Rekisteröidy

Ilmoitukset

Ladataan…

    Näytä kaikki

    Kone tökkii

    palutuspisteen kautta korjaus.

    Ja tällaista tietoa löytyi:



    **** Run Keys ****

    RUN: [Wizard]
    RUN: [ATIPTA] C:\ATI-CPanel\atiptaxx.exe
    RUN: [SoundMan] SOUNDMAN.EXE
    RUN: [CnxDslTaskBar] "C:\Program Files\\TW-IA300C ADSL\CnxDslTb.exe"
    RUN: [F-Secure Manager] "C:\Program Files\Sonera Tietoturva\Common\FSM32.EXE" /splash
    RUN: [F-Secure TNB] "C:\Program Files\Sonera Tietoturva\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
    RUN: [News Service] "C:\Program Files\Sonera Tietoturva\FSGUI\ispnews.exe"
    RUN: [CamMonitor] C:\Program Files\Hewlett-Packard\Digital Imaging\\Unload\hpqcmon.exe
    RUN: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
    RUN: [AVSCHED32] C:\Program Files\AVPersonal\AVSched32.EXE /min
    RUN: [SpybotSnD] "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe" /autocheck /waitprograms
    RUN: [WinampAgent] C:\Documents and Settings\Wilenius Jani\Työpöytä\Winamp\winampa.exe
    RUN: [HPHUPD05] C:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
    RUN: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
    RUN: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe"
    RUN: [HPHmon05] C:\WINDOWS\system32\hphmon05.exe
    RUN: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
    RUN: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    RUN: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\FirstStart.exe
    RUN: [F-Secure Startup Wizard] "C:\Program Files\Sonera Tietoturva\FSGUI\FSSW.EXE" /reboot
    RUN: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    RUN: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    RUN: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    RUN: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    RUN: [Spyware Doctor] "C:\Program Files\Spyware Doctor\swdoctor.exe" /Q
    RUN: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe -NoStart


    **** Browser Helper Objects ****

    BHO: [AcroIEHlprObj Class] C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
    BHO: [CPub Object] C:\WINDOWS\System32\EniroToolbar\PopupBlocker.dll
    BHO: [CPub Object] C:\WINDOWS\System32\EniroToolbar\PopupBlocker.dll
    BHO: [SSVHelper Class] C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    BHO: [ST] C:\Program Files\MSN Apps\ST\01.02.3000.1002\en-xu\stmain.dll
    BHO: [Google Toolbar Helper] c:\program files\google\googletoolbar2.dll


    **** IE Toolbars ****

    TOOLBAR: [Eniro] C:\WINDOWS\System32\EniroToolbar\Toolband.dll
    TOOLBAR: [&Google] c:\program files\google\googletoolbar2.dll


    **** IE Extensions ****

    IEExt: []
    IEExt: [Web-suodatin]
    IEExt: [Web-suodatin]
    IEExt: [Web-suodatin]
    IEExt: [Web-suodatin]
    IEExt: [Web-suodatin]
    IEExt: [IE-suojaus]
    IEExt: [Messenger] C:\Program Files\Messenger\msmsgs.exe


    **** Hosts File Entries ****

    HOSTS: 127.0.0.1 localhost


    **** IE Settings ****

    IEProxy: proxy.dial.inet.fi:800
    IEBypass: *.fi;*.*.fi;*.*.*.fi;
    Default Page: http://www.soneraplaza.fi
    Default Search: http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    Local Page: C:\WINDOWS\system32\blank.htm
    Search Bar: http://www.google.com/ie
    Search Page: http://www.google.com


    **** IE Context Menu (Right click) ****

    IEContext: [&Estä tämä kohoikkuna] C:\Program Files\Sonera Tietoturva\Anti-Spyware\blockpopups.htm
    IEContext: [Hae Eniron avulla] res://C:\WINDOWS\System32\EniroToolbar\Toolband.dll/MENUSEARCH_FI.HTM


    **** Layered Service Providers ****

    LSP: MSAFD Tcpip [TCP/IP]
    LSP: MSAFD Tcpip [UDP/IP]
    LSP: RSVP UDP Service Provider
    LSP: RSVP TCP Service Provider
    LSP: MSAFD Tcpip [TCP/IP]
    LSP: MSAFD Tcpip [UDP/IP]
    LSP: RSVP UDP Service Provider
    LSP: RSVP TCP Service Provider
    LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{DB110D20-277B-4F3A-874B-8D1E809E2848}] SEQPACKET 5
    LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{DB110D20-277B-4F3A-874B-8D1E809E2848}] DATAGRAM 5
    LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{FD4CAE22-B097-4C61-87BE-0F513D884E82}] SEQPACKET 4
    LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{FD4CAE22-B097-4C61-87BE-0F513D884E82}] DATAGRAM 4
    LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{D8771E8C-A9F4-42A3-901A-CE43F8F8D1A8}] SEQPACKET 1
    LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{D8771E8C-A9F4-42A3-901A-CE43F8F8D1A8}] DATAGRAM 1
    LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{4D64AB99-34C7-4B9B-B360-E7B3315BAD3C}] SEQPACKET 0
    LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{4D64AB99-34C7-4B9B-B360-E7B3315BAD3C}] DATAGRAM 0
    LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{A5BB3413-DBEB-48C6-9BDD-93502ED6F678}] SEQPACKET 2
    LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{A5BB3413-DBEB-48C6-9BDD-93502ED6F678}] DATAGRAM 2
    LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{116A2413-0764-40E8-9CE8-BE1A8BF6ED53}] SEQPACKET 3
    LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{116A2413-0764-40E8-9CE8-BE1A8BF6ED53}] DATAGRAM 3


    **** Blocked Control Panel Items ****

    BLOCKED: [ncpa.cpl] No
    BLOCKED: [odbccp32.cpl] No


    **** Downloaded Program Files ****

    {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} [http://static.windupdates.com/cab/WebsiteAccess/ie/bridge-c18.cab] C:\WINDOWS\Downloaded Program Files\MediaGatewayX.dll
    {17492023-C23A-453E-A040-C7C580BBF700} [http://go.microsoft.com/fwlink/?linkid=39204] C:\WINDOWS\system32\LegitCheckControl.DLL
    {1D6711C8-7154-40BB-8380-3DEA45B69CBF} []
    {2A32B14F-4D29-4EA3-AC54-E9B19F436CE7} [http://www.windowsecurity.com/trojanscan/TDECntrl.CAB]
    {8AD9C840-044E-11D1-B3E9-00805F499D93} [http://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab]
    {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} [http://www.windowsecurity.com/trojanscan/axscan.cab]
    {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} [http://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab]
    {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} [http://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab]
    {E991BDE0-9816-4094-853E-6BDB60F0342D} [http://apps.corel.com/nos_dl_manager/plugin/IENetOpPlugin.ocx]


    **** Windows Services ****

    [Alerter] %SystemRoot%\System32\svchost.exe -k LocalService
    [ALG] %SystemRoot%\System32\alg.exe
    [AppMgmt] %SystemRoot%\system32\svchost.exe -k netsvcs
    [AudioSrv] %SystemRoot%\System32\svchost.exe -k netsvcs
    [BackWeb Plug-in - 4436233] C:\PROGRA~1\SONERA~1\backweb\4436233\Program\SERVIC~1.EXE
    [BITS] %SystemRoot%\System32\svchost.exe -k netsvcs
    [Browser] %SystemRoot%\System32\svchost.exe -k netsvcs
    [CiSvc] %SystemRoot%\system32\cisvc.exe
    [ClipSrv] %SystemRoot%\system32\clipsrv.exe
    [COMSysApp] C:\WINDOWS\System32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}
    [CryptSvc] %SystemRoot%\system32\svchost.exe -k netsvcs
    [DcomLaunch] %SystemRoot%\system32\svchost -k DcomLaunch
    [Dhcp] %SystemRoot%\System32\svchost.exe -k netsvcs
    [dmadmin] %SystemRoot%\System32\dmadmin.exe /com
    [dmserver] %SystemRoot%\System32\svchost.exe -k netsvcs
    [Dnscache] %SystemRoot%\System32\svchost.exe -k NetworkService
    [ERSvc] %SystemRoot%\System32\svchost.exe -k netsvcs
    [Eventlog] %SystemRoot%\system32\services.exe
    [EventSystem] C:\WINDOWS\System32\svchost.exe -k netsvcs
    [F-Secure Gatekeeper Handler Starter] "C:\Program Files\TW-IA300C ADSL\Anti-Virus\fsgk32st.exe"
    [FastUserSwitchingCompatibility] %SystemRoot%\System32\svchost.exe -k netsvcs
    [Fax] %systemroot%\system32\fxssvc.exe
    [fsbwsys] "C:\Program Files\Sonera Tietoturva\backweb\4436233\program\fsbwsys.exe"
    [FSDFWD] "C:\Program Files\Sonera Tietoturva\FWES\Program\fsdfwd.exe"
    [fshttps] "C:\Program Files\Sonera Tietoturva\FSPC\fshttps\fshttps.exe"
    [FSMA] "C:\Program Files\TW-IA300C ADSL\Common\FSMA32.EXE"
    [helpsvc] %SystemRoot%\System32\svchost.exe -k netsvcs
    [HidServ] %SystemRoot%\System32\svchost.exe -k netsvcs
    [HTTPFilter] %SystemRoot%\System32\svchost.exe -k HTTPFilter
    [ImapiService] C:\WINDOWS\System32\imapi.exe
    [lanmanserver] %SystemRoot%\System32\svchost.exe -k netsvcs
    [lanmanworkstation] %SystemRoot%\System32\svchost.exe -k netsvcs
    [LmHosts] %SystemRoot%\System32\svchost.exe -k LocalService
    [Messenger] %SystemRoot%\System32\svchost.exe -k netsvcs
    [mnmsrvc] C:\WINDOWS\System32\mnmsrvc.exe
    [MSDTC] C:\WINDOWS\System32\msdtc.exe
    [MSIServer] C:\WINDOWS\system32\msiexec.exe /V
    [NetDDE] %SystemRoot%\system32\netdde.exe
    [NetDDEdsdm] %SystemRoot%\system32\netdde.exe
    [Netlogon] %SystemRoot%\System32\lsass.exe
    [Netman] %SystemRoot%\System32\svchost.exe -k netsvcs
    [Nla] %SystemRoot%\System32\svchost.exe -k netsvcs
    [NtLmSsp] %SystemRoot%\System32\lsass.exe
    [NtmsSvc] %SystemRoot%\system32\svchost.exe -k netsvcs
    [PlugPlay] %SystemRoot%\system32\services.exe
    [Pml Driver HPZ12] C:\WINDOWS\system32\HPZipm12.exe
    [PolicyAgent] %SystemRoot%\System32\lsass.exe
    [ProtectedStorage] %SystemRoot%\system32\lsass.exe
    [RasAuto] %SystemRoot%\System32\svchost.exe -k netsvcs
    [RasMan] %SystemRoot%\System32\svchost.exe -k netsvcs
    [RDSessMgr] C:\WINDOWS\system32\sessmgr.exe
    [RemoteAccess] %SystemRoot%\System32\svchost.exe -k netsvcs
    [RpcLocator] %SystemRoot%\System32\locator.exe
    [RpcSs] %SystemRoot%\system32\svchost -k rpcss
    [RSVP] %SystemRoot%\System32\rsvp.exe
    [SamSs] %SystemRoot%\system32\lsass.exe
    [SCardSvr] %SystemRoot%\System32\SCardSvr.exe
    [Schedule] %SystemRoot%\System32\svchost.exe -k netsvcs
    [seclogon] %SystemRoot%\System32\svchost.exe -k netsvcs
    [SENS] %SystemRoot%\system32\svchost.exe -k netsvcs
    [SharedAccess] %SystemRoot%\System32\svchost.exe -k netsvcs
    [ShellHWDetection] %SystemRoot%\System32\svchost.exe -k netsvcs
    [SLService] slserv.exe
    [Spooler] %SystemRoot%\system32\spoolsv.exe
    [srservice] %SystemRoot%\System32\svchost.exe -k netsvcs
    [SSDPSRV] %SystemRoot%\System32\svchost.exe -k LocalService
    [stisvc] %SystemRoot%\System32\svchost.exe -k imgsvc
    [SwPrv] C:\WINDOWS\System32\dllhost.exe /Processid:{2CE119F0-EBD7-4651-9B40-847B820AEF3D}
    [SysmonLog] %SystemRoot%\system32\smlogsvc.exe
    [TapiSrv] %SystemRoot%\System32\svchost.exe -k netsvcs
    [TermService] %SystemRoot%\System32\svchost -k DComLaunch
    [Themes] %SystemRoot%\System32\svchost.exe -k netsvcs
    [TrkWks] %SystemRoot%\system32\svchost.exe -k netsvcs
    [UMWdf] C:\WINDOWS\System32\wdfmgr.exe
    [upnphost] %SystemRoot%\System32\svchost.exe -k LocalService
    [UPS] %SystemRoot%\System32\ups.exe
    [VSS] %SystemRoot%\System32\vssvc.exe
    [W32Time] %SystemRoot%\System32\svchost.exe -k netsvcs
    [WebClient] %SystemRoot%\System32\svchost.exe -k LocalService
    [winmgmt] %systemroot%\system32\svchost.exe -k netsvcs
    [WmdmPmSN] %SystemRoot%\System32\svchost.exe -k netsvcs
    [WmiApSrv] C:\WINDOWS\System32\wbem\wmiapsrv.exe
    [wscsvc] %SystemRoot%\System32\svchost.exe -k netsvcs
    [wuauserv] %systemroot%\system32\svchost.exe -k netsvcs
    [WZCSVC] %SystemRoot%\System32\svchost.exe -k netsvcs
    [xmlprov] %SystemRoot%\System32\svchost.exe -k netsvcs


    **** Custom IE Search Items ****

    SEARCH: [SearchAssistant] http://www.google.com/ie
    SEARCH: [CustomizeSearch] http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm


    **** Complete IE Options ****

    IEOPT: [NoUpdateCheck]
    IEOPT: [NoJITSetup]
    IEOPT: [Disable Script Debugger] yes
    IEOPT: [Show_ChannelBand] No
    IEOPT: [Anchor Underline] yes
    IEOPT: [Cache_Update_Frequency] Once_Per_Session
    IEOPT: [Display Inline Images] yes
    IEOPT: [Do404Search]
    IEOPT: [Local Page] C:\WINDOWS\system32\blank.htm
    IEOPT: [Save_Session_History_On_Exit] no
    IEOPT: [Show_FullURL] no
    IEOPT: [Show_StatusBar] yes
    IEOPT: [Show_ToolBar] yes
    IEOPT: [Show_URLinStatusBar] yes
    IEOPT: [Show_URLToolBar] yes
    IEOPT: [Start Page] http://www.suomi24.fi/
    IEOPT: [Use_DlgBox_Colors] yes
    IEOPT: [Search Page] http://www.google.com
    IEOPT: [FullScreen] no
    IEOPT: [Window_Placement] ,
    IEOPT: [Use FormSuggest] no
    IEOPT: [FormSuggest Passwords] no
    IEOPT: [FormSuggest PW Ask] no
    IEOPT: [SmoothScroll]
    IEOPT: [Page_Transitions]
    IEOPT: [ShowGoButton] yes
    IEOPT: [Friendly http errors] yes
    IEOPT: [Error Dlg Displayed On Every Error] no
    IEOPT: [Enable_MyPics_Hoverbar] yes
    IEOPT: [Enable AutoImageResize] yes
    IEOPT: [Play_Animations] yes
    IEOPT: [Display Inline Videos] yes
    IEOPT: [Play_Background_Sounds] yes
    IEOPT: [Show image placeholders]
    IEOPT: [Print_Background] no
    IEOPT: [Window Title] Microsoft Internet Explorer - toimittaja Sonera Internet
    IEOPT: [LastCheckedHi] =[Æosoft Internet Explorer - toimittaja Sonera Internet
    IEOPT: [NotifyDownloadComplete] yes
    IEOPT: [AddToFavoritesExpanded]
    IEOPT: [Use Search Asst] no
    IEOPT: [Expand Alt Text] no
    IEOPT: [Move System Caret] no
    IEOPT: [NoWebJITSetup]
    IEOPT: [AllowWindowReuse]
    IEOPT: [UseThemes]
    IEOPT: [FavIntelliMenus] no
    IEOPT: [Force Offscreen Composition]
    IEOPT: [NscSingleExpand]
    IEOPT: [DisableScriptDebuggerIE] yes
    IEOPT: [HistoryViewType]
    IEOPT: [AutoSearch]
    IEOPT: [Search Bar] http://www.google.com/ie
    IEOPT: [Enable Browser Extensions] yes
    IEOPT: [Default_Page_URL] http://www.soneraplaza.fi
    IEOPT: [Default_Search_URL] http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    IEOPT: [Search Page] http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    IEOPT: [Enable_Disk_Cache] yes
    IEOPT: [Cache_Percent_of_Disk]
    IEOPT: [Delete_Temp_Files_On_Exit] yes
    IEOPT: [Local Page] http://security.kolla.de/
    IEOPT: [Anchor_Visitation_Horizon]
    IEOPT: [Use_Async_DNS] yes
    IEOPT: [Placeholder_Width]
    IEOPT: [Placeholder_Height]
    IEOPT: [Start Page] http://www.msn.com
    IEOPT: [Wizard_Version] 6.00.2800.1106
    IEOPT: [FullScreen] no
    IEOPT: [CompanyName] Microsoft Corporation
    IEOPT: [Custom_Key] MICROSO
    IEOPT: [AddClsReg]
    IEOPT: [TLBAssBfin]
    IEOPT: [TLBAssBact]
    IEOPT: [TLBAssBlistn]
    IEOPT: [TLBAssBlist] ,www.leonia.fi,www.sampo.fi
    561806
    Äänestä

    Muut lukivat myös

    Vastaukset 56

    Vanhimmat

    • Tallenna tuosta linkistä hijackthis.exe koneelle, vaikka työpöydälle.
      Tee C:n juureen HJT-niminen kansio, ja siirrä se exe (valitse/leikkaa) tuohon tekemääsi HJT-kansioon näin (C:\HJT\hijackthis.exe)

      Menen kansioon, Tuplaklikkaa pomminkuvaa, klikkaa "Do a system scan and save a log" ja odota hetki. Kopioi aukeava tekstitiedosto tänne viestiin Juulle, ja odota ohjeita.

      Äänestä

    • skannaus? kirjoitti:

      Tallenna tuosta linkistä hijackthis.exe koneelle, vaikka työpöydälle.
      Tee C:n juureen HJT-niminen kansio, ja siirrä se exe (valitse/leikkaa) tuohon tekemääsi HJT-kansioon näin (C:\HJT\hijackthis.exe)

      Menen kansioon, Tuplaklikkaa pomminkuvaa, klikkaa "Do a system scan and save a log" ja odota hetki. Kopioi aukeava tekstitiedosto tänne viestiin Juulle, ja odota ohjeita.

      hijackthis.exe siitä kun klikkaa ja asentaa sen



      klkaamalla käynnistänappia hiiren oikealla korvalla ja sitten etsit kansion HJT avaat sen sieltä löytyy pommin kuva tuplaklikkaat sitä.

      Äänestä

    • skannaus? kirjoitti:

      Tallenna tuosta linkistä hijackthis.exe koneelle, vaikka työpöydälle.
      Tee C:n juureen HJT-niminen kansio, ja siirrä se exe (valitse/leikkaa) tuohon tekemääsi HJT-kansioon näin (C:\HJT\hijackthis.exe)

      Menen kansioon, Tuplaklikkaa pomminkuvaa, klikkaa "Do a system scan and save a log" ja odota hetki. Kopioi aukeava tekstitiedosto tänne viestiin Juulle, ja odota ohjeita.

      Do a system scan and save a logfile

      Ponnahtaa hetken päästä muistio jonka maalaat kokonaan kopioit ja liität tänne.

      Äänestä

    • skannaus? kirjoitti:

      Tallenna tuosta linkistä hijackthis.exe koneelle, vaikka työpöydälle.
      Tee C:n juureen HJT-niminen kansio, ja siirrä se exe (valitse/leikkaa) tuohon tekemääsi HJT-kansioon näin (C:\HJT\hijackthis.exe)

      Menen kansioon, Tuplaklikkaa pomminkuvaa, klikkaa "Do a system scan and save a log" ja odota hetki. Kopioi aukeava tekstitiedosto tänne viestiin Juulle, ja odota ohjeita.

      Tulee näyttöön seuraavanlainen ikkuna, missä viestiä: Sovelluksen käynnistäminen ei onnistu, koska MSVBVM60.DDL EI LÖYTYNYT. sovelluksen uudelleenasentaminen saattaa korjata ongelman.

      Taitaa kone olla todella solmussa. Ja järjestelmän paluttaminenkaan ei onnistu täydellisesti.

      Äänestä

    • edes ; kirjoitti:

      Tulee näyttöön seuraavanlainen ikkuna, missä viestiä: Sovelluksen käynnistäminen ei onnistu, koska MSVBVM60.DDL EI LÖYTYNYT. sovelluksen uudelleenasentaminen saattaa korjata ongelman.

      Taitaa kone olla todella solmussa. Ja järjestelmän paluttaminenkaan ei onnistu täydellisesti.

      rauhallisesti vaan. Lataa tuolta puuttuva tiedosto koneellesi :
      http://www.dll-files.com/dllindex/dll-files.shtml?msvbvm60

      Asenna se tuonne :

      C:\WINDOWS\System32\

      Äänestä

    • juggis kirjoitti:

      rauhallisesti vaan. Lataa tuolta puuttuva tiedosto koneellesi :
      http://www.dll-files.com/dllindex/dll-files.shtml?msvbvm60

      Asenna se tuonne :

      C:\WINDOWS\System32\

      ja onnistui:


      Logfile of HijackThis v1.99.1
      Scan saved at 11:40:37, on 14.4.2006
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\PROGRA~1\SONERA~1\backweb\4436233\Program\SERVIC~1.EXE
      C:\Program Files\TW-IA300C ADSL\Anti-Virus\fsgk32st.exe
      C:\Program Files\Sonera Tietoturva\backweb\4436233\program\fsbwsys.exe
      C:\Program Files\Sonera Tietoturva\Anti-Virus\FSGK32.EXE
      C:\Program Files\TW-IA300C ADSL\Common\FSMA32.EXE
      C:\Program Files\TW-IA300C ADSL\Common\FSMB32.EXE
      C:\WINDOWS\system32\slserv.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Sonera Tietoturva\Anti-Virus\fssm32.exe
      C:\Program Files\Sonera Tietoturva\Common\FCH32.EXE
      C:\Program Files\Sonera Tietoturva\Common\FAMEH32.EXE
      C:\Program Files\Sonera Tietoturva\Anti-Virus\fsrw.exe
      C:\Program Files\Sonera Tietoturva\FSPC\fspc.exe
      C:\Program Files\Sonera Tietoturva\Anti-Virus\fsav32.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\Sonera Tietoturva\FWES\Program\fsdfwd.exe
      C:\ATI-CPanel\atiptaxx.exe
      C:\WINDOWS\SOUNDMAN.EXE
      C:\Program Files\TW-IA300C ADSL\CnxDslTb.exe
      C:\Program Files\Sonera Tietoturva\Common\FSM32.EXE
      C:\Program Files\Sonera Tietoturva\FSGUI\ispnews.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
      C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
      C:\Documents and Settings\Wilenius Jani\Työpöytä\Winamp\winampa.exe
      C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
      C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
      C:\WINDOWS\system32\hphmon05.exe
      C:\WINDOWS\System32\svchost.exe
      C:\PROGRA~1\SONERA~1\ANTI-S~1\fsaw.exe
      C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
      C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
      C:\Program Files\Sonera Tietoturva\FSGUI\fsguidll.exe
      C:\Program Files\QuickTime\qttask.exe
      C:\WINDOWS\system32\HPZipm12.exe
      C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\Messenger\msmsgs.exe
      C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
      C:\Program Files\Sonera Tietoturva\backweb\4436233\Program\fspex.exe
      C:\Program Files\Lavasoft\Ad-Aware SE Personal\Ad-Aware.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\WINDOWS\HijackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.suomi24.fi/
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.soneraplaza.fi
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = http://security.kolla.de/
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer - toimittaja Sonera Internet
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.dial.inet.fi:800
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.fi;*.*.fi;*.*.*.fi;
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
      O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
      O2 - BHO: Popup Blocker - {593FA054-6BFB-4ce5-B87A-0A68DB7C0F08} - C:\WINDOWS\System32\EniroToolbar\PopupBlocker.dll
      O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.02.3000.1002\en-xu\stmain.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
      O3 - Toolbar: Eniro - {A3C4086C-097C-46b0-AFB0-76B5CC294233} - C:\WINDOWS\System32\EniroToolbar\Toolband.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
      O4 - HKLM\..\Run: [ATIPTA] C:\ATI-CPanel\atiptaxx.exe
      O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
      O4 - HKLM\..\Run: [CnxDslTaskBar] "C:\Program Files\\TW-IA300C ADSL\CnxDslTb.exe"
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Sonera Tietoturva\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Sonera Tietoturva\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
      O4 - HKLM\..\Run: [News Service] "C:\Program Files\Sonera Tietoturva\FSGUI\ispnews.exe"
      O4 - HKLM\..\Run: [CamMonitor] C:\Program Files\Hewlett-Packard\Digital Imaging\\Unload\hpqcmon.exe
      O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
      O4 - HKLM\..\Run: [AVSCHED32] C:\Program Files\AVPersonal\AVSched32.EXE /min
      O4 - HKLM\..\Run: [SpybotSnD] "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe" /autocheck /waitprograms
      O4 - HKLM\..\Run: [WinampAgent] C:\Documents and Settings\Wilenius Jani\Työpöytä\Winamp\winampa.exe
      O4 - HKLM\..\Run: [HPHUPD05] C:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
      O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
      O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe"
      O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\system32\hphmon05.exe
      O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\FirstStart.exe
      O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\Sonera Tietoturva\FSGUI\FSSW.EXE" /reboot
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      O4 - HKLM\..\RunOnce: [RichEd32.dll] regsvr32.exe /s C:\WINDOWS\system32\RichEd32.dll
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
      O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
      O4 - HKCU\..\Run: [Spyware Doctor] "C:\Program Files\Spyware Doctor\swdoctor.exe" /Q
      O4 - HKCU\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe -NoStart
      O4 - Global Startup: Sonera Tietoturva.lnk = C:\Program Files\Sonera Tietoturva\backweb\4436233\Program\fspex.exe
      O8 - Extra context menu item: &Estä tämä kohoikkuna - C:\Program Files\Sonera Tietoturva\Anti-Spyware\blockpopups.htm
      O8 - Extra context menu item: Hae Eniron avulla - res://C:\WINDOWS\System32\EniroToolbar\Toolband.dll/MENUSEARCH_FI.HTM
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra button: Web-suodatin - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: Web-suodatin - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F02} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: &Keskeytä Web-sivujen suodatus - {200DB664-75B5-47c0-8B45-A44ACCF73F02} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F03} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: &Kiellä tämä Web-sivusto - {200DB664-75B5-47c0-8B45-A44ACCF73F03} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F04} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: &Salli tämä Web-sivusto - {200DB664-75B5-47c0-8B45-A44ACCF73F04} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Sonera Tietoturva\Anti-Spyware\ieshield.dll
      O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Sonera Tietoturva\Anti-Spyware\ieshield.dll
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O10 - Broken Internet access because of LSP provider 'winsflt.dll' missing
      O14 - IERESET.INF: START_PAGE_URL=http://www.soneraplaza.fi
      O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/WebsiteAccess/ie/bridge-c18.cab
      O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
      O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} -
      O16 - DPF: {2A32B14F-4D29-4EA3-AC54-E9B19F436CE7} (Scanner Class) - http://www.windowsecurity.com/trojanscan/TDECntrl.CAB
      O16 - DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} (ASquaredScanForm Element) - http://www.windowsecurity.com/trojanscan/axscan.cab
      O16 - DPF: {E991BDE0-9816-4094-853E-6BDB60F0342D} (Get_ActiveX Control) - http://apps.corel.com/nos_dl_manager/plugin/IENetOpPlugin.ocx
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
      O23 - Service: Sonera Tietoturva (BackWeb Plug-in - 4436233) - Sonera Tietoturva - C:\PROGRA~1\SONERA~1\backweb\4436233\Program\SERVIC~1.EXE
      O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\TW-IA300C ADSL\Anti-Virus\fsgk32st.exe
      O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\Sonera Tietoturva\backweb\4436233\program\fsbwsys.exe
      O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Sonera Tietoturva\FWES\Program\fsdfwd.exe
      O23 - Service: F-Secure HTTP Server (fshttps) - F-Secure Corporation - C:\Program Files\Sonera Tietoturva\FSPC\fshttps\fshttps.exe
      O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\TW-IA300C ADSL\Common\FSMA32.EXE
      O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
      O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe


      On teikäläiset varsinaisia velhoja, vaikka pääsiäinen onkin.

      Äänestä

    • pelittämään; kirjoitti:

      ja onnistui:


      Logfile of HijackThis v1.99.1
      Scan saved at 11:40:37, on 14.4.2006
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\PROGRA~1\SONERA~1\backweb\4436233\Program\SERVIC~1.EXE
      C:\Program Files\TW-IA300C ADSL\Anti-Virus\fsgk32st.exe
      C:\Program Files\Sonera Tietoturva\backweb\4436233\program\fsbwsys.exe
      C:\Program Files\Sonera Tietoturva\Anti-Virus\FSGK32.EXE
      C:\Program Files\TW-IA300C ADSL\Common\FSMA32.EXE
      C:\Program Files\TW-IA300C ADSL\Common\FSMB32.EXE
      C:\WINDOWS\system32\slserv.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Sonera Tietoturva\Anti-Virus\fssm32.exe
      C:\Program Files\Sonera Tietoturva\Common\FCH32.EXE
      C:\Program Files\Sonera Tietoturva\Common\FAMEH32.EXE
      C:\Program Files\Sonera Tietoturva\Anti-Virus\fsrw.exe
      C:\Program Files\Sonera Tietoturva\FSPC\fspc.exe
      C:\Program Files\Sonera Tietoturva\Anti-Virus\fsav32.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\Sonera Tietoturva\FWES\Program\fsdfwd.exe
      C:\ATI-CPanel\atiptaxx.exe
      C:\WINDOWS\SOUNDMAN.EXE
      C:\Program Files\TW-IA300C ADSL\CnxDslTb.exe
      C:\Program Files\Sonera Tietoturva\Common\FSM32.EXE
      C:\Program Files\Sonera Tietoturva\FSGUI\ispnews.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
      C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
      C:\Documents and Settings\Wilenius Jani\Työpöytä\Winamp\winampa.exe
      C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
      C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
      C:\WINDOWS\system32\hphmon05.exe
      C:\WINDOWS\System32\svchost.exe
      C:\PROGRA~1\SONERA~1\ANTI-S~1\fsaw.exe
      C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
      C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
      C:\Program Files\Sonera Tietoturva\FSGUI\fsguidll.exe
      C:\Program Files\QuickTime\qttask.exe
      C:\WINDOWS\system32\HPZipm12.exe
      C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\Messenger\msmsgs.exe
      C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
      C:\Program Files\Sonera Tietoturva\backweb\4436233\Program\fspex.exe
      C:\Program Files\Lavasoft\Ad-Aware SE Personal\Ad-Aware.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\WINDOWS\HijackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.suomi24.fi/
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.soneraplaza.fi
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = http://security.kolla.de/
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer - toimittaja Sonera Internet
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.dial.inet.fi:800
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.fi;*.*.fi;*.*.*.fi;
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
      O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
      O2 - BHO: Popup Blocker - {593FA054-6BFB-4ce5-B87A-0A68DB7C0F08} - C:\WINDOWS\System32\EniroToolbar\PopupBlocker.dll
      O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.02.3000.1002\en-xu\stmain.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
      O3 - Toolbar: Eniro - {A3C4086C-097C-46b0-AFB0-76B5CC294233} - C:\WINDOWS\System32\EniroToolbar\Toolband.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
      O4 - HKLM\..\Run: [ATIPTA] C:\ATI-CPanel\atiptaxx.exe
      O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
      O4 - HKLM\..\Run: [CnxDslTaskBar] "C:\Program Files\\TW-IA300C ADSL\CnxDslTb.exe"
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Sonera Tietoturva\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Sonera Tietoturva\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
      O4 - HKLM\..\Run: [News Service] "C:\Program Files\Sonera Tietoturva\FSGUI\ispnews.exe"
      O4 - HKLM\..\Run: [CamMonitor] C:\Program Files\Hewlett-Packard\Digital Imaging\\Unload\hpqcmon.exe
      O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
      O4 - HKLM\..\Run: [AVSCHED32] C:\Program Files\AVPersonal\AVSched32.EXE /min
      O4 - HKLM\..\Run: [SpybotSnD] "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe" /autocheck /waitprograms
      O4 - HKLM\..\Run: [WinampAgent] C:\Documents and Settings\Wilenius Jani\Työpöytä\Winamp\winampa.exe
      O4 - HKLM\..\Run: [HPHUPD05] C:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
      O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
      O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe"
      O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\system32\hphmon05.exe
      O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\FirstStart.exe
      O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\Sonera Tietoturva\FSGUI\FSSW.EXE" /reboot
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      O4 - HKLM\..\RunOnce: [RichEd32.dll] regsvr32.exe /s C:\WINDOWS\system32\RichEd32.dll
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
      O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
      O4 - HKCU\..\Run: [Spyware Doctor] "C:\Program Files\Spyware Doctor\swdoctor.exe" /Q
      O4 - HKCU\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe -NoStart
      O4 - Global Startup: Sonera Tietoturva.lnk = C:\Program Files\Sonera Tietoturva\backweb\4436233\Program\fspex.exe
      O8 - Extra context menu item: &Estä tämä kohoikkuna - C:\Program Files\Sonera Tietoturva\Anti-Spyware\blockpopups.htm
      O8 - Extra context menu item: Hae Eniron avulla - res://C:\WINDOWS\System32\EniroToolbar\Toolband.dll/MENUSEARCH_FI.HTM
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra button: Web-suodatin - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: Web-suodatin - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F02} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: &Keskeytä Web-sivujen suodatus - {200DB664-75B5-47c0-8B45-A44ACCF73F02} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F03} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: &Kiellä tämä Web-sivusto - {200DB664-75B5-47c0-8B45-A44ACCF73F03} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F04} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: &Salli tämä Web-sivusto - {200DB664-75B5-47c0-8B45-A44ACCF73F04} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Sonera Tietoturva\Anti-Spyware\ieshield.dll
      O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Sonera Tietoturva\Anti-Spyware\ieshield.dll
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O10 - Broken Internet access because of LSP provider 'winsflt.dll' missing
      O14 - IERESET.INF: START_PAGE_URL=http://www.soneraplaza.fi
      O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/WebsiteAccess/ie/bridge-c18.cab
      O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
      O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} -
      O16 - DPF: {2A32B14F-4D29-4EA3-AC54-E9B19F436CE7} (Scanner Class) - http://www.windowsecurity.com/trojanscan/TDECntrl.CAB
      O16 - DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} (ASquaredScanForm Element) - http://www.windowsecurity.com/trojanscan/axscan.cab
      O16 - DPF: {E991BDE0-9816-4094-853E-6BDB60F0342D} (Get_ActiveX Control) - http://apps.corel.com/nos_dl_manager/plugin/IENetOpPlugin.ocx
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
      O23 - Service: Sonera Tietoturva (BackWeb Plug-in - 4436233) - Sonera Tietoturva - C:\PROGRA~1\SONERA~1\backweb\4436233\Program\SERVIC~1.EXE
      O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\TW-IA300C ADSL\Anti-Virus\fsgk32st.exe
      O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\Sonera Tietoturva\backweb\4436233\program\fsbwsys.exe
      O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Sonera Tietoturva\FWES\Program\fsdfwd.exe
      O23 - Service: F-Secure HTTP Server (fshttps) - F-Secure Corporation - C:\Program Files\Sonera Tietoturva\FSPC\fshttps\fshttps.exe
      O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\TW-IA300C ADSL\Common\FSMA32.EXE
      O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
      O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe


      On teikäläiset varsinaisia velhoja, vaikka pääsiäinen onkin.

      scannaa HJT:llä merkkaa


      PCTools Spyware Doctor on nolla kaksi jos ei löydy enään koneelta fixsaa alla oleva myös.
      O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)
      O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/WebsiteAccess/ie/bridge-c18.cab
      O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} -

      sulje muut ikkunat ja selain paina Fix checked

      Äänestä

    • Fixsattavaa kirjoitti:

      scannaa HJT:llä merkkaa


      PCTools Spyware Doctor on nolla kaksi jos ei löydy enään koneelta fixsaa alla oleva myös.
      O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)
      O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/WebsiteAccess/ie/bridge-c18.cab
      O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} -

      sulje muut ikkunat ja selain paina Fix checked

      homma ja tälläista jälkeä tuli:

      Logfile of HijackThis v1.99.0
      Scan saved at 13:11:01, on 14.4.2006
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\PROGRA~1\SONERA~1\backweb\4436233\Program\SERVIC~1.EXE
      C:\Program Files\TW-IA300C ADSL\Anti-Virus\fsgk32st.exe
      C:\Program Files\Sonera Tietoturva\backweb\4436233\program\fsbwsys.exe
      C:\Program Files\Sonera Tietoturva\Anti-Virus\FSGK32.EXE
      C:\Program Files\TW-IA300C ADSL\Common\FSMA32.EXE
      C:\Program Files\TW-IA300C ADSL\Common\FSMB32.EXE
      C:\WINDOWS\system32\slserv.exe
      C:\Program Files\Sonera Tietoturva\Anti-Virus\fssm32.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Sonera Tietoturva\Common\FCH32.EXE
      C:\Program Files\Sonera Tietoturva\Common\FAMEH32.EXE
      C:\Program Files\Sonera Tietoturva\Anti-Virus\fsrw.exe
      C:\Program Files\Sonera Tietoturva\FSPC\fspc.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\Sonera Tietoturva\Anti-Virus\fsav32.exe
      C:\Program Files\Sonera Tietoturva\FWES\Program\fsdfwd.exe
      C:\ATI-CPanel\atiptaxx.exe
      C:\WINDOWS\SOUNDMAN.EXE
      C:\Program Files\TW-IA300C ADSL\CnxDslTb.exe
      C:\Program Files\Sonera Tietoturva\Common\FSM32.EXE
      C:\Program Files\Sonera Tietoturva\FSGUI\ispnews.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
      C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
      C:\Documents and Settings\Wilenius Jani\Työpöytä\Winamp\winampa.exe
      C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
      C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
      C:\WINDOWS\system32\hphmon05.exe
      C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
      C:\Program Files\QuickTime\qttask.exe
      C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\Messenger\msmsgs.exe
      C:\PROGRA~1\SONERA~1\ANTI-S~1\fsaw.exe
      C:\Program Files\Sonera Tietoturva\FSGUI\fsguidll.exe
      C:\WINDOWS\system32\HPZipm12.exe
      C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
      C:\Program Files\Sonera Tietoturva\backweb\4436233\Program\fspex.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\wuauclt.exe
      C:\HijackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.suomi24.fi/
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.soneraplaza.fi
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = http://security.kolla.de/
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer - toimittaja Sonera Internet
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.dial.inet.fi:800
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.fi;*.*.fi;*.*.*.fi;
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
      O2 - BHO: Popup Blocker - {593FA054-6BFB-4ce5-B87A-0A68DB7C0F08} - C:\WINDOWS\System32\EniroToolbar\PopupBlocker.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.02.3000.1002\en-xu\stmain.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
      O3 - Toolbar: Eniro - {A3C4086C-097C-46b0-AFB0-76B5CC294233} - C:\WINDOWS\System32\EniroToolbar\Toolband.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
      O4 - HKLM\..\Run: [ATIPTA] C:\ATI-CPanel\atiptaxx.exe
      O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
      O4 - HKLM\..\Run: [CnxDslTaskBar] "C:\Program Files\\TW-IA300C ADSL\CnxDslTb.exe"
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Sonera Tietoturva\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Sonera Tietoturva\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
      O4 - HKLM\..\Run: [News Service] "C:\Program Files\Sonera Tietoturva\FSGUI\ispnews.exe"
      O4 - HKLM\..\Run: [CamMonitor] C:\Program Files\Hewlett-Packard\Digital Imaging\\Unload\hpqcmon.exe
      O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
      O4 - HKLM\..\Run: [AVSCHED32] C:\Program Files\AVPersonal\AVSched32.EXE /min
      O4 - HKLM\..\Run: [SpybotSnD] "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe" /autocheck /waitprograms
      O4 - HKLM\..\Run: [WinampAgent] C:\Documents and Settings\Wilenius Jani\Työpöytä\Winamp\winampa.exe
      O4 - HKLM\..\Run: [HPHUPD05] C:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
      O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
      O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe"
      O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\system32\hphmon05.exe
      O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\FirstStart.exe
      O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\Sonera Tietoturva\FSGUI\FSSW.EXE" /reboot
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      O4 - HKLM\..\RunOnce: [RichEd32.dll] regsvr32.exe /s C:\WINDOWS\system32\RichEd32.dll
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
      O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
      O4 - HKCU\..\Run: [Spyware Doctor] "C:\Program Files\Spyware Doctor\swdoctor.exe" /Q
      O4 - HKCU\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe -NoStart
      O4 - Global Startup: Sonera Tietoturva.lnk = C:\Program Files\Sonera Tietoturva\backweb\4436233\Program\fspex.exe
      O8 - Extra context menu item: &Estä tämä kohoikkuna - C:\Program Files\Sonera Tietoturva\Anti-Spyware\blockpopups.htm
      O8 - Extra context menu item: Hae Eniron avulla - res://C:\WINDOWS\System32\EniroToolbar\Toolband.dll/MENUSEARCH_FI.HTM
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra button: Web-suodatin - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: Web-suodatin - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F02} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: &Keskeytä Web-sivujen suodatus - {200DB664-75B5-47c0-8B45-A44ACCF73F02} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F03} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: &Kiellä tämä Web-sivusto - {200DB664-75B5-47c0-8B45-A44ACCF73F03} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F04} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: &Salli tämä Web-sivusto - {200DB664-75B5-47c0-8B45-A44ACCF73F04} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Sonera Tietoturva\Anti-Spyware\ieshield.dll
      O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Sonera Tietoturva\Anti-Spyware\ieshield.dll
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O10 - Broken Internet access because of LSP provider 'winsflt.dll' missing
      O14 - IERESET.INF: START_PAGE_URL=http://www.soneraplaza.fi
      O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} -
      O16 - DPF: {2A32B14F-4D29-4EA3-AC54-E9B19F436CE7} (Scanner Class) - http://www.windowsecurity.com/trojanscan/TDECntrl.CAB
      O16 - DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} (ASquaredScanForm Element) - http://www.windowsecurity.com/trojanscan/axscan.cab
      O16 - DPF: {E991BDE0-9816-4094-853E-6BDB60F0342D} (Get_ActiveX Control) - http://apps.corel.com/nos_dl_manager/plugin/IENetOpPlugin.ocx
      O18 - Protocol: cetihpz - {CF184AD3-CDCB-4168-A3F7-8E447D129300} - C:\Program Files\HP\hpcoretech\comp\hpuiprot.dll
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
      O23 - Service: Sonera Tietoturva - Sonera Tietoturva - C:\PROGRA~1\SONERA~1\backweb\4436233\Program\SERVIC~1.EXE
      O23 - Service: Loogisen levyn hallinnan valvontapalvelu - Unknown - C:\WINDOWS\System32\dmadmin.exe
      O23 - Service: Tapahtumaloki - Unknown - C:\WINDOWS\system32\services.exe
      O23 - Service: F-Secure Gatekeeper Handler Starter - Unknown - C:\Program Files\TW-IA300C ADSL\Anti-Virus\fsgk32st.exe
      O23 - Service: Fax - Unknown - C:\WINDOWS\system32\fxssvc.exe
      O23 - Service: fsbwsys - Unknown - C:\Program Files\Sonera Tietoturva\backweb\4436233\program\fsbwsys.exe
      O23 - Service: F-Secure Anti-Virus Firewall Daemon - F-Secure Corporation - C:\Program Files\Sonera Tietoturva\FWES\Program\fsdfwd.exe
      O23 - Service: F-Secure HTTP Server - F-Secure Corporation - C:\Program Files\Sonera Tietoturva\FSPC\fshttps\fshttps.exe
      O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\TW-IA300C ADSL\Common\FSMA32.EXE
      O23 - Service: CD-levyjen kirjoittamisen IMAPI COM -palvelu - Unknown - C:\WINDOWS\System32\imapi.exe


      Ps. mitä ko. tiedot oli ????

      Äänestä

    • nyt on tehty ko. kirjoitti:

      homma ja tälläista jälkeä tuli:

      Logfile of HijackThis v1.99.0
      Scan saved at 13:11:01, on 14.4.2006
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\PROGRA~1\SONERA~1\backweb\4436233\Program\SERVIC~1.EXE
      C:\Program Files\TW-IA300C ADSL\Anti-Virus\fsgk32st.exe
      C:\Program Files\Sonera Tietoturva\backweb\4436233\program\fsbwsys.exe
      C:\Program Files\Sonera Tietoturva\Anti-Virus\FSGK32.EXE
      C:\Program Files\TW-IA300C ADSL\Common\FSMA32.EXE
      C:\Program Files\TW-IA300C ADSL\Common\FSMB32.EXE
      C:\WINDOWS\system32\slserv.exe
      C:\Program Files\Sonera Tietoturva\Anti-Virus\fssm32.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Sonera Tietoturva\Common\FCH32.EXE
      C:\Program Files\Sonera Tietoturva\Common\FAMEH32.EXE
      C:\Program Files\Sonera Tietoturva\Anti-Virus\fsrw.exe
      C:\Program Files\Sonera Tietoturva\FSPC\fspc.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\Sonera Tietoturva\Anti-Virus\fsav32.exe
      C:\Program Files\Sonera Tietoturva\FWES\Program\fsdfwd.exe
      C:\ATI-CPanel\atiptaxx.exe
      C:\WINDOWS\SOUNDMAN.EXE
      C:\Program Files\TW-IA300C ADSL\CnxDslTb.exe
      C:\Program Files\Sonera Tietoturva\Common\FSM32.EXE
      C:\Program Files\Sonera Tietoturva\FSGUI\ispnews.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
      C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
      C:\Documents and Settings\Wilenius Jani\Työpöytä\Winamp\winampa.exe
      C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
      C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
      C:\WINDOWS\system32\hphmon05.exe
      C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
      C:\Program Files\QuickTime\qttask.exe
      C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\Messenger\msmsgs.exe
      C:\PROGRA~1\SONERA~1\ANTI-S~1\fsaw.exe
      C:\Program Files\Sonera Tietoturva\FSGUI\fsguidll.exe
      C:\WINDOWS\system32\HPZipm12.exe
      C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
      C:\Program Files\Sonera Tietoturva\backweb\4436233\Program\fspex.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\wuauclt.exe
      C:\HijackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.suomi24.fi/
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.soneraplaza.fi
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = http://security.kolla.de/
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer - toimittaja Sonera Internet
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.dial.inet.fi:800
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.fi;*.*.fi;*.*.*.fi;
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
      O2 - BHO: Popup Blocker - {593FA054-6BFB-4ce5-B87A-0A68DB7C0F08} - C:\WINDOWS\System32\EniroToolbar\PopupBlocker.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.02.3000.1002\en-xu\stmain.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
      O3 - Toolbar: Eniro - {A3C4086C-097C-46b0-AFB0-76B5CC294233} - C:\WINDOWS\System32\EniroToolbar\Toolband.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
      O4 - HKLM\..\Run: [ATIPTA] C:\ATI-CPanel\atiptaxx.exe
      O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
      O4 - HKLM\..\Run: [CnxDslTaskBar] "C:\Program Files\\TW-IA300C ADSL\CnxDslTb.exe"
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Sonera Tietoturva\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Sonera Tietoturva\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
      O4 - HKLM\..\Run: [News Service] "C:\Program Files\Sonera Tietoturva\FSGUI\ispnews.exe"
      O4 - HKLM\..\Run: [CamMonitor] C:\Program Files\Hewlett-Packard\Digital Imaging\\Unload\hpqcmon.exe
      O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
      O4 - HKLM\..\Run: [AVSCHED32] C:\Program Files\AVPersonal\AVSched32.EXE /min
      O4 - HKLM\..\Run: [SpybotSnD] "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe" /autocheck /waitprograms
      O4 - HKLM\..\Run: [WinampAgent] C:\Documents and Settings\Wilenius Jani\Työpöytä\Winamp\winampa.exe
      O4 - HKLM\..\Run: [HPHUPD05] C:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
      O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
      O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe"
      O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\system32\hphmon05.exe
      O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\FirstStart.exe
      O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\Sonera Tietoturva\FSGUI\FSSW.EXE" /reboot
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      O4 - HKLM\..\RunOnce: [RichEd32.dll] regsvr32.exe /s C:\WINDOWS\system32\RichEd32.dll
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
      O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
      O4 - HKCU\..\Run: [Spyware Doctor] "C:\Program Files\Spyware Doctor\swdoctor.exe" /Q
      O4 - HKCU\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe -NoStart
      O4 - Global Startup: Sonera Tietoturva.lnk = C:\Program Files\Sonera Tietoturva\backweb\4436233\Program\fspex.exe
      O8 - Extra context menu item: &Estä tämä kohoikkuna - C:\Program Files\Sonera Tietoturva\Anti-Spyware\blockpopups.htm
      O8 - Extra context menu item: Hae Eniron avulla - res://C:\WINDOWS\System32\EniroToolbar\Toolband.dll/MENUSEARCH_FI.HTM
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra button: Web-suodatin - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: Web-suodatin - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F02} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: &Keskeytä Web-sivujen suodatus - {200DB664-75B5-47c0-8B45-A44ACCF73F02} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F03} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: &Kiellä tämä Web-sivusto - {200DB664-75B5-47c0-8B45-A44ACCF73F03} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F04} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: &Salli tämä Web-sivusto - {200DB664-75B5-47c0-8B45-A44ACCF73F04} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Sonera Tietoturva\Anti-Spyware\ieshield.dll
      O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Sonera Tietoturva\Anti-Spyware\ieshield.dll
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O10 - Broken Internet access because of LSP provider 'winsflt.dll' missing
      O14 - IERESET.INF: START_PAGE_URL=http://www.soneraplaza.fi
      O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} -
      O16 - DPF: {2A32B14F-4D29-4EA3-AC54-E9B19F436CE7} (Scanner Class) - http://www.windowsecurity.com/trojanscan/TDECntrl.CAB
      O16 - DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} (ASquaredScanForm Element) - http://www.windowsecurity.com/trojanscan/axscan.cab
      O16 - DPF: {E991BDE0-9816-4094-853E-6BDB60F0342D} (Get_ActiveX Control) - http://apps.corel.com/nos_dl_manager/plugin/IENetOpPlugin.ocx
      O18 - Protocol: cetihpz - {CF184AD3-CDCB-4168-A3F7-8E447D129300} - C:\Program Files\HP\hpcoretech\comp\hpuiprot.dll
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
      O23 - Service: Sonera Tietoturva - Sonera Tietoturva - C:\PROGRA~1\SONERA~1\backweb\4436233\Program\SERVIC~1.EXE
      O23 - Service: Loogisen levyn hallinnan valvontapalvelu - Unknown - C:\WINDOWS\System32\dmadmin.exe
      O23 - Service: Tapahtumaloki - Unknown - C:\WINDOWS\system32\services.exe
      O23 - Service: F-Secure Gatekeeper Handler Starter - Unknown - C:\Program Files\TW-IA300C ADSL\Anti-Virus\fsgk32st.exe
      O23 - Service: Fax - Unknown - C:\WINDOWS\system32\fxssvc.exe
      O23 - Service: fsbwsys - Unknown - C:\Program Files\Sonera Tietoturva\backweb\4436233\program\fsbwsys.exe
      O23 - Service: F-Secure Anti-Virus Firewall Daemon - F-Secure Corporation - C:\Program Files\Sonera Tietoturva\FWES\Program\fsdfwd.exe
      O23 - Service: F-Secure HTTP Server - F-Secure Corporation - C:\Program Files\Sonera Tietoturva\FSPC\fshttps\fshttps.exe
      O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\TW-IA300C ADSL\Common\FSMA32.EXE
      O23 - Service: CD-levyjen kirjoittamisen IMAPI COM -palvelu - Unknown - C:\WINDOWS\System32\imapi.exe


      Ps. mitä ko. tiedot oli ????

      Pixsaa tämä myös
      O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} -

      Spyvarea ja Troijalainen

      lataas koneeele spywareplaster
      Ohjeet sivulla
      http://koti.mbnet.fi/pattaya1/spywareblaster.htm

      Äänestä

    • Fixsattavaa kirjoitti:

      Pixsaa tämä myös
      O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} -

      Spyvarea ja Troijalainen

      lataas koneeele spywareplaster
      Ohjeet sivulla
      http://koti.mbnet.fi/pattaya1/spywareblaster.htm

      hommat tehty ja kummati kone alkanut "pelittämään"
      Ad-adware vaan "löytää" kokoajan örkkejä enenmän, kun olen koko repeutaarin ajanut. Hyvä vai paha??

      Ja kummasti kaikenlaista pääsee "läpi" vaikka f-securen estot on tapissa, josko syynä on, kun meitä on 6 käyttäjää samalla koneella. Juniorit vaan haluavat kaikenlaista ohjelmantynkää latailla.

      Äänestä

    • ja kumarrus kirjoitti:

      hommat tehty ja kummati kone alkanut "pelittämään"
      Ad-adware vaan "löytää" kokoajan örkkejä enenmän, kun olen koko repeutaarin ajanut. Hyvä vai paha??

      Ja kummasti kaikenlaista pääsee "läpi" vaikka f-securen estot on tapissa, josko syynä on, kun meitä on 6 käyttäjää samalla koneella. Juniorit vaan haluavat kaikenlaista ohjelmantynkää latailla.

      Tarvis laittaa koneelle spyvareblaster
      http://koti.mbnet.fi/pattaya1/spywareblaster.htm
      ohjeet sivulla

      Jokaisen puoli puhdistukseen kerta laakista

      sitten tuo escan on myös hyvä puhdistelija siintäkin voi laitaa sen viruslokin tänne.

      http://koti.mbnet.fi/pattaya1/escanmwav.htm
      ohjeet sivulla

      Äänestä

    • Fixsattavaa kirjoitti:

      Tarvis laittaa koneelle spyvareblaster
      http://koti.mbnet.fi/pattaya1/spywareblaster.htm
      ohjeet sivulla

      Jokaisen puoli puhdistukseen kerta laakista

      sitten tuo escan on myös hyvä puhdistelija siintäkin voi laitaa sen viruslokin tänne.

      http://koti.mbnet.fi/pattaya1/escanmwav.htm
      ohjeet sivulla

      eli spywareblaster asennettu ja oman käyttätilin ajanut läpi, ei mitään. --------- toistaiseksi.

      Täytyypi pitää iso meetinki perheen kanssa ja käydä kaikki 6 käyttäjää läpi ( 2 kpl järjestelmän valvojaa, sekä 4 kpl raijoitetuin oikeuksin olevaa) Joten palailen astialle, jahka saat toimet suoritettua.

      Äänestä

    • Fixsattavaa kirjoitti:

      Tarvis laittaa koneelle spyvareblaster
      http://koti.mbnet.fi/pattaya1/spywareblaster.htm
      ohjeet sivulla

      Jokaisen puoli puhdistukseen kerta laakista

      sitten tuo escan on myös hyvä puhdistelija siintäkin voi laitaa sen viruslokin tänne.

      http://koti.mbnet.fi/pattaya1/escanmwav.htm
      ohjeet sivulla

      eli armaalla tytärpuolella oli ongelmia, jo kirjautumisensa kanssa. Isonpienen juttelun jälkeen tehtiin tällaista:

      Logfile of HijackThis v1.99.0
      Scan saved at 14:53:49, on 15.4.2006
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\system32\HPZipm12.exe
      C:\WINDOWS\Explorer.EXE
      C:\ATI-CPanel\atiptaxx.exe
      C:\WINDOWS\SOUNDMAN.EXE
      C:\Program Files\TW-IA300C ADSL\CnxDslTb.exe
      C:\Program Files\Sonera Tietoturva\Common\FSM32.EXE
      C:\Program Files\Sonera Tietoturva\FSGUI\ispnews.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
      C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
      C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
      C:\WINDOWS\system32\hphmon05.exe
      C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
      C:\Program Files\QuickTime\qttask.exe
      C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\Messenger\msmsgs.exe
      C:\Program Files\MSN Messenger\msnmsgr.exe
      C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe
      C:\PROGRA~1\SONERA~1\ANTI-S~1\fsaw.exe
      C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
      C:\Program Files\Lavasoft\Ad-Aware SE Personal\Ad-Aware.exe
      C:\Program Files\Sonera Tietoturva\backweb\4436233\Program\fspex.exe
      C:\Program Files\Sonera Tietoturva\FSGUI\fsguidll.exe
      C:\HijackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mtv3.fi/salatutelamat/
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.soneraplaza.fi
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = http://security.kolla.de/
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer - toimittaja Sonera Internet
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.dial.inet.fi:800
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.fi;*.*.fi;*.*.*.fi;
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
      O2 - BHO: Popup Blocker - {593FA054-6BFB-4ce5-B87A-0A68DB7C0F08} - C:\WINDOWS\System32\EniroToolbar\PopupBlocker.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.02.3000.1002\en-xu\stmain.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
      O3 - Toolbar: Eniro - {A3C4086C-097C-46b0-AFB0-76B5CC294233} - C:\WINDOWS\System32\EniroToolbar\Toolband.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
      O4 - HKLM\..\Run: [ATIPTA] C:\ATI-CPanel\atiptaxx.exe
      O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
      O4 - HKLM\..\Run: [CnxDslTaskBar] "C:\Program Files\\TW-IA300C ADSL\CnxDslTb.exe"
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Sonera Tietoturva\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Sonera Tietoturva\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
      O4 - HKLM\..\Run: [News Service] "C:\Program Files\Sonera Tietoturva\FSGUI\ispnews.exe"
      O4 - HKLM\..\Run: [CamMonitor] C:\Program Files\Hewlett-Packard\Digital Imaging\\Unload\hpqcmon.exe
      O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
      O4 - HKLM\..\Run: [AVSCHED32] C:\Program Files\AVPersonal\AVSched32.EXE /min
      O4 - HKLM\..\Run: [SpybotSnD] "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe" /autocheck /waitprograms
      O4 - HKLM\..\Run: [WinampAgent] C:\Documents and Settings\Wilenius Jani\Työpöytä\Winamp\winampa.exe
      O4 - HKLM\..\Run: [HPHUPD05] C:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
      O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
      O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe"
      O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\system32\hphmon05.exe
      O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\FirstStart.exe
      O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\Sonera Tietoturva\FSGUI\FSSW.EXE" /reboot
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
      O4 - HKLM\..\RunOnce: [RichEd32.dll] regsvr32.exe /s C:\WINDOWS\system32\RichEd32.dll
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - HKCU\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe
      O4 - Global Startup: Sonera Tietoturva.lnk = C:\Program Files\Sonera Tietoturva\backweb\4436233\Program\fspex.exe
      O8 - Extra context menu item: &Estä tämä kohoikkuna - C:\Program Files\Sonera Tietoturva\Anti-Spyware\blockpopups.htm
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra button: Web-suodatin - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: Web-suodatin - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F02} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: &Keskeytä Web-sivujen suodatus - {200DB664-75B5-47c0-8B45-A44ACCF73F02} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F03} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: &Kiellä tämä Web-sivusto - {200DB664-75B5-47c0-8B45-A44ACCF73F03} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F04} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: &Salli tämä Web-sivusto - {200DB664-75B5-47c0-8B45-A44ACCF73F04} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Sonera Tietoturva\Anti-Spyware\ieshield.dll
      O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Sonera Tietoturva\Anti-Spyware\ieshield.dll
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O10 - Broken Internet access because of LSP provider 'winsflt.dll' missing
      O14 - IERESET.INF: START_PAGE_URL=http://www.soneraplaza.fi
      O16 - DPF: {2A32B14F-4D29-4EA3-AC54-E9B19F436CE7} (Scanner Class) - http://www.windowsecurity.com/trojanscan/TDECntrl.CAB
      O16 - DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} (ASquaredScanForm Element) - http://www.windowsecurity.com/trojanscan/axscan.cab
      O16 - DPF: {E991BDE0-9816-4094-853E-6BDB60F0342D} (Get_ActiveX Control) - http://apps.corel.com/nos_dl_manager/plugin/IENetOpPlugin.ocx
      O18 - Protocol: cetihpz - {CF184AD3-CDCB-4168-A3F7-8E447D129300} - C:\Program Files\HP\hpcoretech\comp\hpuiprot.dll
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
      O23 - Service: Sonera Tietoturva - Sonera Tietoturva - C:\PROGRA~1\SONERA~1\backweb\4436233\Program\SERVIC~1.EXE
      O23 - Service: Loogisen levyn hallinnan valvontapalvelu - Unknown - C:\WINDOWS\System32\dmadmin.exe
      O23 - Service: Tapahtumaloki - Unknown - C:\WINDOWS\system32\services.exe
      O23 - Service: F-Secure Gatekeeper Handler Starter - Unknown - C:\Program Files\TW-IA300C ADSL\Anti-Virus\fsgk32st.exe
      O23 - Service: Fax - Unknown - C:\WINDOWS\system32\fxssvc.exe
      O23 - Service: fsbwsys - Unknown - C:\Program Files\Sonera Tietoturva\backweb\4436233\program\fsbwsys.exe
      O23 - Service: F-Secure Anti-Virus Firewall Daemon - F-Secure Corporation - C:\Program Files\Sonera Tietoturva\FWES\Program\fsdfwd.exe
      O23 - Service: F-Secure HTTP Server - F-Secure Corporation - C:\Program Files\Sonera Tietoturva\FSPC\fshttps\fshttps.exe
      O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\TW-IA300C ADSL\Common\FSMA32.EXE
      O23 - Service: CD-levyjen kirjoittamisen IMAPI COM -palvelu - Unknown - C:\WINDOWS\System32\imapi.exe
      O23 - Service: NetMeeting etätyöpöydän jakaminen - Unknown - C:\WINDOWS\System32\mnmsrvc.exe
      O23 - Service: Plug and Play - Unknown - C:\WINDOWS\system32\services.exe
      O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
      O23 - Service: Etätyöpöydän ohjeen istunnonhallinta - Unknown - C:\WINDOWS\system32\sessmgr.exe
      O23 - Service: Älykortti - Unknown - C:\WINDOWS\System32\SCardSvr.exe
      O23 - Service: SmartLinkService - Unknown - slserv.exe (file missing)
      O23 - Service: Resurssilokit ja -hälytykset - Unknown - C:\WINDOWS\system32\smlogsvc.exe
      O23 - Service: Aseman tilannevedos - Unknown - C:\WINDOWS\System32\vssvc.exe
      O23 - Service: WMI resurssisovitin - Unknown - C:\WINDOWS\System32\wbem\wmiapsrv.exe


      Ihan maalikkona taitaa olla "jotain" väännettävää????

      Äänestä

    • kaksi : kirjoitti:

      eli armaalla tytärpuolella oli ongelmia, jo kirjautumisensa kanssa. Isonpienen juttelun jälkeen tehtiin tällaista:

      Logfile of HijackThis v1.99.0
      Scan saved at 14:53:49, on 15.4.2006
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\system32\HPZipm12.exe
      C:\WINDOWS\Explorer.EXE
      C:\ATI-CPanel\atiptaxx.exe
      C:\WINDOWS\SOUNDMAN.EXE
      C:\Program Files\TW-IA300C ADSL\CnxDslTb.exe
      C:\Program Files\Sonera Tietoturva\Common\FSM32.EXE
      C:\Program Files\Sonera Tietoturva\FSGUI\ispnews.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
      C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
      C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
      C:\WINDOWS\system32\hphmon05.exe
      C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
      C:\Program Files\QuickTime\qttask.exe
      C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\Messenger\msmsgs.exe
      C:\Program Files\MSN Messenger\msnmsgr.exe
      C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe
      C:\PROGRA~1\SONERA~1\ANTI-S~1\fsaw.exe
      C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
      C:\Program Files\Lavasoft\Ad-Aware SE Personal\Ad-Aware.exe
      C:\Program Files\Sonera Tietoturva\backweb\4436233\Program\fspex.exe
      C:\Program Files\Sonera Tietoturva\FSGUI\fsguidll.exe
      C:\HijackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mtv3.fi/salatutelamat/
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.soneraplaza.fi
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = http://security.kolla.de/
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer - toimittaja Sonera Internet
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.dial.inet.fi:800
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.fi;*.*.fi;*.*.*.fi;
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
      O2 - BHO: Popup Blocker - {593FA054-6BFB-4ce5-B87A-0A68DB7C0F08} - C:\WINDOWS\System32\EniroToolbar\PopupBlocker.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.02.3000.1002\en-xu\stmain.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
      O3 - Toolbar: Eniro - {A3C4086C-097C-46b0-AFB0-76B5CC294233} - C:\WINDOWS\System32\EniroToolbar\Toolband.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
      O4 - HKLM\..\Run: [ATIPTA] C:\ATI-CPanel\atiptaxx.exe
      O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
      O4 - HKLM\..\Run: [CnxDslTaskBar] "C:\Program Files\\TW-IA300C ADSL\CnxDslTb.exe"
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Sonera Tietoturva\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Sonera Tietoturva\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
      O4 - HKLM\..\Run: [News Service] "C:\Program Files\Sonera Tietoturva\FSGUI\ispnews.exe"
      O4 - HKLM\..\Run: [CamMonitor] C:\Program Files\Hewlett-Packard\Digital Imaging\\Unload\hpqcmon.exe
      O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
      O4 - HKLM\..\Run: [AVSCHED32] C:\Program Files\AVPersonal\AVSched32.EXE /min
      O4 - HKLM\..\Run: [SpybotSnD] "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe" /autocheck /waitprograms
      O4 - HKLM\..\Run: [WinampAgent] C:\Documents and Settings\Wilenius Jani\Työpöytä\Winamp\winampa.exe
      O4 - HKLM\..\Run: [HPHUPD05] C:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
      O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
      O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe"
      O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\system32\hphmon05.exe
      O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\FirstStart.exe
      O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\Sonera Tietoturva\FSGUI\FSSW.EXE" /reboot
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
      O4 - HKLM\..\RunOnce: [RichEd32.dll] regsvr32.exe /s C:\WINDOWS\system32\RichEd32.dll
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - HKCU\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe
      O4 - Global Startup: Sonera Tietoturva.lnk = C:\Program Files\Sonera Tietoturva\backweb\4436233\Program\fspex.exe
      O8 - Extra context menu item: &Estä tämä kohoikkuna - C:\Program Files\Sonera Tietoturva\Anti-Spyware\blockpopups.htm
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra button: Web-suodatin - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: Web-suodatin - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F02} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: &Keskeytä Web-sivujen suodatus - {200DB664-75B5-47c0-8B45-A44ACCF73F02} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F03} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: &Kiellä tämä Web-sivusto - {200DB664-75B5-47c0-8B45-A44ACCF73F03} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F04} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: &Salli tämä Web-sivusto - {200DB664-75B5-47c0-8B45-A44ACCF73F04} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Sonera Tietoturva\Anti-Spyware\ieshield.dll
      O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Sonera Tietoturva\Anti-Spyware\ieshield.dll
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O10 - Broken Internet access because of LSP provider 'winsflt.dll' missing
      O14 - IERESET.INF: START_PAGE_URL=http://www.soneraplaza.fi
      O16 - DPF: {2A32B14F-4D29-4EA3-AC54-E9B19F436CE7} (Scanner Class) - http://www.windowsecurity.com/trojanscan/TDECntrl.CAB
      O16 - DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} (ASquaredScanForm Element) - http://www.windowsecurity.com/trojanscan/axscan.cab
      O16 - DPF: {E991BDE0-9816-4094-853E-6BDB60F0342D} (Get_ActiveX Control) - http://apps.corel.com/nos_dl_manager/plugin/IENetOpPlugin.ocx
      O18 - Protocol: cetihpz - {CF184AD3-CDCB-4168-A3F7-8E447D129300} - C:\Program Files\HP\hpcoretech\comp\hpuiprot.dll
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
      O23 - Service: Sonera Tietoturva - Sonera Tietoturva - C:\PROGRA~1\SONERA~1\backweb\4436233\Program\SERVIC~1.EXE
      O23 - Service: Loogisen levyn hallinnan valvontapalvelu - Unknown - C:\WINDOWS\System32\dmadmin.exe
      O23 - Service: Tapahtumaloki - Unknown - C:\WINDOWS\system32\services.exe
      O23 - Service: F-Secure Gatekeeper Handler Starter - Unknown - C:\Program Files\TW-IA300C ADSL\Anti-Virus\fsgk32st.exe
      O23 - Service: Fax - Unknown - C:\WINDOWS\system32\fxssvc.exe
      O23 - Service: fsbwsys - Unknown - C:\Program Files\Sonera Tietoturva\backweb\4436233\program\fsbwsys.exe
      O23 - Service: F-Secure Anti-Virus Firewall Daemon - F-Secure Corporation - C:\Program Files\Sonera Tietoturva\FWES\Program\fsdfwd.exe
      O23 - Service: F-Secure HTTP Server - F-Secure Corporation - C:\Program Files\Sonera Tietoturva\FSPC\fshttps\fshttps.exe
      O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\TW-IA300C ADSL\Common\FSMA32.EXE
      O23 - Service: CD-levyjen kirjoittamisen IMAPI COM -palvelu - Unknown - C:\WINDOWS\System32\imapi.exe
      O23 - Service: NetMeeting etätyöpöydän jakaminen - Unknown - C:\WINDOWS\System32\mnmsrvc.exe
      O23 - Service: Plug and Play - Unknown - C:\WINDOWS\system32\services.exe
      O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
      O23 - Service: Etätyöpöydän ohjeen istunnonhallinta - Unknown - C:\WINDOWS\system32\sessmgr.exe
      O23 - Service: Älykortti - Unknown - C:\WINDOWS\System32\SCardSvr.exe
      O23 - Service: SmartLinkService - Unknown - slserv.exe (file missing)
      O23 - Service: Resurssilokit ja -hälytykset - Unknown - C:\WINDOWS\system32\smlogsvc.exe
      O23 - Service: Aseman tilannevedos - Unknown - C:\WINDOWS\System32\vssvc.exe
      O23 - Service: WMI resurssisovitin - Unknown - C:\WINDOWS\System32\wbem\wmiapsrv.exe


      Ihan maalikkona taitaa olla "jotain" väännettävää????

      Scannaa HJT:llä merkka paina Fix checked

      O4 - HKLM\..\Run: [AVSCHED32] C:\Program Files\AVPersonal\AVSched32.EXE /min

      Poista kansio
      C:\Program Files\---> AVPersonal

      Äänestä

    • kaksi : kirjoitti:

      eli armaalla tytärpuolella oli ongelmia, jo kirjautumisensa kanssa. Isonpienen juttelun jälkeen tehtiin tällaista:

      Logfile of HijackThis v1.99.0
      Scan saved at 14:53:49, on 15.4.2006
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\system32\HPZipm12.exe
      C:\WINDOWS\Explorer.EXE
      C:\ATI-CPanel\atiptaxx.exe
      C:\WINDOWS\SOUNDMAN.EXE
      C:\Program Files\TW-IA300C ADSL\CnxDslTb.exe
      C:\Program Files\Sonera Tietoturva\Common\FSM32.EXE
      C:\Program Files\Sonera Tietoturva\FSGUI\ispnews.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
      C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
      C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
      C:\WINDOWS\system32\hphmon05.exe
      C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
      C:\Program Files\QuickTime\qttask.exe
      C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\Messenger\msmsgs.exe
      C:\Program Files\MSN Messenger\msnmsgr.exe
      C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe
      C:\PROGRA~1\SONERA~1\ANTI-S~1\fsaw.exe
      C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
      C:\Program Files\Lavasoft\Ad-Aware SE Personal\Ad-Aware.exe
      C:\Program Files\Sonera Tietoturva\backweb\4436233\Program\fspex.exe
      C:\Program Files\Sonera Tietoturva\FSGUI\fsguidll.exe
      C:\HijackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mtv3.fi/salatutelamat/
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.soneraplaza.fi
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = http://security.kolla.de/
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer - toimittaja Sonera Internet
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.dial.inet.fi:800
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.fi;*.*.fi;*.*.*.fi;
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
      O2 - BHO: Popup Blocker - {593FA054-6BFB-4ce5-B87A-0A68DB7C0F08} - C:\WINDOWS\System32\EniroToolbar\PopupBlocker.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.02.3000.1002\en-xu\stmain.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
      O3 - Toolbar: Eniro - {A3C4086C-097C-46b0-AFB0-76B5CC294233} - C:\WINDOWS\System32\EniroToolbar\Toolband.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
      O4 - HKLM\..\Run: [ATIPTA] C:\ATI-CPanel\atiptaxx.exe
      O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
      O4 - HKLM\..\Run: [CnxDslTaskBar] "C:\Program Files\\TW-IA300C ADSL\CnxDslTb.exe"
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Sonera Tietoturva\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Sonera Tietoturva\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
      O4 - HKLM\..\Run: [News Service] "C:\Program Files\Sonera Tietoturva\FSGUI\ispnews.exe"
      O4 - HKLM\..\Run: [CamMonitor] C:\Program Files\Hewlett-Packard\Digital Imaging\\Unload\hpqcmon.exe
      O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
      O4 - HKLM\..\Run: [AVSCHED32] C:\Program Files\AVPersonal\AVSched32.EXE /min
      O4 - HKLM\..\Run: [SpybotSnD] "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe" /autocheck /waitprograms
      O4 - HKLM\..\Run: [WinampAgent] C:\Documents and Settings\Wilenius Jani\Työpöytä\Winamp\winampa.exe
      O4 - HKLM\..\Run: [HPHUPD05] C:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
      O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
      O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe"
      O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\system32\hphmon05.exe
      O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\FirstStart.exe
      O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\Sonera Tietoturva\FSGUI\FSSW.EXE" /reboot
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
      O4 - HKLM\..\RunOnce: [RichEd32.dll] regsvr32.exe /s C:\WINDOWS\system32\RichEd32.dll
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - HKCU\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe
      O4 - Global Startup: Sonera Tietoturva.lnk = C:\Program Files\Sonera Tietoturva\backweb\4436233\Program\fspex.exe
      O8 - Extra context menu item: &Estä tämä kohoikkuna - C:\Program Files\Sonera Tietoturva\Anti-Spyware\blockpopups.htm
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra button: Web-suodatin - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: Web-suodatin - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F02} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: &Keskeytä Web-sivujen suodatus - {200DB664-75B5-47c0-8B45-A44ACCF73F02} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F03} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: &Kiellä tämä Web-sivusto - {200DB664-75B5-47c0-8B45-A44ACCF73F03} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F04} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: &Salli tämä Web-sivusto - {200DB664-75B5-47c0-8B45-A44ACCF73F04} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Sonera Tietoturva\Anti-Spyware\ieshield.dll
      O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Sonera Tietoturva\Anti-Spyware\ieshield.dll
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O10 - Broken Internet access because of LSP provider 'winsflt.dll' missing
      O14 - IERESET.INF: START_PAGE_URL=http://www.soneraplaza.fi
      O16 - DPF: {2A32B14F-4D29-4EA3-AC54-E9B19F436CE7} (Scanner Class) - http://www.windowsecurity.com/trojanscan/TDECntrl.CAB
      O16 - DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} (ASquaredScanForm Element) - http://www.windowsecurity.com/trojanscan/axscan.cab
      O16 - DPF: {E991BDE0-9816-4094-853E-6BDB60F0342D} (Get_ActiveX Control) - http://apps.corel.com/nos_dl_manager/plugin/IENetOpPlugin.ocx
      O18 - Protocol: cetihpz - {CF184AD3-CDCB-4168-A3F7-8E447D129300} - C:\Program Files\HP\hpcoretech\comp\hpuiprot.dll
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
      O23 - Service: Sonera Tietoturva - Sonera Tietoturva - C:\PROGRA~1\SONERA~1\backweb\4436233\Program\SERVIC~1.EXE
      O23 - Service: Loogisen levyn hallinnan valvontapalvelu - Unknown - C:\WINDOWS\System32\dmadmin.exe
      O23 - Service: Tapahtumaloki - Unknown - C:\WINDOWS\system32\services.exe
      O23 - Service: F-Secure Gatekeeper Handler Starter - Unknown - C:\Program Files\TW-IA300C ADSL\Anti-Virus\fsgk32st.exe
      O23 - Service: Fax - Unknown - C:\WINDOWS\system32\fxssvc.exe
      O23 - Service: fsbwsys - Unknown - C:\Program Files\Sonera Tietoturva\backweb\4436233\program\fsbwsys.exe
      O23 - Service: F-Secure Anti-Virus Firewall Daemon - F-Secure Corporation - C:\Program Files\Sonera Tietoturva\FWES\Program\fsdfwd.exe
      O23 - Service: F-Secure HTTP Server - F-Secure Corporation - C:\Program Files\Sonera Tietoturva\FSPC\fshttps\fshttps.exe
      O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\TW-IA300C ADSL\Common\FSMA32.EXE
      O23 - Service: CD-levyjen kirjoittamisen IMAPI COM -palvelu - Unknown - C:\WINDOWS\System32\imapi.exe
      O23 - Service: NetMeeting etätyöpöydän jakaminen - Unknown - C:\WINDOWS\System32\mnmsrvc.exe
      O23 - Service: Plug and Play - Unknown - C:\WINDOWS\system32\services.exe
      O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
      O23 - Service: Etätyöpöydän ohjeen istunnonhallinta - Unknown - C:\WINDOWS\system32\sessmgr.exe
      O23 - Service: Älykortti - Unknown - C:\WINDOWS\System32\SCardSvr.exe
      O23 - Service: SmartLinkService - Unknown - slserv.exe (file missing)
      O23 - Service: Resurssilokit ja -hälytykset - Unknown - C:\WINDOWS\system32\smlogsvc.exe
      O23 - Service: Aseman tilannevedos - Unknown - C:\WINDOWS\System32\vssvc.exe
      O23 - Service: WMI resurssisovitin - Unknown - C:\WINDOWS\System32\wbem\wmiapsrv.exe


      Ihan maalikkona taitaa olla "jotain" väännettävää????

      on lapset ihania:


      Logfile of HijackThis v1.99.1
      Scan saved at 21:54:29, on 15.4.2006
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\PROGRA~1\SONERA~1\backweb\4436233\Program\SERVIC~1.EXE
      C:\Program Files\TW-IA300C ADSL\Anti-Virus\fsgk32st.exe
      C:\Program Files\Sonera Tietoturva\backweb\4436233\program\fsbwsys.exe
      C:\Program Files\Sonera Tietoturva\Anti-Virus\FSGK32.EXE
      C:\Program Files\TW-IA300C ADSL\Common\FSMA32.EXE
      C:\WINDOWS\system32\slserv.exe
      C:\Program Files\Sonera Tietoturva\Anti-Virus\fssm32.exe
      C:\Program Files\TW-IA300C ADSL\Common\FSMB32.EXE
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Sonera Tietoturva\Common\FCH32.EXE
      C:\WINDOWS\System32\ups.exe
      C:\Program Files\Sonera Tietoturva\Common\FAMEH32.EXE
      C:\Program Files\Sonera Tietoturva\Anti-Virus\fsrw.exe
      C:\Program Files\Sonera Tietoturva\FSPC\fspc.exe
      C:\Program Files\Sonera Tietoturva\Anti-Virus\fsav32.exe
      C:\Program Files\Sonera Tietoturva\FWES\Program\fsdfwd.exe
      C:\WINDOWS\system32\HPZipm12.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\Explorer.EXE
      C:\ATI-CPanel\atiptaxx.exe
      C:\WINDOWS\SOUNDMAN.EXE
      C:\Program Files\TW-IA300C ADSL\CnxDslTb.exe
      C:\Program Files\Sonera Tietoturva\Common\FSM32.EXE
      C:\Program Files\Sonera Tietoturva\FSGUI\ispnews.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
      C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
      C:\Documents and Settings\Wilenius Jani\Työpöytä\Winamp\winampa.exe
      C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
      C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
      C:\WINDOWS\system32\hphmon05.exe
      C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
      C:\Program Files\QuickTime\qttask.exe
      C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      C:\Program Files\Messenger\msmsgs.exe
      C:\Program Files\Sonera Tietoturva\backweb\4436233\Program\fspex.exe
      C:\PROGRA~1\SONERA~1\ANTI-S~1\fsaw.exe
      C:\Program Files\Sonera Tietoturva\FSGUI\fsguidll.exe
      C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
      C:\Program Files\Lavasoft\Ad-Aware SE Personal\Ad-Aware.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Program Files\Sonera Tietoturva\FSGUI\fsavaui.exe
      C:\Documents and Settings\Wilenius Jani\Työpöytä\HijackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ii2.org/
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.soneraplaza.fi
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = http://security.kolla.de/
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer - toimittaja Sonera Internet
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.dial.inet.fi:800
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.fi;*.*.fi;*.*.*.fi;
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
      O2 - BHO: Popup Blocker - {593FA054-6BFB-4ce5-B87A-0A68DB7C0F08} - C:\WINDOWS\System32\EniroToolbar\PopupBlocker.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.02.3000.1002\en-xu\stmain.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
      O3 - Toolbar: Eniro - {A3C4086C-097C-46b0-AFB0-76B5CC294233} - C:\WINDOWS\System32\EniroToolbar\Toolband.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
      O4 - HKLM\..\Run: [ATIPTA] C:\ATI-CPanel\atiptaxx.exe
      O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
      O4 - HKLM\..\Run: [CnxDslTaskBar] "C:\Program Files\\TW-IA300C ADSL\CnxDslTb.exe"
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Sonera Tietoturva\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Sonera Tietoturva\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
      O4 - HKLM\..\Run: [News Service] "C:\Program Files\Sonera Tietoturva\FSGUI\ispnews.exe"
      O4 - HKLM\..\Run: [CamMonitor] C:\Program Files\Hewlett-Packard\Digital Imaging\\Unload\hpqcmon.exe
      O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
      O4 - HKLM\..\Run: [AVSCHED32] C:\Program Files\AVPersonal\AVSched32.EXE /min
      O4 - HKLM\..\Run: [SpybotSnD] "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe" /autocheck /waitprograms
      O4 - HKLM\..\Run: [WinampAgent] C:\Documents and Settings\Wilenius Jani\Työpöytä\Winamp\winampa.exe
      O4 - HKLM\..\Run: [HPHUPD05] C:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
      O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
      O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe"
      O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\system32\hphmon05.exe
      O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\FirstStart.exe
      O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\Sonera Tietoturva\FSGUI\FSSW.EXE" /reboot
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      O4 - HKLM\..\RunOnce: [RichEd32.dll] regsvr32.exe /s C:\WINDOWS\system32\RichEd32.dll
      O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
      O4 - HKCU\..\Run: [WinMX] C:\DOCUME~1\WILENI~2\LOCALS~1\Temp\Tilapäinen kansio 2 winmx354beta4.zip\WinMX.exe -m
      O4 - HKCU\..\Run: [Skype] "C:\Documents and Settings\Wilenius Jani\Local Settings\Application Data\Skype\Phone\Skype.exe" /nosplash /minimized
      O4 - HKCU\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe -NoStart
      O4 - Global Startup: Sonera Tietoturva.lnk = C:\Program Files\Sonera Tietoturva\backweb\4436233\Program\fspex.exe
      O8 - Extra context menu item: &Estä tämä kohoikkuna - C:\Program Files\Sonera Tietoturva\Anti-Spyware\blockpopups.htm
      O8 - Extra context menu item: &Google-haku - res://C:\Program Files\Google\GoogleToolbar2.dll/cmsearch.html
      O8 - Extra context menu item: &Käännä englanninkielinen sana - res://C:\Program Files\Google\GoogleToolbar2.dll/cmwordtrans.html
      O8 - Extra context menu item: Linkit taaksepäin - res://C:\Program Files\Google\GoogleToolbar2.dll/cmbacklinks.html
      O8 - Extra context menu item: Samankaltaisia sivuja - res://C:\Program Files\Google\GoogleToolbar2.dll/cmsimilar.html
      O8 - Extra context menu item: Välimuistissa oleva kuvakaappaus sivusta - res://C:\Program Files\Google\GoogleToolbar2.dll/cmcache.html
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra button: Web-suodatin - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: Web-suodatin - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F02} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: &Keskeytä Web-sivujen suodatus - {200DB664-75B5-47c0-8B45-A44ACCF73F02} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F03} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: &Kiellä tämä Web-sivusto - {200DB664-75B5-47c0-8B45-A44ACCF73F03} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F04} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: &Salli tämä Web-sivusto - {200DB664-75B5-47c0-8B45-A44ACCF73F04} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Sonera Tietoturva\Anti-Spyware\ieshield.dll
      O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Sonera Tietoturva\Anti-Spyware\ieshield.dll
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O10 - Broken Internet access because of LSP provider 'winsflt.dll' missing
      O14 - IERESET.INF: START_PAGE_URL=http://www.soneraplaza.fi
      O16 - DPF: {2A32B14F-4D29-4EA3-AC54-E9B19F436CE7} (Scanner Class) - http://www.windowsecurity.com/trojanscan/TDECntrl.CAB
      O16 - DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} (ASquaredScanForm Element) - http://www.windowsecurity.com/trojanscan/axscan.cab
      O16 - DPF: {E991BDE0-9816-4094-853E-6BDB60F0342D} (Get_ActiveX Control) - http://apps.corel.com/nos_dl_manager/plugin/IENetOpPlugin.ocx
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
      O23 - Service: Sonera Tietoturva (BackWeb Plug-in - 4436233) - Sonera Tietoturva - C:\PROGRA~1\SONERA~1\backweb\4436233\Program\SERVIC~1.EXE
      O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\TW-IA300C ADSL\Anti-Virus\fsgk32st.exe
      O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\Sonera Tietoturva\backweb\4436233\program\fsbwsys.exe
      O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Sonera Tietoturva\FWES\Program\fsdfwd.exe
      O23 - Service: F-Secure HTTP Server (fshttps) - F-Secure Corporation - C:\Program Files\Sonera Tietoturva\FSPC\fshttps\fshttps.exe
      O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\TW-IA300C ADSL\Common\FSMA32.EXE
      O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
      O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe

      Äänestä

    • Fixsattavaa kirjoitti:

      Scannaa HJT:llä merkka paina Fix checked

      O4 - HKLM\..\Run: [AVSCHED32] C:\Program Files\AVPersonal\AVSched32.EXE /min

      Poista kansio
      C:\Program Files\---> AVPersonal

      ja tältä näyttää nyt:

      Logfile of HijackThis v1.99.1
      Scan saved at 22:07:42, on 15.4.2006
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\PROGRA~1\SONERA~1\backweb\4436233\Program\SERVIC~1.EXE
      C:\Program Files\TW-IA300C ADSL\Anti-Virus\fsgk32st.exe
      C:\Program Files\Sonera Tietoturva\backweb\4436233\program\fsbwsys.exe
      C:\Program Files\Sonera Tietoturva\Anti-Virus\FSGK32.EXE
      C:\Program Files\TW-IA300C ADSL\Common\FSMA32.EXE
      C:\WINDOWS\system32\slserv.exe
      C:\Program Files\Sonera Tietoturva\Anti-Virus\fssm32.exe
      C:\Program Files\TW-IA300C ADSL\Common\FSMB32.EXE
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Sonera Tietoturva\Common\FCH32.EXE
      C:\WINDOWS\System32\ups.exe
      C:\Program Files\Sonera Tietoturva\Common\FAMEH32.EXE
      C:\Program Files\Sonera Tietoturva\Anti-Virus\fsrw.exe
      C:\Program Files\Sonera Tietoturva\FSPC\fspc.exe
      C:\Program Files\Sonera Tietoturva\Anti-Virus\fsav32.exe
      C:\Program Files\Sonera Tietoturva\FWES\Program\fsdfwd.exe
      C:\WINDOWS\system32\HPZipm12.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\Explorer.EXE
      C:\ATI-CPanel\atiptaxx.exe
      C:\WINDOWS\SOUNDMAN.EXE
      C:\Program Files\TW-IA300C ADSL\CnxDslTb.exe
      C:\Program Files\Sonera Tietoturva\Common\FSM32.EXE
      C:\Program Files\Sonera Tietoturva\FSGUI\ispnews.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
      C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
      C:\Documents and Settings\Wilenius Jani\Työpöytä\Winamp\winampa.exe
      C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
      C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
      C:\WINDOWS\system32\hphmon05.exe
      C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
      C:\Program Files\QuickTime\qttask.exe
      C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\Messenger\msmsgs.exe
      C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe
      C:\PROGRA~1\SONERA~1\ANTI-S~1\fsaw.exe
      C:\Program Files\Sonera Tietoturva\FSGUI\fsguidll.exe
      C:\Program Files\Sonera Tietoturva\backweb\4436233\Program\fspex.exe
      C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Documents and Settings\Wilenius Mira\Työpöytä\HijackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mtv3.fi/salatutelamat/
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.soneraplaza.fi
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = http://security.kolla.de/
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer - toimittaja Sonera Internet
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.dial.inet.fi:800
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.fi;*.*.fi;*.*.*.fi;
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
      O2 - BHO: Popup Blocker - {593FA054-6BFB-4ce5-B87A-0A68DB7C0F08} - C:\WINDOWS\System32\EniroToolbar\PopupBlocker.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.02.3000.1002\en-xu\stmain.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
      O3 - Toolbar: Eniro - {A3C4086C-097C-46b0-AFB0-76B5CC294233} - C:\WINDOWS\System32\EniroToolbar\Toolband.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
      O4 - HKLM\..\Run: [ATIPTA] C:\ATI-CPanel\atiptaxx.exe
      O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
      O4 - HKLM\..\Run: [CnxDslTaskBar] "C:\Program Files\\TW-IA300C ADSL\CnxDslTb.exe"
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Sonera Tietoturva\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Sonera Tietoturva\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
      O4 - HKLM\..\Run: [News Service] "C:\Program Files\Sonera Tietoturva\FSGUI\ispnews.exe"
      O4 - HKLM\..\Run: [CamMonitor] C:\Program Files\Hewlett-Packard\Digital Imaging\\Unload\hpqcmon.exe
      O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
      O4 - HKLM\..\Run: [SpybotSnD] "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe" /autocheck /waitprograms
      O4 - HKLM\..\Run: [WinampAgent] C:\Documents and Settings\Wilenius Jani\Työpöytä\Winamp\winampa.exe
      O4 - HKLM\..\Run: [HPHUPD05] C:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
      O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
      O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe"
      O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\system32\hphmon05.exe
      O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\FirstStart.exe
      O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\Sonera Tietoturva\FSGUI\FSSW.EXE" /reboot
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      O4 - HKLM\..\RunOnce: [RichEd32.dll] regsvr32.exe /s C:\WINDOWS\system32\RichEd32.dll
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - HKCU\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe
      O4 - Global Startup: Sonera Tietoturva.lnk = C:\Program Files\Sonera Tietoturva\backweb\4436233\Program\fspex.exe
      O8 - Extra context menu item: &Estä tämä kohoikkuna - C:\Program Files\Sonera Tietoturva\Anti-Spyware\blockpopups.htm
      O8 - Extra context menu item: &Google-haku - res://c:\program files\google\GoogleToolbar3.dll/cmsearch.html
      O8 - Extra context menu item: &Käännä englanninkielinen sana - res://c:\program files\google\GoogleToolbar3.dll/cmwordtrans.html
      O8 - Extra context menu item: Linkit taaksepäin - res://c:\program files\google\GoogleToolbar3.dll/cmbacklinks.html
      O8 - Extra context menu item: Samankaltaisia sivuja - res://c:\program files\google\GoogleToolbar3.dll/cmsimilar.html
      O8 - Extra context menu item: Välimuistissa oleva kuvakaappaus sivusta - res://c:\program files\google\GoogleToolbar3.dll/cmcache.html
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra button: Web-suodatin - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: Web-suodatin - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F02} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: &Keskeytä Web-sivujen suodatus - {200DB664-75B5-47c0-8B45-A44ACCF73F02} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F03} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: &Kiellä tämä Web-sivusto - {200DB664-75B5-47c0-8B45-A44ACCF73F03} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F04} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: &Salli tämä Web-sivusto - {200DB664-75B5-47c0-8B45-A44ACCF73F04} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Sonera Tietoturva\Anti-Spyware\ieshield.dll
      O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Sonera Tietoturva\Anti-Spyware\ieshield.dll
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O10 - Broken Internet access because of LSP provider 'winsflt.dll' missing
      O14 - IERESET.INF: START_PAGE_URL=http://www.soneraplaza.fi
      O16 - DPF: {2A32B14F-4D29-4EA3-AC54-E9B19F436CE7} (Scanner Class) - http://www.windowsecurity.com/trojanscan/TDECntrl.CAB
      O16 - DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} (ASquaredScanForm Element) - http://www.windowsecurity.com/trojanscan/axscan.cab
      O16 - DPF: {E991BDE0-9816-4094-853E-6BDB60F0342D} (Get_ActiveX Control) - http://apps.corel.com/nos_dl_manager/plugin/IENetOpPlugin.ocx
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
      O23 - Service: Sonera Tietoturva (BackWeb Plug-in - 4436233) - Sonera Tietoturva - C:\PROGRA~1\SONERA~1\backweb\4436233\Program\SERVIC~1.EXE
      O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\TW-IA300C ADSL\Anti-Virus\fsgk32st.exe
      O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\Sonera Tietoturva\backweb\4436233\program\fsbwsys.exe
      O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Sonera Tietoturva\FWES\Program\fsdfwd.exe
      O23 - Service: F-Secure HTTP Server (fshttps) - F-Secure Corporation - C:\Program Files\Sonera Tietoturva\FSPC\fshttps\fshttps.exe
      O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\TW-IA300C ADSL\Common\FSMA32.EXE
      O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
      O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.

      Äänestä

    • numero kolme: kirjoitti:

      on lapset ihania:


      Logfile of HijackThis v1.99.1
      Scan saved at 21:54:29, on 15.4.2006
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\PROGRA~1\SONERA~1\backweb\4436233\Program\SERVIC~1.EXE
      C:\Program Files\TW-IA300C ADSL\Anti-Virus\fsgk32st.exe
      C:\Program Files\Sonera Tietoturva\backweb\4436233\program\fsbwsys.exe
      C:\Program Files\Sonera Tietoturva\Anti-Virus\FSGK32.EXE
      C:\Program Files\TW-IA300C ADSL\Common\FSMA32.EXE
      C:\WINDOWS\system32\slserv.exe
      C:\Program Files\Sonera Tietoturva\Anti-Virus\fssm32.exe
      C:\Program Files\TW-IA300C ADSL\Common\FSMB32.EXE
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Sonera Tietoturva\Common\FCH32.EXE
      C:\WINDOWS\System32\ups.exe
      C:\Program Files\Sonera Tietoturva\Common\FAMEH32.EXE
      C:\Program Files\Sonera Tietoturva\Anti-Virus\fsrw.exe
      C:\Program Files\Sonera Tietoturva\FSPC\fspc.exe
      C:\Program Files\Sonera Tietoturva\Anti-Virus\fsav32.exe
      C:\Program Files\Sonera Tietoturva\FWES\Program\fsdfwd.exe
      C:\WINDOWS\system32\HPZipm12.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\Explorer.EXE
      C:\ATI-CPanel\atiptaxx.exe
      C:\WINDOWS\SOUNDMAN.EXE
      C:\Program Files\TW-IA300C ADSL\CnxDslTb.exe
      C:\Program Files\Sonera Tietoturva\Common\FSM32.EXE
      C:\Program Files\Sonera Tietoturva\FSGUI\ispnews.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
      C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
      C:\Documents and Settings\Wilenius Jani\Työpöytä\Winamp\winampa.exe
      C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
      C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
      C:\WINDOWS\system32\hphmon05.exe
      C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
      C:\Program Files\QuickTime\qttask.exe
      C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      C:\Program Files\Messenger\msmsgs.exe
      C:\Program Files\Sonera Tietoturva\backweb\4436233\Program\fspex.exe
      C:\PROGRA~1\SONERA~1\ANTI-S~1\fsaw.exe
      C:\Program Files\Sonera Tietoturva\FSGUI\fsguidll.exe
      C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
      C:\Program Files\Lavasoft\Ad-Aware SE Personal\Ad-Aware.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Program Files\Sonera Tietoturva\FSGUI\fsavaui.exe
      C:\Documents and Settings\Wilenius Jani\Työpöytä\HijackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ii2.org/
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.soneraplaza.fi
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = http://security.kolla.de/
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer - toimittaja Sonera Internet
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.dial.inet.fi:800
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.fi;*.*.fi;*.*.*.fi;
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
      O2 - BHO: Popup Blocker - {593FA054-6BFB-4ce5-B87A-0A68DB7C0F08} - C:\WINDOWS\System32\EniroToolbar\PopupBlocker.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.02.3000.1002\en-xu\stmain.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
      O3 - Toolbar: Eniro - {A3C4086C-097C-46b0-AFB0-76B5CC294233} - C:\WINDOWS\System32\EniroToolbar\Toolband.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
      O4 - HKLM\..\Run: [ATIPTA] C:\ATI-CPanel\atiptaxx.exe
      O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
      O4 - HKLM\..\Run: [CnxDslTaskBar] "C:\Program Files\\TW-IA300C ADSL\CnxDslTb.exe"
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Sonera Tietoturva\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Sonera Tietoturva\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
      O4 - HKLM\..\Run: [News Service] "C:\Program Files\Sonera Tietoturva\FSGUI\ispnews.exe"
      O4 - HKLM\..\Run: [CamMonitor] C:\Program Files\Hewlett-Packard\Digital Imaging\\Unload\hpqcmon.exe
      O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
      O4 - HKLM\..\Run: [AVSCHED32] C:\Program Files\AVPersonal\AVSched32.EXE /min
      O4 - HKLM\..\Run: [SpybotSnD] "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe" /autocheck /waitprograms
      O4 - HKLM\..\Run: [WinampAgent] C:\Documents and Settings\Wilenius Jani\Työpöytä\Winamp\winampa.exe
      O4 - HKLM\..\Run: [HPHUPD05] C:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
      O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
      O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe"
      O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\system32\hphmon05.exe
      O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\FirstStart.exe
      O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\Sonera Tietoturva\FSGUI\FSSW.EXE" /reboot
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      O4 - HKLM\..\RunOnce: [RichEd32.dll] regsvr32.exe /s C:\WINDOWS\system32\RichEd32.dll
      O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
      O4 - HKCU\..\Run: [WinMX] C:\DOCUME~1\WILENI~2\LOCALS~1\Temp\Tilapäinen kansio 2 winmx354beta4.zip\WinMX.exe -m
      O4 - HKCU\..\Run: [Skype] "C:\Documents and Settings\Wilenius Jani\Local Settings\Application Data\Skype\Phone\Skype.exe" /nosplash /minimized
      O4 - HKCU\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe -NoStart
      O4 - Global Startup: Sonera Tietoturva.lnk = C:\Program Files\Sonera Tietoturva\backweb\4436233\Program\fspex.exe
      O8 - Extra context menu item: &Estä tämä kohoikkuna - C:\Program Files\Sonera Tietoturva\Anti-Spyware\blockpopups.htm
      O8 - Extra context menu item: &Google-haku - res://C:\Program Files\Google\GoogleToolbar2.dll/cmsearch.html
      O8 - Extra context menu item: &Käännä englanninkielinen sana - res://C:\Program Files\Google\GoogleToolbar2.dll/cmwordtrans.html
      O8 - Extra context menu item: Linkit taaksepäin - res://C:\Program Files\Google\GoogleToolbar2.dll/cmbacklinks.html
      O8 - Extra context menu item: Samankaltaisia sivuja - res://C:\Program Files\Google\GoogleToolbar2.dll/cmsimilar.html
      O8 - Extra context menu item: Välimuistissa oleva kuvakaappaus sivusta - res://C:\Program Files\Google\GoogleToolbar2.dll/cmcache.html
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra button: Web-suodatin - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: Web-suodatin - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F02} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: &Keskeytä Web-sivujen suodatus - {200DB664-75B5-47c0-8B45-A44ACCF73F02} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F03} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: &Kiellä tämä Web-sivusto - {200DB664-75B5-47c0-8B45-A44ACCF73F03} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F04} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: &Salli tämä Web-sivusto - {200DB664-75B5-47c0-8B45-A44ACCF73F04} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Sonera Tietoturva\Anti-Spyware\ieshield.dll
      O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Sonera Tietoturva\Anti-Spyware\ieshield.dll
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O10 - Broken Internet access because of LSP provider 'winsflt.dll' missing
      O14 - IERESET.INF: START_PAGE_URL=http://www.soneraplaza.fi
      O16 - DPF: {2A32B14F-4D29-4EA3-AC54-E9B19F436CE7} (Scanner Class) - http://www.windowsecurity.com/trojanscan/TDECntrl.CAB
      O16 - DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} (ASquaredScanForm Element) - http://www.windowsecurity.com/trojanscan/axscan.cab
      O16 - DPF: {E991BDE0-9816-4094-853E-6BDB60F0342D} (Get_ActiveX Control) - http://apps.corel.com/nos_dl_manager/plugin/IENetOpPlugin.ocx
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
      O23 - Service: Sonera Tietoturva (BackWeb Plug-in - 4436233) - Sonera Tietoturva - C:\PROGRA~1\SONERA~1\backweb\4436233\Program\SERVIC~1.EXE
      O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\TW-IA300C ADSL\Anti-Virus\fsgk32st.exe
      O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\Sonera Tietoturva\backweb\4436233\program\fsbwsys.exe
      O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Sonera Tietoturva\FWES\Program\fsdfwd.exe
      O23 - Service: F-Secure HTTP Server (fshttps) - F-Secure Corporation - C:\Program Files\Sonera Tietoturva\FSPC\fshttps\fshttps.exe
      O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\TW-IA300C ADSL\Common\FSMA32.EXE
      O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
      O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe

      "pahantekijä" ??????????? kun vaan tykkää asennella kaikenlaista.

      Äänestä

    • numero kolme: kirjoitti:

      on lapset ihania:


      Logfile of HijackThis v1.99.1
      Scan saved at 21:54:29, on 15.4.2006
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\PROGRA~1\SONERA~1\backweb\4436233\Program\SERVIC~1.EXE
      C:\Program Files\TW-IA300C ADSL\Anti-Virus\fsgk32st.exe
      C:\Program Files\Sonera Tietoturva\backweb\4436233\program\fsbwsys.exe
      C:\Program Files\Sonera Tietoturva\Anti-Virus\FSGK32.EXE
      C:\Program Files\TW-IA300C ADSL\Common\FSMA32.EXE
      C:\WINDOWS\system32\slserv.exe
      C:\Program Files\Sonera Tietoturva\Anti-Virus\fssm32.exe
      C:\Program Files\TW-IA300C ADSL\Common\FSMB32.EXE
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Sonera Tietoturva\Common\FCH32.EXE
      C:\WINDOWS\System32\ups.exe
      C:\Program Files\Sonera Tietoturva\Common\FAMEH32.EXE
      C:\Program Files\Sonera Tietoturva\Anti-Virus\fsrw.exe
      C:\Program Files\Sonera Tietoturva\FSPC\fspc.exe
      C:\Program Files\Sonera Tietoturva\Anti-Virus\fsav32.exe
      C:\Program Files\Sonera Tietoturva\FWES\Program\fsdfwd.exe
      C:\WINDOWS\system32\HPZipm12.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\Explorer.EXE
      C:\ATI-CPanel\atiptaxx.exe
      C:\WINDOWS\SOUNDMAN.EXE
      C:\Program Files\TW-IA300C ADSL\CnxDslTb.exe
      C:\Program Files\Sonera Tietoturva\Common\FSM32.EXE
      C:\Program Files\Sonera Tietoturva\FSGUI\ispnews.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
      C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
      C:\Documents and Settings\Wilenius Jani\Työpöytä\Winamp\winampa.exe
      C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
      C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
      C:\WINDOWS\system32\hphmon05.exe
      C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
      C:\Program Files\QuickTime\qttask.exe
      C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      C:\Program Files\Messenger\msmsgs.exe
      C:\Program Files\Sonera Tietoturva\backweb\4436233\Program\fspex.exe
      C:\PROGRA~1\SONERA~1\ANTI-S~1\fsaw.exe
      C:\Program Files\Sonera Tietoturva\FSGUI\fsguidll.exe
      C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
      C:\Program Files\Lavasoft\Ad-Aware SE Personal\Ad-Aware.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Program Files\Sonera Tietoturva\FSGUI\fsavaui.exe
      C:\Documents and Settings\Wilenius Jani\Työpöytä\HijackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ii2.org/
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.soneraplaza.fi
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = http://security.kolla.de/
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer - toimittaja Sonera Internet
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.dial.inet.fi:800
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.fi;*.*.fi;*.*.*.fi;
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
      O2 - BHO: Popup Blocker - {593FA054-6BFB-4ce5-B87A-0A68DB7C0F08} - C:\WINDOWS\System32\EniroToolbar\PopupBlocker.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.02.3000.1002\en-xu\stmain.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
      O3 - Toolbar: Eniro - {A3C4086C-097C-46b0-AFB0-76B5CC294233} - C:\WINDOWS\System32\EniroToolbar\Toolband.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
      O4 - HKLM\..\Run: [ATIPTA] C:\ATI-CPanel\atiptaxx.exe
      O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
      O4 - HKLM\..\Run: [CnxDslTaskBar] "C:\Program Files\\TW-IA300C ADSL\CnxDslTb.exe"
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Sonera Tietoturva\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Sonera Tietoturva\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
      O4 - HKLM\..\Run: [News Service] "C:\Program Files\Sonera Tietoturva\FSGUI\ispnews.exe"
      O4 - HKLM\..\Run: [CamMonitor] C:\Program Files\Hewlett-Packard\Digital Imaging\\Unload\hpqcmon.exe
      O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
      O4 - HKLM\..\Run: [AVSCHED32] C:\Program Files\AVPersonal\AVSched32.EXE /min
      O4 - HKLM\..\Run: [SpybotSnD] "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe" /autocheck /waitprograms
      O4 - HKLM\..\Run: [WinampAgent] C:\Documents and Settings\Wilenius Jani\Työpöytä\Winamp\winampa.exe
      O4 - HKLM\..\Run: [HPHUPD05] C:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
      O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
      O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe"
      O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\system32\hphmon05.exe
      O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\FirstStart.exe
      O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\Sonera Tietoturva\FSGUI\FSSW.EXE" /reboot
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      O4 - HKLM\..\RunOnce: [RichEd32.dll] regsvr32.exe /s C:\WINDOWS\system32\RichEd32.dll
      O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
      O4 - HKCU\..\Run: [WinMX] C:\DOCUME~1\WILENI~2\LOCALS~1\Temp\Tilapäinen kansio 2 winmx354beta4.zip\WinMX.exe -m
      O4 - HKCU\..\Run: [Skype] "C:\Documents and Settings\Wilenius Jani\Local Settings\Application Data\Skype\Phone\Skype.exe" /nosplash /minimized
      O4 - HKCU\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe -NoStart
      O4 - Global Startup: Sonera Tietoturva.lnk = C:\Program Files\Sonera Tietoturva\backweb\4436233\Program\fspex.exe
      O8 - Extra context menu item: &Estä tämä kohoikkuna - C:\Program Files\Sonera Tietoturva\Anti-Spyware\blockpopups.htm
      O8 - Extra context menu item: &Google-haku - res://C:\Program Files\Google\GoogleToolbar2.dll/cmsearch.html
      O8 - Extra context menu item: &Käännä englanninkielinen sana - res://C:\Program Files\Google\GoogleToolbar2.dll/cmwordtrans.html
      O8 - Extra context menu item: Linkit taaksepäin - res://C:\Program Files\Google\GoogleToolbar2.dll/cmbacklinks.html
      O8 - Extra context menu item: Samankaltaisia sivuja - res://C:\Program Files\Google\GoogleToolbar2.dll/cmsimilar.html
      O8 - Extra context menu item: Välimuistissa oleva kuvakaappaus sivusta - res://C:\Program Files\Google\GoogleToolbar2.dll/cmcache.html
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra button: Web-suodatin - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: Web-suodatin - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F02} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: &Keskeytä Web-sivujen suodatus - {200DB664-75B5-47c0-8B45-A44ACCF73F02} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F03} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: &Kiellä tämä Web-sivusto - {200DB664-75B5-47c0-8B45-A44ACCF73F03} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F04} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: &Salli tämä Web-sivusto - {200DB664-75B5-47c0-8B45-A44ACCF73F04} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Sonera Tietoturva\Anti-Spyware\ieshield.dll
      O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Sonera Tietoturva\Anti-Spyware\ieshield.dll
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O10 - Broken Internet access because of LSP provider 'winsflt.dll' missing
      O14 - IERESET.INF: START_PAGE_URL=http://www.soneraplaza.fi
      O16 - DPF: {2A32B14F-4D29-4EA3-AC54-E9B19F436CE7} (Scanner Class) - http://www.windowsecurity.com/trojanscan/TDECntrl.CAB
      O16 - DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} (ASquaredScanForm Element) - http://www.windowsecurity.com/trojanscan/axscan.cab
      O16 - DPF: {E991BDE0-9816-4094-853E-6BDB60F0342D} (Get_ActiveX Control) - http://apps.corel.com/nos_dl_manager/plugin/IENetOpPlugin.ocx
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
      O23 - Service: Sonera Tietoturva (BackWeb Plug-in - 4436233) - Sonera Tietoturva - C:\PROGRA~1\SONERA~1\backweb\4436233\Program\SERVIC~1.EXE
      O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\TW-IA300C ADSL\Anti-Virus\fsgk32st.exe
      O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\Sonera Tietoturva\backweb\4436233\program\fsbwsys.exe
      O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Sonera Tietoturva\FWES\Program\fsdfwd.exe
      O23 - Service: F-Secure HTTP Server (fshttps) - F-Secure Corporation - C:\Program Files\Sonera Tietoturva\FSPC\fshttps\fshttps.exe
      O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\TW-IA300C ADSL\Common\FSMA32.EXE
      O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
      O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe

      scannaus HjT:llä merkkaus

      O4 - HKLM\..\Run: [AVSCHED32] C:\Program Files\AVPersonal\AVSched32.EXE /min

      Paietaan Fix checked


      Kansion poisto
      C:\Program Files\ ---> AVPersonal

      Äänestä

    • FixFix kirjoitti:

      hijackthis.exe siitä kun klikkaa ja asentaa sen



      klkaamalla käynnistänappia hiiren oikealla korvalla ja sitten etsit kansion HJT avaat sen sieltä löytyy pommin kuva tuplaklikkaat sitä.

      HijackThis v1.99.1 C:\WINDOWS\HijackThis.exe

      HijackThis v1.99.0 C:\HijackThis.exe

      HijackThis v1.99.0 C:\HijackThis.exe

      HijackThis v1.99.1 C:\Documents and Settings\Wilenius Mira\Työpöytä\HijackThis.exe

      HijackThis v1.99.1 C:\Documents and Settings\Wilenius Jani\Työpöytä\HijackThis.exe

      Äänestä

    • FixFix kirjoitti:

      scannaus HjT:llä merkkaus

      O4 - HKLM\..\Run: [AVSCHED32] C:\Program Files\AVPersonal\AVSched32.EXE /min

      Paietaan Fix checked


      Kansion poisto
      C:\Program Files\ ---> AVPersonal

      listaa tässä:

      Logfile of HijackThis v1.99.1
      Scan saved at 9:52:35, on 16.4.2006
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\PROGRA~1\SONERA~1\backweb\4436233\Program\SERVIC~1.EXE
      C:\Program Files\TW-IA300C ADSL\Anti-Virus\fsgk32st.exe
      C:\Program Files\Sonera Tietoturva\backweb\4436233\program\fsbwsys.exe
      C:\Program Files\Sonera Tietoturva\Anti-Virus\FSGK32.EXE
      C:\Program Files\TW-IA300C ADSL\Common\FSMA32.EXE
      C:\Program Files\TW-IA300C ADSL\Common\FSMB32.EXE
      C:\WINDOWS\system32\slserv.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Sonera Tietoturva\Anti-Virus\fssm32.exe
      C:\Program Files\Sonera Tietoturva\Common\FCH32.EXE
      C:\WINDOWS\System32\ups.exe
      C:\Program Files\Sonera Tietoturva\Common\FAMEH32.EXE
      C:\Program Files\Sonera Tietoturva\Anti-Virus\fsrw.exe
      C:\Program Files\Sonera Tietoturva\FSPC\fspc.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\Sonera Tietoturva\Anti-Virus\fsav32.exe
      C:\Program Files\Sonera Tietoturva\FWES\Program\fsdfwd.exe
      C:\ATI-CPanel\atiptaxx.exe
      C:\WINDOWS\SOUNDMAN.EXE
      C:\Program Files\TW-IA300C ADSL\CnxDslTb.exe
      C:\Program Files\Sonera Tietoturva\Common\FSM32.EXE
      C:\Program Files\Sonera Tietoturva\FSGUI\ispnews.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
      C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
      C:\Documents and Settings\Wilenius Jani\Työpöytä\Winamp\winampa.exe
      C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
      C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
      C:\WINDOWS\system32\hphmon05.exe
      C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
      C:\Program Files\QuickTime\qttask.exe
      C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\Messenger\msmsgs.exe
      C:\Program Files\MSN Messenger\msnmsgr.exe
      C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe
      C:\PROGRA~1\SONERA~1\ANTI-S~1\fsaw.exe
      C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
      C:\WINDOWS\system32\HPZipm12.exe
      C:\Program Files\Sonera Tietoturva\backweb\4436233\Program\fspex.exe
      C:\Program Files\Sonera Tietoturva\FSGUI\fsguidll.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Lavasoft\Ad-Aware SE Personal\Ad-Aware.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Documents and Settings\Wilenius Sirpa\Local Settings\Temporary Internet Files\Content.IE5\LV7J9D8E\HijackThis[1].exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://haku.soneraplaza.fi/haku/queryie5.jsp
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.suomi24.fi/
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.soneraplaza.fi
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = http://security.kolla.de/
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer - toimittaja Sonera Internet
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.dial.inet.fi:800
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.fi;*.*.fi;*.*.*.fi;
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
      O2 - BHO: Popup Blocker - {593FA054-6BFB-4ce5-B87A-0A68DB7C0F08} - C:\WINDOWS\System32\EniroToolbar\PopupBlocker.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.02.3000.1002\en-xu\stmain.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
      O3 - Toolbar: Eniro - {A3C4086C-097C-46b0-AFB0-76B5CC294233} - C:\WINDOWS\System32\EniroToolbar\Toolband.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
      O4 - HKLM\..\Run: [ATIPTA] C:\ATI-CPanel\atiptaxx.exe
      O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
      O4 - HKLM\..\Run: [CnxDslTaskBar] "C:\Program Files\\TW-IA300C ADSL\CnxDslTb.exe"
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Sonera Tietoturva\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Sonera Tietoturva\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
      O4 - HKLM\..\Run: [News Service] "C:\Program Files\Sonera Tietoturva\FSGUI\ispnews.exe"
      O4 - HKLM\..\Run: [CamMonitor] C:\Program Files\Hewlett-Packard\Digital Imaging\\Unload\hpqcmon.exe
      O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
      O4 - HKLM\..\Run: [SpybotSnD] "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe" /autocheck /waitprograms
      O4 - HKLM\..\Run: [WinampAgent] C:\Documents and Settings\Wilenius Jani\Työpöytä\Winamp\winampa.exe
      O4 - HKLM\..\Run: [HPHUPD05] C:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
      O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
      O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe"
      O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\system32\hphmon05.exe
      O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\FirstStart.exe
      O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\Sonera Tietoturva\FSGUI\FSSW.EXE" /reboot
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      O4 - HKLM\..\RunOnce: [RichEd32.dll] regsvr32.exe /s C:\WINDOWS\system32\RichEd32.dll
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - HKCU\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe
      O4 - Global Startup: Sonera Tietoturva.lnk = C:\Program Files\Sonera Tietoturva\backweb\4436233\Program\fspex.exe
      O8 - Extra context menu item: &Estä tämä kohoikkuna - C:\Program Files\Sonera Tietoturva\Anti-Spyware\blockpopups.htm
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra button: Web-suodatin - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: Web-suodatin - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F02} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: &Keskeytä Web-sivujen suodatus - {200DB664-75B5-47c0-8B45-A44ACCF73F02} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F03} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: &Kiellä tämä Web-sivusto - {200DB664-75B5-47c0-8B45-A44ACCF73F03} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F04} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: &Salli tämä Web-sivusto - {200DB664-75B5-47c0-8B45-A44ACCF73F04} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Sonera Tietoturva\Anti-Spyware\ieshield.dll
      O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Sonera Tietoturva\Anti-Spyware\ieshield.dll
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O10 - Broken Internet access because of LSP provider 'winsflt.dll' missing
      O14 - IERESET.INF: START_PAGE_URL=http://www.soneraplaza.fi
      O16 - DPF: {2A32B14F-4D29-4EA3-AC54-E9B19F436CE7} (Scanner Class) - http://www.windowsecurity.com/trojanscan/TDECntrl.CAB
      O16 - DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} (ASquaredScanForm Element) - http://www.windowsecurity.com/trojanscan/axscan.cab
      O16 - DPF: {E991BDE0-9816-4094-853E-6BDB60F0342D} (Get_ActiveX Control) - http://apps.corel.com/nos_dl_manager/plugin/IENetOpPlugin.ocx
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
      O23 - Service: Sonera Tietoturva (BackWeb Plug-in - 4436233) - Sonera Tietoturva - C:\PROGRA~1\SONERA~1\backweb\4436233\Program\SERVIC~1.EXE
      O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\TW-IA300C ADSL\Anti-Virus\fsgk32st.exe
      O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\Sonera Tietoturva\backweb\4436233\program\fsbwsys.exe
      O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Sonera Tietoturva\FWES\Program\fsdfwd.exe
      O23 - Service: F-Secure HTTP Server (fshttps) - F-Secure Corporation - C:\Program Files\Sonera Tietoturva\FSPC\fshttps\fshttps.exe
      O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\TW-IA300C ADSL\Common\FSMA32.EXE
      O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
      O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe

      Äänestä

    • "valvojan" kirjoitti:

      listaa tässä:

      Logfile of HijackThis v1.99.1
      Scan saved at 9:52:35, on 16.4.2006
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\PROGRA~1\SONERA~1\backweb\4436233\Program\SERVIC~1.EXE
      C:\Program Files\TW-IA300C ADSL\Anti-Virus\fsgk32st.exe
      C:\Program Files\Sonera Tietoturva\backweb\4436233\program\fsbwsys.exe
      C:\Program Files\Sonera Tietoturva\Anti-Virus\FSGK32.EXE
      C:\Program Files\TW-IA300C ADSL\Common\FSMA32.EXE
      C:\Program Files\TW-IA300C ADSL\Common\FSMB32.EXE
      C:\WINDOWS\system32\slserv.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Sonera Tietoturva\Anti-Virus\fssm32.exe
      C:\Program Files\Sonera Tietoturva\Common\FCH32.EXE
      C:\WINDOWS\System32\ups.exe
      C:\Program Files\Sonera Tietoturva\Common\FAMEH32.EXE
      C:\Program Files\Sonera Tietoturva\Anti-Virus\fsrw.exe
      C:\Program Files\Sonera Tietoturva\FSPC\fspc.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\Sonera Tietoturva\Anti-Virus\fsav32.exe
      C:\Program Files\Sonera Tietoturva\FWES\Program\fsdfwd.exe
      C:\ATI-CPanel\atiptaxx.exe
      C:\WINDOWS\SOUNDMAN.EXE
      C:\Program Files\TW-IA300C ADSL\CnxDslTb.exe
      C:\Program Files\Sonera Tietoturva\Common\FSM32.EXE
      C:\Program Files\Sonera Tietoturva\FSGUI\ispnews.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
      C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
      C:\Documents and Settings\Wilenius Jani\Työpöytä\Winamp\winampa.exe
      C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
      C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
      C:\WINDOWS\system32\hphmon05.exe
      C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
      C:\Program Files\QuickTime\qttask.exe
      C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\Messenger\msmsgs.exe
      C:\Program Files\MSN Messenger\msnmsgr.exe
      C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe
      C:\PROGRA~1\SONERA~1\ANTI-S~1\fsaw.exe
      C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
      C:\WINDOWS\system32\HPZipm12.exe
      C:\Program Files\Sonera Tietoturva\backweb\4436233\Program\fspex.exe
      C:\Program Files\Sonera Tietoturva\FSGUI\fsguidll.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Lavasoft\Ad-Aware SE Personal\Ad-Aware.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Documents and Settings\Wilenius Sirpa\Local Settings\Temporary Internet Files\Content.IE5\LV7J9D8E\HijackThis[1].exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://haku.soneraplaza.fi/haku/queryie5.jsp
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.suomi24.fi/
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.soneraplaza.fi
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = http://security.kolla.de/
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer - toimittaja Sonera Internet
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.dial.inet.fi:800
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.fi;*.*.fi;*.*.*.fi;
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
      O2 - BHO: Popup Blocker - {593FA054-6BFB-4ce5-B87A-0A68DB7C0F08} - C:\WINDOWS\System32\EniroToolbar\PopupBlocker.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.02.3000.1002\en-xu\stmain.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
      O3 - Toolbar: Eniro - {A3C4086C-097C-46b0-AFB0-76B5CC294233} - C:\WINDOWS\System32\EniroToolbar\Toolband.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
      O4 - HKLM\..\Run: [ATIPTA] C:\ATI-CPanel\atiptaxx.exe
      O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
      O4 - HKLM\..\Run: [CnxDslTaskBar] "C:\Program Files\\TW-IA300C ADSL\CnxDslTb.exe"
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Sonera Tietoturva\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Sonera Tietoturva\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
      O4 - HKLM\..\Run: [News Service] "C:\Program Files\Sonera Tietoturva\FSGUI\ispnews.exe"
      O4 - HKLM\..\Run: [CamMonitor] C:\Program Files\Hewlett-Packard\Digital Imaging\\Unload\hpqcmon.exe
      O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
      O4 - HKLM\..\Run: [SpybotSnD] "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe" /autocheck /waitprograms
      O4 - HKLM\..\Run: [WinampAgent] C:\Documents and Settings\Wilenius Jani\Työpöytä\Winamp\winampa.exe
      O4 - HKLM\..\Run: [HPHUPD05] C:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
      O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
      O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe"
      O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\system32\hphmon05.exe
      O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\FirstStart.exe
      O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\Sonera Tietoturva\FSGUI\FSSW.EXE" /reboot
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      O4 - HKLM\..\RunOnce: [RichEd32.dll] regsvr32.exe /s C:\WINDOWS\system32\RichEd32.dll
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - HKCU\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe
      O4 - Global Startup: Sonera Tietoturva.lnk = C:\Program Files\Sonera Tietoturva\backweb\4436233\Program\fspex.exe
      O8 - Extra context menu item: &Estä tämä kohoikkuna - C:\Program Files\Sonera Tietoturva\Anti-Spyware\blockpopups.htm
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra button: Web-suodatin - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: Web-suodatin - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F02} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: &Keskeytä Web-sivujen suodatus - {200DB664-75B5-47c0-8B45-A44ACCF73F02} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F03} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: &Kiellä tämä Web-sivusto - {200DB664-75B5-47c0-8B45-A44ACCF73F03} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F04} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: &Salli tämä Web-sivusto - {200DB664-75B5-47c0-8B45-A44ACCF73F04} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Sonera Tietoturva\Anti-Spyware\ieshield.dll
      O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Sonera Tietoturva\Anti-Spyware\ieshield.dll
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O10 - Broken Internet access because of LSP provider 'winsflt.dll' missing
      O14 - IERESET.INF: START_PAGE_URL=http://www.soneraplaza.fi
      O16 - DPF: {2A32B14F-4D29-4EA3-AC54-E9B19F436CE7} (Scanner Class) - http://www.windowsecurity.com/trojanscan/TDECntrl.CAB
      O16 - DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} (ASquaredScanForm Element) - http://www.windowsecurity.com/trojanscan/axscan.cab
      O16 - DPF: {E991BDE0-9816-4094-853E-6BDB60F0342D} (Get_ActiveX Control) - http://apps.corel.com/nos_dl_manager/plugin/IENetOpPlugin.ocx
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
      O23 - Service: Sonera Tietoturva (BackWeb Plug-in - 4436233) - Sonera Tietoturva - C:\PROGRA~1\SONERA~1\backweb\4436233\Program\SERVIC~1.EXE
      O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\TW-IA300C ADSL\Anti-Virus\fsgk32st.exe
      O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\Sonera Tietoturva\backweb\4436233\program\fsbwsys.exe
      O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Sonera Tietoturva\FWES\Program\fsdfwd.exe
      O23 - Service: F-Secure HTTP Server (fshttps) - F-Secure Corporation - C:\Program Files\Sonera Tietoturva\FSPC\fshttps\fshttps.exe
      O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\TW-IA300C ADSL\Common\FSMA32.EXE
      O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
      O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe

      ok:)

      Äänestä

    • FixFix kirjoitti:

      ok:)

      käynnistys tökki??? Ja vaimo meinasi heittää koneen mäelle.

      Äänestä

    • FixFix kirjoitti:

      scannaus HjT:llä merkkaus

      O4 - HKLM\..\Run: [AVSCHED32] C:\Program Files\AVPersonal\AVSched32.EXE /min

      Paietaan Fix checked


      Kansion poisto
      C:\Program Files\ ---> AVPersonal

      Logfile of HijackThis v1.99.1
      Scan saved at 10:06:35, on 16.4.2006
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\PROGRA~1\SONERA~1\backweb\4436233\Program\SERVIC~1.EXE
      C:\Program Files\TW-IA300C ADSL\Anti-Virus\fsgk32st.exe
      C:\Program Files\Sonera Tietoturva\backweb\4436233\program\fsbwsys.exe
      C:\Program Files\Sonera Tietoturva\Anti-Virus\FSGK32.EXE
      C:\Program Files\TW-IA300C ADSL\Common\FSMA32.EXE
      C:\Program Files\TW-IA300C ADSL\Common\FSMB32.EXE
      C:\WINDOWS\system32\slserv.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Sonera Tietoturva\Anti-Virus\fssm32.exe
      C:\Program Files\Sonera Tietoturva\Common\FCH32.EXE
      C:\WINDOWS\System32\ups.exe
      C:\Program Files\Sonera Tietoturva\Common\FAMEH32.EXE
      C:\Program Files\Sonera Tietoturva\Anti-Virus\fsrw.exe
      C:\Program Files\Sonera Tietoturva\FSPC\fspc.exe
      C:\Program Files\Sonera Tietoturva\Anti-Virus\fsav32.exe
      C:\Program Files\Sonera Tietoturva\FWES\Program\fsdfwd.exe
      C:\WINDOWS\system32\HPZipm12.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\Explorer.EXE
      C:\ATI-CPanel\atiptaxx.exe
      C:\WINDOWS\SOUNDMAN.EXE
      C:\Program Files\TW-IA300C ADSL\CnxDslTb.exe
      C:\Program Files\Sonera Tietoturva\Common\FSM32.EXE
      C:\Program Files\Sonera Tietoturva\FSGUI\ispnews.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
      C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
      C:\Documents and Settings\Wilenius Jani\Työpöytä\Winamp\winampa.exe
      C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
      C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
      C:\WINDOWS\system32\hphmon05.exe
      C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
      C:\Program Files\QuickTime\qttask.exe
      C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      C:\Program Files\Messenger\msmsgs.exe
      C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
      C:\PROGRA~1\SONERA~1\ANTI-S~1\fsaw.exe
      C:\Program Files\Sonera Tietoturva\backweb\4436233\Program\fspex.exe
      C:\Program Files\Sonera Tietoturva\FSGUI\fsguidll.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Documents and Settings\Wilenius Jani\Työpöytä\HijackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ii2.org/
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.soneraplaza.fi
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = http://security.kolla.de/
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer - toimittaja Sonera Internet
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.dial.inet.fi:800
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.fi;*.*.fi;*.*.*.fi;
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
      O2 - BHO: Popup Blocker - {593FA054-6BFB-4ce5-B87A-0A68DB7C0F08} - C:\WINDOWS\System32\EniroToolbar\PopupBlocker.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.02.3000.1002\en-xu\stmain.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
      O3 - Toolbar: Eniro - {A3C4086C-097C-46b0-AFB0-76B5CC294233} - C:\WINDOWS\System32\EniroToolbar\Toolband.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
      O4 - HKLM\..\Run: [ATIPTA] C:\ATI-CPanel\atiptaxx.exe
      O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
      O4 - HKLM\..\Run: [CnxDslTaskBar] "C:\Program Files\\TW-IA300C ADSL\CnxDslTb.exe"
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Sonera Tietoturva\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Sonera Tietoturva\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
      O4 - HKLM\..\Run: [News Service] "C:\Program Files\Sonera Tietoturva\FSGUI\ispnews.exe"
      O4 - HKLM\..\Run: [CamMonitor] C:\Program Files\Hewlett-Packard\Digital Imaging\\Unload\hpqcmon.exe
      O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
      O4 - HKLM\..\Run: [SpybotSnD] "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe" /autocheck /waitprograms
      O4 - HKLM\..\Run: [WinampAgent] C:\Documents and Settings\Wilenius Jani\Työpöytä\Winamp\winampa.exe
      O4 - HKLM\..\Run: [HPHUPD05] C:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
      O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
      O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe"
      O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\system32\hphmon05.exe
      O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\FirstStart.exe
      O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\Sonera Tietoturva\FSGUI\FSSW.EXE" /reboot
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      O4 - HKLM\..\RunOnce: [RichEd32.dll] regsvr32.exe /s C:\WINDOWS\system32\RichEd32.dll
      O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
      O4 - HKCU\..\Run: [WinMX] C:\DOCUME~1\WILENI~2\LOCALS~1\Temp\Tilapäinen kansio 2 winmx354beta4.zip\WinMX.exe -m
      O4 - HKCU\..\Run: [Skype] "C:\Documents and Settings\Wilenius Jani\Local Settings\Application Data\Skype\Phone\Skype.exe" /nosplash /minimized
      O4 - HKCU\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe -NoStart
      O4 - Global Startup: Sonera Tietoturva.lnk = C:\Program Files\Sonera Tietoturva\backweb\4436233\Program\fspex.exe
      O8 - Extra context menu item: &Estä tämä kohoikkuna - C:\Program Files\Sonera Tietoturva\Anti-Spyware\blockpopups.htm
      O8 - Extra context menu item: &Google-haku - res://C:\Program Files\Google\GoogleToolbar2.dll/cmsearch.html
      O8 - Extra context menu item: &Käännä englanninkielinen sana - res://C:\Program Files\Google\GoogleToolbar2.dll/cmwordtrans.html
      O8 - Extra context menu item: Linkit taaksepäin - res://C:\Program Files\Google\GoogleToolbar2.dll/cmbacklinks.html
      O8 - Extra context menu item: Samankaltaisia sivuja - res://C:\Program Files\Google\GoogleToolbar2.dll/cmsimilar.html
      O8 - Extra context menu item: Välimuistissa oleva kuvakaappaus sivusta - res://C:\Program Files\Google\GoogleToolbar2.dll/cmcache.html
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra button: Web-suodatin - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: Web-suodatin - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F02} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: &Keskeytä Web-sivujen suodatus - {200DB664-75B5-47c0-8B45-A44ACCF73F02} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F03} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: &Kiellä tämä Web-sivusto - {200DB664-75B5-47c0-8B45-A44ACCF73F03} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F04} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: &Salli tämä Web-sivusto - {200DB664-75B5-47c0-8B45-A44ACCF73F04} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Sonera Tietoturva\Anti-Spyware\ieshield.dll
      O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Sonera Tietoturva\Anti-Spyware\ieshield.dll
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O10 - Broken Internet access because of LSP provider 'winsflt.dll' missing
      O14 - IERESET.INF: START_PAGE_URL=http://www.soneraplaza.fi
      O16 - DPF: {2A32B14F-4D29-4EA3-AC54-E9B19F436CE7} (Scanner Class) - http://www.windowsecurity.com/trojanscan/TDECntrl.CAB
      O16 - DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} (ASquaredScanForm Element) - http://www.windowsecurity.com/trojanscan/axscan.cab
      O16 - DPF: {E991BDE0-9816-4094-853E-6BDB60F0342D} (Get_ActiveX Control) - http://apps.corel.com/nos_dl_manager/plugin/IENetOpPlugin.ocx
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
      O23 - Service: Sonera Tietoturva (BackWeb Plug-in - 4436233) - Sonera Tietoturva - C:\PROGRA~1\SONERA~1\backweb\4436233\Program\SERVIC~1.EXE
      O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\TW-IA300C ADSL\Anti-Virus\fsgk32st.exe
      O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\Sonera Tietoturva\backweb\4436233\program\fsbwsys.exe
      O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Sonera Tietoturva\FWES\Program\fsdfwd.exe
      O23 - Service: F-Secure HTTP Server (fshttps) - F-Secure Corporation - C:\Program Files\Sonera Tietoturva\FSPC\fshttps\fshttps.exe
      O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\TW-IA300C ADSL\Common\FSMA32.EXE
      O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
      O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe

      Ja voiko poistaa, kun ao ohjelmia ei ole koneella enään:

      O4 - HKCU\..\Run: [WinMX] C:\DOCUME~1\WILENI~2\LOCALS~1\Temp\Tilapäinen kansio 2 winmx354beta4.zip\WinMX.exe -m
      O4 - HKCU\..\Run: [Skype] "C:\Documents and Settings\Wilenius Jani\Local Settings\Application Data\Skype\Phone\Skype.exe" /nosplash /minimized

      Äänestä

    • kumminkin : kirjoitti:

      käynnistys tökki??? Ja vaimo meinasi heittää koneen mäelle.

      Lokissa näy mutta säädetään sitten lisää kun kaikki on menty lävitse.

      Äänestä

    • tällaiselta: kirjoitti:

      Logfile of HijackThis v1.99.1
      Scan saved at 10:06:35, on 16.4.2006
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\PROGRA~1\SONERA~1\backweb\4436233\Program\SERVIC~1.EXE
      C:\Program Files\TW-IA300C ADSL\Anti-Virus\fsgk32st.exe
      C:\Program Files\Sonera Tietoturva\backweb\4436233\program\fsbwsys.exe
      C:\Program Files\Sonera Tietoturva\Anti-Virus\FSGK32.EXE
      C:\Program Files\TW-IA300C ADSL\Common\FSMA32.EXE
      C:\Program Files\TW-IA300C ADSL\Common\FSMB32.EXE
      C:\WINDOWS\system32\slserv.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Sonera Tietoturva\Anti-Virus\fssm32.exe
      C:\Program Files\Sonera Tietoturva\Common\FCH32.EXE
      C:\WINDOWS\System32\ups.exe
      C:\Program Files\Sonera Tietoturva\Common\FAMEH32.EXE
      C:\Program Files\Sonera Tietoturva\Anti-Virus\fsrw.exe
      C:\Program Files\Sonera Tietoturva\FSPC\fspc.exe
      C:\Program Files\Sonera Tietoturva\Anti-Virus\fsav32.exe
      C:\Program Files\Sonera Tietoturva\FWES\Program\fsdfwd.exe
      C:\WINDOWS\system32\HPZipm12.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\Explorer.EXE
      C:\ATI-CPanel\atiptaxx.exe
      C:\WINDOWS\SOUNDMAN.EXE
      C:\Program Files\TW-IA300C ADSL\CnxDslTb.exe
      C:\Program Files\Sonera Tietoturva\Common\FSM32.EXE
      C:\Program Files\Sonera Tietoturva\FSGUI\ispnews.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
      C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
      C:\Documents and Settings\Wilenius Jani\Työpöytä\Winamp\winampa.exe
      C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
      C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
      C:\WINDOWS\system32\hphmon05.exe
      C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
      C:\Program Files\QuickTime\qttask.exe
      C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      C:\Program Files\Messenger\msmsgs.exe
      C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
      C:\PROGRA~1\SONERA~1\ANTI-S~1\fsaw.exe
      C:\Program Files\Sonera Tietoturva\backweb\4436233\Program\fspex.exe
      C:\Program Files\Sonera Tietoturva\FSGUI\fsguidll.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Documents and Settings\Wilenius Jani\Työpöytä\HijackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.ii2.org/
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.soneraplaza.fi
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = http://security.kolla.de/
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer - toimittaja Sonera Internet
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.dial.inet.fi:800
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.fi;*.*.fi;*.*.*.fi;
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
      O2 - BHO: Popup Blocker - {593FA054-6BFB-4ce5-B87A-0A68DB7C0F08} - C:\WINDOWS\System32\EniroToolbar\PopupBlocker.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.02.3000.1002\en-xu\stmain.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
      O3 - Toolbar: Eniro - {A3C4086C-097C-46b0-AFB0-76B5CC294233} - C:\WINDOWS\System32\EniroToolbar\Toolband.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
      O4 - HKLM\..\Run: [ATIPTA] C:\ATI-CPanel\atiptaxx.exe
      O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
      O4 - HKLM\..\Run: [CnxDslTaskBar] "C:\Program Files\\TW-IA300C ADSL\CnxDslTb.exe"
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Sonera Tietoturva\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Sonera Tietoturva\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
      O4 - HKLM\..\Run: [News Service] "C:\Program Files\Sonera Tietoturva\FSGUI\ispnews.exe"
      O4 - HKLM\..\Run: [CamMonitor] C:\Program Files\Hewlett-Packard\Digital Imaging\\Unload\hpqcmon.exe
      O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
      O4 - HKLM\..\Run: [SpybotSnD] "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe" /autocheck /waitprograms
      O4 - HKLM\..\Run: [WinampAgent] C:\Documents and Settings\Wilenius Jani\Työpöytä\Winamp\winampa.exe
      O4 - HKLM\..\Run: [HPHUPD05] C:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
      O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
      O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe"
      O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\system32\hphmon05.exe
      O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\FirstStart.exe
      O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\Sonera Tietoturva\FSGUI\FSSW.EXE" /reboot
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      O4 - HKLM\..\RunOnce: [RichEd32.dll] regsvr32.exe /s C:\WINDOWS\system32\RichEd32.dll
      O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
      O4 - HKCU\..\Run: [WinMX] C:\DOCUME~1\WILENI~2\LOCALS~1\Temp\Tilapäinen kansio 2 winmx354beta4.zip\WinMX.exe -m
      O4 - HKCU\..\Run: [Skype] "C:\Documents and Settings\Wilenius Jani\Local Settings\Application Data\Skype\Phone\Skype.exe" /nosplash /minimized
      O4 - HKCU\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe -NoStart
      O4 - Global Startup: Sonera Tietoturva.lnk = C:\Program Files\Sonera Tietoturva\backweb\4436233\Program\fspex.exe
      O8 - Extra context menu item: &Estä tämä kohoikkuna - C:\Program Files\Sonera Tietoturva\Anti-Spyware\blockpopups.htm
      O8 - Extra context menu item: &Google-haku - res://C:\Program Files\Google\GoogleToolbar2.dll/cmsearch.html
      O8 - Extra context menu item: &Käännä englanninkielinen sana - res://C:\Program Files\Google\GoogleToolbar2.dll/cmwordtrans.html
      O8 - Extra context menu item: Linkit taaksepäin - res://C:\Program Files\Google\GoogleToolbar2.dll/cmbacklinks.html
      O8 - Extra context menu item: Samankaltaisia sivuja - res://C:\Program Files\Google\GoogleToolbar2.dll/cmsimilar.html
      O8 - Extra context menu item: Välimuistissa oleva kuvakaappaus sivusta - res://C:\Program Files\Google\GoogleToolbar2.dll/cmcache.html
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra button: Web-suodatin - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: Web-suodatin - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F02} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: &Keskeytä Web-sivujen suodatus - {200DB664-75B5-47c0-8B45-A44ACCF73F02} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F03} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: &Kiellä tämä Web-sivusto - {200DB664-75B5-47c0-8B45-A44ACCF73F03} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F04} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: &Salli tämä Web-sivusto - {200DB664-75B5-47c0-8B45-A44ACCF73F04} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Sonera Tietoturva\Anti-Spyware\ieshield.dll
      O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Sonera Tietoturva\Anti-Spyware\ieshield.dll
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O10 - Broken Internet access because of LSP provider 'winsflt.dll' missing
      O14 - IERESET.INF: START_PAGE_URL=http://www.soneraplaza.fi
      O16 - DPF: {2A32B14F-4D29-4EA3-AC54-E9B19F436CE7} (Scanner Class) - http://www.windowsecurity.com/trojanscan/TDECntrl.CAB
      O16 - DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} (ASquaredScanForm Element) - http://www.windowsecurity.com/trojanscan/axscan.cab
      O16 - DPF: {E991BDE0-9816-4094-853E-6BDB60F0342D} (Get_ActiveX Control) - http://apps.corel.com/nos_dl_manager/plugin/IENetOpPlugin.ocx
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
      O23 - Service: Sonera Tietoturva (BackWeb Plug-in - 4436233) - Sonera Tietoturva - C:\PROGRA~1\SONERA~1\backweb\4436233\Program\SERVIC~1.EXE
      O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\TW-IA300C ADSL\Anti-Virus\fsgk32st.exe
      O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\Sonera Tietoturva\backweb\4436233\program\fsbwsys.exe
      O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Sonera Tietoturva\FWES\Program\fsdfwd.exe
      O23 - Service: F-Secure HTTP Server (fshttps) - F-Secure Corporation - C:\Program Files\Sonera Tietoturva\FSPC\fshttps\fshttps.exe
      O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\TW-IA300C ADSL\Common\FSMA32.EXE
      O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
      O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe

      Ja voiko poistaa, kun ao ohjelmia ei ole koneella enään:

      O4 - HKCU\..\Run: [WinMX] C:\DOCUME~1\WILENI~2\LOCALS~1\Temp\Tilapäinen kansio 2 winmx354beta4.zip\WinMX.exe -m
      O4 - HKCU\..\Run: [Skype] "C:\Documents and Settings\Wilenius Jani\Local Settings\Application Data\Skype\Phone\Skype.exe" /nosplash /minimized

      ok

      Katellaan noita myöhemmin tehään pikku säätöjä sitä ennen.

      Katotaan nyt kaikki 6kpl lävitse

      Äänestä

    • FixFix kirjoitti:

      ok

      Katellaan noita myöhemmin tehään pikku säätöjä sitä ennen.

      Katotaan nyt kaikki 6kpl lävitse

      Ja tällaiselta näyttää, tosin tämän lurjuksen kanssa ei ole ollut pahemmin ongelmia:


      Logfile of HijackThis v1.99.1
      Scan saved at 10:20:59, on 16.4.2006
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\system32\HPZipm12.exe
      C:\WINDOWS\Explorer.EXE
      C:\ATI-CPanel\atiptaxx.exe
      C:\WINDOWS\SOUNDMAN.EXE
      C:\Program Files\TW-IA300C ADSL\CnxDslTb.exe
      C:\Program Files\Sonera Tietoturva\Common\FSM32.EXE
      C:\Program Files\Sonera Tietoturva\FSGUI\ispnews.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
      C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
      C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
      C:\WINDOWS\system32\hphmon05.exe
      C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
      C:\Program Files\QuickTime\qttask.exe
      C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe
      C:\PROGRA~1\SONERA~1\ANTI-S~1\fsaw.exe
      C:\Program Files\MSN Messenger\msnmsgr.exe
      C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
      C:\Program Files\Sonera Tietoturva\FSGUI\fsguidll.exe
      C:\Program Files\Sonera Tietoturva\backweb\4436233\Program\fspex.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Documents and Settings\Riikonen Ensio O\Local Settings\Temporary Internet Files\Content.IE5\CJ1B3T9M\HijackThis[1].exe

      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.soneraplaza.fi
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = http://security.kolla.de/
      R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.lavasoft.de/news/product/info/
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
      O2 - BHO: Popup Blocker - {593FA054-6BFB-4ce5-B87A-0A68DB7C0F08} - C:\WINDOWS\System32\EniroToolbar\PopupBlocker.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.02.3000.1002\en-xu\stmain.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
      O3 - Toolbar: Eniro - {A3C4086C-097C-46b0-AFB0-76B5CC294233} - C:\WINDOWS\System32\EniroToolbar\Toolband.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
      O4 - HKLM\..\Run: [ATIPTA] C:\ATI-CPanel\atiptaxx.exe
      O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
      O4 - HKLM\..\Run: [CnxDslTaskBar] "C:\Program Files\\TW-IA300C ADSL\CnxDslTb.exe"
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Sonera Tietoturva\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Sonera Tietoturva\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
      O4 - HKLM\..\Run: [News Service] "C:\Program Files\Sonera Tietoturva\FSGUI\ispnews.exe"
      O4 - HKLM\..\Run: [CamMonitor] C:\Program Files\Hewlett-Packard\Digital Imaging\\Unload\hpqcmon.exe
      O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
      O4 - HKLM\..\Run: [SpybotSnD] "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe" /autocheck /waitprograms
      O4 - HKLM\..\Run: [WinampAgent] C:\Documents and Settings\Wilenius Jani\Työpöytä\Winamp\winampa.exe
      O4 - HKLM\..\Run: [HPHUPD05] C:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
      O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
      O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe"
      O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\system32\hphmon05.exe
      O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\FirstStart.exe
      O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\Sonera Tietoturva\FSGUI\FSSW.EXE" /reboot
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      O4 - HKLM\..\RunOnce: [RichEd32.dll] regsvr32.exe /s C:\WINDOWS\system32\RichEd32.dll
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - Global Startup: Sonera Tietoturva.lnk = C:\Program Files\Sonera Tietoturva\backweb\4436233\Program\fspex.exe
      O8 - Extra context menu item: &Estä tämä kohoikkuna - C:\Program Files\Sonera Tietoturva\Anti-Spyware\blockpopups.htm
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra button: Web-suodatin - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: Web-suodatin - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F02} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: &Keskeytä Web-sivujen suodatus - {200DB664-75B5-47c0-8B45-A44ACCF73F02} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F03} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: &Kiellä tämä Web-sivusto - {200DB664-75B5-47c0-8B45-A44ACCF73F03} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F04} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: &Salli tämä Web-sivusto - {200DB664-75B5-47c0-8B45-A44ACCF73F04} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Sonera Tietoturva\Anti-Spyware\ieshield.dll
      O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Sonera Tietoturva\Anti-Spyware\ieshield.dll
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O10 - Broken Internet access because of LSP provider 'winsflt.dll' missing
      O14 - IERESET.INF: START_PAGE_URL=http://www.soneraplaza.fi
      O16 - DPF: {2A32B14F-4D29-4EA3-AC54-E9B19F436CE7} (Scanner Class) - http://www.windowsecurity.com/trojanscan/TDECntrl.CAB
      O16 - DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} (ASquaredScanForm Element) - http://www.windowsecurity.com/trojanscan/axscan.cab
      O16 - DPF: {E991BDE0-9816-4094-853E-6BDB60F0342D} (Get_ActiveX Control) - http://apps.corel.com/nos_dl_manager/plugin/IENetOpPlugin.ocx
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
      O23 - Service: Sonera Tietoturva (BackWeb Plug-in - 4436233) - Sonera Tietoturva - C:\PROGRA~1\SONERA~1\backweb\4436233\Program\SERVIC~1.EXE
      O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\TW-IA300C ADSL\Anti-Virus\fsgk32st.exe
      O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\Sonera Tietoturva\backweb\4436233\program\fsbwsys.exe
      O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Sonera Tietoturva\FWES\Program\fsdfwd.exe
      O23 - Service: F-Secure HTTP Server (fshttps) - F-Secure Corporation - C:\Program Files\Sonera Tietoturva\FSPC\fshttps\fshttps.exe
      O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\TW-IA300C ADSL\Common\FSMA32.EXE
      O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
      O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe

      Äänestä

    • pukkaa, 1.4;n kirjoitti:

      Ja tällaiselta näyttää, tosin tämän lurjuksen kanssa ei ole ollut pahemmin ongelmia:


      Logfile of HijackThis v1.99.1
      Scan saved at 10:20:59, on 16.4.2006
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\system32\HPZipm12.exe
      C:\WINDOWS\Explorer.EXE
      C:\ATI-CPanel\atiptaxx.exe
      C:\WINDOWS\SOUNDMAN.EXE
      C:\Program Files\TW-IA300C ADSL\CnxDslTb.exe
      C:\Program Files\Sonera Tietoturva\Common\FSM32.EXE
      C:\Program Files\Sonera Tietoturva\FSGUI\ispnews.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
      C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
      C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
      C:\WINDOWS\system32\hphmon05.exe
      C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
      C:\Program Files\QuickTime\qttask.exe
      C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe
      C:\PROGRA~1\SONERA~1\ANTI-S~1\fsaw.exe
      C:\Program Files\MSN Messenger\msnmsgr.exe
      C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
      C:\Program Files\Sonera Tietoturva\FSGUI\fsguidll.exe
      C:\Program Files\Sonera Tietoturva\backweb\4436233\Program\fspex.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Documents and Settings\Riikonen Ensio O\Local Settings\Temporary Internet Files\Content.IE5\CJ1B3T9M\HijackThis[1].exe

      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.soneraplaza.fi
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = http://security.kolla.de/
      R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.lavasoft.de/news/product/info/
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
      O2 - BHO: Popup Blocker - {593FA054-6BFB-4ce5-B87A-0A68DB7C0F08} - C:\WINDOWS\System32\EniroToolbar\PopupBlocker.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.02.3000.1002\en-xu\stmain.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
      O3 - Toolbar: Eniro - {A3C4086C-097C-46b0-AFB0-76B5CC294233} - C:\WINDOWS\System32\EniroToolbar\Toolband.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
      O4 - HKLM\..\Run: [ATIPTA] C:\ATI-CPanel\atiptaxx.exe
      O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
      O4 - HKLM\..\Run: [CnxDslTaskBar] "C:\Program Files\\TW-IA300C ADSL\CnxDslTb.exe"
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Sonera Tietoturva\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Sonera Tietoturva\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
      O4 - HKLM\..\Run: [News Service] "C:\Program Files\Sonera Tietoturva\FSGUI\ispnews.exe"
      O4 - HKLM\..\Run: [CamMonitor] C:\Program Files\Hewlett-Packard\Digital Imaging\\Unload\hpqcmon.exe
      O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
      O4 - HKLM\..\Run: [SpybotSnD] "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe" /autocheck /waitprograms
      O4 - HKLM\..\Run: [WinampAgent] C:\Documents and Settings\Wilenius Jani\Työpöytä\Winamp\winampa.exe
      O4 - HKLM\..\Run: [HPHUPD05] C:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
      O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
      O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe"
      O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\system32\hphmon05.exe
      O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\FirstStart.exe
      O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\Sonera Tietoturva\FSGUI\FSSW.EXE" /reboot
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      O4 - HKLM\..\RunOnce: [RichEd32.dll] regsvr32.exe /s C:\WINDOWS\system32\RichEd32.dll
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - Global Startup: Sonera Tietoturva.lnk = C:\Program Files\Sonera Tietoturva\backweb\4436233\Program\fspex.exe
      O8 - Extra context menu item: &Estä tämä kohoikkuna - C:\Program Files\Sonera Tietoturva\Anti-Spyware\blockpopups.htm
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra button: Web-suodatin - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: Web-suodatin - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F02} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: &Keskeytä Web-sivujen suodatus - {200DB664-75B5-47c0-8B45-A44ACCF73F02} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F03} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: &Kiellä tämä Web-sivusto - {200DB664-75B5-47c0-8B45-A44ACCF73F03} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F04} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: &Salli tämä Web-sivusto - {200DB664-75B5-47c0-8B45-A44ACCF73F04} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Sonera Tietoturva\Anti-Spyware\ieshield.dll
      O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Sonera Tietoturva\Anti-Spyware\ieshield.dll
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O10 - Broken Internet access because of LSP provider 'winsflt.dll' missing
      O14 - IERESET.INF: START_PAGE_URL=http://www.soneraplaza.fi
      O16 - DPF: {2A32B14F-4D29-4EA3-AC54-E9B19F436CE7} (Scanner Class) - http://www.windowsecurity.com/trojanscan/TDECntrl.CAB
      O16 - DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} (ASquaredScanForm Element) - http://www.windowsecurity.com/trojanscan/axscan.cab
      O16 - DPF: {E991BDE0-9816-4094-853E-6BDB60F0342D} (Get_ActiveX Control) - http://apps.corel.com/nos_dl_manager/plugin/IENetOpPlugin.ocx
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
      O23 - Service: Sonera Tietoturva (BackWeb Plug-in - 4436233) - Sonera Tietoturva - C:\PROGRA~1\SONERA~1\backweb\4436233\Program\SERVIC~1.EXE
      O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\TW-IA300C ADSL\Anti-Virus\fsgk32st.exe
      O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\Sonera Tietoturva\backweb\4436233\program\fsbwsys.exe
      O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Sonera Tietoturva\FWES\Program\fsdfwd.exe
      O23 - Service: F-Secure HTTP Server (fshttps) - F-Secure Corporation - C:\Program Files\Sonera Tietoturva\FSPC\fshttps\fshttps.exe
      O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\TW-IA300C ADSL\Common\FSMA32.EXE
      O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
      O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe

      ok :)

      Äänestä

    • FixFix kirjoitti:

      ok :)

      saan auki, eli salasanan puolen päivän kieppeillä, jahka nuorikkonsa vierestä pääsee pystyyn, ne nuoret . . . . . .

      Asiasta viidenteen potenssiin, onkohan örkit ym. tuleet "mesen tai ii2.org:n" kautta, kun nuoriso tuppaa eninmäkseen niissä pyöriä???

      Äänestä

    Töki ihmeessä takaisin!

    Itse käytän tietokoneen tökkimiseen tainnutuspamppua, mutta aloittelija voi tökkiä vaikkapa lyijykynällä. Ota tökkimisen ajaksi kotelo pois!

    Äänestä

    • > Itse käytän tietokoneen tökkimiseen tainnutuspamppua < ..ulosannista :)

      Ethän käytä sitä vahingossa myös itseesi?

      Äänestä

    Kaikki ?

    Äänestä

    • toisessa ketjussa tietoa.

      Äänestä

    • vailla ollaan kirjoitti:

      toisessa ketjussa tietoa.

      Sitä ei koskaan tiedä kun netissä pyörii mistä se putkahtaa koneelle.

      Tuo spywareplaster nyt ainakin estää niitä helposti asentumasta.

      Selaimen asennus olis myös hyvä tehdä.
      http://www.mozilla-europe.org/fi/

      Tuota olisi hyvä alkaa käyttämään.

      Äänestä

    • vailla ollaan kirjoitti:

      toisessa ketjussa tietoa.

      välissä toi unistaalilista tänne.

      Menet järjestelmän valvojan oikeuksilla sisään.

      Luo poistolista:
      •   Avaa HiJackThis
      •   Klikkaa "Configure" valintaa oikealla alhaalla
      •   Klikkaa "Misc Tools"
      •   Klikkaa boxia joka sanoo "Uninstall Manager"
      •   Klikkaa valintaa "Save list"
      •   Kopioi ja liitä kyseinen lista muistiosta postiisi

      Äänestä

    • FixFix kirjoitti:

      välissä toi unistaalilista tänne.

      Menet järjestelmän valvojan oikeuksilla sisään.

      Luo poistolista:
      •   Avaa HiJackThis
      •   Klikkaa "Configure" valintaa oikealla alhaalla
      •   Klikkaa "Misc Tools"
      •   Klikkaa boxia joka sanoo "Uninstall Manager"
      •   Klikkaa valintaa "Save list"
      •   Kopioi ja liitä kyseinen lista muistiosta postiisi

      vastaan; onnistui kohtaan 3, mutta mistään ei löydy: "Uninstall Manager" Ainoastaan,
      Uninstall Hijack This.

      Äänestä

    • jonkinasteinen tenkkapoo kirjoitti:

      vastaan; onnistui kohtaan 3, mutta mistään ei löydy: "Uninstall Manager" Ainoastaan,
      Uninstall Hijack This.

      Open Uninstall Manager sitten painat sawe list nappia

      Äänestä

    • FixFix kirjoitti:

      Open Uninstall Manager sitten painat sawe list nappia

      onnistumaan; "syynä" HijackThis - v.1.99.0


      Ja tässä listan tynkää:



      Ad-Aware SE Personal
      Adobe Acrobat - Reader 6.0.2 Update
      Adobe Acrobat and Reader 6.0.3 Update
      Adobe Atmosphere Player for Acrobat and Adobe Reader
      Adobe Photoshop Album 2.0 Starter Edition
      Adobe Reader 6.0.1
      ATI Control Panel
      ATI Display Driver
      Battlefield Vietnam(TM)
      Battlefield Vietnam: WW2 Mod
      EniroToolbar
      Explorer Assiatant
      FW MapPack IndepenceDay V2
      Google Earth
      Google Toolbar for Internet Explorer
      High Definition Audio Driver Package - KB835221
      HijackThis 1.99.1
      HP Photo and Imaging 2.0 - Photosmart Cameras
      hp photosmart 7200 series
      HP Software Update
      HP-muistolevy
      InterVideo WinDVD
      J2SE Runtime Environment 5.0 Update 6
      Language pack for Ad-Aware SE
      Macromedia Flash Player 8
      Microsoft Data Access Components KB870669
      Microsoft Works 7.0
      Mp3tag V.2.32a
      MSN Messenger 7.5
      MSN Työkalupalkki
      Norman Internet Control
      OLYMPUS Master
      Photosmart 140,240,7200,7600,7700,7900 Series
      Pivot Stickfigure Animator
      PunkBuster for Battlefield Vietnam
      Päivitys Windows XP:lle (KB894391)
      Päivitys Windows XP:lle (KB896727)
      Päivitys Windows XP:lle (KB898461)
      Päivitys Windows XP:lle (KB910437)
      QuickTime
      Shockwave
      Smart Link 56K Modem
      Sonera Tietoturva
      SpywareBlaster v3.5.1
      Suojauspäivitys Windows Media Player 10:lle (KB911565)
      Suojauspäivitys Windows Media Playerille (KB911564)
      Suojauspäivitys Windows XP:lle (KB883939)
      Suojauspäivitys Windows XP:lle (KB890046)
      Suojauspäivitys Windows XP:lle (KB893756)
      Suojauspäivitys Windows XP:lle (KB896358)
      Suojauspäivitys Windows XP:lle (KB896422)
      Suojauspäivitys Windows XP:lle (KB896423)
      Suojauspäivitys Windows XP:lle (KB896424)
      Suojauspäivitys Windows XP:lle (KB896428)
      Suojauspäivitys Windows XP:lle (KB896688)
      Suojauspäivitys Windows XP:lle (KB899587)
      Suojauspäivitys Windows XP:lle (KB899588)
      Suojauspäivitys Windows XP:lle (KB899591)
      Suojauspäivitys Windows XP:lle (KB900725)
      Suojauspäivitys Windows XP:lle (KB901017)
      Suojauspäivitys Windows XP:lle (KB901214)
      Suojauspäivitys Windows XP:lle (KB902400)
      Suojauspäivitys Windows XP:lle (KB903235)
      Suojauspäivitys Windows XP:lle (KB904706)
      Suojauspäivitys Windows XP:lle (KB905414)
      Suojauspäivitys Windows XP:lle (KB905749)
      Suojauspäivitys Windows XP:lle (KB905915)
      Suojauspäivitys Windows XP:lle (KB908519)
      Suojauspäivitys Windows XP:lle (KB908531)
      Suojauspäivitys Windows XP:lle (KB911562)
      Suojauspäivitys Windows XP:lle (KB911567)
      Suojauspäivitys Windows XP:lle (KB911927)
      Suojauspäivitys Windows XP:lle (KB912812)
      Suojauspäivitys Windows XP:lle (KB912919)
      Suojauspäivitys Windows XP:lle (KB913446)
      TeleWell TW-IA300C PCI ADSL LAN Adapter
      Unreal Tournament 2003
      Windows Genuine Advantage v1.3.0254.0
      Windows Installer 3.1 (KB893803)
      Windows Installer 3.1 (KB893803)
      Windows Media Format Runtime
      Windows Media Player 10
      Windows XP Hotfix - KB834707
      Windows XP Hotfix - KB867282
      Windows XP Hotfix - KB873333
      Windows XP Hotfix - KB873339
      Windows XP Hotfix - KB885250
      Windows XP Hotfix - KB885835
      Windows XP Hotfix - KB885836
      Windows XP Hotfix - KB886185
      Windows XP Hotfix - KB887472
      Windows XP Hotfix - KB887742
      Windows XP Hotfix - KB888113
      Windows XP Hotfix - KB888302
      Windows XP Hotfix - KB890047
      Windows XP Hotfix - KB890175
      Windows XP Hotfix - KB890859
      Windows XP Hotfix - KB890923
      Windows XP Hotfix - KB891781
      Windows XP Hotfix - KB893066
      Windows XP Hotfix - KB893086
      Windows XP Service Pack 2

      Äänestä

    • tässä viimeinen:

      Logfile of HijackThis v1.99.1
      Scan saved at 19:39:30, on 16.4.2006
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\PROGRA~1\SONERA~1\backweb\4436233\Program\SERVIC~1.EXE
      C:\Program Files\TW-IA300C ADSL\Anti-Virus\fsgk32st.exe
      C:\Program Files\Sonera Tietoturva\backweb\4436233\program\fsbwsys.exe
      C:\Program Files\Sonera Tietoturva\Anti-Virus\FSGK32.EXE
      C:\Program Files\TW-IA300C ADSL\Common\FSMA32.EXE
      C:\Program Files\TW-IA300C ADSL\Common\FSMB32.EXE
      C:\WINDOWS\system32\slserv.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Sonera Tietoturva\Anti-Virus\fssm32.exe
      C:\Program Files\Sonera Tietoturva\Common\FCH32.EXE
      C:\WINDOWS\System32\ups.exe
      C:\Program Files\Sonera Tietoturva\Common\FAMEH32.EXE
      C:\Program Files\Sonera Tietoturva\Anti-Virus\fsrw.exe
      C:\Program Files\Sonera Tietoturva\FSPC\fspc.exe
      C:\Program Files\Sonera Tietoturva\Anti-Virus\fsav32.exe
      C:\Program Files\Sonera Tietoturva\FWES\Program\fsdfwd.exe
      C:\WINDOWS\system32\HPZipm12.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\Explorer.EXE
      C:\ATI-CPanel\atiptaxx.exe
      C:\WINDOWS\SOUNDMAN.EXE
      C:\Program Files\TW-IA300C ADSL\CnxDslTb.exe
      C:\Program Files\Sonera Tietoturva\Common\FSM32.EXE
      C:\Program Files\Sonera Tietoturva\FSGUI\ispnews.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
      C:\Documents and Settings\Wilenius Jani\Työpöytä\Winamp\winampa.exe
      C:\PROGRA~1\SONERA~1\ANTI-S~1\fsaw.exe
      C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
      C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
      C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
      C:\WINDOWS\system32\hphmon05.exe
      C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
      C:\Program Files\QuickTime\qttask.exe
      C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\Messenger\msmsgs.exe
      C:\Program Files\Sonera Tietoturva\FSGUI\fsguidll.exe
      C:\Program Files\MSN Messenger\msnmsgr.exe
      C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe
      C:\Program Files\Sonera Tietoturva\backweb\4436233\Program\fspex.exe
      C:\Documents and Settings\Esa\Local Settings\Temporary Internet Files\Content.IE5\3O9KTRFC\HijackThis[1].exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.fi/
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.soneraplaza.fi
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = http://security.kolla.de/
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer - toimittaja Sonera Internet
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.dial.inet.fi:800
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.fi;*.*.fi;*.*.*.fi;
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
      O2 - BHO: Popup Blocker - {593FA054-6BFB-4ce5-B87A-0A68DB7C0F08} - C:\WINDOWS\System32\EniroToolbar\PopupBlocker.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.02.3000.1002\en-xu\stmain.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
      O3 - Toolbar: Eniro - {A3C4086C-097C-46b0-AFB0-76B5CC294233} - C:\WINDOWS\System32\EniroToolbar\Toolband.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
      O4 - HKLM\..\Run: [ATIPTA] C:\ATI-CPanel\atiptaxx.exe
      O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
      O4 - HKLM\..\Run: [CnxDslTaskBar] "C:\Program Files\\TW-IA300C ADSL\CnxDslTb.exe"
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Sonera Tietoturva\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Sonera Tietoturva\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
      O4 - HKLM\..\Run: [News Service] "C:\Program Files\Sonera Tietoturva\FSGUI\ispnews.exe"
      O4 - HKLM\..\Run: [CamMonitor] C:\Program Files\Hewlett-Packard\Digital Imaging\\Unload\hpqcmon.exe
      O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
      O4 - HKLM\..\Run: [SpybotSnD] "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe" /autocheck /waitprograms
      O4 - HKLM\..\Run: [WinampAgent] C:\Documents and Settings\Wilenius Jani\Työpöytä\Winamp\winampa.exe
      O4 - HKLM\..\Run: [HPHUPD05] C:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
      O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
      O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe"
      O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\system32\hphmon05.exe
      O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\FirstStart.exe
      O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\Sonera Tietoturva\FSGUI\FSSW.EXE" /reboot
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      O4 - HKLM\..\RunOnce: [RichEd32.dll] regsvr32.exe /s C:\WINDOWS\system32\RichEd32.dll
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - HKCU\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe
      O4 - Global Startup: Sonera Tietoturva.lnk = C:\Program Files\Sonera Tietoturva\backweb\4436233\Program\fspex.exe
      O8 - Extra context menu item: &Estä tämä kohoikkuna - C:\Program Files\Sonera Tietoturva\Anti-Spyware\blockpopups.htm
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra button: Web-suodatin - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: Web-suodatin - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F02} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: &Keskeytä Web-sivujen suodatus - {200DB664-75B5-47c0-8B45-A44ACCF73F02} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F03} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: &Kiellä tämä Web-sivusto - {200DB664-75B5-47c0-8B45-A44ACCF73F03} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F04} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: &Salli tämä Web-sivusto - {200DB664-75B5-47c0-8B45-A44ACCF73F04} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Sonera Tietoturva\Anti-Spyware\ieshield.dll
      O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Sonera Tietoturva\Anti-Spyware\ieshield.dll
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O10 - Broken Internet access because of LSP provider 'winsflt.dll' missing
      O14 - IERESET.INF: START_PAGE_URL=http://www.soneraplaza.fi
      O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
      O16 - DPF: {2A32B14F-4D29-4EA3-AC54-E9B19F436CE7} (Scanner Class) - http://www.windowsecurity.com/trojanscan/TDECntrl.CAB
      O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
      O16 - DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} (ASquaredScanForm Element) - http://www.windowsecurity.com/trojanscan/axscan.cab
      O16 - DPF: {E991BDE0-9816-4094-853E-6BDB60F0342D} (Get_ActiveX Control) - http://apps.corel.com/nos_dl_manager/plugin/IENetOpPlugin.ocx
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
      O23 - Service: Sonera Tietoturva (BackWeb Plug-in - 4436233) - Sonera Tietoturva - C:\PROGRA~1\SONERA~1\backweb\4436233\Program\SERVIC~1.EXE
      O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\TW-IA300C ADSL\Anti-Virus\fsgk32st.exe
      O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\Sonera Tietoturva\backweb\4436233\program\fsbwsys.exe
      O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Sonera Tietoturva\FWES\Program\fsdfwd.exe
      O23 - Service: F-Secure HTTP Server (fshttps) - F-Secure Corporation - C:\Program Files\Sonera Tietoturva\FSPC\fshttps\fshttps.exe
      O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\TW-IA300C ADSL\Common\FSMA32.EXE
      O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
      O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe

      Äänestä

    • nyt alkoi homma kirjoitti:

      onnistumaan; "syynä" HijackThis - v.1.99.0


      Ja tässä listan tynkää:



      Ad-Aware SE Personal
      Adobe Acrobat - Reader 6.0.2 Update
      Adobe Acrobat and Reader 6.0.3 Update
      Adobe Atmosphere Player for Acrobat and Adobe Reader
      Adobe Photoshop Album 2.0 Starter Edition
      Adobe Reader 6.0.1
      ATI Control Panel
      ATI Display Driver
      Battlefield Vietnam(TM)
      Battlefield Vietnam: WW2 Mod
      EniroToolbar
      Explorer Assiatant
      FW MapPack IndepenceDay V2
      Google Earth
      Google Toolbar for Internet Explorer
      High Definition Audio Driver Package - KB835221
      HijackThis 1.99.1
      HP Photo and Imaging 2.0 - Photosmart Cameras
      hp photosmart 7200 series
      HP Software Update
      HP-muistolevy
      InterVideo WinDVD
      J2SE Runtime Environment 5.0 Update 6
      Language pack for Ad-Aware SE
      Macromedia Flash Player 8
      Microsoft Data Access Components KB870669
      Microsoft Works 7.0
      Mp3tag V.2.32a
      MSN Messenger 7.5
      MSN Työkalupalkki
      Norman Internet Control
      OLYMPUS Master
      Photosmart 140,240,7200,7600,7700,7900 Series
      Pivot Stickfigure Animator
      PunkBuster for Battlefield Vietnam
      Päivitys Windows XP:lle (KB894391)
      Päivitys Windows XP:lle (KB896727)
      Päivitys Windows XP:lle (KB898461)
      Päivitys Windows XP:lle (KB910437)
      QuickTime
      Shockwave
      Smart Link 56K Modem
      Sonera Tietoturva
      SpywareBlaster v3.5.1
      Suojauspäivitys Windows Media Player 10:lle (KB911565)
      Suojauspäivitys Windows Media Playerille (KB911564)
      Suojauspäivitys Windows XP:lle (KB883939)
      Suojauspäivitys Windows XP:lle (KB890046)
      Suojauspäivitys Windows XP:lle (KB893756)
      Suojauspäivitys Windows XP:lle (KB896358)
      Suojauspäivitys Windows XP:lle (KB896422)
      Suojauspäivitys Windows XP:lle (KB896423)
      Suojauspäivitys Windows XP:lle (KB896424)
      Suojauspäivitys Windows XP:lle (KB896428)
      Suojauspäivitys Windows XP:lle (KB896688)
      Suojauspäivitys Windows XP:lle (KB899587)
      Suojauspäivitys Windows XP:lle (KB899588)
      Suojauspäivitys Windows XP:lle (KB899591)
      Suojauspäivitys Windows XP:lle (KB900725)
      Suojauspäivitys Windows XP:lle (KB901017)
      Suojauspäivitys Windows XP:lle (KB901214)
      Suojauspäivitys Windows XP:lle (KB902400)
      Suojauspäivitys Windows XP:lle (KB903235)
      Suojauspäivitys Windows XP:lle (KB904706)
      Suojauspäivitys Windows XP:lle (KB905414)
      Suojauspäivitys Windows XP:lle (KB905749)
      Suojauspäivitys Windows XP:lle (KB905915)
      Suojauspäivitys Windows XP:lle (KB908519)
      Suojauspäivitys Windows XP:lle (KB908531)
      Suojauspäivitys Windows XP:lle (KB911562)
      Suojauspäivitys Windows XP:lle (KB911567)
      Suojauspäivitys Windows XP:lle (KB911927)
      Suojauspäivitys Windows XP:lle (KB912812)
      Suojauspäivitys Windows XP:lle (KB912919)
      Suojauspäivitys Windows XP:lle (KB913446)
      TeleWell TW-IA300C PCI ADSL LAN Adapter
      Unreal Tournament 2003
      Windows Genuine Advantage v1.3.0254.0
      Windows Installer 3.1 (KB893803)
      Windows Installer 3.1 (KB893803)
      Windows Media Format Runtime
      Windows Media Player 10
      Windows XP Hotfix - KB834707
      Windows XP Hotfix - KB867282
      Windows XP Hotfix - KB873333
      Windows XP Hotfix - KB873339
      Windows XP Hotfix - KB885250
      Windows XP Hotfix - KB885835
      Windows XP Hotfix - KB885836
      Windows XP Hotfix - KB886185
      Windows XP Hotfix - KB887472
      Windows XP Hotfix - KB887742
      Windows XP Hotfix - KB888113
      Windows XP Hotfix - KB888302
      Windows XP Hotfix - KB890047
      Windows XP Hotfix - KB890175
      Windows XP Hotfix - KB890859
      Windows XP Hotfix - KB890923
      Windows XP Hotfix - KB891781
      Windows XP Hotfix - KB893066
      Windows XP Hotfix - KB893086
      Windows XP Service Pack 2

      Norman Internet Control
      Explorer Assiatant

      Tuossa pari mitkä voi poistaa lisää poista sovellutuksesta.

      Äänestä

    • listaus: kirjoitti:

      tässä viimeinen:

      Logfile of HijackThis v1.99.1
      Scan saved at 19:39:30, on 16.4.2006
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\PROGRA~1\SONERA~1\backweb\4436233\Program\SERVIC~1.EXE
      C:\Program Files\TW-IA300C ADSL\Anti-Virus\fsgk32st.exe
      C:\Program Files\Sonera Tietoturva\backweb\4436233\program\fsbwsys.exe
      C:\Program Files\Sonera Tietoturva\Anti-Virus\FSGK32.EXE
      C:\Program Files\TW-IA300C ADSL\Common\FSMA32.EXE
      C:\Program Files\TW-IA300C ADSL\Common\FSMB32.EXE
      C:\WINDOWS\system32\slserv.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Sonera Tietoturva\Anti-Virus\fssm32.exe
      C:\Program Files\Sonera Tietoturva\Common\FCH32.EXE
      C:\WINDOWS\System32\ups.exe
      C:\Program Files\Sonera Tietoturva\Common\FAMEH32.EXE
      C:\Program Files\Sonera Tietoturva\Anti-Virus\fsrw.exe
      C:\Program Files\Sonera Tietoturva\FSPC\fspc.exe
      C:\Program Files\Sonera Tietoturva\Anti-Virus\fsav32.exe
      C:\Program Files\Sonera Tietoturva\FWES\Program\fsdfwd.exe
      C:\WINDOWS\system32\HPZipm12.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\Explorer.EXE
      C:\ATI-CPanel\atiptaxx.exe
      C:\WINDOWS\SOUNDMAN.EXE
      C:\Program Files\TW-IA300C ADSL\CnxDslTb.exe
      C:\Program Files\Sonera Tietoturva\Common\FSM32.EXE
      C:\Program Files\Sonera Tietoturva\FSGUI\ispnews.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
      C:\Documents and Settings\Wilenius Jani\Työpöytä\Winamp\winampa.exe
      C:\PROGRA~1\SONERA~1\ANTI-S~1\fsaw.exe
      C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
      C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
      C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
      C:\WINDOWS\system32\hphmon05.exe
      C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
      C:\Program Files\QuickTime\qttask.exe
      C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\Messenger\msmsgs.exe
      C:\Program Files\Sonera Tietoturva\FSGUI\fsguidll.exe
      C:\Program Files\MSN Messenger\msnmsgr.exe
      C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe
      C:\Program Files\Sonera Tietoturva\backweb\4436233\Program\fspex.exe
      C:\Documents and Settings\Esa\Local Settings\Temporary Internet Files\Content.IE5\3O9KTRFC\HijackThis[1].exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.fi/
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.soneraplaza.fi
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = http://security.kolla.de/
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer - toimittaja Sonera Internet
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.dial.inet.fi:800
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.fi;*.*.fi;*.*.*.fi;
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
      O2 - BHO: Popup Blocker - {593FA054-6BFB-4ce5-B87A-0A68DB7C0F08} - C:\WINDOWS\System32\EniroToolbar\PopupBlocker.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.02.3000.1002\en-xu\stmain.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
      O3 - Toolbar: Eniro - {A3C4086C-097C-46b0-AFB0-76B5CC294233} - C:\WINDOWS\System32\EniroToolbar\Toolband.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
      O4 - HKLM\..\Run: [ATIPTA] C:\ATI-CPanel\atiptaxx.exe
      O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
      O4 - HKLM\..\Run: [CnxDslTaskBar] "C:\Program Files\\TW-IA300C ADSL\CnxDslTb.exe"
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Sonera Tietoturva\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Sonera Tietoturva\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
      O4 - HKLM\..\Run: [News Service] "C:\Program Files\Sonera Tietoturva\FSGUI\ispnews.exe"
      O4 - HKLM\..\Run: [CamMonitor] C:\Program Files\Hewlett-Packard\Digital Imaging\\Unload\hpqcmon.exe
      O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
      O4 - HKLM\..\Run: [SpybotSnD] "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe" /autocheck /waitprograms
      O4 - HKLM\..\Run: [WinampAgent] C:\Documents and Settings\Wilenius Jani\Työpöytä\Winamp\winampa.exe
      O4 - HKLM\..\Run: [HPHUPD05] C:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
      O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
      O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe"
      O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\system32\hphmon05.exe
      O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\FirstStart.exe
      O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\Sonera Tietoturva\FSGUI\FSSW.EXE" /reboot
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      O4 - HKLM\..\RunOnce: [RichEd32.dll] regsvr32.exe /s C:\WINDOWS\system32\RichEd32.dll
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - HKCU\..\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe
      O4 - Global Startup: Sonera Tietoturva.lnk = C:\Program Files\Sonera Tietoturva\backweb\4436233\Program\fspex.exe
      O8 - Extra context menu item: &Estä tämä kohoikkuna - C:\Program Files\Sonera Tietoturva\Anti-Spyware\blockpopups.htm
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra button: Web-suodatin - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: Web-suodatin - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F02} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: &Keskeytä Web-sivujen suodatus - {200DB664-75B5-47c0-8B45-A44ACCF73F02} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F03} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: &Kiellä tämä Web-sivusto - {200DB664-75B5-47c0-8B45-A44ACCF73F03} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F04} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: &Salli tämä Web-sivusto - {200DB664-75B5-47c0-8B45-A44ACCF73F04} - C:\Program Files\Sonera Tietoturva\FSPC\fspcmsie.dll
      O9 - Extra button: IE-suojaus - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Sonera Tietoturva\Anti-Spyware\ieshield.dll
      O9 - Extra 'Tools' menuitem: IE-suojaus... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Sonera Tietoturva\Anti-Spyware\ieshield.dll
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O10 - Broken Internet access because of LSP provider 'winsflt.dll' missing
      O14 - IERESET.INF: START_PAGE_URL=http://www.soneraplaza.fi
      O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
      O16 - DPF: {2A32B14F-4D29-4EA3-AC54-E9B19F436CE7} (Scanner Class) - http://www.windowsecurity.com/trojanscan/TDECntrl.CAB
      O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
      O16 - DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} (ASquaredScanForm Element) - http://www.windowsecurity.com/trojanscan/axscan.cab
      O16 - DPF: {E991BDE0-9816-4094-853E-6BDB60F0342D} (Get_ActiveX Control) - http://apps.corel.com/nos_dl_manager/plugin/IENetOpPlugin.ocx
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
      O23 - Service: Sonera Tietoturva (BackWeb Plug-in - 4436233) - Sonera Tietoturva - C:\PROGRA~1\SONERA~1\backweb\4436233\Program\SERVIC~1.EXE
      O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\TW-IA300C ADSL\Anti-Virus\fsgk32st.exe
      O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\Sonera Tietoturva\backweb\4436233\program\fsbwsys.exe
      O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Sonera Tietoturva\FWES\Program\fsdfwd.exe
      O23 - Service: F-Secure HTTP Server (fshttps) - F-Secure Corporation - C:\Program Files\Sonera Tietoturva\FSPC\fshttps\fshttps.exe
      O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\TW-IA300C ADSL\Common\FSMA32.EXE
      O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
      O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe

      ok :)

      Äänestä

    • FixFix kirjoitti:

      ok :)

      tekee omiaan, kun lopettaa internetyhteyden, eli katkaisee. Silloin tulee ns. "blanco" explorer ja kun sulkee, silloin "pyytää" lähettemään vikaraporttia, jonka jälkeen vasta internet sulkeutuu.

      Äänestä

    • FixFix kirjoitti:

      ok :)

      jos tarve tulee käyttää ns. palutuspistettä, esim. käyttäen viimeviikon jotain päivää, palaako ongelmat takaisin, vai onko örkit tuhottu ja sen voi tehdä ongelmitta ???

      Äänestä

    • kysymystä: kirjoitti:

      jos tarve tulee käyttää ns. palutuspistettä, esim. käyttäen viimeviikon jotain päivää, palaako ongelmat takaisin, vai onko örkit tuhottu ja sen voi tehdä ongelmitta ???

      Palautuspisteessä on örkkejä niin tulee takasin.

      Mutta escan antoi puhtaan tuloksen siintä niin ei silloin ole örkkejä.

      Mikäs sen pisti tekemään?

      Äänestä

    • FixFix kirjoitti:

      Palautuspisteessä on örkkejä niin tulee takasin.

      Mutta escan antoi puhtaan tuloksen siintä niin ei silloin ole örkkejä.

      Mikäs sen pisti tekemään?

      siis koneen, ei minun. Juniori vaan "pääsi" latailemaan jotain ihmeohjelmia, kun hetken aikaa oli järjstelmänvalvojan oikeudet, mutta eipä taatusti onnistu, kun jos tarvetta ilmenee, silloin istuskellaan vieressä koko ajan.

      Äänestä

    Windowsin kanssa Käynnistyviä ohjelmia.

    Käynnistä nappi > suorita > kirjoita luukkuun msgonfig ja ok Käynnistys välilehti

    Sieltä otat edestä rukseja pois seuraavista:
    O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
    O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
    O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe"
    O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe

    Sen jälkeen painat käytä ja ok

    Kone sammuu ja käynnistyy tulee ikkuna jossa on pieni neliö laita siihen ruksi Sen jälken vasta OK

    Äänestä

    • löydy ao. tiedostoa, tulee laatikko, jossa: tietoa, ettei ko. tiedostoa löydy.

      Äänestä

    • tökkii, ei kirjoitti:

      löydy ao. tiedostoa, tulee laatikko, jossa: tietoa, ettei ko. tiedostoa löydy.

      kirjota msconfig

      Äänestä

    • ja esim. O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] tällaista riviä ei löydy, vaan malliin; otsikossa: käynnistyksen kohde, komento ja sijainti.


      Sekä; alla laatikkoja, missä "väkäset", sekä esim. malliin hpqs2wnd C:\Program Files\Hewl... HKLM\SOFTWARE\Microsoft\Windows\CurrentVer...

      Äänestä

    • järjestelmän kokoonpanosove... kirjoitti:

      ja esim. O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] tällaista riviä ei löydy, vaan malliin; otsikossa: käynnistyksen kohde, komento ja sijainti.


      Sekä; alla laatikkoja, missä "väkäset", sekä esim. malliin hpqs2wnd C:\Program Files\Hewl... HKLM\SOFTWARE\Microsoft\Windows\CurrentVer...

      hpgs2wnd.exe

      Äänestä

    • järjestelmän kokoonpanosove... kirjoitti:

      ja esim. O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] tällaista riviä ei löydy, vaan malliin; otsikossa: käynnistyksen kohde, komento ja sijainti.


      Sekä; alla laatikkoja, missä "väkäset", sekä esim. malliin hpqs2wnd C:\Program Files\Hewl... HKLM\SOFTWARE\Microsoft\Windows\CurrentVer...

      Toimimaan

      Äänestä

    • FixFix kirjoitti:

      hpgs2wnd.exe

      hieman epävarma: Eli käynnistyksen kohteet:

      hpqcmon, hpqs2wnd, HPWuSchd, hphmon05, hpztsbo9, jusched.

      Nämä "näyttivät" sellaisilta.

      Äänestä

    • FixFix kirjoitti:

      Toimimaan

      ensin saadaan kokeiltua, tämän "rojektin" jälkeen.

      Äänestä

    • kun meikäläinen on kirjoitti:

      hieman epävarma: Eli käynnistyksen kohteet:

      hpqcmon, hpqs2wnd, HPWuSchd, hphmon05, hpztsbo9, jusched.

      Nämä "näyttivät" sellaisilta.

      pois listasta
      hphmon05
      hpqcmon

      Äänestä

    • FixFix kirjoitti:

      Toimimaan

      jahka tässä keretään: Kiitos ja kumarrus jo tähän astisista. Jatkan omalla nimimerkilläni: [email protected] , joten huomisiin.

      Äänestä

    • viritystä huomenna kirjoitti:

      jahka tässä keretään: Kiitos ja kumarrus jo tähän astisista. Jatkan omalla nimimerkilläni: [email protected] , joten huomisiin.

      Öitä vaan :)

      Äänestä

    Odottaa vastausta

    Näihin keskusteluihin ei ole vielä vastattu. Ole ensimmäinen.

    Luetuimmat keskustelut

    Kommentoi aloitusta

    eikä onnistu kirjoitti:

    palutuspisteen kautta korjaus.

    Ja tällaista tietoa löytyi:



    **** Run Keys ****

    RUN: [Wizard]
    RUN: [ATIPTA] C:\ATI-CPanel\atiptaxx.exe
    RUN: [SoundMan] SOUNDMAN.EXE
    RUN: [CnxDslTaskBar] "C:\Program Files\\TW-IA300C ADSL\CnxDslTb.exe"
    RUN: [F-Secure Manager] "C:\Program Files\Sonera Tietoturva\Common\FSM32.EXE" /splash
    RUN: [F-Secure TNB] "C:\Program Files\Sonera Tietoturva\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
    RUN: [News Service] "C:\Program Files\Sonera Tietoturva\FSGUI\ispnews.exe"
    RUN: [CamMonitor] C:\Program Files\Hewlett-Packard\Digital Imaging\\Unload\hpqcmon.exe
    RUN: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
    RUN: [AVSCHED32] C:\Program Files\AVPersonal\AVSched32.EXE /min
    RUN: [SpybotSnD] "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe" /autocheck /waitprograms
    RUN: [WinampAgent] C:\Documents and Settings\Wilenius Jani\Työpöytä\Winamp\winampa.exe
    RUN: [HPHUPD05] C:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
    RUN: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
    RUN: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe"
    RUN: [HPHmon05] C:\WINDOWS\system32\hphmon05.exe
    RUN: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
    RUN: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    RUN: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\FirstStart.exe
    RUN: [F-Secure Startup Wizard] "C:\Program Files\Sonera Tietoturva\FSGUI\FSSW.EXE" /reboot
    RUN: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    RUN: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    RUN: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    RUN: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
    RUN: [Spyware Doctor] "C:\Program Files\Spyware Doctor\swdoctor.exe" /Q
    RUN: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe -NoStart


    **** Browser Helper Objects ****

    BHO: [AcroIEHlprObj Class] C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
    BHO: [CPub Object] C:\WINDOWS\System32\EniroToolbar\PopupBlocker.dll
    BHO: [CPub Object] C:\WINDOWS\System32\EniroToolbar\PopupBlocker.dll
    BHO: [SSVHelper Class] C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    BHO: [ST] C:\Program Files\MSN Apps\ST\01.02.3000.1002\en-xu\stmain.dll
    BHO: [Google Toolbar Helper] c:\program files\google\googletoolbar2.dll


    **** IE Toolbars ****

    TOOLBAR: [Eniro] C:\WINDOWS\System32\EniroToolbar\Toolband.dll
    TOOLBAR: [&Google] c:\program files\google\googletoolbar2.dll


    **** IE Extensions ****

    IEExt: []
    IEExt: [Web-suodatin]
    IEExt: [Web-suodatin]
    IEExt: [Web-suodatin]
    IEExt: [Web-suodatin]
    IEExt: [Web-suodatin]
    IEExt: [IE-suojaus]
    IEExt: [Messenger] C:\Program Files\Messenger\msmsgs.exe


    **** Hosts File Entries ****

    HOSTS: 127.0.0.1 localhost


    **** IE Settings ****

    IEProxy: proxy.dial.inet.fi:800
    IEBypass: *.fi;*.*.fi;*.*.*.fi;
    Default Page: http://www.soneraplaza.fi
    Default Search: http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    Local Page: C:\WINDOWS\system32\blank.htm
    Search Bar: http://www.google.com/ie
    Search Page: http://www.google.com


    **** IE Context Menu (Right click) ****

    IEContext: [&Estä tämä kohoikkuna] C:\Program Files\Sonera Tietoturva\Anti-Spyware\blockpopups.htm
    IEContext: [Hae Eniron avulla] res://C:\WINDOWS\System32\EniroToolbar\Toolband.dll/MENUSEARCH_FI.HTM


    **** Layered Service Providers ****

    LSP: MSAFD Tcpip [TCP/IP]
    LSP: MSAFD Tcpip [UDP/IP]
    LSP: RSVP UDP Service Provider
    LSP: RSVP TCP Service Provider
    LSP: MSAFD Tcpip [TCP/IP]
    LSP: MSAFD Tcpip [UDP/IP]
    LSP: RSVP UDP Service Provider
    LSP: RSVP TCP Service Provider
    LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{DB110D20-277B-4F3A-874B-8D1E809E2848}] SEQPACKET 5
    LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{DB110D20-277B-4F3A-874B-8D1E809E2848}] DATAGRAM 5
    LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{FD4CAE22-B097-4C61-87BE-0F513D884E82}] SEQPACKET 4
    LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{FD4CAE22-B097-4C61-87BE-0F513D884E82}] DATAGRAM 4
    LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{D8771E8C-A9F4-42A3-901A-CE43F8F8D1A8}] SEQPACKET 1
    LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{D8771E8C-A9F4-42A3-901A-CE43F8F8D1A8}] DATAGRAM 1
    LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{4D64AB99-34C7-4B9B-B360-E7B3315BAD3C}] SEQPACKET 0
    LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{4D64AB99-34C7-4B9B-B360-E7B3315BAD3C}] DATAGRAM 0
    LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{A5BB3413-DBEB-48C6-9BDD-93502ED6F678}] SEQPACKET 2
    LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{A5BB3413-DBEB-48C6-9BDD-93502ED6F678}] DATAGRAM 2
    LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{116A2413-0764-40E8-9CE8-BE1A8BF6ED53}] SEQPACKET 3
    LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{116A2413-0764-40E8-9CE8-BE1A8BF6ED53}] DATAGRAM 3


    **** Blocked Control Panel Items ****

    BLOCKED: [ncpa.cpl] No
    BLOCKED: [odbccp32.cpl] No


    **** Downloaded Program Files ****

    {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} [http://static.windupdates.com/cab/WebsiteAccess/ie/bridge-c18.cab] C:\WINDOWS\Downloaded Program Files\MediaGatewayX.dll
    {17492023-C23A-453E-A040-C7C580BBF700} [http://go.microsoft.com/fwlink/?linkid=39204] C:\WINDOWS\system32\LegitCheckControl.DLL
    {1D6711C8-7154-40BB-8380-3DEA45B69CBF} []
    {2A32B14F-4D29-4EA3-AC54-E9B19F436CE7} [http://www.windowsecurity.com/trojanscan/TDECntrl.CAB]
    {8AD9C840-044E-11D1-B3E9-00805F499D93} [http://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab]
    {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} [http://www.windowsecurity.com/trojanscan/axscan.cab]
    {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} [http://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab]
    {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} [http://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab]
    {E991BDE0-9816-4094-853E-6BDB60F0342D} [http://apps.corel.com/nos_dl_manager/plugin/IENetOpPlugin.ocx]


    **** Windows Services ****

    [Alerter] %SystemRoot%\System32\svchost.exe -k LocalService
    [ALG] %SystemRoot%\System32\alg.exe
    [AppMgmt] %SystemRoot%\system32\svchost.exe -k netsvcs
    [AudioSrv] %SystemRoot%\System32\svchost.exe -k netsvcs
    [BackWeb Plug-in - 4436233] C:\PROGRA~1\SONERA~1\backweb\4436233\Program\SERVIC~1.EXE
    [BITS] %SystemRoot%\System32\svchost.exe -k netsvcs
    [Browser] %SystemRoot%\System32\svchost.exe -k netsvcs
    [CiSvc] %SystemRoot%\system32\cisvc.exe
    [ClipSrv] %SystemRoot%\system32\clipsrv.exe
    [COMSysApp] C:\WINDOWS\System32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}
    [CryptSvc] %SystemRoot%\system32\svchost.exe -k netsvcs
    [DcomLaunch] %SystemRoot%\system32\svchost -k DcomLaunch
    [Dhcp] %SystemRoot%\System32\svchost.exe -k netsvcs
    [dmadmin] %SystemRoot%\System32\dmadmin.exe /com
    [dmserver] %SystemRoot%\System32\svchost.exe -k netsvcs
    [Dnscache] %SystemRoot%\System32\svchost.exe -k NetworkService
    [ERSvc] %SystemRoot%\System32\svchost.exe -k netsvcs
    [Eventlog] %SystemRoot%\system32\services.exe
    [EventSystem] C:\WINDOWS\System32\svchost.exe -k netsvcs
    [F-Secure Gatekeeper Handler Starter] "C:\Program Files\TW-IA300C ADSL\Anti-Virus\fsgk32st.exe"
    [FastUserSwitchingCompatibility] %SystemRoot%\System32\svchost.exe -k netsvcs
    [Fax] %systemroot%\system32\fxssvc.exe
    [fsbwsys] "C:\Program Files\Sonera Tietoturva\backweb\4436233\program\fsbwsys.exe"
    [FSDFWD] "C:\Program Files\Sonera Tietoturva\FWES\Program\fsdfwd.exe"
    [fshttps] "C:\Program Files\Sonera Tietoturva\FSPC\fshttps\fshttps.exe"
    [FSMA] "C:\Program Files\TW-IA300C ADSL\Common\FSMA32.EXE"
    [helpsvc] %SystemRoot%\System32\svchost.exe -k netsvcs
    [HidServ] %SystemRoot%\System32\svchost.exe -k netsvcs
    [HTTPFilter] %SystemRoot%\System32\svchost.exe -k HTTPFilter
    [ImapiService] C:\WINDOWS\System32\imapi.exe
    [lanmanserver] %SystemRoot%\System32\svchost.exe -k netsvcs
    [lanmanworkstation] %SystemRoot%\System32\svchost.exe -k netsvcs
    [LmHosts] %SystemRoot%\System32\svchost.exe -k LocalService
    [Messenger] %SystemRoot%\System32\svchost.exe -k netsvcs
    [mnmsrvc] C:\WINDOWS\System32\mnmsrvc.exe
    [MSDTC] C:\WINDOWS\System32\msdtc.exe
    [MSIServer] C:\WINDOWS\system32\msiexec.exe /V
    [NetDDE] %SystemRoot%\system32\netdde.exe
    [NetDDEdsdm] %SystemRoot%\system32\netdde.exe
    [Netlogon] %SystemRoot%\System32\lsass.exe
    [Netman] %SystemRoot%\System32\svchost.exe -k netsvcs
    [Nla] %SystemRoot%\System32\svchost.exe -k netsvcs
    [NtLmSsp] %SystemRoot%\System32\lsass.exe
    [NtmsSvc] %SystemRoot%\system32\svchost.exe -k netsvcs
    [PlugPlay] %SystemRoot%\system32\services.exe
    [Pml Driver HPZ12] C:\WINDOWS\system32\HPZipm12.exe
    [PolicyAgent] %SystemRoot%\System32\lsass.exe
    [ProtectedStorage] %SystemRoot%\system32\lsass.exe
    [RasAuto] %SystemRoot%\System32\svchost.exe -k netsvcs
    [RasMan] %SystemRoot%\System32\svchost.exe -k netsvcs
    [RDSessMgr] C:\WINDOWS\system32\sessmgr.exe
    [RemoteAccess] %SystemRoot%\System32\svchost.exe -k netsvcs
    [RpcLocator] %SystemRoot%\System32\locator.exe
    [RpcSs] %SystemRoot%\system32\svchost -k rpcss
    [RSVP] %SystemRoot%\System32\rsvp.exe
    [SamSs] %SystemRoot%\system32\lsass.exe
    [SCardSvr] %SystemRoot%\System32\SCardSvr.exe
    [Schedule] %SystemRoot%\System32\svchost.exe -k netsvcs
    [seclogon] %SystemRoot%\System32\svchost.exe -k netsvcs
    [SENS] %SystemRoot%\system32\svchost.exe -k netsvcs
    [SharedAccess] %SystemRoot%\System32\svchost.exe -k netsvcs
    [ShellHWDetection] %SystemRoot%\System32\svchost.exe -k netsvcs
    [SLService] slserv.exe
    [Spooler] %SystemRoot%\system32\spoolsv.exe
    [srservice] %SystemRoot%\System32\svchost.exe -k netsvcs
    [SSDPSRV] %SystemRoot%\System32\svchost.exe -k LocalService
    [stisvc] %SystemRoot%\System32\svchost.exe -k imgsvc
    [SwPrv] C:\WINDOWS\System32\dllhost.exe /Processid:{2CE119F0-EBD7-4651-9B40-847B820AEF3D}
    [SysmonLog] %SystemRoot%\system32\smlogsvc.exe
    [TapiSrv] %SystemRoot%\System32\svchost.exe -k netsvcs
    [TermService] %SystemRoot%\System32\svchost -k DComLaunch
    [Themes] %SystemRoot%\System32\svchost.exe -k netsvcs
    [TrkWks] %SystemRoot%\system32\svchost.exe -k netsvcs
    [UMWdf] C:\WINDOWS\System32\wdfmgr.exe
    [upnphost] %SystemRoot%\System32\svchost.exe -k LocalService
    [UPS] %SystemRoot%\System32\ups.exe
    [VSS] %SystemRoot%\System32\vssvc.exe
    [W32Time] %SystemRoot%\System32\svchost.exe -k netsvcs
    [WebClient] %SystemRoot%\System32\svchost.exe -k LocalService
    [winmgmt] %systemroot%\system32\svchost.exe -k netsvcs
    [WmdmPmSN] %SystemRoot%\System32\svchost.exe -k netsvcs
    [WmiApSrv] C:\WINDOWS\System32\wbem\wmiapsrv.exe
    [wscsvc] %SystemRoot%\System32\svchost.exe -k netsvcs
    [wuauserv] %systemroot%\system32\svchost.exe -k netsvcs
    [WZCSVC] %SystemRoot%\System32\svchost.exe -k netsvcs
    [xmlprov] %SystemRoot%\System32\svchost.exe -k netsvcs


    **** Custom IE Search Items ****

    SEARCH: [SearchAssistant] http://www.google.com/ie
    SEARCH: [CustomizeSearch] http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm


    **** Complete IE Options ****

    IEOPT: [NoUpdateCheck]
    IEOPT: [NoJITSetup]
    IEOPT: [Disable Script Debugger] yes
    IEOPT: [Show_ChannelBand] No
    IEOPT: [Anchor Underline] yes
    IEOPT: [Cache_Update_Frequency] Once_Per_Session
    IEOPT: [Display Inline Images] yes
    IEOPT: [Do404Search]
    IEOPT: [Local Page] C:\WINDOWS\system32\blank.htm
    IEOPT: [Save_Session_History_On_Exit] no
    IEOPT: [Show_FullURL] no
    IEOPT: [Show_StatusBar] yes
    IEOPT: [Show_ToolBar] yes
    IEOPT: [Show_URLinStatusBar] yes
    IEOPT: [Show_URLToolBar] yes
    IEOPT: [Start Page] http://www.suomi24.fi/
    IEOPT: [Use_DlgBox_Colors] yes
    IEOPT: [Search Page] http://www.google.com
    IEOPT: [FullScreen] no
    IEOPT: [Window_Placement] ,
    IEOPT: [Use FormSuggest] no
    IEOPT: [FormSuggest Passwords] no
    IEOPT: [FormSuggest PW Ask] no
    IEOPT: [SmoothScroll]
    IEOPT: [Page_Transitions]
    IEOPT: [ShowGoButton] yes
    IEOPT: [Friendly http errors] yes
    IEOPT: [Error Dlg Displayed On Every Error] no
    IEOPT: [Enable_MyPics_Hoverbar] yes
    IEOPT: [Enable AutoImageResize] yes
    IEOPT: [Play_Animations] yes
    IEOPT: [Display Inline Videos] yes
    IEOPT: [Play_Background_Sounds] yes
    IEOPT: [Show image placeholders]
    IEOPT: [Print_Background] no
    IEOPT: [Window Title] Microsoft Internet Explorer - toimittaja Sonera Internet
    IEOPT: [LastCheckedHi] =[Æosoft Internet Explorer - toimittaja Sonera Internet
    IEOPT: [NotifyDownloadComplete] yes
    IEOPT: [AddToFavoritesExpanded]
    IEOPT: [Use Search Asst] no
    IEOPT: [Expand Alt Text] no
    IEOPT: [Move System Caret] no
    IEOPT: [NoWebJITSetup]
    IEOPT: [AllowWindowReuse]
    IEOPT: [UseThemes]
    IEOPT: [FavIntelliMenus] no
    IEOPT: [Force Offscreen Composition]
    IEOPT: [NscSingleExpand]
    IEOPT: [DisableScriptDebuggerIE] yes
    IEOPT: [HistoryViewType]
    IEOPT: [AutoSearch]
    IEOPT: [Search Bar] http://www.google.com/ie
    IEOPT: [Enable Browser Extensions] yes
    IEOPT: [Default_Page_URL] http://www.soneraplaza.fi
    IEOPT: [Default_Search_URL] http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    IEOPT: [Search Page] http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    IEOPT: [Enable_Disk_Cache] yes
    IEOPT: [Cache_Percent_of_Disk]
    IEOPT: [Delete_Temp_Files_On_Exit] yes
    IEOPT: [Local Page] http://security.kolla.de/
    IEOPT: [Anchor_Visitation_Horizon]
    IEOPT: [Use_Async_DNS] yes
    IEOPT: [Placeholder_Width]
    IEOPT: [Placeholder_Height]
    IEOPT: [Start Page] http://www.msn.com
    IEOPT: [Wizard_Version] 6.00.2800.1106
    IEOPT: [FullScreen] no
    IEOPT: [CompanyName] Microsoft Corporation
    IEOPT: [Custom_Key] MICROSO
    IEOPT: [AddClsReg]
    IEOPT: [TLBAssBfin]
    IEOPT: [TLBAssBact]
    IEOPT: [TLBAssBlistn]
    IEOPT: [TLBAssBlist] ,www.leonia.fi,www.sampo.fi

    Anonyymi
    5000

    Ilmoita asiaton sisältö

    • Sisältää materiaalia, joka on loukkaavaa, herjaavaa, rasistista, uhkailevaa tai ahdistelevaa.

    • Materiaali sisältää nimiä, yhteystietoja tai muita henkilökohtaisia tietoja. Julkisuuden henkilöistä, julkisissa viroissa toimivista ihmisistä sekä yritysten vastuuhenkilöistä saa keskustella työhön liittyen. Myös yksityiselämään liittyvistä asioista voi keskustella siltä osin, kuin niistä on julkisesti kerrottu.

    • Sisältää lapsille haitallista tai heiltä kiellettyä materiaalia. Seksuaalinen sisältö on sallittua aiheeseen tarkoitetuilla palstoilla, joiden ikäraja on 18 vuotta.

    • Lainvastaista sisältöä voi olla mm. yksityiselämää loukkaavan tiedon levitys, kiihottaminen kansanryhmää vastaan, laiton uhkaaminen, alaikäisiin liittyvä seksuaalinen sisältö/grooming, petokset, identiteettivarkaudet, kunnianloukkaukset ja tekijänoikeusrikkomukset.

    • Sisältö ei liity palstan tai keskusteluketjun aiheeseen.

    • Viesti ei ole suomea tai ruotsia (pl. International Forums), se sisältää mainontaa, se sisältää tekijänoikeuksin suojattua materiaalia, se on massapostitus tai jokin muu syy.

    Jaa keskustelu