Rekisteröidy

Ilmoitukset

Ladataan…

    Näytä kaikki

    jotain mömmöö

    eli tällanen logi olis. Jumittaa pirusti

    spybot ei jostain syystä aja etsintää kuin hetken ja stoppaa... en tiedä johtuuko sekin jostain viruksesta tms.


    Logfile of HijackThis v1.99.1
    Scan saved at 12:36:08, on 3.4.2006
    Platform: Windows 2000 SP4 (WinNT 5.00.2195)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINNT\System32\smss.exe
    C:\WINNT\system32\winlogon.exe
    C:\WINNT\system32\services.exe
    C:\WINNT\system32\lsass.exe
    C:\WINNT\system32\svchost.exe
    C:\WINNT\system32\spoolsv.exe
    C:\PROGRA~1\DNANET~1\backweb\4653381\Program\SERVIC~1.EXE
    C:\WINNT\System32\svchost.exe
    C:\Program Files\dna Nettiturva\Anti-Virus\fsgk32st.exe
    C:\Program Files\dna Nettiturva\Anti-Virus\FSGK32.EXE
    C:\Program Files\dna Nettiturva\backweb\4653381\program\fsbwsys.exe
    C:\Program Files\dna Nettiturva\Common\FSMA32.EXE
    C:\Program Files\dna Nettiturva\Common\FSMB32.EXE
    C:\WINNT\System32\nvsvc32.exe
    C:\WINNT\system32\regsvc.exe
    C:\Program Files\dna Nettiturva\Common\FCH32.EXE
    C:\WINNT\System32\WBEM\WinMgmt.exe
    C:\WINNT\system32\svchost.exe
    C:\Program Files\dna Nettiturva\Common\FAMEH32.EXE
    C:\Program Files\dna Nettiturva\Anti-Virus\fsrw.exe
    C:\Program Files\dna Nettiturva\FWES\Program\fsdfwd.exe
    C:\Program Files\dna Nettiturva\Anti-Virus\fssm32.exe
    C:\WINNT\Explorer.EXE
    C:\WINNT\system32\RUNDLL32.EXE
    C:\Program Files\dna Nettiturva\Common\FSM32.EXE
    C:\Program Files\dna Nettiturva\Anti-Virus\fsav32.exe
    C:\Program Files\dna Nettiturva\FSGUI\ispnews.exe
    C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\WINNT\system32\spool\drivers\w32x86\3\hpztsb04.exe
    C:\WINNT\system32\starter.exe
    C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    C:\WINNT\system32\internat.exe
    C:\Program Files\dna Nettiturva\backweb\4653381\Program\dna Nettiturva.exe
    C:\PROGRA~1\DNANET~1\ANTI-S~1\fsaw.exe
    C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe
    C:\Program Files\WinZip\WZQKPICK.EXE
    C:\Program Files\dna Nettiturva\FSGUI\fsguidll.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\Windows Media Player\wmplayer.exe
    C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
    C:\WINNT\regedit.exe
    C:\HJT\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fi/
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = dna Internet Explorer
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = http://paivitys.dnainternet.fi/yhteys/proxy.pac
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    O2 - BHO: Nothing - {4da4616d-7e6e-4fd9-a2d5-b6c535733e22} - C:\WINNT\system32\hpEF06.tmp
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
    O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINNT\System32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINNT\System32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINNT\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [HPLJ Config] C:\Program Files\Hewlett-Packard\hp LaserJet 1010 Series\SetConfig.exe -c Direct -p LPT1: -pn "hp LaserJet 1010 Series Driver" -n 0 -l 1035 -sl 120000
    O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\dna Nettiturva\Common\FSM32.EXE" /splash
    O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\dna Nettiturva\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
    O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\dna Nettiturva\FSGUI\FSSW.EXE" /reboot
    O4 - HKLM\..\Run: [News Service] "C:\Program Files\dna Nettiturva\FSGUI\ispnews.exe"
    O4 - HKLM\..\Run: [StatusClient] C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe /auto
    O4 - HKLM\..\Run: [TomcatStartup] C:\Program Files\Hewlett-Packard\Toolbox2.0\hpbpsttp.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINNT\system32\spool\drivers\w32x86\3\hpztsb04.exe
    O4 - HKLM\..\Run: [EnsoniqMixer] C:\WINNT\system32\starter.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    O4 - HKCU\..\Run: [internat.exe] internat.exe
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: dna Nettiturva.lnk = C:\Program Files\dna Nettiturva\backweb\4653381\Program\dna Nettiturva.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
    O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
    O8 - Extra context menu item: &Estä tämä kohoikkuna - C:\Program Files\dna Nettiturva\Anti-Spyware\blockpopups.htm
    O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
    O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
    O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
    O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
    O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
    O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar1.dll/cmtrans.html
    O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\dna Nettiturva\Anti-Spyware\ieshield.dll
    O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\dna Nettiturva\Anti-Spyware\ieshield.dll
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1137519539125
    O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
    O23 - Service: dna Nettiturva (BackWeb Plug-in - 4653381) - BackWeb Technologies Inc. - C:\PROGRA~1\DNANET~1\backweb\4653381\Program\SERVIC~1.EXE
    O23 - Service: Loogisen levyn hallinnan valvontapalvelu (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
    O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corp. - C:\Program Files\dna Nettiturva\Anti-Virus\fsgk32st.exe
    O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\dna Nettiturva\backweb\4653381\program\fsbwsys.exe
    O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\dna Nettiturva\FWES\Program\fsdfwd.exe
    O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\dna Nettiturva\Common\FSMA32.EXE
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINNT\System32\nvsvc32.exe
    O23 - Service: Pml Driver HPZ12 - HP - C:\WINNT\System32\HPZipm12.exe
    7371
    Äänestä

    Muut lukivat myös

    Vastaukset 7

    Vanhimmat

    Lataa tuosta smitrem http://noahdfear.geekstogo.com/click counter/click.php?id=1 ©noahdfear, ja tallenna se työpöydällesi.
    Tupla-klikkaa tiedostoa purkaaksesi sen omaan kansioonsa.

    ==

    Lataa [b]Ewido Anti-malware[/b] täältä:
    http://www.ewido.net/en/download

    Lue ohjeet -> http://keskustelu.afterdawn.com/thread_view.cfm/269186

    ÄLÄ aja skanneria vielä, ainoastaan päivitä ja asenna ja pistä asetukset. Älä myöskään asenna Ewidon vartijaa.

    ==

    Lataa ATF Cleaner http://www.atribune.org/ccount/click.php?id=1 Cleaner by Atribune.
    [b]Tämä ohjelma on vain XP ja 2000 käyttiksille.[/b]

    ÄLÄ aja sitä vielä.

    ==

    Lataa Roguescanfix http://www.martijnc.be/tools/roguescanfix.exe ja tallenna se työpöydällesi:
    [*]Tupla-klikkaa [b]roguescanfix.exe[/b] filua asentaaksesi sen.
    [*]Avaa [b]roguescanfix[/b] kansio, ja tupla-klikkaa [b]run.bat[/b].
    [*]Työpöytäsi ja pikakuvakkeesi katoavat ja ilmaantuvat uudestaan, tämä on normaalia.
    [*]Odota viestiä joka sanoo "[b]Completed script execution[/b]", ja klikkaa [b]OK[/b].
    [*]Klikkaa "[b]Exit[/b]" sulkeaksesi BFU:n.
    [*]Klikkaa "[b]OK[/b]" aloittaaksesi SpywareQuake/Spyfalcon poistajan, sen jälkeen klikkaa "[b]uninstall[/b]".

    [b]HUOMAA: Jos palomuurisi antaa minkään sortin varoituksia tähän skriptiin tai työkaluun, hyväksy ne koska kieltämällä korjaus ei toimisi![/b]

    ==

    Käynnistä koneesi vikasietotilaan naputtamalla F8 näppäintä käynnistyksen yhteydessä.

    ==

    Aja [b]ATF Cleaner[/b]:
    Tupla-klikkaa [b]ATF-Cleaner.exe[/b] ajaaksesi ohjelman.
    [b]Mainin[/b] alapuolelta valitse: [b]Select All[/b]
    Klikkaa [b]Empty Selected[/b] nappia.
    Jos käytät Firefoxia selaimenasi Klikkaa [b]Firefox[/b] välilehteä yläpuolella ja klikkaa: [b]Select All[/b]
    Klikkaa [b]Empty Selected[/b] nappia.
    [b]HUOMAA:[/b] Jos haluat pitää tallennetut salasanasi, klikkaa [b]No[/b] varoitukseen.
    Jos käytät Operaa selaimenasiKlikkaa [b]Opera[/b] välilehteä yläpuolelta ja valitse: [b]Select All[/b]
    Klikkaa [b]Empty Selected[/b] nappia.
    [b]HUOMAA:[/b] Jos haluat pitää tallennetut salasanasi, klikkaa [b]No[/b] varoitukseen.
    Klikkaa [b]Exit[/b] päävalikossa sulkeaksesi ohjelman.

    ==

    Avaa [b]smitRem[/b] kansio, ja tupla-klikkaa [b]RunThis.bat[/b] filua ajaaksesi työkalun. Seuraa ohjeita.
    Odota kunnes työkalu on valmis ja levyn puhdistus kunnossa.

    Työkalu luo seuraavan lokin: [b]smitfiles.txt[/b] paikalliselle levyllesi, kuten [b]C:[/b] tai sille mille käyttöjärjestelmäsi on asennettu. Postita tämä loki muiden lokien mukana seuraavaan vastaukseesi.

    ==

    Aja Ewido:
    [*]Klikkaa [b]scanner[/b]
    [*]Klikkaa [b]Complete System Scan[/b] ja skannaus alkaa.
    [*]Kun skannaus on kesken sinua pyydetään puhdistamaan filuja, klikkaa [b]OK[/b]
    [*]Kun se pyytää sinua puhdistamaan ensimmäisen filun, rastita vasemmassa alakulmassa boksin joka sanoo "[b]Perform action on all infections[/b]" sitten valitse Clean ja klikkaa [b]OK[/b].
    [*]Kun skanneri on valmis, [b]Save report[/b] tulee näkyville.
    [*]Klikkaa sitä.
    [*]Tallenna report .txt file työpöydällesi.
    Sulje Ewido Anti-malware.

    ==

    Seuraavaksi, klikkaa työpöydällä oikealla hiiren nappulalla -> ominaisuudet -> työpöytä -> mukauta työpöytää -> web-välilehti.
    Katso, jos siellä on jotain security-välilehti, ota rasti pois tämän kohdalta.

    ==

    Käynnistä uudelleen normaaliin Windowsiin, postita takaisin seuraavilla tiedoilla:

    [b]Ewido Log[/b]
    [b]SmitFiles.txt login[/b] kaikki sisältö
    Tuore [b]HijackThis logi[/b]

    Äänestä

    • mömmönsiivoukset tehty ja tässä logit

      spybot edelleen löytää järjestelmän käynnistystiedoista system32.exen jonka ilmottaa _AGOBOT-KU_ -mömmöksi???

      otin ruksin pois edestä jo aikaisemmin jottei käynnistyisi ollenkaan... mahtaako auttaa?



      smitRem © log file
      version 2.8

      by noahdfear


      Microsoft Windows 2000 [Versio 5.00.2195]

      Running from
      C:\Documents and Settings\Joni.KUNKKU\Ty”p”yt„\m”mm”ohjelma\smitRem

      ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

      Pre-run SharedTask Export

      (GetSTS.exe) SharedTaskScheduler exporter by Lawrence Abrams (Grinler)
      Copyright(C) 2006 BleepingComputer.com

      Registry Pseudo-Format Mode (Not a valid reg file):

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
      "{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Browseui preloader"
      "{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Component Categories cache daemon"

      [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{438755C2-A8BA-11D1-B96B-00A0C90312E1}\InProcServer32]
      @="%SystemRoot%\system32\browseui.dll"


      [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8C7461EF-2B13-11d2-BE35-3078302C2030}\InProcServer32]
      @="%SystemRoot%\system32\browseui.dll"


      ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

      checking for ShudderLTD key

      ShudderLTD key not present!

      checking for PSGuard.com key


      PSGuard.com key not present!


      checking for WinHound.com key


      WinHound.com key not present!

      spyaxe uninstaller NOT present
      Winhound uninstaller NOT present
      SpywareStrike uninstaller NOT present

      ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

      Existing Pre-run Files


      ~~~ Program Files ~~~



      ~~~ Shortcuts ~~~



      ~~~ Favorites ~~~



      ~~~ system32 folder ~~~

      hp***.tmp


      ~~~ Icons in System32 ~~~

      ot.ico


      ~~~ Windows directory ~~~



      ~~~ Drive root ~~~


      ~~~ Miscellaneous Files/folders ~~~




      ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

      Command Line Process Viewer/Killer/Suspender for Windows NT/2000/XP V2.03
      Copyright(C) 2002-2003 [email protected]
      Killing PID 284 'explorer.exe'

      Starting registry repairs

      Registry repairs complete

      ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

      SharedTask Export after registry fix

      (GetSTS.exe) SharedTaskScheduler exporter by Lawrence Abrams (Grinler)
      Copyright(C) 2006 BleepingComputer.com

      Registry Pseudo-Format Mode (Not a valid reg file):

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
      "{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Browseui preloader"
      "{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Component Categories cache daemon"

      [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{438755C2-A8BA-11D1-B96B-00A0C90312E1}\InProcServer32]
      @="%SystemRoot%\system32\browseui.dll"


      [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8C7461EF-2B13-11d2-BE35-3078302C2030}\InProcServer32]
      @="%SystemRoot%\system32\browseui.dll"


      ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

      Deleting files

      ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

      Remaining Post-run Files


      ~~~ Program Files ~~~



      ~~~ Shortcuts ~~~



      ~~~ Favorites ~~~



      ~~~ system32 folder ~~~



      ~~~ Icons in System32 ~~~



      ~~~ Windows directory ~~~



      ~~~ Drive root ~~~


      ~~~ Miscellaneous Files/folders ~~~


      ~~~ Wininet.dll ~~~

      CLEAN! :)



      ------------------------------------------------



      ---------------------------------------------------------
      ewido anti-malware - Scan report
      ---------------------------------------------------------

      + Created on:         15:41:31, 9.4.2006
      + Report-Checksum:      67914258

      + Scan result:

         C:\Documents and Settings\All Users\Cookies\järjestelmä[email protected][1].txt -> TrackingCookie.2o7 : Cleaned with backup
         C:\Documents and Settings\Default User\Cookies\järjestelmä[email protected][1].txt -> TrackingCookie.2o7 : Cleaned with backup
         :mozilla.23:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned with backup
         :mozilla.24:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup
         :mozilla.25:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup
         :mozilla.26:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup
         :mozilla.27:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup
         :mozilla.35:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
         :mozilla.36:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
         :mozilla.37:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
         :mozilla.38:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
         :mozilla.42:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
         :mozilla.43:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
         :mozilla.44:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
         :mozilla.45:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned with backup
         :mozilla.64:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned with backup
         :mozilla.65:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned with backup
         :mozilla.66:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned with backup
         :mozilla.67:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned with backup
         :mozilla.68:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
         :mozilla.69:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
         :mozilla.70:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
         :mozilla.71:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
         :mozilla.72:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
         :mozilla.73:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
         :mozilla.74:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
         :mozilla.76:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup
         :mozilla.77:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup
         :mozilla.78:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup
         :mozilla.79:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup
         :mozilla.80:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup
         :mozilla.81:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup
         :mozilla.82:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup
         :mozilla.83:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup
         :mozilla.84:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup
         :mozilla.102:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup
         :mozilla.103:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup
         :mozilla.104:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup
         :mozilla.111:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned with backup
         :mozilla.112:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned with backup
         :mozilla.113:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup
         :mozilla.114:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup
         :mozilla.115:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup
         :mozilla.125:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
         :mozilla.126:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
         :mozilla.127:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
         :mozilla.128:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Revenue : Cleaned with backup
         :mozilla.136:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Adtech : Cleaned with backup
         :mozilla.137:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Adtech : Cleaned with backup
         :mozilla.142:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Adjuggler : Cleaned with backup
         :mozilla.156:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Bfast : Cleaned with backup
         :mozilla.157:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Bfast : Cleaned with backup
         :mozilla.168:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned with backup
         :mozilla.169:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup
         :mozilla.173:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned with backup
         :mozilla.174:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
         :mozilla.177:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
         :mozilla.178:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
         :mozilla.179:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
         :mozilla.180:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
         :mozilla.181:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
         :mozilla.182:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
         :mozilla.183:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
         :mozilla.184:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
         :mozilla.189:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned with backup
         :mozilla.192:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup
         :mozilla.193:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup
         :mozilla.194:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup
         :mozilla.195:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup
         :mozilla.218:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Goclick : Cleaned with backup
         :mozilla.219:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Goclick : Cleaned with backup
         :mozilla.220:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
         :mozilla.221:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
         :mozilla.222:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
         :mozilla.223:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
         :mozilla.239:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup
         :mozilla.240:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup
         :mozilla.241:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup
         :mozilla.242:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup
         :mozilla.274:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
         :mozilla.275:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
         :mozilla.276:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
         :mozilla.277:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
         :mozilla.381:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Paycounter : Cleaned with backup
         :mozilla.419:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
         :mozilla.420:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
         :mozilla.470:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned with backup
         :mozilla.471:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned with backup
         :mozilla.531:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup
         :mozilla.549:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Masterstats : Cleaned with backup
         :mozilla.573:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Myaffiliateprogram : Cleaned with backup
         C:\Documents and Settings\Joni.KUNKKU\Cookies\järjestelmä[email protected][1].txt -> TrackingCookie.2o7 : Cleaned with backup
         C:\Documents and Settings\Järjestelmänvalvoja\Cookies\järjestelmä[email protected][1].txt -> TrackingCookie.2o7 : Cleaned with backup
         C:\WINNT\system32\DFRGSRV.0XE -> Downloader.Zlob.jl : Cleaned with backup
         C:\WINNT\system32\NVCTRL.0XE -> Downloader.Zlob.jk : Cleaned with backup
         C:\WINNT\system32\STICKREP.0LL -> Trojan.Agent.qf : Cleaned with backup


      ::Report End



      -------------------------------------------------



      Logfile of HijackThis v1.99.1
      Scan saved at 15:51:16, on 9.4.2006
      Platform: Windows 2000 SP4 (WinNT 5.00.2195)
      MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

      Running processes:
      C:\WINNT\System32\smss.exe
      C:\WINNT\system32\winlogon.exe
      C:\WINNT\system32\services.exe
      C:\WINNT\system32\lsass.exe
      C:\WINNT\system32\svchost.exe
      C:\WINNT\system32\spoolsv.exe
      C:\PROGRA~1\DNANET~1\backweb\4653381\Program\SERVIC~1.EXE
      C:\WINNT\System32\svchost.exe
      C:\Program Files\ewido anti-malware\ewidoctrl.exe
      C:\Program Files\dna Nettiturva\Anti-Virus\fsgk32st.exe
      C:\Program Files\dna Nettiturva\Anti-Virus\FSGK32.EXE
      C:\Program Files\dna Nettiturva\backweb\4653381\program\fsbwsys.exe
      C:\Program Files\dna Nettiturva\Common\FSMA32.EXE
      C:\Program Files\dna Nettiturva\Common\FSMB32.EXE
      C:\WINNT\System32\nvsvc32.exe
      C:\Program Files\dna Nettiturva\Common\FCH32.EXE
      C:\WINNT\system32\regsvc.exe
      C:\WINNT\system32\MSTask.exe
      C:\Program Files\dna Nettiturva\Common\FAMEH32.EXE
      C:\WINNT\System32\WBEM\WinMgmt.exe
      C:\Program Files\dna Nettiturva\Anti-Virus\fsrw.exe
      C:\WINNT\system32\svchost.exe
      C:\WINNT\Explorer.EXE
      C:\Program Files\dna Nettiturva\Common\FSM32.EXE
      C:\Program Files\dna Nettiturva\FSGUI\ispnews.exe
      C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe
      C:\Program Files\QuickTime\qttask.exe
      C:\WINNT\system32\spool\drivers\w32x86\3\hpztsb04.exe
      C:\WINNT\system32\starter.exe
      C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      C:\Program Files\dna Nettiturva\backweb\4653381\Program\dna Nettiturva.exe
      C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe
      C:\Program Files\dna Nettiturva\FWES\Program\fsdfwd.exe
      C:\Program Files\dna Nettiturva\Anti-Virus\fssm32.exe
      C:\Program Files\dna Nettiturva\Anti-Virus\fsav32.exe
      C:\PROGRA~1\DNANET~1\ANTI-S~1\fsaw.exe
      C:\Program Files\dna Nettiturva\FSGUI\fsguidll.exe
      C:\HJT\HijackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fi/
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = dna Internet Explorer
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = http://paivitys.dnainternet.fi/yhteys/proxy.pac
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
      O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINNT\System32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
      O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINNT\System32\NvMcTray.dll,NvTaskbarInit
      O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINNT\system32\NeroCheck.exe
      O4 - HKLM\..\Run: [HPLJ Config] C:\Program Files\Hewlett-Packard\hp LaserJet 1010 Series\SetConfig.exe -c Direct -p LPT1: -pn "hp LaserJet 1010 Series Driver" -n 0 -l 1035 -sl 120000
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\dna Nettiturva\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\dna Nettiturva\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
      O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\dna Nettiturva\FSGUI\FSSW.EXE" /reboot
      O4 - HKLM\..\Run: [News Service] "C:\Program Files\dna Nettiturva\FSGUI\ispnews.exe"
      O4 - HKLM\..\Run: [StatusClient] C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe /auto
      O4 - HKLM\..\Run: [TomcatStartup] C:\Program Files\Hewlett-Packard\Toolbox2.0\hpbpsttp.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINNT\system32\spool\drivers\w32x86\3\hpztsb04.exe
      O4 - HKLM\..\Run: [EnsoniqMixer] C:\WINNT\system32\starter.exe
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      O4 - Global Startup: dna Nettiturva.lnk = C:\Program Files\dna Nettiturva\backweb\4653381\Program\dna Nettiturva.exe
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
      O8 - Extra context menu item: &Estä tämä kohoikkuna - C:\Program Files\dna Nettiturva\Anti-Spyware\blockpopups.htm
      O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
      O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
      O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
      O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
      O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
      O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar1.dll/cmtrans.html
      O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\dna Nettiturva\Anti-Spyware\ieshield.dll
      O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\dna Nettiturva\Anti-Spyware\ieshield.dll
      O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1137519539125
      O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
      O23 - Service: dna Nettiturva (BackWeb Plug-in - 4653381) - BackWeb Technologies Inc. - C:\PROGRA~1\DNANET~1\backweb\4653381\Program\SERVIC~1.EXE
      O23 - Service: Loogisen levyn hallinnan valvontapalvelu (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
      O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
      O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corp. - C:\Program Files\dna Nettiturva\Anti-Virus\fsgk32st.exe
      O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\dna Nettiturva\backweb\4653381\program\fsbwsys.exe
      O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\dna Nettiturva\FWES\Program\fsdfwd.exe
      O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\dna Nettiturva\Common\FSMA32.EXE
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINNT\System32\nvsvc32.exe
      O23 - Service: Pml Driver HPZ12 - HP - C:\WINNT\System32\HPZipm12.exe



      ---------------------------------------------


      huhhuh!!

      Äänestä

    • Teukka kirjoitti:

      mömmönsiivoukset tehty ja tässä logit

      spybot edelleen löytää järjestelmän käynnistystiedoista system32.exen jonka ilmottaa _AGOBOT-KU_ -mömmöksi???

      otin ruksin pois edestä jo aikaisemmin jottei käynnistyisi ollenkaan... mahtaako auttaa?



      smitRem © log file
      version 2.8

      by noahdfear


      Microsoft Windows 2000 [Versio 5.00.2195]

      Running from
      C:\Documents and Settings\Joni.KUNKKU\Ty”p”yt„\m”mm”ohjelma\smitRem

      ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

      Pre-run SharedTask Export

      (GetSTS.exe) SharedTaskScheduler exporter by Lawrence Abrams (Grinler)
      Copyright(C) 2006 BleepingComputer.com

      Registry Pseudo-Format Mode (Not a valid reg file):

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
      "{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Browseui preloader"
      "{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Component Categories cache daemon"

      [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{438755C2-A8BA-11D1-B96B-00A0C90312E1}\InProcServer32]
      @="%SystemRoot%\system32\browseui.dll"


      [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8C7461EF-2B13-11d2-BE35-3078302C2030}\InProcServer32]
      @="%SystemRoot%\system32\browseui.dll"


      ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

      checking for ShudderLTD key

      ShudderLTD key not present!

      checking for PSGuard.com key


      PSGuard.com key not present!


      checking for WinHound.com key


      WinHound.com key not present!

      spyaxe uninstaller NOT present
      Winhound uninstaller NOT present
      SpywareStrike uninstaller NOT present

      ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

      Existing Pre-run Files


      ~~~ Program Files ~~~



      ~~~ Shortcuts ~~~



      ~~~ Favorites ~~~



      ~~~ system32 folder ~~~

      hp***.tmp


      ~~~ Icons in System32 ~~~

      ot.ico


      ~~~ Windows directory ~~~



      ~~~ Drive root ~~~


      ~~~ Miscellaneous Files/folders ~~~




      ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

      Command Line Process Viewer/Killer/Suspender for Windows NT/2000/XP V2.03
      Copyright(C) 2002-2003 [email protected]
      Killing PID 284 'explorer.exe'

      Starting registry repairs

      Registry repairs complete

      ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

      SharedTask Export after registry fix

      (GetSTS.exe) SharedTaskScheduler exporter by Lawrence Abrams (Grinler)
      Copyright(C) 2006 BleepingComputer.com

      Registry Pseudo-Format Mode (Not a valid reg file):

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
      "{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Browseui preloader"
      "{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Component Categories cache daemon"

      [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{438755C2-A8BA-11D1-B96B-00A0C90312E1}\InProcServer32]
      @="%SystemRoot%\system32\browseui.dll"


      [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8C7461EF-2B13-11d2-BE35-3078302C2030}\InProcServer32]
      @="%SystemRoot%\system32\browseui.dll"


      ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

      Deleting files

      ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

      Remaining Post-run Files


      ~~~ Program Files ~~~



      ~~~ Shortcuts ~~~



      ~~~ Favorites ~~~



      ~~~ system32 folder ~~~



      ~~~ Icons in System32 ~~~



      ~~~ Windows directory ~~~



      ~~~ Drive root ~~~


      ~~~ Miscellaneous Files/folders ~~~


      ~~~ Wininet.dll ~~~

      CLEAN! :)



      ------------------------------------------------



      ---------------------------------------------------------
      ewido anti-malware - Scan report
      ---------------------------------------------------------

      + Created on:         15:41:31, 9.4.2006
      + Report-Checksum:      67914258

      + Scan result:

         C:\Documents and Settings\All Users\Cookies\järjestelmä[email protected][1].txt -> TrackingCookie.2o7 : Cleaned with backup
         C:\Documents and Settings\Default User\Cookies\järjestelmä[email protected][1].txt -> TrackingCookie.2o7 : Cleaned with backup
         :mozilla.23:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned with backup
         :mozilla.24:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup
         :mozilla.25:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup
         :mozilla.26:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup
         :mozilla.27:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Advertising : Cleaned with backup
         :mozilla.35:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
         :mozilla.36:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
         :mozilla.37:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
         :mozilla.38:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
         :mozilla.42:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
         :mozilla.43:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
         :mozilla.44:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned with backup
         :mozilla.45:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned with backup
         :mozilla.64:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned with backup
         :mozilla.65:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned with backup
         :mozilla.66:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned with backup
         :mozilla.67:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned with backup
         :mozilla.68:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
         :mozilla.69:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
         :mozilla.70:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
         :mozilla.71:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
         :mozilla.72:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
         :mozilla.73:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
         :mozilla.74:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Falkag : Cleaned with backup
         :mozilla.76:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup
         :mozilla.77:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup
         :mozilla.78:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup
         :mozilla.79:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup
         :mozilla.80:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup
         :mozilla.81:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup
         :mozilla.82:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup
         :mozilla.83:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup
         :mozilla.84:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Reliablestats : Cleaned with backup
         :mozilla.102:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup
         :mozilla.103:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup
         :mozilla.104:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned with backup
         :mozilla.111:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned with backup
         :mozilla.112:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned with backup
         :mozilla.113:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup
         :mozilla.114:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup
         :mozilla.115:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned with backup
         :mozilla.125:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
         :mozilla.126:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
         :mozilla.127:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned with backup
         :mozilla.128:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Revenue : Cleaned with backup
         :mozilla.136:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Adtech : Cleaned with backup
         :mozilla.137:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Adtech : Cleaned with backup
         :mozilla.142:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Adjuggler : Cleaned with backup
         :mozilla.156:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Bfast : Cleaned with backup
         :mozilla.157:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Bfast : Cleaned with backup
         :mozilla.168:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned with backup
         :mozilla.169:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup
         :mozilla.173:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned with backup
         :mozilla.174:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
         :mozilla.177:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
         :mozilla.178:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
         :mozilla.179:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
         :mozilla.180:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
         :mozilla.181:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
         :mozilla.182:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
         :mozilla.183:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
         :mozilla.184:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.2o7 : Cleaned with backup
         :mozilla.189:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned with backup
         :mozilla.192:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup
         :mozilla.193:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup
         :mozilla.194:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup
         :mozilla.195:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned with backup
         :mozilla.218:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Goclick : Cleaned with backup
         :mozilla.219:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Goclick : Cleaned with backup
         :mozilla.220:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
         :mozilla.221:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
         :mozilla.222:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
         :mozilla.223:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned with backup
         :mozilla.239:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup
         :mozilla.240:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup
         :mozilla.241:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup
         :mozilla.242:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned with backup
         :mozilla.274:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
         :mozilla.275:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
         :mozilla.276:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
         :mozilla.277:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned with backup
         :mozilla.381:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Paycounter : Cleaned with backup
         :mozilla.419:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
         :mozilla.420:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned with backup
         :mozilla.470:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned with backup
         :mozilla.471:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned with backup
         :mozilla.531:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned with backup
         :mozilla.549:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Masterstats : Cleaned with backup
         :mozilla.573:C:\Documents and Settings\Joni.KUNKKU\Application Data\Mozilla\Firefox\Profiles\rxoum4qd.default\cookies.txt -> TrackingCookie.Myaffiliateprogram : Cleaned with backup
         C:\Documents and Settings\Joni.KUNKKU\Cookies\järjestelmä[email protected][1].txt -> TrackingCookie.2o7 : Cleaned with backup
         C:\Documents and Settings\Järjestelmänvalvoja\Cookies\järjestelmä[email protected][1].txt -> TrackingCookie.2o7 : Cleaned with backup
         C:\WINNT\system32\DFRGSRV.0XE -> Downloader.Zlob.jl : Cleaned with backup
         C:\WINNT\system32\NVCTRL.0XE -> Downloader.Zlob.jk : Cleaned with backup
         C:\WINNT\system32\STICKREP.0LL -> Trojan.Agent.qf : Cleaned with backup


      ::Report End



      -------------------------------------------------



      Logfile of HijackThis v1.99.1
      Scan saved at 15:51:16, on 9.4.2006
      Platform: Windows 2000 SP4 (WinNT 5.00.2195)
      MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

      Running processes:
      C:\WINNT\System32\smss.exe
      C:\WINNT\system32\winlogon.exe
      C:\WINNT\system32\services.exe
      C:\WINNT\system32\lsass.exe
      C:\WINNT\system32\svchost.exe
      C:\WINNT\system32\spoolsv.exe
      C:\PROGRA~1\DNANET~1\backweb\4653381\Program\SERVIC~1.EXE
      C:\WINNT\System32\svchost.exe
      C:\Program Files\ewido anti-malware\ewidoctrl.exe
      C:\Program Files\dna Nettiturva\Anti-Virus\fsgk32st.exe
      C:\Program Files\dna Nettiturva\Anti-Virus\FSGK32.EXE
      C:\Program Files\dna Nettiturva\backweb\4653381\program\fsbwsys.exe
      C:\Program Files\dna Nettiturva\Common\FSMA32.EXE
      C:\Program Files\dna Nettiturva\Common\FSMB32.EXE
      C:\WINNT\System32\nvsvc32.exe
      C:\Program Files\dna Nettiturva\Common\FCH32.EXE
      C:\WINNT\system32\regsvc.exe
      C:\WINNT\system32\MSTask.exe
      C:\Program Files\dna Nettiturva\Common\FAMEH32.EXE
      C:\WINNT\System32\WBEM\WinMgmt.exe
      C:\Program Files\dna Nettiturva\Anti-Virus\fsrw.exe
      C:\WINNT\system32\svchost.exe
      C:\WINNT\Explorer.EXE
      C:\Program Files\dna Nettiturva\Common\FSM32.EXE
      C:\Program Files\dna Nettiturva\FSGUI\ispnews.exe
      C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe
      C:\Program Files\QuickTime\qttask.exe
      C:\WINNT\system32\spool\drivers\w32x86\3\hpztsb04.exe
      C:\WINNT\system32\starter.exe
      C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      C:\Program Files\dna Nettiturva\backweb\4653381\Program\dna Nettiturva.exe
      C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe
      C:\Program Files\dna Nettiturva\FWES\Program\fsdfwd.exe
      C:\Program Files\dna Nettiturva\Anti-Virus\fssm32.exe
      C:\Program Files\dna Nettiturva\Anti-Virus\fsav32.exe
      C:\PROGRA~1\DNANET~1\ANTI-S~1\fsaw.exe
      C:\Program Files\dna Nettiturva\FSGUI\fsguidll.exe
      C:\HJT\HijackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fi/
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = dna Internet Explorer
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = http://paivitys.dnainternet.fi/yhteys/proxy.pac
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
      O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINNT\System32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
      O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINNT\System32\NvMcTray.dll,NvTaskbarInit
      O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINNT\system32\NeroCheck.exe
      O4 - HKLM\..\Run: [HPLJ Config] C:\Program Files\Hewlett-Packard\hp LaserJet 1010 Series\SetConfig.exe -c Direct -p LPT1: -pn "hp LaserJet 1010 Series Driver" -n 0 -l 1035 -sl 120000
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\dna Nettiturva\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\dna Nettiturva\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
      O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\dna Nettiturva\FSGUI\FSSW.EXE" /reboot
      O4 - HKLM\..\Run: [News Service] "C:\Program Files\dna Nettiturva\FSGUI\ispnews.exe"
      O4 - HKLM\..\Run: [StatusClient] C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe /auto
      O4 - HKLM\..\Run: [TomcatStartup] C:\Program Files\Hewlett-Packard\Toolbox2.0\hpbpsttp.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINNT\system32\spool\drivers\w32x86\3\hpztsb04.exe
      O4 - HKLM\..\Run: [EnsoniqMixer] C:\WINNT\system32\starter.exe
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      O4 - Global Startup: dna Nettiturva.lnk = C:\Program Files\dna Nettiturva\backweb\4653381\Program\dna Nettiturva.exe
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
      O8 - Extra context menu item: &Estä tämä kohoikkuna - C:\Program Files\dna Nettiturva\Anti-Spyware\blockpopups.htm
      O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
      O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
      O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
      O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
      O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
      O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar1.dll/cmtrans.html
      O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\dna Nettiturva\Anti-Spyware\ieshield.dll
      O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\dna Nettiturva\Anti-Spyware\ieshield.dll
      O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1137519539125
      O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
      O23 - Service: dna Nettiturva (BackWeb Plug-in - 4653381) - BackWeb Technologies Inc. - C:\PROGRA~1\DNANET~1\backweb\4653381\Program\SERVIC~1.EXE
      O23 - Service: Loogisen levyn hallinnan valvontapalvelu (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
      O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
      O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corp. - C:\Program Files\dna Nettiturva\Anti-Virus\fsgk32st.exe
      O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\dna Nettiturva\backweb\4653381\program\fsbwsys.exe
      O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\dna Nettiturva\FWES\Program\fsdfwd.exe
      O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\dna Nettiturva\Common\FSMA32.EXE
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINNT\System32\nvsvc32.exe
      O23 - Service: Pml Driver HPZ12 - HP - C:\WINNT\System32\HPZipm12.exe



      ---------------------------------------------


      huhhuh!!

      Lokit on kunnossa :)

      Tarkista se system32.exe täällä ->
      http://www.virustotal.com/flash/index_en.html

      ja lähetä tulokset.

      Äänestä

    • Fixaaja kirjoitti:

      Lokit on kunnossa :)

      Tarkista se system32.exe täällä ->
      http://www.virustotal.com/flash/index_en.html

      ja lähetä tulokset.

      kun ei tiedä mistä sitä ettiä... ainoastaan spybotissa löytyy järjestelmän käynnistystiedostoissa tollanen jonka väittää pöpöks muttei kerro ees sen sijaintia.. ainoastaan että sen nimi on system32.exe. muistaakseni windowsin loistava(?) haku ei sellasta ees löytäny...

      Äänestä

    • Teukka kirjoitti:

      kun ei tiedä mistä sitä ettiä... ainoastaan spybotissa löytyy järjestelmän käynnistystiedostoissa tollanen jonka väittää pöpöks muttei kerro ees sen sijaintia.. ainoastaan että sen nimi on system32.exe. muistaakseni windowsin loistava(?) haku ei sellasta ees löytäny...

      Hae vielä seuraavasti

      Etsi -> kaikki tiedostot ja kansiot -> lisävaihtoehdot -> valitse kolme ylintä ja koita uudestaan hakea-

      Äänestä

    • Fixaaja kirjoitti:

      Hae vielä seuraavasti

      Etsi -> kaikki tiedostot ja kansiot -> lisävaihtoehdot -> valitse kolme ylintä ja koita uudestaan hakea-

      täytyy tehä taas ku meen paikan päällä käymään... hoppas jo tänään

      Äänestä

    • Fixaaja kirjoitti:

      Hae vielä seuraavasti

      Etsi -> kaikki tiedostot ja kansiot -> lisävaihtoehdot -> valitse kolme ylintä ja koita uudestaan hakea-

      eihän 2000:ssa tollasii vaihtoehtoja oo ja oli indeksointiki pois päältä ni ei hae, ei...

      rekisteristä löytyi sieltä missä pitäs olla agobot-ku -madon system32.exe -käynnistys vain tyhjä rekisteriaro tms, josta ei ollut tietoa. olisikon sitten system 32.exe jo aikasemmin lähteny pois virustentorjunnalla ja jättäny vaa jonkun tahran rekisteriin...

      joka tapauksessa taidan luovuttaa ja toivoa ettei tietoturvariskiä ole enää :/

      Äänestä

    Odottaa vastausta

    Näihin keskusteluihin ei ole vielä vastattu. Ole ensimmäinen.

    Luetuimmat keskustelut

    Kommentoi aloitusta

    Teukka kirjoitti:

    eli tällanen logi olis. Jumittaa pirusti

    spybot ei jostain syystä aja etsintää kuin hetken ja stoppaa... en tiedä johtuuko sekin jostain viruksesta tms.


    Logfile of HijackThis v1.99.1
    Scan saved at 12:36:08, on 3.4.2006
    Platform: Windows 2000 SP4 (WinNT 5.00.2195)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINNT\System32\smss.exe
    C:\WINNT\system32\winlogon.exe
    C:\WINNT\system32\services.exe
    C:\WINNT\system32\lsass.exe
    C:\WINNT\system32\svchost.exe
    C:\WINNT\system32\spoolsv.exe
    C:\PROGRA~1\DNANET~1\backweb\4653381\Program\SERVIC~1.EXE
    C:\WINNT\System32\svchost.exe
    C:\Program Files\dna Nettiturva\Anti-Virus\fsgk32st.exe
    C:\Program Files\dna Nettiturva\Anti-Virus\FSGK32.EXE
    C:\Program Files\dna Nettiturva\backweb\4653381\program\fsbwsys.exe
    C:\Program Files\dna Nettiturva\Common\FSMA32.EXE
    C:\Program Files\dna Nettiturva\Common\FSMB32.EXE
    C:\WINNT\System32\nvsvc32.exe
    C:\WINNT\system32\regsvc.exe
    C:\Program Files\dna Nettiturva\Common\FCH32.EXE
    C:\WINNT\System32\WBEM\WinMgmt.exe
    C:\WINNT\system32\svchost.exe
    C:\Program Files\dna Nettiturva\Common\FAMEH32.EXE
    C:\Program Files\dna Nettiturva\Anti-Virus\fsrw.exe
    C:\Program Files\dna Nettiturva\FWES\Program\fsdfwd.exe
    C:\Program Files\dna Nettiturva\Anti-Virus\fssm32.exe
    C:\WINNT\Explorer.EXE
    C:\WINNT\system32\RUNDLL32.EXE
    C:\Program Files\dna Nettiturva\Common\FSM32.EXE
    C:\Program Files\dna Nettiturva\Anti-Virus\fsav32.exe
    C:\Program Files\dna Nettiturva\FSGUI\ispnews.exe
    C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\WINNT\system32\spool\drivers\w32x86\3\hpztsb04.exe
    C:\WINNT\system32\starter.exe
    C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    C:\WINNT\system32\internat.exe
    C:\Program Files\dna Nettiturva\backweb\4653381\Program\dna Nettiturva.exe
    C:\PROGRA~1\DNANET~1\ANTI-S~1\fsaw.exe
    C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe
    C:\Program Files\WinZip\WZQKPICK.EXE
    C:\Program Files\dna Nettiturva\FSGUI\fsguidll.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\Windows Media Player\wmplayer.exe
    C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
    C:\WINNT\regedit.exe
    C:\HJT\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fi/
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = dna Internet Explorer
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = http://paivitys.dnainternet.fi/yhteys/proxy.pac
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    O2 - BHO: Nothing - {4da4616d-7e6e-4fd9-a2d5-b6c535733e22} - C:\WINNT\system32\hpEF06.tmp
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
    O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINNT\System32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINNT\System32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINNT\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [HPLJ Config] C:\Program Files\Hewlett-Packard\hp LaserJet 1010 Series\SetConfig.exe -c Direct -p LPT1: -pn "hp LaserJet 1010 Series Driver" -n 0 -l 1035 -sl 120000
    O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\dna Nettiturva\Common\FSM32.EXE" /splash
    O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\dna Nettiturva\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
    O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\dna Nettiturva\FSGUI\FSSW.EXE" /reboot
    O4 - HKLM\..\Run: [News Service] "C:\Program Files\dna Nettiturva\FSGUI\ispnews.exe"
    O4 - HKLM\..\Run: [StatusClient] C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe /auto
    O4 - HKLM\..\Run: [TomcatStartup] C:\Program Files\Hewlett-Packard\Toolbox2.0\hpbpsttp.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINNT\system32\spool\drivers\w32x86\3\hpztsb04.exe
    O4 - HKLM\..\Run: [EnsoniqMixer] C:\WINNT\system32\starter.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    O4 - HKCU\..\Run: [internat.exe] internat.exe
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: dna Nettiturva.lnk = C:\Program Files\dna Nettiturva\backweb\4653381\Program\dna Nettiturva.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
    O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
    O8 - Extra context menu item: &Estä tämä kohoikkuna - C:\Program Files\dna Nettiturva\Anti-Spyware\blockpopups.htm
    O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
    O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
    O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
    O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
    O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
    O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar1.dll/cmtrans.html
    O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\dna Nettiturva\Anti-Spyware\ieshield.dll
    O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\dna Nettiturva\Anti-Spyware\ieshield.dll
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1137519539125
    O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
    O23 - Service: dna Nettiturva (BackWeb Plug-in - 4653381) - BackWeb Technologies Inc. - C:\PROGRA~1\DNANET~1\backweb\4653381\Program\SERVIC~1.EXE
    O23 - Service: Loogisen levyn hallinnan valvontapalvelu (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
    O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corp. - C:\Program Files\dna Nettiturva\Anti-Virus\fsgk32st.exe
    O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\dna Nettiturva\backweb\4653381\program\fsbwsys.exe
    O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\dna Nettiturva\FWES\Program\fsdfwd.exe
    O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\dna Nettiturva\Common\FSMA32.EXE
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINNT\System32\nvsvc32.exe
    O23 - Service: Pml Driver HPZ12 - HP - C:\WINNT\System32\HPZipm12.exe

    Anonyymi
    5000

    Ilmoita asiaton sisältö

    • Sisältää materiaalia, joka on loukkaavaa, herjaavaa, rasistista, uhkailevaa tai ahdistelevaa.

    • Materiaali sisältää nimiä, yhteystietoja tai muita henkilökohtaisia tietoja. Julkisuuden henkilöistä, julkisissa viroissa toimivista ihmisistä sekä yritysten vastuuhenkilöistä saa keskustella työhön liittyen. Myös yksityiselämään liittyvistä asioista voi keskustella siltä osin, kuin niistä on julkisesti kerrottu.

    • Sisältää lapsille haitallista tai heiltä kiellettyä materiaalia. Seksuaalinen sisältö on sallittua aiheeseen tarkoitetuilla palstoilla, joiden ikäraja on 18 vuotta.

    • Lainvastaista sisältöä voi olla mm. yksityiselämää loukkaavan tiedon levitys, kiihottaminen kansanryhmää vastaan, laiton uhkaaminen, alaikäisiin liittyvä seksuaalinen sisältö/grooming, petokset, identiteettivarkaudet, kunnianloukkaukset ja tekijänoikeusrikkomukset.

    • Sisältö ei liity palstan tai keskusteluketjun aiheeseen.

    • Viesti ei ole suomea tai ruotsia (pl. International Forums), se sisältää mainontaa, se sisältää tekijänoikeuksin suojattua materiaalia, se on massapostitus tai jokin muu syy.

    Jaa keskustelu