Norton ilmoittaa virus löydetty ei voi poistaa Trojan.nebular (tiedostossa C:\\windows\system32\winbub32.dll) En ole onnistunut tätä tiedostoa poistamaan!! AUTTAKAA, ottaa päähän kun kone hitaalla ja jumittelee. Pistin tähän login mukaan (mistä en kyllä mitään tajua, mut jotain löytyy niin pistäkää selvät ohjeet ) KIITOKSET SILLE JOKA AUTTAA AVUTONTA !!
Logfile of HijackThis v1.99.1
Scan saved at 18:30:22, on 12.7.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\ewido anti-spyware 4.0\guard.exe
C:\Program Files\Norton Internet Security\ISSVC.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\system32\RunDll32.exe
C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe
C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\Program Files\Java\jre1.5.0\bin\jusched.exe
C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
C:\PROGRA~1\COMMON~1\PCSuite\Services\SERVIC~1.EXE
C:\Program Files\ewido anti-spyware 4.0\ewido.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
C:\WINDOWS\system32\mapiicon.exe
C:\lotus\wordpro\ltsstart.exe
C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Symantec Shared\AdBlocking\NSMdtr.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Messenger\msmsgs.exe
C:\HJT\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://elisa.net/paketti/haku.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = C:\WINDOWS\local.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://elisa.net/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://elisa.net/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer - Toimittaja Elisa Internet
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.fi;;*.*.fi;*.*.*.fi;
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O3 - Toolbar: Norton Internet Security - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [OpwareSE2] "C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [ADSL_A2] A2Installed
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0\bin\jusched.exe
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -onlytray
O4 - HKLM\..\Run: [!ewido] "C:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - Startup: ADSL Diagnostic Tools.LNK = C:\WINDOWS\system32\mapiicon.exe
O4 - Startup: Lotus Opetusohjelma.lnk = C:\lotus\wordpro\ltsstart.exe
O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: SMS-viesti - {1D4D89B8-BC67-4648-8E88-EB13EE09D109} - http://sms.kolumbus.fi/ (file missing) (HKCU)
O9 - Extra button: Palvelut - {38309265-28CC-40F7-B958-91E804EA7438} - http://service.kolumbus.fi/ (file missing) (HKCU)
O9 - Extra button: Tuki - {84D401B4-86F6-46D0-B974-D361AE02F356} - http://tuki.elisa.net/ (file missing) (HKCU)
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=http://elisa.net/
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/cl...
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe
O23 - Service: ISSvc (ISSVC) - Symantec Corporation - C:\Program Files\Norton Internet Security\ISSVC.exe
O23 - Service: Norton AntiVirus Auto-Protect -palvelu (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
Logfile of HijackThis v1.99.1
Scan saved at 18:30:22, on 12.7.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\ewido anti-spyware 4.0\guard.exe
C:\Program Files\Norton Internet Security\ISSVC.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\system32\RunDll32.exe
C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe
C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
C:\Program Files\Java\jre1.5.0\bin\jusched.exe
C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
C:\PROGRA~1\COMMON~1\PCSuite\Services\SERVIC~1.EXE
C:\Program Files\ewido anti-spyware 4.0\ewido.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
C:\WINDOWS\system32\mapiicon.exe
C:\lotus\wordpro\ltsstart.exe
C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Symantec Shared\AdBlocking\NSMdtr.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Messenger\msmsgs.exe
C:\HJT\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://elisa.net/paketti/haku.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = C:\WINDOWS\local.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://elisa.net/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://elisa.net/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer - Toimittaja Elisa Internet
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.fi;;*.*.fi;*.*.*.fi;
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O3 - Toolbar: Norton Internet Security - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [OpwareSE2] "C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
O4 - HKLM\..\Run: [ADSL_A2] A2Installed
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0\bin\jusched.exe
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -onlytray
O4 - HKLM\..\Run: [!ewido] "C:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - Startup: ADSL Diagnostic Tools.LNK = C:\WINDOWS\system32\mapiicon.exe
O4 - Startup: Lotus Opetusohjelma.lnk = C:\lotus\wordpro\ltsstart.exe
O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: SMS-viesti - {1D4D89B8-BC67-4648-8E88-EB13EE09D109} - http://sms.kolumbus.fi/ (file missing) (HKCU)
O9 - Extra button: Palvelut - {38309265-28CC-40F7-B958-91E804EA7438} - http://service.kolumbus.fi/ (file missing) (HKCU)
O9 - Extra button: Tuki - {84D401B4-86F6-46D0-B974-D361AE02F356} - http://tuki.elisa.net/ (file missing) (HKCU)
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=http://elisa.net/
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/cl...
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe
O23 - Service: ISSvc (ISSVC) - Symantec Corporation - C:\Program Files\Norton Internet Security\ISSVC.exe
O23 - Service: Norton AntiVirus Auto-Protect -palvelu (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
Vastaukset 5
Vanhimmat
http://koti.mbnet.fi/pattaya1/escanmwav.htm
lataa, asenna, päivitä tapa2, laita täpit merkkauksien mukaan. Scannaa.
jos alaikkunaan tulee jotain kopioi se näin.
käytä komentoa Ctrl A.
Kopioi rivit komennolla Ctrl C.
Liitä rivit komennolla Ctrl V.
laita virus loki tänne
Tässä ois toi virus loki
Auttakaa jotenkin jos osaatte
Norttonin varoitus ikkuna "dowloader" viruksesta koko ajan näkyvissä!!
File C:\WINDOWS\se_spoof.dll infected by "Trojan-Downloader.Win32.Small.ddp" Virus. Action Taken: File Deleted.
File C:\PROGRA~1\TRUSTI~1\TRUSTI~1.DLL infected by "Trojan-Downloader.Win32.Small.ddp" Virus. Action Taken: File Deleted.
File C:\WINDOWS\mxd.exe infected by "Trojan-Downloader.Win32.Small.cwj" Virus. Action Taken: File Deleted.
File C:\Documents and Settings\KJ\Local Settings\Temporary Internet Files\Content.IE5\EOU5812X\WinAntiSpyware2006FreeInstall[1].exe infected by "Trojan-Downloader.Win32.Agent.alr" Virus. Action Taken: File Deleted.
File C:\Documents and Settings\KJ\Työpöytä\WinAntiSpyware2006FreeInstall.exe infected by "Trojan-Downloader.Win32.Agent.alr" Virus. Action Taken: File Deleted.
File C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\0EB211B1.dll infected by "Packed.Win32.Klone.g" Virus. Action Taken: File Renamed.
File C:\System Volume Information\_restore{47309501-FB50-472C-AF91-B0DBCD6642A6}\RP276\A0038919.exe infected by "Trojan-Dropper.Win32.Microjoin.bx" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{47309501-FB50-472C-AF91-B0DBCD6642A6}\RP276\A0038920.exe infected by "Trojan-Dropper.Win32.Microjoin.bx" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{47309501-FB50-472C-AF91-B0DBCD6642A6}\RP276\A0038921.exe infected by "Trojan-Dropper.Win32.Microjoin.bx" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{47309501-FB50-472C-AF91-B0DBCD6642A6}\RP276\A0038922.exe infected by "Trojan-Dropper.Win32.Microjoin.bx" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{47309501-FB50-472C-AF91-B0DBCD6642A6}\RP276\A0038923.exe infected by "Trojan-Dropper.Win32.Microjoin.bx" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{47309501-FB50-472C-AF91-B0DBCD6642A6}\RP276\A0038924.exe infected by "Trojan-Dropper.Win32.Microjoin.bx" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{47309501-FB50-472C-AF91-B0DBCD6642A6}\RP277\A0043070.exe infected by "Trojan-Downloader.Win32.WarSpy.d" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{47309501-FB50-472C-AF91-B0DBCD6642A6}\RP277\A0043078.dll infected by "Trojan-Downloader.Win32.Small.ddp" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{47309501-FB50-472C-AF91-B0DBCD6642A6}\RP277\A0043082.dll tagged as not-a-virus:AdWare.Win32.Azesearch.h. No Action Taken.
File C:\System Volume Information\_restore{47309501-FB50-472C-AF91-B0DBCD6642A6}\RP277\A0043083.exe infected by "Trojan-Downloader.Win32.Small.cwj" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{47309501-FB50-472C-AF91-B0DBCD6642A6}\RP277\A0044070.exe infected by "Trojan-Downloader.Win32.WarSpy.d" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{47309501-FB50-472C-AF91-B0DBCD6642A6}\RP277\A0044076.dll infected by "Trojan-Downloader.Win32.Small.ddp" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{47309501-FB50-472C-AF91-B0DBCD6642A6}\RP277\A0044079.exe infected by "Trojan-Downloader.Win32.Small.cwj" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{47309501-FB50-472C-AF91-B0DBCD6642A6}\RP277\A0045080.exe infected by "Trojan-Dropper.Win32.Microjoin.bx" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{47309501-FB50-472C-AF91-B0DBCD6642A6}\RP277\A0045081.exe infected by "Trojan-Dropper.Win32.Microjoin.bx" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{47309501-FB50-472C-AF91-B0DBCD6642A6}\RP278\A0045118.dll infected by "Trojan-Downloader.Win32.Small.ddp" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{47309501-FB50-472C-AF91-B0DBCD6642A6}\RP278\A0045120.exe infected by "Trojan-Downloader.Win32.WarSpy.d" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{47309501-FB50-472C-AF91-B0DBCD6642A6}\RP278\A0045121.dll tagged as not-a-virus:AdWare.Win32.Azesearch.h. No Action Taken.
File C:\System Volume Information\_restore{47309501-FB50-472C-AF91-B0DBCD6642A6}\RP278\A0045122.exe infected by "Trojan-Downloader.Win32.Small.cwj" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{47309501-FB50-472C-AF91-B0DBCD6642A6}\RP279\A0045130.exe tagged as not-a-virus:AdWare.Win32.Azesearch.h. No Action Taken.
File C:\System Volume Information\_restore{47309501-FB50-472C-AF91-B0DBCD6642A6}\RP279\A0046112.exe infected by "Trojan-Downloader.Win32.WarSpy.d" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{47309501-FB50-472C-AF91-B0DBCD6642A6}\RP279\A0047123.dll infected by "Trojan-Downloader.Win32.Small.ddp" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{47309501-FB50-472C-AF91-B0DBCD6642A6}\RP279\A0047124.dll tagged as not-a-virus:AdWare.Win32.Azesearch.h. No Action Taken.
File C:\System Volume Information\_restore{47309501-FB50-472C-AF91-B0DBCD6642A6}\RP279\A0047140.exe infected by "Trojan-Downloader.Win32.Small.cwj" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{47309501-FB50-472C-AF91-B0DBCD6642A6}\RP280\A0049142.dll infected by "Trojan-Downloader.Win32.Small.ddp" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{47309501-FB50-472C-AF91-B0DBCD6642A6}\RP280\A0049143.dll tagged as not-a-virus:AdWare.Win32.Azesearch.h. No Action Taken.
File C:\System Volume Information\_restore{47309501-FB50-472C-AF91-B0DBCD6642A6}\RP281\A0049203.exe infected by "Trojan-Downloader.Win32.WarSpy.d" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{47309501-FB50-472C-AF91-B0DBCD6642A6}\RP281\A0052188.exe infected by "Trojan-Downloader.Win32.WarSpy.d" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{47309501-FB50-472C-AF91-B0DBCD6642A6}\RP281\A0053196.dll tagged as not-a-virus:AdWare.Win32.Azesearch.h. No Action Taken.
File C:\System Volume Information\_restore{47309501-FB50-472C-AF91-B0DBCD6642A6}\RP281\A0054209.dll tagged as not-a-virus:AdWare.Win32.Azesearch.h. No Action Taken.
File C:\System Volume Information\_restore{47309501-FB50-472C-AF91-B0DBCD6642A6}\RP282\A0054231.dll infected by "Trojan-Downloader.Win32.Small.ddp" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{47309501-FB50-472C-AF91-B0DBCD6642A6}\RP282\A0054376.exe infected by "Trojan-Downloader.Win32.Zlob.wp" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{47309501-FB50-472C-AF91-B0DBCD6642A6}\RP282\A0055408.dll infected by "Trojan-Downloader.Win32.Small.ddp" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{47309501-FB50-472C-AF91-B0DBCD6642A6}\RP282\A0055409.dll infected by "Trojan-Downloader.Win32.Small.ddp" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{47309501-FB50-472C-AF91-B0DBCD6642A6}\RP282\A0055410.exe infected by "Trojan-Downloader.Win32.Small.cwj" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{47309501-FB50-472C-AF91-B0DBCD6642A6}\RP282\A0055411.exe infected by "Trojan-Downloader.Win32.Agent.alr" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{47309501-FB50-472C-AF91-B0DBCD6642A6}\RP282\A0055412.dll infected by "Packed.Win32.Klone.g" Virus. Action Taken: File Renamed.
Thu Jul 13 22:10:16 2006 => ***** Checking for specific ITW Viruses *****
Thu Jul 13 22:10:16 2006 => Checking for Welchia Virus...
Thu Jul 13 22:10:16 2006 => Checking for LovGate Virus...
Thu Jul 13 22:10:16 2006 => Checking for CodeRed Virus...
Thu Jul 13 22:10:16 2006 => Checking for OpaServ Virus...
Thu Jul 13 22:10:16 2006 => Checking for Sobig.e Virus...
Thu Jul 13 22:10:16 2006 => Checking for Winupie Virus...
Thu Jul 13 22:10:16 2006 => Checking for Swen Virus...
Thu Jul 13 22:10:16 2006 => Checking for JS.Fortnight Virus...
Thu Jul 13 22:10:16 2006 => Checking for Novarg Virus...
Thu Jul 13 22:10:16 2006 => Checking for Pagabot Virus...
Thu Jul 13 22:10:16 2006 => Checking for Parite.b Virus...
Thu Jul 13 22:10:16 2006 => Checking for Parite.a Virus...
Thu Jul 13 22:10:16 2006 => ***** Scanning complete. *****
Thu Jul 13 22:10:16 2006 => Total Number of Files Scanned: 185760
Thu Jul 13 22:10:16 2006 => Total Number of Virus(es) Found: 43
Thu Jul 13 22:10:16 2006 => Total Number of Disinfected Files: 0
Thu Jul 13 22:10:16 2006 => Total Number of Files Renamed: 2
Thu Jul 13 22:10:16 2006 => Total Number of Deleted Files: 34
Thu Jul 13 22:10:16 2006 => Total Number of Errors: 2
Thu Jul 13 22:10:16 2006 => Time Elapsed: 02:27:27
Thu Jul 13 22:10:16 2006 => Virus Database Date: 2006/07/08
Thu Jul 13 22:10:16 2006 => Virus Database Count: 205731
Thu Jul 13 22:10:16 2006 => Scan Completed.
lataa cclener http://www.download.fi/tyopoytaohjelmat/haittaohjelmien_poisto/ccleaner.cfm
aja sillä puhdistaja ja virheet
sitten tyhjennä nortonin karanteeni
vielä lisää puuhaa restoren ohje
http://support.f-secure.fi/fin/home/virusproblem/howtoclean/cleansystemrestore.shtml
Ajois cleanerin lävitse ei apua vielä virukset pysyy