozilla.171:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.2o7 : Ignored
C:\Documents and Settings\satu ja mika\Cookies\satu ja [email protected][1].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\Documents and Settings\satu ja mika\Cookies\satu ja [email protected][2].txt -> TrackingCookie.Yieldmanager : Cleaned with backup
C:\Documents and Settings\satu ja mika\Cookies\satu ja [email protected][1].txt -> TrackingCookie.2o7 : Cleaned with backup
C:\Documents and Settings\satu ja mika\Cookies\satu ja mika@com[2].txt -> TrackingCookie.Com : Cleaned with backup
:mozilla.15:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned with backup
:mozilla.16:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned with backup
:mozilla.17:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned with backup
:mozilla.18:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned with backup
:mozilla.19:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned with backup
:mozilla.21:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned with backup
:mozilla.25:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned with backup
:mozilla.26:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.29:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup
:mozilla.30:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup
:mozilla.78:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Adtech : Cleaned with backup
:mozilla.79:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Adtech : Cleaned with backup
:mozilla.141:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned with backup
:mozilla.165:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.166:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.167:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.168:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.169:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.170:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.172:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.202:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned with backup
:mozilla.204:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup
:mozilla.205:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup
:mozilla.206:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup
:mozilla.207:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned with backup
:mozilla.209:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned with backup
:mozilla.214:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.215:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned with backup
:mozilla.233:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned with backup
:mozilla.241:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.242:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.246:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.247:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.248:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.249:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
:mozilla.250:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup
:mozilla.253:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup
:mozilla.261:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Com : Cleaned with backup
:mozilla.262:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Com : Cleaned with backup
:mozilla.271:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup
:mozilla.274:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned with backup
:mozilla.278:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.279:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.280:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.281:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.282:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.283:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.284:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.285:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
:mozilla.287:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.288:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.289:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.290:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.302:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned with backup
:mozilla.304:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Revenue : Cleaned with backup
:mozilla.307:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup
:mozilla.308:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.309:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup
:mozilla.310:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup
:mozilla.312:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.313:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.314:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.315:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup
:mozilla.316:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.318:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned with backup
:mozilla.327:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned with backup
:mozilla.329:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
:mozilla.331:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Bfast : Cleaned with backup
:mozilla.334:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned with backup
:mozilla.344:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup
:mozilla.345:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup
:mozilla.346:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup
:mozilla.349:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup
:mozilla.350:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Adserver : Cleaned with backup
:mozilla.366:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned with backup
:mozilla.367:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup
:mozilla.368:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup
:mozilla.369:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Zedo : Cleaned with backup
:mozilla.370:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup
:mozilla.371:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup
:mozilla.372:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup
:mozilla.373:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup
:mozilla.374:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup
:mozilla.375:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned with backup
:mozilla.387:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.388:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
:mozilla.389:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup
:mozilla.390:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup
:mozilla.391:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup
:mozilla.392:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup
:mozilla.393:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup
:mozilla.428:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Weborama : Cleaned with backup
:mozilla.429:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Weborama : Cleaned with backup
:mozilla.430:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Weborama : Cleaned with backup
:mozilla.453:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
:mozilla.457:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned with backup
:mozilla.459:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.460:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
:mozilla.530:C:\Documents and Settings\satu ja mika\Application Data\Mozilla\Firefox\Profiles\y5nnrwer.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
::Report End
Hyvältä näyttää, pahikset ovat poissa.
Ewidokaan ei löytänyt poistettavia kuin evästeistä.
Riippuen Firefoxin versiosta, evästeet on helppo poistella halutessaan.
Hyvä lisä olisi Spywareblaster, suosittelen asentamaan sen.
Ohjeet ja linkit löytyvät tuolta:
http://koti.mbnet.fi/pattaya1/spywareblaster.htm
Käynnistyksessä starttaavia ohjelmia sulla on aika paljon. Ohjelmien omista asetuksista voi säätää, haluaako käynnistyvän taustalle valmiiksi vai vasta kun sitä tarvitsee.
Tiedostojen päätteet ovat nyt näkyvissä kansioita katsellessasi,mutta se on toisaalta etu. Tiedät aina mistä tiedostotyypistä on kyse. Halutessasi voit palauttaa tilanteen entiselleen näin:
*Laita tiedostopäätteet piiloon:
Klikkaa Käynnistä.
Avaa Asetukset.
Valitse Ohjauspaneeli
Valitse Kansion asetukset.
Valitse Näytä välilehti.
Laita rasti ruutuun ->Piilota tunnettujen tiedostojen päätteet
Klikkaa Käytä varmistaaksesi muutokset.
Klikkaa OK sulkeaksesi ikkunan.
kiitos kovasti vaivannäöstä. osaatko sanoa mistä johtuu kun yritän avata netissä jonkun pelin selain sulkeutuu. ennen pelit toimi ihan hyvin mutta enää ei lainkaan. itse en ymmärrä näistä asioista mitään.
Olihan selaimesi Firefox. vai millä toi tapahtuu?
Laita linkki, niin kokeilen omalla koneella.
Javakin sulla on ajan tasalla.
selain mulla on firefox ja viimeks yritin
http://www.talopeli.fi/index.php?sivu=2124
tota yritin eilen, mutta mä en saa mitään pelejä auki, oon kokeillut aapelissakin. osaatko sanoa miksi mulla toi elisan tietoturva on nyt koko tän päivän ilmottanut toimintahäiriötä?
Jaahas, aapeli toimii mulla Firefoxilla, mutta tuo talopeli antaa tyhjän ruudun.
Kyselen tuosta tietoturvasta tietävämmiltä ja palaan asiaan.
Operalla Talopeli toimis, pitäis antaa vaan lupa ladata java-appletti.
Ongelmasi tietoturvassa voi johtua Ewidon taustasuojauksestakin, mutta kerron kun saan varmistusta.
mikä konetta vaivaa, kokeilin avata tota talopeliä explorerilla ja sekin sulki selaimen, sen jälkeen toi selain(siis explorer) meni kokonaan jumiin ei avaa sivuja lainkaan. yritin myös trend micro house call online virus skanneria ja sekin sulki selaimen. firefox toimii muuten ok.
Avaa se Ewidon opassivu:
http://keskustelu.afterdawn.com/thread_view.cfm/269186
Katso sieltä päävalikosta, kuvan mukaan alaosassa on teksti:Remove Guard. Klikkaa siitä taustasuojaus pois päältä.
Laita myös uusi Hijackthis-logi, niin nähdään onko tullut jotain uutta haittaohjelmaa tilalle.
Onko sulla Operaa (8.53), se yleensä näyttää noi javakikkailusivut nikottelematta.
Ewidon opassivun avaamisen jälkeen avaa Ewido, josta sitten löytyy se Remowe Guard.
tässä olisi tämä uusi logi Logfile of HijackThis v1.99.1
Scan saved at 17:14:30, on 29.3.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\acs.exe
C:\PROGRA~1\ELISAT~1\backweb\4119343\Program\SERVIC~1.EXE
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fsgk32st.exe
C:\Program Files\Elisa Tietoturvapalvelu\backweb\4119343\program\fsbwsys.exe
C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\FSGK32.EXE
C:\Program Files\Elisa Tietoturvapalvelu\Common\FSMA32.EXE
C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fssm32.exe
C:\Program Files\Elisa Tietoturvapalvelu\Common\FSMB32.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Elisa Tietoturvapalvelu\Common\FCH32.EXE
C:\Program Files\Elisa Tietoturvapalvelu\Common\FAMEH32.EXE
C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fsrw.exe
C:\Program Files\Elisa Tietoturvapalvelu\FWES\Program\fsdfwd.exe
C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fsav32.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\keyhook.exe
C:\Program Files\Arcade\PCMService.exe
C:\Program Files\Launch Manager\QtZgAcer.EXE
C:\Program Files\Atheros\ACU.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Elisa Tietoturvapalvelu\Common\FSM32.EXE
C:\Program Files\Elisa Tietoturvapalvelu\FSGUI\ispnews.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\sistray.exe
C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\PROGRA~1\ELISAT~1\ANTI-S~1\fsaw.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fi-fi\bin\WindowsSearch.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\Elisa Tietoturvapalvelu\backweb\4119343\Program\fspex.exe
C:\Program Files\Elisa Tietoturvapalvelu\FSGUI\fsguidll.exe
C:\Program Files\OpenOffice.org 2.0\program\soffice.exe
C:\Program Files\OpenOffice.org 2.0\program\soffice.BIN
C:\Program Files\acer\eRecovery\Monitor.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fi-fi\bin\WindowsSearchIndexer.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\hjt\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://elisa.net/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://elisa.net/
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://elisa.net/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer - Toimittaja Elisa Internet
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.fi;
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: BitComet Toolbar Helper - {6A373B7E-496E-424f-A9BE-486A5E9AB018} - C:\Program Files\BitComet Toolbar\v2.0.0.4\BitComet_Toolbar.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: MSN Search -työkalurivi Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fi-fi\msntb.dll
O3 - Toolbar: MSN Search -työkalurivi - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fi-fi\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: BitComet Toolbar - {2E608F70-C430-4bc5-96F6-608E02EBA5B2} - C:\Program Files\BitComet Toolbar\v2.0.0.4\BitComet_Toolbar.dll
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
O4 - HKLM\..\Run: [SiS Windows KeyHook] C:\WINDOWS\system32\keyhook.exe
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Arcade\PCMService.exe"
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [LManager] C:\Program Files\Launch Manager\QtZgAcer.EXE
O4 - HKLM\..\Run: [eRecoveryService] C:\Windows\System32\Check.exe
O4 - HKLM\..\Run: [ACU] "C:\Program Files\Atheros\ACU.exe" -nogui
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Elisa Tietoturvapalvelu\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Elisa Tietoturvapalvelu\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\Elisa Tietoturvapalvelu\FSGUI\FSSW.EXE" /reboot
O4 - HKLM\..\Run: [News Service] "C:\Program Files\Elisa Tietoturvapalvelu\FSGUI\ispnews.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe"
O4 - Startup: OpenOffice.org 2.0.lnk = C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe
O4 - Global Startup: Utility Tray.lnk = C:\WINDOWS\system32\sistray.exe
O4 - Global Startup: NkbMonitor.exe.lnk = C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
O4 - Global Startup: hpoddt01.exe.lnk = ?
O4 - Global Startup: hp psc 1000 series.lnk = ?
O4 - Global Startup: hpothb07.tif
O4 - Global Startup: hpothb07.dat
O4 - Global Startup: Windows-työpöytähaku.lnk = C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fi-fi\bin\WindowsSearch.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Elisa Tietoturvapalvelu.lnk = C:\Program Files\Elisa Tietoturvapalvelu\backweb\4119343\Program\fspex.exe
O8 - Extra context menu item: &Estä tämä kohoikkuna - C:\Program Files\Elisa Tietoturvapalvelu\Anti-Spyware\blockpopups.htm
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fi-fi\msntb.dll/search.htm
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Avaa uuteen etuvälilehteen - res://C:\Program Files\MSN Toolbar Suite\TAB\02.05.0000.1105\fi-fi\msntabres.dll/230?156e9f9453a34bc4bddb0cbf087a06
O8 - Extra context menu item: Avaa uuteen taustavälilehteen - res://C:\Program Files\MSN Toolbar Suite\TAB\02.05.0000.1105\fi-fi\msntabres.dll/229?156e9f9453a34bc4bddb0cbf087a06
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Elisa Tietoturvapalvelu\Anti-Spyware\ieshield.dll
O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Elisa Tietoturvapalvelu\Anti-Spyware\ieshield.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Palvelut - {3D99D7E5-F420-44D0-89CD-DC5C4A778292} - http://service.kolumbus.fi/ (file missing) (HKCU)
O9 - Extra button: Tuki - {4756FBB9-D31B-46EC-BFB2-A1174E501853} - http://tuki.elisa.net/ (file missing) (HKCU)
O9 - Extra button: SMS-viesti - {BB967B2C-BEB3-45FA-AB78-2FE714FB2A32} - http://sms.kolumbus.fi/ (file missing) (HKCU)
O14 - IERESET.INF: START_PAGE_URL=http://elisa.net/
O15 - Trusted Zone: http://*.download.microsoft.com
O15 - Trusted Zone: http://*.update.microsoft.com
O15 - Trusted Zone: http://*.windowsupdate.com
O15 - Trusted Zone: http://*.windowsupdate.microsoft.com
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www3.ca.com/securityadvisor/virusinfo/webscan.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: Atheros Configuration Service (ACS) - Unknown owner - C:\WINDOWS\system32\acs.exe
O23 - Service: Notebook Manager Service (anbmService) - OSA Technologies Inc. - C:\Acer\eManager\anbmServ.exe
O23 - Service: Elisa Tietoturvapalvelu (BackWeb Plug-in - 4119343) - BackWeb Technologies Inc. - C:\PROGRA~1\ELISAT~1\backweb\4119343\Program\SERVIC~1.EXE
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corp. - C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fsgk32st.exe
O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\Elisa Tietoturvapalvelu\backweb\4119343\program\fsbwsys.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Elisa Tietoturvapalvelu\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\Elisa Tietoturvapalvelu\Common\FSMA32.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
Logia tutkitaan, onko toiminnassa mitään uutta Ewidon karkotuksen jälkeen?
nyt toimii toi elisan tietoturva ihan ok, mutta mikähän tota exploreria alkoi vaivata kun se jumittaa?
Hyvä, että sait sen virusturvan herätettyä henkiin. Se on kuitenkin sieltä tärkeämmästä päästä.
Tuohon IExploreriin (sitähän tarkoitat) en oikein osaa sanoa mitään. Itse en sitä käytä kuin joskus koemielessä. Juuri tällä hetkellähän siinä on paikkaamattomia tietoturva-aukkoja, joten sen käyttämättömyys ei olisikaan turvallisuuden vuoksi pahasta.
Kokeile Operaa niihin sivuihin, jotka ei Firefoxilla toimi.
Oli aiemmin juttua noista käynnistyvien ohjelmien suuresta määrästä, niitä voi sammutella joko ohjelmien omista asetuksista tai sitten Käynnistä, Suorita.. kirjoita msconfig ja enteriä perään.
Avautuvassa ikkunassa Käynnistys-välilehti ja sieltä voi poistella rukseja ruuduista. Pitää vaan taas tunnistaa ohjelmat oikein, ettei jätä pois vääriä.
Tässä muutama joutilas:
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - Startup: OpenOffice.org 2.0.lnk = C:\Program Files\OpenOffice.org 2.0\program\quickstart.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
kiitos jälleen kerran avusta. tein nuo muutokset ja nyt kone aukeaa nopeammin. edelleen ihmettelen tota selaimen sulkeutumista, kun kaveri tänään kokeili firefoxilla sitä talopeliä ja trend micro housecallia ja kummatkit toimi ihan ok. mullakin toimi ennen mutta enää ei toimi kummallakaan selaimella. voisiko mulla olla koneella joku ohjelma mikä estää tuon toiminnon? ei ymmärrä eikä käsitä. kyllä on tosi hienoa että löytyy tuollaisia ihmisiä jotka viitsivät neuvoa tällaisia tumpeloita, olen tosi kiitollinen kaikesta avustasi.
Eipäs kestä kiitellä, välillä jo kuulosti huolestuttavalta.
Trend Microa en ole aikoihin kokeillut , silloin joskus se toimi vain IE:llä.
Talopelissä Firefox ei varmaan anna asentaa sitä java-aplettia. Saman tekee maps.google.com
Kuvaa eikä karttaa ei tule näkyviin, tyhjä paikka vaan. Operalla toimii normaalisti.
tämmöinen löytyi. voiko olla mahdollista kun se eScan ilmotti että löysi 80 virusta???
File C:\Documents and Settings\satu ja mika\Omat tiedostot\bsplayer139.829.exe tagged as not-a-virus:AdWare.Win32.SaveNow.bo. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP98\A0009849.scr tagged as not-a-virus:AdWare.Win32.MyWebSearch. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP98\A0009850.dll tagged as not-a-virus:AdWare.Win32.MyWebSearch.i. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP98\A0009853.DLL tagged as not-a-virus:AdWare.Win32.MyWebSearch.al. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP98\A0009854.DLL tagged as not-a-virus:AdWare.Win32.MyWebSearch. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP98\A0009855.DLL tagged as not-a-virus:AdWare.Win32.MyWebSearch. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP98\A0009856.DLL tagged as not-a-virus:AdWare.Win32.MyWebSearch.af. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP98\A0009857.DLL tagged as not-a-virus:AdWare.Win32.MyWebSearch.an. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP98\A0009858.SCR tagged as not-a-virus:AdWare.Win32.MyWebSearch. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP98\A0009859.DLL tagged as not-a-virus:AdWare.Win32.MyWebSearch. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP98\A0009860.EXE tagged as not-a-virus:AdWare.Win32.MyWebSearch. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP98\A0009861.DLL tagged as not-a-virus:AdWare.Win32.MyWebSearch.an. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP98\A0009862.DLL tagged as not-a-virus:AdWare.Win32.MyWebSearch.al. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP98\A0009863.DLL tagged as not-a-virus:AdWare.Win32.MyWebSearch. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP98\A0009865.DLL tagged as not-a-virus:AdWare.Win32.MyWebSearch.f. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP98\A0009866.DLL tagged as not-a-virus:AdWare.Win32.IWon.a. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP98\A0009867.DLL tagged as not-a-virus:AdWare.Win32.MyWebSearch. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP98\A0009868.DLL tagged as not-a-virus:AdWare.Win32.MyWebSearch.an. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP98\A0009869.DLL tagged as not-a-virus:AdWare.Win32.MyWebSearch.ad. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP98\A0009871.DLL tagged as not-a-virus:AdWare.Win32.MyWebSearch.q. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP98\A0009872.DLL tagged as not-a-virus:AdWare.Win32.MyWebSearch.i. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP98\A0009874.EXE tagged as not-a-virus:AdWare.Win32.MyWebSearch. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP98\A0009875.DLL tagged as not-a-virus:AdWare.Win32.MyWebSearch.q. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP98\A0009876.DLL tagged as not-a-virus:AdWare.Win32.MyWebSearch. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP98\A0009877.DLL tagged as not-a-virus:AdWare.Win32.MyWebSearch.ai. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP98\A0009886.dll tagged as not-a-virus:AdWare.Win32.MyWebSearch. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP98\A0009887.dll tagged as not-a-virus:AdWare.Win32.MyWebSearch. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP98\A0009888.dll tagged as not-a-virus:AdWare.Win32.MyWebSearch. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP98\A0009889.dll tagged as not-a-virus:AdWare.Win32.MyWebSearch. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP99\A0009926.scr tagged as not-a-virus:AdWare.Win32.MyWebSearch. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP99\A0009927.dll tagged as not-a-virus:AdWare.Win32.MyWebSearch.i. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP99\A0009930.DLL tagged as not-a-virus:AdWare.Win32.MyWebSearch.al. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP99\A0009931.DLL tagged as not-a-virus:AdWare.Win32.MyWebSearch. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP99\A0009932.DLL tagged as not-a-virus:AdWare.Win32.MyWebSearch.af. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP99\A0009933.DLL tagged as not-a-virus:AdWare.Win32.MyWebSearch.an. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP99\A0009934.SCR tagged as not-a-virus:AdWare.Win32.MyWebSearch. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP99\A0009935.DLL tagged as not-a-virus:AdWare.Win32.MyWebSearch. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP99\A0009936.EXE tagged as not-a-virus:AdWare.Win32.MyWebSearch. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP99\A0009937.DLL tagged as not-a-virus:AdWare.Win32.MyWebSearch.an. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP99\A0009938.DLL tagged as not-a-virus:AdWare.Win32.MyWebSearch.al. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP99\A0009939.DLL tagged as not-a-virus:AdWare.Win32.MyWebSearch. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP99\A0009941.DLL tagged as not-a-virus:AdWare.Win32.MyWebSearch.f. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP99\A0009942.DLL tagged as not-a-virus:AdWare.Win32.IWon.a. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP99\A0009943.DLL tagged as not-a-virus:AdWare.Win32.MyWebSearch. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP99\A0009944.DLL tagged as not-a-virus:AdWare.Win32.MyWebSearch.an. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP99\A0009945.DLL tagged as not-a-virus:AdWare.Win32.MyWebSearch.ad. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP99\A0009947.DLL tagged as not-a-virus:AdWare.Win32.MyWebSearch.i. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP99\A0009950.EXE tagged as not-a-virus:AdWare.Win32.MyWebSearch. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP99\A0009951.DLL tagged as not-a-virus:AdWare.Win32.MyWebSearch. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP99\A0009952.DLL tagged as not-a-virus:AdWare.Win32.MyWebSearch.ai. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP99\A0009965.dll tagged as not-a-virus:AdWare.Win32.MyWebSearch. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP113\A0011375.DLL tagged as not-a-virus:AdWare.Win32.MyWebSearch.ai. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP113\A0011376.dll tagged as not-a-virus:AdWare.Win32.MyWebSearch. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP113\A0011377.scr tagged as not-a-virus:AdWare.Win32.MyWebSearch. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP113\A0011378.dll tagged as not-a-virus:AdWare.Win32.MyWebSearch.i. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP113\A0011380.DLL tagged as not-a-virus:AdWare.Win32.MyWebSearch. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP113\A0011383.EXE tagged as not-a-virus:AdWare.Win32.MyWebSearch. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP113\A0011384.DLL tagged as not-a-virus:AdWare.Win32.MyWebSearch.q. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP113\A0011385.DLL tagged as not-a-virus:AdWare.Win32.MyWebSearch. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP113\A0011387.DLL tagged as not-a-virus:AdWare.Win32.MyWebSearch.al. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP113\A0011388.DLL tagged as not-a-virus:AdWare.Win32.MyWebSearch. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP113\A0011389.DLL tagged as not-a-virus:AdWare.Win32.MyWebSearch. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP113\A0011390.DLL tagged as not-a-virus:AdWare.Win32.MyWebSearch.af. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP113\A0011391.DLL tagged as not-a-virus:AdWare.Win32.MyWebSearch.an. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP113\A0011392.SCR tagged as not-a-virus:AdWare.Win32.MyWebSearch. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP113\A0011394.DLL tagged as not-a-virus:AdWare.Win32.MyWebSearch. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP113\A0011395.EXE tagged as not-a-virus:AdWare.Win32.MyWebSearch. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP113\A0011396.DLL tagged as not-a-virus:AdWare.Win32.MyWebSearch.an. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP113\A0011397.DLL tagged as not-a-virus:AdWare.Win32.MyWebSearch.al. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP113\A0011398.DLL tagged as not-a-virus:AdWare.Win32.MyWebSearch. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP113\A0011400.DLL tagged as not-a-virus:AdWare.Win32.MyWebSearch.f. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP113\A0011401.DLL tagged as not-a-virus:AdWare.Win32.IWon.a. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP113\A0011402.DLL tagged as not-a-virus:AdWare.Win32.MyWebSearch. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP113\A0011403.DLL tagged as not-a-virus:AdWare.Win32.MyWebSearch.an. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP113\A0011404.DLL tagged as not-a-virus:AdWare.Win32.MyWebSearch.ad. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP113\A0011406.DLL tagged as not-a-virus:AdWare.Win32.MyWebSearch.q. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP113\A0011407.DLL tagged as not-a-virus:AdWare.Win32.MyWebSearch.i. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP113\A0011446.DLL tagged as not-a-virus:AdWare.Win32.MyWebSearch.ai. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP113\A0011448.EXE tagged as not-a-virus:AdWare.Win32.MyWebSearch. No Action Taken.
File C:\System Volume Information\_restore{0822ADC8-B1EC-43BD-B52F-D1F6483545F0}\RP113\A0011449.DLL tagged as not-a-virus:AdWare.Win32.MyWebSearch. No Action Taken.
jotta elämä ei kävisi liian tylsäksi tässä olis vähän lisää pähkinää purtavaksi.
latasin sen operan ja siinä kävi niin että se kanssa sulkee selaimen esim. kun yritin siirtyä mtv3 sivuille selain sulkeutui ja sama kävi kun yritin siirtyä suomi24 sivulle. joitakin sivuja se avasi mutta nämä ainakin sulki selaimen. mistä se oikein voi johtua. nyt mulla on kolme selainta ja kaikki sulkeutuu jostakin syystä. vika ei voi olla selaimessa?
Javan päivittäminen, evästeasetukset.
Javahan sulla on ajan tasalla, mutta kokeile poistaa se ja asenna uudestaan. Jos siinä on joku häiriö, tiedä en, arvailen.
F-securessakin on kaikenlaista valvontaa, ehkä siellä joku vahti estää javan/evästeiden vastaanottoa. Kahlaa ne f-securen asetukset läpi, jos löytyis.
Kokeiles tuolla afterdawnin foorumilla kysyä:
http://keskustelu.afterdawn.com/forum_view.cfm/122
Kirjaudu käyttäjäksi sinne.
Sielläkin on myös virus/haittaohjelmaosasto:
http://keskustelu.afterdawn.com/forum_view.cfm/151
kiitos jälleen vaivannäöstäsi. kokeilin muutamaa onlineskannausta ja panda sekä malware(oliko nimi oikein?) ilmoitti että koneessa olis pöpöjä. tuosta pandasta katoin raportin ja se ilmotti ton funwebin toiseks ja ja toinen ongelma oli mywebsearch. mä kyllä poistin koneelta ton mywebsearchin tiistaina mutta se taitaa kummitella jossakin vielä. mites mä saisin noi pois?
Eipä muuta kuin logia tulemaan. En ole omalla koneella nyt, mutta illemmalla voin ehtiä.
Asensitko sen Spywareblasterin?
asensin sen spywareblasterin illalla ja olen nyt töissä,
mutta illalla kun tulen kotiin, niin laitan login.
Spywareblaster suojaa tulevilta haittaohjelmilta, koneessa oleville se ei mahda mitään. Onko sulla Pandan logi jäljellä, voisit lähettää sen. Ja sitten seuraava "lääke", käy tuolla lukemassa ohjeet ja lataa eScan:
http://koti.mbnet.fi/pattaya1/escanmwav.htm
Latauksen jälkeen se pitää päivittää, siihen on se Tapa2 helpoin. Tallenna sen linkin Mwav.bat hiiren oikealla klikkaamalla ja valitse Tallenna nimellä..
Työpöytäkin sopii hyvin tallennuspaikaksi, löytyy helposti.
Kun laitat eScanin töihin, muokkaa sen asetukset kuvien mukaan.Skannaus kestää koneesta riippuen aika kauan (about 2 tuntia).
Kopioi alaikkunaan ilmestyvät löydöt ja liitä viestiin.
Ohjeet ovat selkeät, pitää vaan lukea sivun loppuun saakka.
tässä olisi tämä pandan logi, alan lataamaan nyt sitä eScania. lähetän myöhemmin sen eScan löydöt
Incident Status Location
Potentially unwanted tool:application/funweb Not disinfected C:\PROGRAM FILES\FunWebProducts
Potentially unwanted tool:application/mywebsearch Not disinfected HKEY_CURRENT_USER\SOFTWARE\MYWEBSEARCH
Spyware:Cookie/Belnk Not disinfected C:\Documents and Settings\satu ja mika\Cookies\satu ja mika@belnk[1].txt
Spyware:Cookie/Belnk Not disinfected C:\Documents and Settings\satu ja mika\Cookies\satu ja [email protected][2].txt
Adware:Adware/FlashTrack Not disinfected C:\Documents and Settings\satu ja mika\Local Settings\Temporary Internet Files\Content.IE5\H7NNLL0E\channels_02[1].gif
Spyware:Cookie/Belnk Not disinfected C:\Documents and Settings\satu ja mika\Cookies\satu ja mika@belnk[1].txt
Spyware:Cookie/Belnk Not disinfected C:\Documents and Settings\satu ja mika\Cookies\satu ja [email protected][2].txt
meni toi eScan-logi vähän hassuun paikkaan, toivottavasti löydät...
Noi löydöt on Järjestelmän palautuksessa ja Pandan login mukaan löytyneet IE:n evästeissä.
Aloita vaikka Ohjauspaneelista ja poista FunWeb, jos löytyy.
Vaikkei löytyiskään, etsi resurssienhallinnalla tuo kansio:
C:\PROGRAM FILES\FunWebProducts
poistin sen funwebin ja tyhjensin IE:n evästeet ja väliaikaiset tiedostot, ja poistin myös järjestelmänpalautuksen käytöstä. tein äsken pandan online skannauksen ja tässä olis tulos:
Incident Status Location
Potentially unwanted tool:application/funweb Not disinfected HKEY_CURRENT_USER\SOFTWARE\FUN WEB PRODUCTS
Potentially unwanted tool:application/mywebsearch Not disinfected HKEY_CURRENT_USER\SOFTWARE\MYWEBSEARCH
Spyware:Cookie/Belnk Not disinfected C:\Documents and Settings\satu ja mika\Cookies\satu ja mika@belnk[1].txt
Spyware:Cookie/Belnk Not disinfected C:\Documents and Settings\satu ja mika\Cookies\satu ja [email protected][2].txt
Adware:Adware/FlashTrack Not disinfected C:\Documents and Settings\satu ja mika\Local Settings\Temporary Internet Files\Content.IE5\H7NNLL0E\channels_02[1].gif
Spyware:Cookie/Belnk Not disinfected C:\Documents and Settings\satu ja mika\Cookies\satu ja mika@belnk[1].txt
Spyware:Cookie/Belnk Not disinfected C:\Documents and Settings\satu ja mika\Cookies\satu ja [email protected][2].txt
teen nyt toisen skannauksen ja lähetän sen ja hjt:n login myöhemmin
Noi ekat ei opettajan arvion mukaan enää haittaa:
HKEY_CURRENT_USER\SOFTWARE\FUN WEB PRODUCTS
Potentially unwanted tool:application/mywebsearch Not disinfected HKEY_CURRENT_USER\SOFTWARE\MYWEBSEARCH
Ovat vain rekisterimerkintöjä ilman toimivia tiedostoja.
Kumma, ettei noi evästeet lähteneet?
Tuo dist.belnk viittaa joskus koneella olleeseen Gatoriin tai yleensä kytkentään Gatorin kanssa.
Gator=spyware.
Oottelen loppuja logeja.
Työt taitaa sotkea näitä "harrastuksia"?
kyllä se on sitten kumma kun ei ihminen saa rauhassa harrastaa edes virustentorjuntaa, se on pakko välillä tehdä töitäkin. täytyy vissiin ottaa lopputili. mä skannasin kahdella eri ohjelmalla mutta mitään ei löytyny, nyt on menossa uus yritys. laitan sen jälkeen tulemaan sen hjt:n. toivottavasti ei uni yllätä...
tässä olisi nyt se hjt, tein myös tarkistuksen f-securella se ei löytäny mitään mutta siellä oli muutama tiedosto jota se ei onnistunu avaamaan, se ei kai ole mienkään kummallista?
Logfile of HijackThis v1.99.1
Scan saved at 8:40:34, on 1.4.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\acs.exe
C:\PROGRA~1\ELISAT~1\backweb\4119343\Program\SERVIC~1.EXE
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fsgk32st.exe
C:\Program Files\Elisa Tietoturvapalvelu\backweb\4119343\program\fsbwsys.exe
C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\FSGK32.EXE
C:\Program Files\Elisa Tietoturvapalvelu\Common\FSMA32.EXE
C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fssm32.exe
C:\Program Files\Elisa Tietoturvapalvelu\Common\FSMB32.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Elisa Tietoturvapalvelu\Common\FCH32.EXE
C:\Program Files\Elisa Tietoturvapalvelu\Common\FAMEH32.EXE
C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fsrw.exe
C:\Program Files\Elisa Tietoturvapalvelu\FWES\Program\fsdfwd.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fsav32.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\keyhook.exe
C:\Program Files\Arcade\PCMService.exe
C:\Program Files\Launch Manager\QtZgAcer.EXE
C:\Program Files\Atheros\ACU.exe
C:\Program Files\Elisa Tietoturvapalvelu\Common\FSM32.EXE
C:\Program Files\Elisa Tietoturvapalvelu\FSGUI\ispnews.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\ELISAT~1\ANTI-S~1\fsaw.exe
C:\WINDOWS\system32\sistray.exe
C:\Program Files\acer\eRecovery\Monitor.exe
C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
C:\Program Files\Elisa Tietoturvapalvelu\backweb\4119343\Program\fspex.exe
C:\Program Files\Elisa Tietoturvapalvelu\FSGUI\fsguidll.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\hjt\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://elisa.net/
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://elisa.net/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer - Toimittaja Elisa Internet
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.fi;
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: BitComet Toolbar Helper - {6A373B7E-496E-424f-A9BE-486A5E9AB018} - C:\Program Files\BitComet Toolbar\v2.0.0.4\BitComet_Toolbar.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O3 - Toolbar: BitComet Toolbar - {2E608F70-C430-4bc5-96F6-608E02EBA5B2} - C:\Program Files\BitComet Toolbar\v2.0.0.4\BitComet_Toolbar.dll
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
O4 - HKLM\..\Run: [SiS Windows KeyHook] C:\WINDOWS\system32\keyhook.exe
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Arcade\PCMService.exe"
O4 - HKLM\..\Run: [LManager] C:\Program Files\Launch Manager\QtZgAcer.EXE
O4 - HKLM\..\Run: [eRecoveryService] C:\Windows\System32\Check.exe
O4 - HKLM\..\Run: [ACU] "C:\Program Files\Atheros\ACU.exe" -nogui
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Elisa Tietoturvapalvelu\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Elisa Tietoturvapalvelu\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\Elisa Tietoturvapalvelu\FSGUI\FSSW.EXE" /reboot
O4 - HKLM\..\Run: [News Service] "C:\Program Files\Elisa Tietoturvapalvelu\FSGUI\ispnews.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Utility Tray.lnk = C:\WINDOWS\system32\sistray.exe
O4 - Global Startup: NkbMonitor.exe.lnk = C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
O4 - Global Startup: hpoddt01.exe.lnk = ?
O4 - Global Startup: hp psc 1000 series.lnk = ?
O4 - Global Startup: hpothb07.tif
O4 - Global Startup: hpothb07.dat
O4 - Global Startup: Elisa Tietoturvapalvelu.lnk = C:\Program Files\Elisa Tietoturvapalvelu\backweb\4119343\Program\fspex.exe
O8 - Extra context menu item: &Estä tämä kohoikkuna - C:\Program Files\Elisa Tietoturvapalvelu\Anti-Spyware\blockpopups.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Elisa Tietoturvapalvelu\Anti-Spyware\ieshield.dll
O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Elisa Tietoturvapalvelu\Anti-Spyware\ieshield.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Palvelut - {3D99D7E5-F420-44D0-89CD-DC5C4A778292} - http://service.kolumbus.fi/ (file missing) (HKCU)
O9 - Extra button: Tuki - {4756FBB9-D31B-46EC-BFB2-A1174E501853} - http://tuki.elisa.net/ (file missing) (HKCU)
O9 - Extra button: SMS-viesti - {BB967B2C-BEB3-45FA-AB78-2FE714FB2A32} - http://sms.kolumbus.fi/ (file missing) (HKCU)
O14 - IERESET.INF: START_PAGE_URL=http://elisa.net/
O15 - Trusted Zone: http://*.download.microsoft.com
O15 - Trusted Zone: http://*.update.microsoft.com
O15 - Trusted Zone: http://*.windowsupdate.com
O15 - Trusted Zone: http://*.windowsupdate.microsoft.com
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www3.ca.com/securityadvisor/virusinfo/webscan.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} (ASquaredScanForm Element) - http://www.windowsecurity.com/trojanscan/axscan.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: Atheros Configuration Service (ACS) - Unknown owner - C:\WINDOWS\system32\acs.exe
O23 - Service: Notebook Manager Service (anbmService) - OSA Technologies Inc. - C:\Acer\eManager\anbmServ.exe
O23 - Service: Elisa Tietoturvapalvelu (BackWeb Plug-in - 4119343) - BackWeb Technologies Inc. - C:\PROGRA~1\ELISAT~1\backweb\4119343\Program\SERVIC~1.EXE
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corp. - C:\Program Files\Elisa Tietoturvapalvelu\Anti-Virus\fsgk32st.exe
O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\Elisa Tietoturvapalvelu\backweb\4119343\program\fsbwsys.exe
O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Elisa Tietoturvapalvelu\FWES\Program\fsdfwd.exe
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\Elisa Tietoturvapalvelu\Common\FSMA32.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
Windows ei päästä virustorjuntaa skannaamaan kaikkia järjestelmälle kriittisiä tiedostoja, se on normaalia. Logista ei löydy enää haittaohjelmia.
Olihan sulla puuhaa tuon kanssa aikalailla, mutta tais tulla kuntoon.
kiitos jälleen. tein äsken symantecin security check skannauksen ja se ilmotti tällaisen tekstin:your computer is infected with at least one known virus or trojan horse. ja sitten oli se kohde: c:\documents and settings\satu ja mika\omat tiedostot\bsplayer 139.829 exe infected with adware.savenow. mitä toi nyt sitte tarkoittaa?
Jos se on bsplayerin asennuspaketti, niin poista se laittamatta roskakoriin:
valitse, paina shift alas ja sitten delete ja kyselyyn myöntävä vastaus.
Tuohon versioon on lisätty mainosohjelma:
Win32/Adware.WhenUvvsn application
(Nod32 tunnistanut ja laittanut karanteeniin)
Jotkut virustorjunnat estää sen asennuksen, jotkut ei. Tieto löytyi bsplayer-foorumilta:
http://forum.bsplayer.org/viewtopic.php?p=24493&sid=3fa9417c5c586c21a6c95a879d192908
tein ohjeen mukaan, kokeilin sen jälkeen sitä talopeliä ajattelin et jos vaikka jo toimisi, mutta selain menee edelleen kiinni. mä en meinannu saada sitä asennuspakettia poistettuu millään, windows ilmoitti ettei sitä voi poistaa mutta kyllä se silti loppuviimeks oli poistunu eikä suostunu konekaan sulkeutumaan millään. onko se bsplayer asennuspaketti nyt varmasti pois ja oliko siellä virus?
nyt sain koneen toimimaan(vihdoinkin)kunnolla. olin unohtanut poistaa sen javan sillon aiemmin, nyt poistin sen ja latasin uuden ja johan alkoi toimimaan. tein myös sen symantecin security checkin uudestaan ja se näytti ok. toivottavasti nämä ongelmat olisi nyt takanapäin. oikein paljon kiitoksia sinulle kaikesta avustasi!
Sitkeästi teit lukuisia operaatioita, joskus ei selviä helpolla. Hyvää jatkoa!
...myös minulle.
Kiitos norman erittäin hyvistä ja selkeistä
opastuksista. Hyvää kevättä!!!
Jokaisen loki on erillainen periaatessa ja erilaisia pöpöjä.
Jos koneessa on häikää niin laita oma hjt-loki tänne silloin. Siintä näkee vain sun koneen ongelmat.
..olen tehnytkin, mutta olen saanut paljon muuta tästä ketjusta!
Hyvä niin
Silloinhan kone on kovassa iskussa. :o)
Niin on ja kiitos huomiosta :)