mun koneelle tuli joku spywareQuake-virus (objektin nimi:C:/program files.../Spy-Quake2.exe) osaisko joku neuvoo mitä mun kannattais tehdä ja mitä toi saattaa tehdä mun koneelle?
mitä nää troija-virukset voi tehdä koneelle?
paniikissa!!!
105100
0Äänestä
Muut lukivat myös
Ketjusta on poistettu 65 sääntöjenvastaista viestiä.
Odottaa vastausta
Näihin keskusteluihin ei ole vielä vastattu. Ole ensimmäinen.
Vastaukset 10
Vanhimmat
http://www.pctools.com/spyware-doctor/offer.php?ref=google_new
http://fi.wikipedia.org/wiki/Troijalainen_(tietotekniikka)
ja
http://fi.wikipedia.org/wiki/Troijan_puuhevonen
http://www.download.fi/tyopoytaohjelmat/haittaohjelmien_poisto/smitfraudfix.cfm
tämmösiä viruksia on koneella:
SpywareQuake C:\DOCUME~1\COMPAQ~1\LOCALS~1\Temp\SQLanguage.ini Elevated
PestWiper C:\System Volume Information\_restore{7BD41464-2CC7-4899-A278-DFE2F6B620D8}\RP31\A0002578.dll Medium
SpywareQuake C:\System Volume Information\_restore{7BD41464-2CC7-4899-A278-DFE2F6B620D8}\RP31\A0002589.exe Elevated
SpyAxe C:\WINDOWS\system32\viruxz.dll Elevated
SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202} Elevated
SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}## Elevated
SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\aewgcamsqxu Elevated
SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\aewgcamsqxu## Elevated
SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\Implemented Categories Elevated
SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\Implemented Categories## Elevated
SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\Implemented Categories\{62C8FE65-4EBB-45E7-B440-6E39B2CDBF29} Elevated
SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\Implemented Categories\{62C8FE65-4EBB-45E7-B440-6E39B2CDBF29}## Elevated
SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32 Elevated
SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32## Elevated
SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32##Assembly Elevated
SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32##Class Elevated
SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32##RuntimeVersion Elevated
SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32##ThreadingModel Elevated
SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32\1.0.5000.0 Elevated
SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32\1.0.5000.0## Elevated
SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32\1.0.5000.0##Assembly Elevated
SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32\1.0.5000.0##Class Elevated
SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32\1.0.5000.0##RuntimeVersion Elevated
SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\oBqzbvtf Elevated
SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\oBqzbvtf## Elevated
SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\ouBkonsK Elevated
SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\ouBkonsK## Elevated
SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\pJfzcfaoyUvPg Elevated
SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\pJfzcfaoyUvPg## Elevated
SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\ProgId Elevated
SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\ProgId## Elevated
SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\qfkW Elevated
SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\qfkW## Elevated
SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\RhosgjixCep Elevated
SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\RhosgjixCep## Elevated
SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\TLyhih Elevated
SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\TLyhih## Elevated
SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\zvEbmvHrfiv Elevated
SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\zvEbmvHrfiv## Elevated
PornMag Pass HKCU\Software\PornMag Pass Medium
PornMag Pass HKCU\Software\PornMag Pass## Medium
PornMag Pass HKCU\Software\PornMag Pass##X Medium
PornMag Pass HKCU\Software\PornMag Pass##Y Medium
Common Components for Rogue Anti-Spyware HKCU\Software\SNO2 Medium
Common Components for Rogue Anti-Spyware HKCU\Software\SNO2## Medium
SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202} Elevated
SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}## Elevated
SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\aewgcamsqxu Elevated
SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\aewgcamsqxu## Elevated
SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\Implemented Categories Elevated
SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\Implemented Categories## Elevated
SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\Implemented Categories\{62C8FE65-4EBB-45E7-B440-6E39B2CDBF29} Elevated
SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\Implemented Categories\{62C8FE65-4EBB-45E7-B440-6E39B2CDBF29}## Elevated
SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32 Elevated
SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32## Elevated
SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32##Assembly Elevated
SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32##Class Elevated
SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32##RuntimeVersion Elevated
SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32##ThreadingModel Elevated
SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32\1.0.5000.0 Elevated
SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32\1.0.5000.0## Elevated
SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32\1.0.5000.0##Assembly Elevated
SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32\1.0.5000.0##Class Elevated
SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32\1.0.5000.0##RuntimeVersion Elevated
SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\oBqzbvtf Elevated
SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\oBqzbvtf## Elevated
SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\ouBkonsK Elevated
SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\ouBkonsK## Elevated
SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\pJfzcfaoyUvPg Elevated
SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\pJfzcfaoyUvPg## Elevated
SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\ProgId Elevated
SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\ProgId## Elevated
SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\qfkW Elevated
SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\qfkW## Elevated
SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\RhosgjixCep Elevated
SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\RhosgjixCep## Elevated
SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\TLyhih Elevated
SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\TLyhih## Elevated
SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\zvEbmvHrfiv Elevated
SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\zvEbmvHrfiv## Elevated
Trojan.DNS Changer HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion##dpid High
Trojan.Downloader.Ruins HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls High
Trojan.Downloader.Ruins HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls## High
Trojan.Downloader.Ruins HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls##ocanomputes High
Trojan.DNS Changer HKLM\SYSTEM\ControlSet001\Services\Tcpip\Parameters##NameServer High
Trojan.DNS Changer HKLM\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces\{29E2A72A-C71E-4553-8F75-12F3CAD62710}##DhcpNameServer High
Trojan.DNS Changer HKLM\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces\{A213E28B-96CF-4BCB-863B-B3C4EE32CB43}##DhcpNameServer High
Trojan.DNS Changer HKLM\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces\{A73C22C4-2560-4F90-9567-97C9D2F09EF1}##DhcpNameServer High
Trojan.DNS Changer HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters##NameServer High
Trojan.DNS Changer HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{29E2A72A-C71E-4553-8F75-12F3CAD62710}##DhcpNameServer High
Trojan.DNS Changer HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{A213E28B-96CF-4BCB-863B-B3C4EE32CB43}##DhcpNameServer High
Trojan.DNS Changer HKLM\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{A73C22C4-2560-4F90-9567-97C9D2F09EF1}##DhcpNameServer High
Trojan.DNS Changer HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters##NameServer High
Trojan.DNS Changer HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{29E2A72A-C71E-4553-8F75-12F3CAD62710}##DhcpNameServer High
Trojan.DNS Changer HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{A213E28B-96CF-4BCB-863B-B3C4EE32CB43}##DhcpNameServer High
Trojan.DNS Changer HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{A73C22C4-2560-4F90-9567-97C9D2F09EF1}##DhcpNameServer High
osaako joku sanoo niistä jotain? miten saan ne pois ilman jotain maksullisia viruksen poisto ohjelmia?
Joo elikkä kannattis ladata Ad-Aware sillä saapii kuulemma nämä troijalaiset veks. Se on ilmanen ja tehokas ohjelma :)
mihin hävis viestit??
yritän huomenna uudelleen sitä CCleaneria.. toivottavasti onnistuu ja saisin ne kaikki pöpöt pois koneelta! osaaks sanoo tosta Trojan.DNS changerista jotain tarkemmin? se näytti olevan kaikista suurin riski koneelle!?
http://www.digitoday.fi/page.php?page_id=14&news_id=200611332
mä todella nyt tarvitsisin jonku ammattilaisen apua..
http://www.ccleaner.com/download/downloadpage.aspx?f=2
ccleaner
os haluatte käyttää sitä niin muuttakaa seuraava asetus: Valinnat --> Lisäasetukset --> Ota ruksi pois kohdasta Poista vain yli 48 tuntia vanhat tilapäistiedostot.
lataa työpöydällesi ATF Cleaner http://www.atribune.org/ccount/click.php?id=1
Ohjeet;
Tupla-klikkaa ATF-Cleaner.exe käynnistääksesi ohjelman.
Main:n alla valitse: Select All
Klikkaa Empty Selected valintaa.
Jos käytät FireFoxia selaimenasi
Klikkaa Firefox yläpuolelta ja valitse: Select All
Klikkaa Empty Selected valintaa.
HUOMIO: Jos haluaisit pitää tallennetut salasanasi, klikkaa No kun se sitä kysyy.
Jos käytät Operaa selaimenasi
Klikkaa Opera yläpuolelta ja valitse: Select All
Klikkaa Empty Selected valintaa taas.
HUOMIO: Jos haluaisit pitää tallennetut salasanasi, klikkaa No kun se sitä kysyy.
Klikkaa Exit päävalikosta sulkeaksesi ohjelman.
Teknistä tukea tulee jos tupla-klikkaat sähköpostiosoitetta joka sijaitsee jokaisen menun alapuolella kyseisessä työkalussa. (Huomatkaa että se tuki on sitten englanniksi)