Rekisteröidy

Ilmoitukset

Ladataan…

    Näytä kaikki

    lokini

    oon skannannu koneen monella ohjelmalla jotka ei ole löytäny mitään koneelta (mm.ewido, a-squared) ja jos on niin olen poistanut ne välittömästi. mutta kun skannasin Spyware doctorilla niin se löysi (muka) yli 90 vakooja ohjelmaa.. olenko turhaan huolissani vai onko nämä spyuware doctorin ilmoittamat pöpöt ihan mitättömiä??

    Scan Results:
    scan start: 11.9.2006 23:08:59
    scan stop: 11.9.2006 23:31:03
    scanned items: 99225
    found items: 93
    found and ignored: 0
    tools used: General Scanner, Process Scanner, LSP Scanner, Startup Scanner, Registry Scanner, Hosts Scanner, Browser Scanner, Browser Activity Scanner, Disk Scanner, ActiveX Scanner



    Infection Name Location Risk
    Tracking Cookie(s) C:\Documents and Settings\Compaq_Omistaja\Cookies\[email protected][1].txt Low
    SpywareQuake C:\Documents and Settings\Compaq_Omistaja\Local Settings\Temp\SQLanguage.ini Elevated
    PestWiper C:\System Volume Information\_restore{7BD41464-2CC7-4899-A278-DFE2F6B620D8}\RP31\A0002578.dll Medium
    SpywareQuake C:\System Volume Information\_restore{7BD41464-2CC7-4899-A278-DFE2F6B620D8}\RP31\A0002589.exe Elevated
    zCodec C:\System Volume Information\_restore{7BD41464-2CC7-4899-A278-DFE2F6B620D8}\RP31\A0002683.exe High
    SpyAxe C:\System Volume Information\_restore{7BD41464-2CC7-4899-A278-DFE2F6B620D8}\RP32\A0003696.dll Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202} Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}## Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\aewgcamsqxu Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\aewgcamsqxu## Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\Implemented Categories Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\Implemented Categories## Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\Implemented Categories\{62C8FE65-4EBB-45E7-B440-6E39B2CDBF29} Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\Implemented Categories\{62C8FE65-4EBB-45E7-B440-6E39B2CDBF29}## Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32 Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32## Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32##Assembly Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32##Class Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32##RuntimeVersion Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32##ThreadingModel Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32\1.0.5000.0 Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32\1.0.5000.0## Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32\1.0.5000.0##Assembly Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32\1.0.5000.0##Class Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32\1.0.5000.0##RuntimeVersion Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\oBqzbvtf Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\oBqzbvtf## Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\ouBkonsK Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\ouBkonsK## Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\pJfzcfaoyUvPg Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\pJfzcfaoyUvPg## Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\ProgId Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\ProgId## Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\qfkW Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\qfkW## Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\RhosgjixCep Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\RhosgjixCep## Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\TLyhih Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\TLyhih## Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\zvEbmvHrfiv Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\zvEbmvHrfiv## Elevated
    zCodec HKCR\HQCodec High
    zCodec HKCR\HQCodec## High
    zCodec HKCR\HQCodec\CLSID High
    zCodec HKCR\HQCodec\CLSID## High
    zCodec HKCU\Software\HQ Codec High
    zCodec HKCU\Software\HQ Codec## High
    zCodec HKCU\Software\HQ Codec##Start Menu Folder High
    zCodec HKCU\Software\HQCodec High
    zCodec HKCU\Software\HQCodec## High
    PornMag Pass HKCU\Software\PornMag Pass Medium
    PornMag Pass HKCU\Software\PornMag Pass## Medium
    PornMag Pass HKCU\Software\PornMag Pass##X Medium
    PornMag Pass HKCU\Software\PornMag Pass##Y Medium
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202} Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}## Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\aewgcamsqxu Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\aewgcamsqxu## Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\Implemented Categories Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\Implemented Categories## Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\Implemented Categories\{62C8FE65-4EBB-45E7-B440-6E39B2CDBF29} Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\Implemented Categories\{62C8FE65-4EBB-45E7-B440-6E39B2CDBF29}## Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32 Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32## Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32##Assembly Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32##Class Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32##RuntimeVersion Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32##ThreadingModel Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32\1.0.5000.0 Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32\1.0.5000.0## Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32\1.0.5000.0##Assembly Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32\1.0.5000.0##Class Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32\1.0.5000.0##RuntimeVersion Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\oBqzbvtf Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\oBqzbvtf## Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\ouBkonsK Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\ouBkonsK## Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\pJfzcfaoyUvPg Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\pJfzcfaoyUvPg## Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\ProgId Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\ProgId## Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\qfkW Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\qfkW## Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\RhosgjixCep Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\RhosgjixCep## Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\TLyhih Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\TLyhih## Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\zvEbmvHrfiv Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\zvEbmvHrfiv## Elevated
    Trojan.DNS Changer HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion##dpid High
    Trojan.DNS Changer HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{29E2A72A-C71E-4553-8F75-12F3CAD62710}##DhcpNameServer High
    Trojan.DNS Changer HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{A213E28B-96CF-4BCB-863B-B3C4EE32CB43}##DhcpNameServer High
    Trojan.DNS Changer HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{A73C22C4-2560-4F90-9567-97C9D2F09EF1}##DhcpNameServer High
    8415
    Äänestä

    Muut lukivat myös

    Vastaukset 8

    Vanhimmat

    se parempi :)

    Äänestä

    • yleensä näistä muista ohjelmista ei ole löytynyt mitään.. sitä yritänkin selvittää,että pitääkö olla huolissaan kun spyware doctor löytää 90 tartuntaa, vaikka muut eivät näe mitään vikaa koneessa


      Logfile of HijackThis v1.99.1
      Scan saved at 0:08:43, on 12.9.2006
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\csrss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
      C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
      C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
      c:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
      C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
      C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
      C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
      C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe
      C:\Program Files\ewido anti-spyware 4.0\guard.exe
      C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
      C:\Program Files\Spyware Doctor\sdhelp.exe
      C:\WINDOWS\system32\wdfmgr.exe
      C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
      C:\WINDOWS\System32\alg.exe
      C:\WINDOWS\RTHDCPL.EXE
      C:\Program Files\CyberLink\PowerCinema\PCMService.exe
      C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
      C:\Program Files\Common Files\Symantec Shared\ccApp.exe
      C:\Program Files\ewido anti-spyware 4.0\ewido.exe
      C:\Program Files\MSN Messenger\MsnMsgr.Exe
      C:\Program Files\Spyware Doctor\swdoctor.exe
      C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
      C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
      C:\Program Files\a-squared Free\a2free.exe
      C:\HP\KBD\KBD.EXE
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      c:\windows\system\hpsysdrv.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Program Files\Messenger\msmsgs.exe
      C:\HJT\HijackThis.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fi/0SEFIFI/SAOS01?FORM=TOOLBR
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://g.msn.fi/0SEFIFI/SAOS01?FORM=TOOLBR
      R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.fi/0SEFIFI/SAOS01?FORM=TOOLBR
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\Userinit.exe
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll
      O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: Norton Internet Security 2006 - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
      O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
      O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
      O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
      O3 - Toolbar: Norton Internet Security 2006 - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
      O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
      O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
      O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
      O4 - HKLM\..\Run: [PCMService] "C:\Program Files\CyberLink\PowerCinema\PCMService.exe"
      O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
      O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run
      O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
      O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
      O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
      O4 - HKLM\..\Run: [!ewido] "C:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized
      O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
      O4 - HKCU\..\Run: [Spyware Doctor] "C:\Program Files\Spyware Doctor\swdoctor.exe" /Q
      O4 - Global Startup: HP Photosmart Premier -pikakäynnistys.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
      O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
      O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
      O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
      O8 - Extra context menu item: Avaa uuteen etuvälilehteen - res://C:\Program Files\Windows Live Toolbar\Components\fi-fi\msntabres.dll.mui/230?7af7678d413149568d2283187f73b4ee
      O8 - Extra context menu item: Avaa uuteen taustavälilehteen - res://C:\Program Files\Windows Live Toolbar\Components\fi-fi\msntabres.dll.mui/229?7af7678d413149568d2283187f73b4ee
      O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
      O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
      O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
      O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
      O9 - Extra button: Yhteysohje - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
      O9 - Extra 'Tools' menuitem: Yhteysohje - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cab
      O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
      O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
      O23 - Service: Automattinen LiveUpdate-ajastustoiminto - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
      O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
      O23 - Service: Symantec Internet Security Password Validation (ccISPwdSvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\ccPwdSvc.exe
      O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
      O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
      O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
      O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
      O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Norton Internet Security\comHost.exe
      O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe
      O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe
      O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
      O23 - Service: Norton AntiVirus Auto-Protect -palvelu (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
      O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
      O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
      O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools Research Pty Ltd - C:\Program Files\Spyware Doctor\sdhelp.exe
      O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
      O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
      O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

      Äänestä

    • tässä hjt kirjoitti:

      yleensä näistä muista ohjelmista ei ole löytynyt mitään.. sitä yritänkin selvittää,että pitääkö olla huolissaan kun spyware doctor löytää 90 tartuntaa, vaikka muut eivät näe mitään vikaa koneessa


      Logfile of HijackThis v1.99.1
      Scan saved at 0:08:43, on 12.9.2006
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\csrss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
      C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
      C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
      c:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
      C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
      C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
      C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
      C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe
      C:\Program Files\ewido anti-spyware 4.0\guard.exe
      C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
      C:\Program Files\Spyware Doctor\sdhelp.exe
      C:\WINDOWS\system32\wdfmgr.exe
      C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
      C:\WINDOWS\System32\alg.exe
      C:\WINDOWS\RTHDCPL.EXE
      C:\Program Files\CyberLink\PowerCinema\PCMService.exe
      C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
      C:\Program Files\Common Files\Symantec Shared\ccApp.exe
      C:\Program Files\ewido anti-spyware 4.0\ewido.exe
      C:\Program Files\MSN Messenger\MsnMsgr.Exe
      C:\Program Files\Spyware Doctor\swdoctor.exe
      C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
      C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
      C:\Program Files\a-squared Free\a2free.exe
      C:\HP\KBD\KBD.EXE
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      c:\windows\system\hpsysdrv.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Program Files\Messenger\msmsgs.exe
      C:\HJT\HijackThis.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fi/0SEFIFI/SAOS01?FORM=TOOLBR
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://g.msn.fi/0SEFIFI/SAOS01?FORM=TOOLBR
      R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.fi/0SEFIFI/SAOS01?FORM=TOOLBR
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\Userinit.exe
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll
      O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: Norton Internet Security 2006 - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
      O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
      O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
      O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
      O3 - Toolbar: Norton Internet Security 2006 - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
      O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
      O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
      O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
      O4 - HKLM\..\Run: [PCMService] "C:\Program Files\CyberLink\PowerCinema\PCMService.exe"
      O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
      O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run
      O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPwuSchd2.exe
      O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
      O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
      O4 - HKLM\..\Run: [!ewido] "C:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized
      O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
      O4 - HKCU\..\Run: [Spyware Doctor] "C:\Program Files\Spyware Doctor\swdoctor.exe" /Q
      O4 - Global Startup: HP Photosmart Premier -pikakäynnistys.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
      O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
      O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
      O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
      O8 - Extra context menu item: Avaa uuteen etuvälilehteen - res://C:\Program Files\Windows Live Toolbar\Components\fi-fi\msntabres.dll.mui/230?7af7678d413149568d2283187f73b4ee
      O8 - Extra context menu item: Avaa uuteen taustavälilehteen - res://C:\Program Files\Windows Live Toolbar\Components\fi-fi\msntabres.dll.mui/229?7af7678d413149568d2283187f73b4ee
      O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
      O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
      O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
      O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
      O9 - Extra button: Yhteysohje - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
      O9 - Extra 'Tools' menuitem: Yhteysohje - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cab
      O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
      O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
      O23 - Service: Automattinen LiveUpdate-ajastustoiminto - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
      O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
      O23 - Service: Symantec Internet Security Password Validation (ccISPwdSvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\ccPwdSvc.exe
      O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
      O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
      O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
      O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
      O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Norton Internet Security\comHost.exe
      O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe
      O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe
      O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
      O23 - Service: Norton AntiVirus Auto-Protect -palvelu (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
      O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
      O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
      O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools Research Pty Ltd - C:\Program Files\Spyware Doctor\sdhelp.exe
      O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - c:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
      O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
      O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

      Olen ymmärtänyt että spuware doctor yrittää markkinoida itseään, siksi se löytää tuollaisia

      niistä pääsee eroon seuraavasti
      1. tyhjennä palautuspiste

      2. Poista nuo hakemistot

      SpywareQuake
      HQCodec
      PornMag Pass

      3. siivoa rekisterisi jollain ohjelmalla esim ccleaner tai easycleaner

      4. ja käytä ewido ja escan ohjelmaa niin koneesi pysyy puhtaana

      Äänestä

    • näin nyt kirjoitti:

      Olen ymmärtänyt että spuware doctor yrittää markkinoida itseään, siksi se löytää tuollaisia

      niistä pääsee eroon seuraavasti
      1. tyhjennä palautuspiste

      2. Poista nuo hakemistot

      SpywareQuake
      HQCodec
      PornMag Pass

      3. siivoa rekisterisi jollain ohjelmalla esim ccleaner tai easycleaner

      4. ja käytä ewido ja escan ohjelmaa niin koneesi pysyy puhtaana

      eli miten pystyn tyhjentämään palautuspisteen?

      Äänestä

    • on...:: kirjoitti:

      norton, onko väliä?

      on käyttöjärjestelmän toiminto, johon ei virustorjunta pääse vaikuttamaan.
      Lue noista linkeista lisätietoa.
      Esim. itse en pidä lainkaan palautustoimintoa päällä, mutta pidän varmuuskopiot omista tiedostoista ajan tasalla. Joten tarpeen tullen voin laittaa asennuksen uusiksi, tarvitsematta kantaa huolta kovalevyllä olevista omista tiedostoista. Tietysti kaikki muut konstit käytän ensin ja sitten vasta tyhjennän levyn.

      Äänestä

    • _restore kirjoitti:

      on käyttöjärjestelmän toiminto, johon ei virustorjunta pääse vaikuttamaan.
      Lue noista linkeista lisätietoa.
      Esim. itse en pidä lainkaan palautustoimintoa päällä, mutta pidän varmuuskopiot omista tiedostoista ajan tasalla. Joten tarpeen tullen voin laittaa asennuksen uusiksi, tarvitsematta kantaa huolta kovalevyllä olevista omista tiedostoista. Tietysti kaikki muut konstit käytän ensin ja sitten vasta tyhjennän levyn.

      nämä löysin mun jostain rekisteristä.. nää on siis tossa spyware doctorin tartunta listassa että voiko nää poistaa??


      SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32 Elevated
      SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32## Elevated
      SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32##Assembly Elevated
      SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32##Class Elevated
      SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32##RuntimeVersion Elevated
      SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32##ThreadingModel Elevated
      SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32\1.0.5000.0 Elevated
      SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32\1.0.5000.0## Elevated
      SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32\1.0.5000.0##Assembly Elevated
      SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32\1.0.5000.0##Class Elevated
      SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32\1.0.5000.0##RuntimeVersion Elevated
      SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\oBqzbvtf Elevated
      SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\oBqzbvtf## Elevated
      SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\ouBkonsK Elevated
      SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\ouBkonsK## Elevated
      SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\pJfzcfaoyUvPg Elevated
      SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\pJfzcfaoyUvPg## Elevated
      SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\ProgId Elevated
      SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\ProgId## Elevated
      SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\qfkW Elevated
      SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\qfkW## Elevated
      SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\RhosgjixCep Elevated
      SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\RhosgjixCep## Elevated
      SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\TLyhih Elevated
      SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\TLyhih## Elevated
      SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\zvEbmvHrfiv Elevated
      SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\zvEbmvHrfiv## Elevated

      Äänestä

    Odottaa vastausta

    Näihin keskusteluihin ei ole vielä vastattu. Ole ensimmäinen.

    Luetuimmat keskustelut

    Kommentoi aloitusta

    olenko turhaan huolissani?? kirjoitti:

    oon skannannu koneen monella ohjelmalla jotka ei ole löytäny mitään koneelta (mm.ewido, a-squared) ja jos on niin olen poistanut ne välittömästi. mutta kun skannasin Spyware doctorilla niin se löysi (muka) yli 90 vakooja ohjelmaa.. olenko turhaan huolissani vai onko nämä spyuware doctorin ilmoittamat pöpöt ihan mitättömiä??

    Scan Results:
    scan start: 11.9.2006 23:08:59
    scan stop: 11.9.2006 23:31:03
    scanned items: 99225
    found items: 93
    found and ignored: 0
    tools used: General Scanner, Process Scanner, LSP Scanner, Startup Scanner, Registry Scanner, Hosts Scanner, Browser Scanner, Browser Activity Scanner, Disk Scanner, ActiveX Scanner



    Infection Name Location Risk
    Tracking Cookie(s) C:\Documents and Settings\Compaq_Omistaja\Cookies\[email protected][1].txt Low
    SpywareQuake C:\Documents and Settings\Compaq_Omistaja\Local Settings\Temp\SQLanguage.ini Elevated
    PestWiper C:\System Volume Information\_restore{7BD41464-2CC7-4899-A278-DFE2F6B620D8}\RP31\A0002578.dll Medium
    SpywareQuake C:\System Volume Information\_restore{7BD41464-2CC7-4899-A278-DFE2F6B620D8}\RP31\A0002589.exe Elevated
    zCodec C:\System Volume Information\_restore{7BD41464-2CC7-4899-A278-DFE2F6B620D8}\RP31\A0002683.exe High
    SpyAxe C:\System Volume Information\_restore{7BD41464-2CC7-4899-A278-DFE2F6B620D8}\RP32\A0003696.dll Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202} Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}## Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\aewgcamsqxu Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\aewgcamsqxu## Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\Implemented Categories Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\Implemented Categories## Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\Implemented Categories\{62C8FE65-4EBB-45E7-B440-6E39B2CDBF29} Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\Implemented Categories\{62C8FE65-4EBB-45E7-B440-6E39B2CDBF29}## Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32 Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32## Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32##Assembly Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32##Class Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32##RuntimeVersion Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32##ThreadingModel Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32\1.0.5000.0 Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32\1.0.5000.0## Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32\1.0.5000.0##Assembly Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32\1.0.5000.0##Class Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32\1.0.5000.0##RuntimeVersion Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\oBqzbvtf Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\oBqzbvtf## Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\ouBkonsK Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\ouBkonsK## Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\pJfzcfaoyUvPg Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\pJfzcfaoyUvPg## Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\ProgId Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\ProgId## Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\qfkW Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\qfkW## Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\RhosgjixCep Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\RhosgjixCep## Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\TLyhih Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\TLyhih## Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\zvEbmvHrfiv Elevated
    SpywareQuake HKCR\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\zvEbmvHrfiv## Elevated
    zCodec HKCR\HQCodec High
    zCodec HKCR\HQCodec## High
    zCodec HKCR\HQCodec\CLSID High
    zCodec HKCR\HQCodec\CLSID## High
    zCodec HKCU\Software\HQ Codec High
    zCodec HKCU\Software\HQ Codec## High
    zCodec HKCU\Software\HQ Codec##Start Menu Folder High
    zCodec HKCU\Software\HQCodec High
    zCodec HKCU\Software\HQCodec## High
    PornMag Pass HKCU\Software\PornMag Pass Medium
    PornMag Pass HKCU\Software\PornMag Pass## Medium
    PornMag Pass HKCU\Software\PornMag Pass##X Medium
    PornMag Pass HKCU\Software\PornMag Pass##Y Medium
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202} Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}## Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\aewgcamsqxu Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\aewgcamsqxu## Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\Implemented Categories Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\Implemented Categories## Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\Implemented Categories\{62C8FE65-4EBB-45E7-B440-6E39B2CDBF29} Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\Implemented Categories\{62C8FE65-4EBB-45E7-B440-6E39B2CDBF29}## Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32 Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32## Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32##Assembly Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32##Class Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32##RuntimeVersion Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32##ThreadingModel Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32\1.0.5000.0 Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32\1.0.5000.0## Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32\1.0.5000.0##Assembly Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32\1.0.5000.0##Class Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\InprocServer32\1.0.5000.0##RuntimeVersion Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\oBqzbvtf Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\oBqzbvtf## Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\ouBkonsK Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\ouBkonsK## Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\pJfzcfaoyUvPg Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\pJfzcfaoyUvPg## Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\ProgId Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\ProgId## Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\qfkW Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\qfkW## Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\RhosgjixCep Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\RhosgjixCep## Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\TLyhih Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\TLyhih## Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\zvEbmvHrfiv Elevated
    SpywareQuake HKLM\Software\Classes\CLSID\{5B55C4E3-C179-BA0B-B4FD-F2DB862D6202}\zvEbmvHrfiv## Elevated
    Trojan.DNS Changer HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion##dpid High
    Trojan.DNS Changer HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{29E2A72A-C71E-4553-8F75-12F3CAD62710}##DhcpNameServer High
    Trojan.DNS Changer HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{A213E28B-96CF-4BCB-863B-B3C4EE32CB43}##DhcpNameServer High
    Trojan.DNS Changer HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{A73C22C4-2560-4F90-9567-97C9D2F09EF1}##DhcpNameServer High

    Anonyymi
    5000

    Ilmoita asiaton sisältö

    • Sisältää materiaalia, joka on loukkaavaa, herjaavaa, rasistista, uhkailevaa tai ahdistelevaa.

    • Materiaali sisältää nimiä, yhteystietoja tai muita henkilökohtaisia tietoja. Julkisuuden henkilöistä, julkisissa viroissa toimivista ihmisistä sekä yritysten vastuuhenkilöistä saa keskustella työhön liittyen. Myös yksityiselämään liittyvistä asioista voi keskustella siltä osin, kuin niistä on julkisesti kerrottu.

    • Sisältää lapsille haitallista tai heiltä kiellettyä materiaalia. Seksuaalinen sisältö on sallittua aiheeseen tarkoitetuilla palstoilla, joiden ikäraja on 18 vuotta.

    • Lainvastaista sisältöä voi olla mm. yksityiselämää loukkaavan tiedon levitys, kiihottaminen kansanryhmää vastaan, laiton uhkaaminen, alaikäisiin liittyvä seksuaalinen sisältö/grooming, petokset, identiteettivarkaudet, kunnianloukkaukset ja tekijänoikeusrikkomukset.

    • Sisältö ei liity palstan tai keskusteluketjun aiheeseen.

    • Viesti ei ole suomea tai ruotsia (pl. International Forums), se sisältää mainontaa, se sisältää tekijänoikeuksin suojattua materiaalia, se on massapostitus tai jokin muu syy.

    Jaa keskustelu