Troijalainen koneella, joka ei poistu millään ohjelmalla ja sain HijackThis ohjelmalla seuraavan lokin:
Logfile of HijackThis v1.99.1
Scan saved at 10:01:57, on 30.7.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Kerio\Personal Firewall\persfw.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe
C:\Program Files\Microsoft IntelliPoint\point32.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\HPQ\Shared\hpqwmi.exe
C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
C:\Program Files\Nikon\NkView6\NkvMon.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\Program Files\Grisoft\AVG Free\avgcc.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Program Files\Winamp\winamp.exe
C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
C:\Documents and Settings\Mika Rotola-Pukkila\Työpöytä\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dnainternet.fi/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = dna Internet Explorer
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = http://paivitys.dnainternet.fi/yhteys/proxy.pac
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\saIE.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\saIE.dll
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
O4 - HKLM\..\Run: [zSPGuard] c:\program files\pjw\spguard\spguard.exe /s
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [AnyDVD] C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: NkvMon.exe.lnk = C:\Program Files\Nikon\NkView6\NkvMon.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: (no name) - {AFC3FA82-AD07-45cd-8B57-983435B9899E} - (no file)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.hp.com
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1145772665656
O16 - DPF: {9D190AE6-C81E-4039-8061-978EBAD10073} (F-Secure Online Scanner 3.0) - http://support.f-secure.com/ols/fscax.cab
O16 - DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} (a-squared Scanner) - http://ax.emsisoft.com/asquared.cab
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: HP WMI Interface (hpqwmi) - Hewlett-Packard Development Company, L.P. - C:\Program Files\HPQ\Shared\hpqwmi.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Unknown owner - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Kerio Personal Firewall (PersFw) - Kerio Technologies - C:\Program Files\Kerio\Personal Firewall\persfw.exe
Mitä siis poistaa??
t. MIka
Logfile of HijackThis v1.99.1
Scan saved at 10:01:57, on 30.7.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Kerio\Personal Firewall\persfw.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe
C:\Program Files\Microsoft IntelliPoint\point32.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\HPQ\Shared\hpqwmi.exe
C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
C:\Program Files\Nikon\NkView6\NkvMon.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\Program Files\Grisoft\AVG Free\avgcc.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Program Files\Winamp\winamp.exe
C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
C:\Documents and Settings\Mika Rotola-Pukkila\Työpöytä\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dnainternet.fi/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = dna Internet Explorer
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigURL = http://paivitys.dnainternet.fi/yhteys/proxy.pac
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\saIE.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\saIE.dll
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
O4 - HKLM\..\Run: [zSPGuard] c:\program files\pjw\spguard\spguard.exe /s
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [AnyDVD] C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: NkvMon.exe.lnk = C:\Program Files\Nikon\NkView6\NkvMon.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: (no name) - {AFC3FA82-AD07-45cd-8B57-983435B9899E} - (no file)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.hp.com
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1145772665656
O16 - DPF: {9D190AE6-C81E-4039-8061-978EBAD10073} (F-Secure Online Scanner 3.0) - http://support.f-secure.com/ols/fscax.cab
O16 - DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} (a-squared Scanner) - http://ax.emsisoft.com/asquared.cab
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: HP WMI Interface (hpqwmi) - Hewlett-Packard Development Company, L.P. - C:\Program Files\HPQ\Shared\hpqwmi.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Unknown owner - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Kerio Personal Firewall (PersFw) - Kerio Technologies - C:\Program Files\Kerio\Personal Firewall\persfw.exe
Mitä siis poistaa??
t. MIka
Vastaukset 11
Vanhimmat
missä tiedostossa ja mikä troijalainen
helpottais paljon auttamista
Heppa sijaitsee Windows/system32-tiedostossa ja on rotua "Trojan-gen" (other). Kiitos nopeasta vastauksesta!
t. Mika
C:windows/system32/windrvNT.sys win32Trojan-gen (other)
syötä tiedosto tuonne
http://www.virustotal.com/en/indexf.html
ja kerro mitä se sanoo
http://forum.sysinternals.com/forum_posts.asp?TID=944&PN=1&get=last
escan http://koti.mbnet.fi/pattaya1/escanmwav.htm
asenna, päivitä tapa2, laita täpit merkkauksien mukaan.
Scannaa
jos alaikkunaan tulee jotain kopioi se tänne. (virukset)
Käytä komentoa Ctrl A.
Kopioi rivit komennolla Ctrl C.
Liitä rivit komennolla Ctrl V.
Moi!
Kokeilin jo mainitsemaasi softaa, mutta ikävä kyllä se ei löytänyt heppaa, kiitti silti vinkistä!
t. Mika
Lataa ja tallenna https://europe.f-secure.com/blacklight/ työpöydällesi;
Tupla-klikkaa blbeta.exe, hyväksy sopimus, klikkaa > Scan, sitten > Next
Näet listan kaikesta mitä löytyi. Työpöydällesi myös ilmestyy loki jonka nimi on fsbl.xxxxxxx.log (xxxxxxx;n tilalla on luultavimmin numeroita).
Kopioi ja liitä tämä loki seuraavaan vastaukseesi. Älä valitse "Rename" optiota vielä! Haluamme nähdä login ensin, koska hyviä tiedostoja saattaa olla mukana, kuten "wbemtest.exe".
niinkuin pyysit ja sain tulokseksi "No hidden items found" ja ohjelma kävi läpi 44 prosessia. tässä loki:
7/30/06 17:14:11 [Info]: BlackLight Engine 1.0.42 initialized
07/30/06 17:14:11 [Info]: OS: 5.1 build 2600 (Service Pack 2)
07/30/06 17:14:11 [Note]: 7019 4
07/30/06 17:14:11 [Note]: 7005 0
07/30/06 17:14:19 [Note]: 7006 0
07/30/06 17:14:19 [Note]: 7011 364
07/30/06 17:14:20 [Note]: 7026 0
07/30/06 17:14:20 [Note]: 7026 0
07/30/06 17:14:41 [Note]: FSRAW library version 1.7.1019
07/30/06 17:14:43 [Note]: 2000 1006
07/30/06 17:14:43 [Note]: 2000 1006
07/30/06 17:14:43 [Note]: 2000 1006
07/30/06 17:14:43 [Note]: 2000 1006
07/30/06 17:14:43 [Note]: 2000 1006
07/30/06 17:14:43 [Note]: 2000 1006
07/30/06 17:14:43 [Note]: 2000 1006
07/30/06 17:14:43 [Note]: 2000 1006
07/30/06 17:14:43 [Note]: 2000 1006
07/30/06 17:14:43 [Note]: 2000 1006
07/30/06 17:14:43 [Note]: 2000 1006
07/30/06 17:14:43 [Note]: 2000 1006
07/30/06 17:14:43 [Note]: 2000 1006
07/30/06 17:14:43 [Note]: 2000 1006
07/30/06 17:14:43 [Note]: 2000 1006
07/30/06 17:14:43 [Note]: 2000 1006
07/30/06 17:14:43 [Note]: 2000 1006
07/30/06 17:14:43 [Note]: 2000 1006
07/30/06 17:14:43 [Note]: 2000 1006
07/30/06 17:14:43 [Note]: 2000 1006
07/30/06 17:14:43 [Note]: 2000 1006
07/30/06 17:14:43 [Note]: 2000 1006
07/30/06 17:14:43 [Note]: 2000 1006
07/30/06 17:14:43 [Note]: 2000 1006
07/30/06 17:14:43 [Note]: 2000 1006
07/30/06 17:14:43 [Note]: 2000 1006
07/30/06 17:14:43 [Note]: 2000 1006
07/30/06 17:14:44 [Note]: 2000 1006
07/30/06 17:14:44 [Note]: 2000 1006
07/30/06 17:14:44 [Note]: 2000 1006
07/30/06 17:14:44 [Note]: 2000 1006
07/30/06 17:14:44 [Note]: 2000 1006
07/30/06 17:14:44 [Note]: 2000 1006
07/30/06 17:14:44 [Note]: 2000 1006
07/30/06 17:14:44 [Note]: 2000 1006
07/30/06 17:14:44 [Note]: 2000 1006
07/30/06 17:14:44 [Note]: 2000 1006
07/30/06 17:14:44 [Note]: 2000 1006
07/30/06 17:14:44 [Note]: 2000 1006
07/30/06 17:14:44 [Note]: 2000 1006
07/30/06 17:14:44 [Note]: 2000 1006
07/30/06 17:14:44 [Note]: 2000 1006
07/30/06 17:14:44 [Note]: 2000 1006
07/30/06 17:14:44 [Note]: 2000 1006
07/30/06 17:14:44 [Note]: 2000 1006
07/30/06 17:14:44 [Note]: 2000 1006
07/30/06 17:14:44 [Note]: 2000 1006
07/30/06 17:14:44 [Note]: 2000 1006
07/30/06 17:14:44 [Note]: 2000 1006
07/30/06 17:14:44 [Note]: 2000 1006
07/30/06 17:14:44 [Note]: 2000 1006
07/30/06 17:14:44 [Note]: 2000 1006
07/30/06 17:14:44 [Note]: 2000 1006
07/30/06 17:14:44 [Note]: 2000 1006
07/30/06 17:14:44 [Note]: 2000 1006
07/30/06 17:14:44 [Note]: 2000 1006
07/30/06 17:14:44 [Note]: 2000 1006
07/30/06 17:14:44 [Note]: 2000 1006
07/30/06 17:14:44 [Note]: 2000 1006
07/30/06 17:14:44 [Note]: 2000 1006
07/30/06 17:14:44 [Note]: 2000 1006
07/30/06 17:14:45 [Note]: 2000 1006
07/30/06 17:14:45 [Note]: 2000 1006
07/30/06 17:14:45 [Note]: 2000 1006
07/30/06 17:14:45 [Note]: 2000 1006
07/30/06 17:14:45 [Note]: 2000 1006
07/30/06 17:14:45 [Note]: 2000 1006
07/30/06 17:14:45 [Note]: 2000 1006
07/30/06 17:14:45 [Note]: 2000 1006
07/30/06 17:14:45 [Note]: 2000 1006
07/30/06 17:14:45 [Note]: 2000 1006
07/30/06 17:14:45 [Note]: 2000 1006
07/30/06 17:14:45 [Note]: 2000 1006
07/30/06 17:14:45 [Note]: 2000 1006
07/30/06 17:14:45 [Note]: 2000 1006
07/30/06 17:14:45 [Note]: 2000 1006
07/30/06 17:14:45 [Note]: 2000 1006
07/30/06 17:14:45 [Note]: 2000 1006
07/30/06 17:14:45 [Note]: 2000 1006
07/30/06 17:14:45 [Note]: 2000 1006
07/30/06 17:14:45 [Note]: 2000 1006
07/30/06 17:14:45 [Note]: 2000 1006
07/30/06 17:14:45 [Note]: 2000 1006
07/30/06 17:14:45 [Note]: 2000 1006
07/30/06 17:14:45 [Note]: 2000 1006
07/30/06 17:14:45 [Note]: 2000 1006
07/30/06 17:14:45 [Note]: 2000 1006
07/30/06 17:14:45 [Note]: 2000 1006
07/30/06 17:14:45 [Note]: 2000 1006
07/30/06 17:14:45 [Note]: 2000 1006
07/30/06 17:14:45 [Note]: 2000 1006
07/30/06 17:14:45 [Note]: 2000 1006
07/30/06 17:14:45 [Note]: 2000 1006
07/30/06 17:14:45 [Note]: 2000 1006
07/30/06 17:14:45 [Note]: 2000 1006
07/30/06 17:14:45 [Note]: 2000 1006
07/30/06 17:14:45 [Note]: 2000 1006
07/30/06 17:14:45 [Note]: 2000 1006
07/30/06 17:14:45 [Note]: 2000 1006
07/30/06 17:14:46 [Note]: 2000 1006
07/30/06 17:14:46 [Note]: 2000 1006
07/30/06 17:14:46 [Note]: 2000 1006
07/30/06 17:14:46 [Note]: 2000 1006
07/30/06 17:14:46 [Note]: 2000 1006
07/30/06 17:14:46 [Note]: 2000 1006
07/30/06 17:14:46 [Note]: 2000 1006
07/30/06 17:14:46 [Note]: 2000 1006
07/30/06 17:14:46 [Note]: 2000 1006
07/30/06 17:14:46 [Note]: 2000 1006
07/30/06 17:14:46 [Note]: 2000 1006
07/30/06 17:14:46 [Note]: 2000 1006
07/30/06 17:14:46 [Note]: 2000 1006
07/30/06 17:14:46 [Note]: 2000 1006
07/30/06 17:14:46 [Note]: 2000 1006
07/30/06 17:14:46 [Note]: 2000 1006
07/30/06 17:14:46 [Note]: 2000 1006
07/30/06 17:14:46 [Note]: 2000 1006
07/30/06 17:14:46 [Note]: 2000 1006
07/30/06 17:14:46 [Note]: 2000 1006
07/30/06 17:14:46 [Note]: 2000 1006
07/30/06 17:14:46 [Note]: 2000 1006
07/30/06 17:14:46 [Note]: 2000 1006
07/30/06 17:14:46 [Note]: 2000 1006
07/30/06 17:14:46 [Note]: 2000 1006
07/30/06 17:14:46 [Note]: 2000 1006
07/30/06 17:14:46 [Note]: 2000 1006
07/30/06 17:14:46 [Note]: 2000 1006
07/30/06 17:14:46 [Note]: 2000 1006
07/30/06 17:14:46 [Note]: 2000 1006
07/30/06 17:14:46 [Note]: 2000 1006
07/30/06 17:14:46 [Note]: 2000 1006
07/30/06 17:14:46 [Note]: 2000 1006
07/30/06 17:14:46 [Note]: 2000 1006
07/30/06 17:14:46 [Note]: 2000 1006
07/30/06 17:14:46 [Note]: 2000 1006
07/30/06 17:14:46 [Note]: 2000 1006
07/30/06 17:14:46 [Note]: 2000 1006
07/30/06 17:14:46 [Note]: 2000 1006
07/30/06 17:14:47 [Note]: 2000 1006
07/30/06 17:14:47 [Note]: 2000 1006
07/30/06 17:14:47 [Note]: 2000 1006
07/30/06 17:14:47 [Note]: 2000 1006
07/30/06 17:14:47 [Note]: 2000 1006
07/30/06 17:14:47 [Note]: 2000 1006
07/30/06 17:14:47 [Note]: 2000 1006
07/30/06 17:14:47 [Note]: 2000 1006
07/30/06 17:14:47 [Note]: 2000 1006
07/30/06 17:14:47 [Note]: 2000 1006
07/30/06 17:14:47 [Note]: 2000 1006
07/30/06 17:14:47 [Note]: 2000 1006
07/30/06 17:14:47 [Note]: 2000 1006
07/30/06 17:14:47 [Note]: 2000 1006
07/30/06 17:14:47 [Note]: 2000 1006
07/30/06 17:14:47 [Note]: 2000 1006
07/30/06 17:14:47 [Note]: 2000 1006
07/30/06 17:14:47 [Note]: 2000 1006
07/30/06 17:14:47 [Note]: 2000 1006
07/30/06 17:14:47 [Note]: 2000 1006
07/30/06 17:14:47 [Note]: 2000 1006
07/30/06 17:14:47 [Note]: 2000 1006
07/30/06 17:14:47 [Note]: 2000 1006
07/30/06 17:14:47 [Note]: 2000 1006
07/30/06 17:15:54 [Note]: 7007 0
t. Mika
sun koneella,tai joskus ollu tuo Folder Lock ohjelma,ainaki sen mukana tulee tuo windrvNT.sys
on nimenomaan käytössä Folder Lock-softa, ja troijalainen pomppasi esille aina kun avasin Folder Lock-softan. Poistin Avastin ja ajoin Nortonin tilalle ja ainakaan tällä hetkellä ei näy troijalaista kun avaan Folder Lockin, mutta saa nähdä miten pitkään tuo ikävä pöpö pysyy omassa pilttuussaan kaukana koneestani...;-). Kiitos paljon avusta!
t. MIka