Rekisteröidy

Ilmoitukset

Ladataan…

    Näytä kaikki

    netti pätkii

    ongelma on tämä kun netin aukaisee ja pääsivu on auennut, niin aukeaa myös pokeri sivusto ja treffi sivusto ja nämä ei ole pop-upeja??
    8469
    Äänestä

    Muut lukivat myös

    Vastaukset 8

    Vanhimmat

    Käy hae Hijackthis versio 1.99 ohjelma tuolta:

    http://koti.mbnet.fi/pattaya1/hijackthis.htm#Lataus

    Asenna ohjelma omaan kansioon, nimeä Hijackthis.exe--> scanner.exe:si.
    Avaa ohjelma, valitse sieltä "Do a system scan and save a logfile", ohjelma heittää ruutuun muistion jossa on logitiedosto, kopioi logi kokonaisuudessaan ja liitä se tänne seuraavaan vastaukseesi.

    Äänestä

    • Logfile of HijackThis v1.99.1
      Scan saved at 8:09:59, on 29.9.2006
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      F:\WINDOWS\System32\smss.exe
      F:\WINDOWS\system32\winlogon.exe
      F:\WINDOWS\system32\services.exe
      F:\WINDOWS\system32\lsass.exe
      F:\WINDOWS\system32\Ati2evxx.exe
      F:\WINDOWS\system32\svchost.exe
      F:\WINDOWS\System32\svchost.exe
      F:\WINDOWS\system32\spoolsv.exe
      F:\WINDOWS\system32\Ati2evxx.exe
      F:\WINDOWS\Explorer.EXE
      F:\Program Files\F-Secure\Common\FSM32.EXE
      F:\Program Files\DAEMON Tools\daemon.exe
      F:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      F:\WINDOWS\system32\CTHELPER.EXE
      F:\WINDOWS\system32\LVCOMSX.EXE
      F:\Program Files\Logitech\Video\LogiTray.exe
      F:\WINDOWS\system32\rundll32.exe
      F:\Program Files\Common Files\PCSuite\DataLayer\DataLayer.exe
      F:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
      F:\Program Files\iTunes\iTunesHelper.exe
      F:\Program Files\QuickTime\qttask.exe
      F:\Program Files\Skype\Phone\Skype.exe
      F:\Program Files\PeerGuardian2\pg2.exe
      F:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
      F:\WINDOWS\system32\ctfmon.exe
      F:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      F:\PROGRA~1\COMMON~1\PCSuite\Services\SERVIC~1.EXE
      F:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe
      F:\Program Files\Logitech\Video\FxSvr2.exe
      F:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
      F:\WINDOWS\system32\CTSvcCDA.exe
      F:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
      F:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
      F:\Program Files\F-Secure\BackWeb\7681197\Program\BackWeb-7681197.exe
      F:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
      F:\Program Files\F-Secure\Anti-Virus\fssm32.exe
      F:\Program Files\F-Secure\Common\FSMA32.EXE
      F:\Program Files\F-Secure\Common\FSMB32.EXE
      F:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
      F:\PROGRA~1\EFFICI~1\ENTERN~1\app\pppoeservice.exe
      F:\Program Files\F-Secure\Common\FCH32.EXE
      F:\WINDOWS\system32\svchost.exe
      F:\Program Files\F-Secure\Common\FAMEH32.EXE
      F:\Program Files\iPod\bin\iPodService.exe
      F:\Program Files\F-Secure\Common\FNRB32.EXE
      F:\WINDOWS\system32\wscntfy.exe
      F:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
      F:\Program Files\F-Secure\Anti-Virus\fsav32.exe
      F:\Program Files\F-Secure\Common\FIH32.EXE
      F:\Program Files\Internet Explorer\iexplore.exe
      F:\WINDOWS\system32\wuauclt.exe
      F:\WINDOWS\System32\svchost.exe
      F:\Program Files\scanner.exe\scanner.exe.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.fi/
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O1 - Hosts: localhost 127.0.0.1
      O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - F:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - F:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (file missing)
      O2 - BHO: URLLink - {4A2AACF3-ADF6-11D5-98A9-00E018981B9E} - F:\Program Files\NewDotNet\newdotnet7_22.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - F:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - f:\program files\google\googletoolbar2.dll
      O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - F:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - f:\program files\google\googletoolbar2.dll
      O4 - HKLM\..\Run: [F-Secure Manager] "F:\Program Files\F-Secure\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [F-Secure TNB] "F:\Program Files\F-Secure\TNB\TNBUtil.exe" /CHECKALL
      O4 - HKLM\..\Run: [DAEMON Tools] "F:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
      O4 - HKLM\..\Run: [SunJavaUpdateSched] F:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
      O4 - HKLM\..\Run: [Speed racer] F:\Program Files\Creative\SBLive2k\PlayCenter\CTSRReg.exe
      O4 - HKLM\..\Run: [UpdReg] F:\WINDOWS\UpdReg.EXE
      O4 - HKLM\..\Run: [Jet Detection] "F:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe"
      O4 - HKLM\..\Run: [LVCOMSX] F:\WINDOWS\system32\LVCOMSX.EXE
      O4 - HKLM\..\Run: [LogitechVideoRepair] F:\Program Files\Logitech\Video\ISStart.exe
      O4 - HKLM\..\Run: [LogitechVideoTray] F:\Program Files\Logitech\Video\LogiTray.exe
      O4 - HKLM\..\Run: [New.net Startup] rundll32 F:\PROGRA~1\NEWDOT~1\NEWDOT~2.DLL,ClientStartup -s
      O4 - HKLM\..\Run: [DataLayer] F:\Program Files\Common Files\PCSuite\DataLayer\DataLayer.exe
      O4 - HKLM\..\Run: [PCSuiteTrayApplication] F:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -onlytray
      O4 - HKLM\..\Run: [iTunesHelper] "F:\Program Files\iTunes\iTunesHelper.exe"
      O4 - HKLM\..\Run: [QuickTime Task] "F:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [NeroFilterCheck] F:\WINDOWS\system32\NeroCheck.exe
      O4 - HKCU\..\Run: [Skype] "F:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
      O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "F:\Program Files\Logitech\Video\ManifestEngine.exe" boot
      O4 - HKCU\..\Run: [PeerGuardian] F:\Program Files\PeerGuardian2\pg2.exe
      O4 - HKCU\..\Run: [PcSync] F:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
      O4 - HKCU\..\Run: [ctfmon.exe] F:\WINDOWS\system32\ctfmon.exe
      O4 - Global Startup: Adobe Reader Speed Launch.lnk = F:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      O8 - Extra context menu item: &Google Search - res://f:\program files\google\GoogleToolbar2.dll/cmsearch.html
      O8 - Extra context menu item: &Translate English Word - res://f:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
      O8 - Extra context menu item: Backward Links - res://f:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
      O8 - Extra context menu item: Cached Snapshot of Page - res://f:\program files\google\GoogleToolbar2.dll/cmcache.html
      O8 - Extra context menu item: Similar Pages - res://f:\program files\google\GoogleToolbar2.dll/cmsimilar.html
      O8 - Extra context menu item: Translate Page into English - res://f:\program files\google\GoogleToolbar2.dll/cmtrans.html
      O8 - Extra context menu item: Vie Microsoft E&xceliin - res://F:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra button: Oheistiedot - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - F:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Program Files\Messenger\msmsgs.exe
      O10 - Hijacked Internet access by New.Net
      O10 - Hijacked Internet access by New.Net
      O10 - Hijacked Internet access by New.Net
      O10 - Hijacked Internet access by New.Net
      O16 - DPF: {33331111-1111-1111-1111-611111193423} -
      O16 - DPF: {33331111-1111-1111-1111-611111193429} -
      O16 - DPF: {33331111-1111-1111-1111-615111193427} -
      O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1137321963250
      O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
      O17 - HKLM\System\CCS\Services\Tcpip\..\{363E1991-96D9-4A74-B9D6-CFF60A286A44}: NameServer = 85.255.115.115,85.255.112.152
      O17 - HKLM\System\CCS\Services\Tcpip\..\{45BB403B-7BC8-4B68-9B70-43FCEFCFE6D0}: NameServer = 85.255.115.115,85.255.112.152
      O17 - HKLM\System\CCS\Services\Tcpip\..\{4C1348FD-65D9-4E8E-BBFE-F8A150A75697}: NameServer = 212.116.32.218 212.116.32.222
      O17 - HKLM\System\CCS\Services\Tcpip\..\{F59AF469-500C-4C80-A148-61B07F7FDBD1}: NameServer = 85.255.115.115,85.255.112.152
      O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.115.115 85.255.112.152
      O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 85.255.115.115 85.255.112.152
      O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.115.115 85.255.112.152
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "F:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
      O21 - SSODL: SystemCheck2 - {54645654-2225-4455-44A1-9F4543D34546} - F:\WINDOWS\system32\vbsys2.dll
      O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - F:\WINDOWS\system32\Ati2evxx.exe
      O23 - Service: ATI Smart - Unknown owner - F:\WINDOWS\system32\ati2sgag.exe
      O23 - Service: F-Secure Automatic Update (BackWeb Client - 7681197) - Unknown owner - F:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
      O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - F:\WINDOWS\system32\CTSvcCDA.exe
      O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - F:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
      O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - F:\Program Files\F-Secure\Common\FNRB32.EXE
      O23 - Service: fsbwsys - F-Secure Corp. - F:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
      O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - F:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
      O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - F:\Program Files\F-Secure\Common\FSMA32.EXE
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - F:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: iPodService - Apple Computer, Inc. - F:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: PPPoE Service (PPPoEService) - Unknown owner - F:\PROGRA~1\EFFICI~1\ENTERN~1\app\pppoeservice.exe
      O23 - Service: Sandra Data Service (SandraDataSrv) - SiSoftware - F:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005.SR3\RpcDataSrv.exe
      O23 - Service: Sandra Service (SandraTheSrv) - SiSoftware - F:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005.SR3\RpcSandraSrv.exe

      Äänestä

    • jeeesus kirjoitti:

      Logfile of HijackThis v1.99.1
      Scan saved at 8:09:59, on 29.9.2006
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      F:\WINDOWS\System32\smss.exe
      F:\WINDOWS\system32\winlogon.exe
      F:\WINDOWS\system32\services.exe
      F:\WINDOWS\system32\lsass.exe
      F:\WINDOWS\system32\Ati2evxx.exe
      F:\WINDOWS\system32\svchost.exe
      F:\WINDOWS\System32\svchost.exe
      F:\WINDOWS\system32\spoolsv.exe
      F:\WINDOWS\system32\Ati2evxx.exe
      F:\WINDOWS\Explorer.EXE
      F:\Program Files\F-Secure\Common\FSM32.EXE
      F:\Program Files\DAEMON Tools\daemon.exe
      F:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      F:\WINDOWS\system32\CTHELPER.EXE
      F:\WINDOWS\system32\LVCOMSX.EXE
      F:\Program Files\Logitech\Video\LogiTray.exe
      F:\WINDOWS\system32\rundll32.exe
      F:\Program Files\Common Files\PCSuite\DataLayer\DataLayer.exe
      F:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
      F:\Program Files\iTunes\iTunesHelper.exe
      F:\Program Files\QuickTime\qttask.exe
      F:\Program Files\Skype\Phone\Skype.exe
      F:\Program Files\PeerGuardian2\pg2.exe
      F:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
      F:\WINDOWS\system32\ctfmon.exe
      F:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      F:\PROGRA~1\COMMON~1\PCSuite\Services\SERVIC~1.EXE
      F:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe
      F:\Program Files\Logitech\Video\FxSvr2.exe
      F:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
      F:\WINDOWS\system32\CTSvcCDA.exe
      F:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
      F:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
      F:\Program Files\F-Secure\BackWeb\7681197\Program\BackWeb-7681197.exe
      F:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
      F:\Program Files\F-Secure\Anti-Virus\fssm32.exe
      F:\Program Files\F-Secure\Common\FSMA32.EXE
      F:\Program Files\F-Secure\Common\FSMB32.EXE
      F:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
      F:\PROGRA~1\EFFICI~1\ENTERN~1\app\pppoeservice.exe
      F:\Program Files\F-Secure\Common\FCH32.EXE
      F:\WINDOWS\system32\svchost.exe
      F:\Program Files\F-Secure\Common\FAMEH32.EXE
      F:\Program Files\iPod\bin\iPodService.exe
      F:\Program Files\F-Secure\Common\FNRB32.EXE
      F:\WINDOWS\system32\wscntfy.exe
      F:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
      F:\Program Files\F-Secure\Anti-Virus\fsav32.exe
      F:\Program Files\F-Secure\Common\FIH32.EXE
      F:\Program Files\Internet Explorer\iexplore.exe
      F:\WINDOWS\system32\wuauclt.exe
      F:\WINDOWS\System32\svchost.exe
      F:\Program Files\scanner.exe\scanner.exe.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.fi/
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O1 - Hosts: localhost 127.0.0.1
      O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - F:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - F:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (file missing)
      O2 - BHO: URLLink - {4A2AACF3-ADF6-11D5-98A9-00E018981B9E} - F:\Program Files\NewDotNet\newdotnet7_22.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - F:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - f:\program files\google\googletoolbar2.dll
      O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - F:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - f:\program files\google\googletoolbar2.dll
      O4 - HKLM\..\Run: [F-Secure Manager] "F:\Program Files\F-Secure\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [F-Secure TNB] "F:\Program Files\F-Secure\TNB\TNBUtil.exe" /CHECKALL
      O4 - HKLM\..\Run: [DAEMON Tools] "F:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
      O4 - HKLM\..\Run: [SunJavaUpdateSched] F:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
      O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
      O4 - HKLM\..\Run: [Speed racer] F:\Program Files\Creative\SBLive2k\PlayCenter\CTSRReg.exe
      O4 - HKLM\..\Run: [UpdReg] F:\WINDOWS\UpdReg.EXE
      O4 - HKLM\..\Run: [Jet Detection] "F:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe"
      O4 - HKLM\..\Run: [LVCOMSX] F:\WINDOWS\system32\LVCOMSX.EXE
      O4 - HKLM\..\Run: [LogitechVideoRepair] F:\Program Files\Logitech\Video\ISStart.exe
      O4 - HKLM\..\Run: [LogitechVideoTray] F:\Program Files\Logitech\Video\LogiTray.exe
      O4 - HKLM\..\Run: [New.net Startup] rundll32 F:\PROGRA~1\NEWDOT~1\NEWDOT~2.DLL,ClientStartup -s
      O4 - HKLM\..\Run: [DataLayer] F:\Program Files\Common Files\PCSuite\DataLayer\DataLayer.exe
      O4 - HKLM\..\Run: [PCSuiteTrayApplication] F:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -onlytray
      O4 - HKLM\..\Run: [iTunesHelper] "F:\Program Files\iTunes\iTunesHelper.exe"
      O4 - HKLM\..\Run: [QuickTime Task] "F:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [NeroFilterCheck] F:\WINDOWS\system32\NeroCheck.exe
      O4 - HKCU\..\Run: [Skype] "F:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
      O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "F:\Program Files\Logitech\Video\ManifestEngine.exe" boot
      O4 - HKCU\..\Run: [PeerGuardian] F:\Program Files\PeerGuardian2\pg2.exe
      O4 - HKCU\..\Run: [PcSync] F:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
      O4 - HKCU\..\Run: [ctfmon.exe] F:\WINDOWS\system32\ctfmon.exe
      O4 - Global Startup: Adobe Reader Speed Launch.lnk = F:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      O8 - Extra context menu item: &Google Search - res://f:\program files\google\GoogleToolbar2.dll/cmsearch.html
      O8 - Extra context menu item: &Translate English Word - res://f:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
      O8 - Extra context menu item: Backward Links - res://f:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
      O8 - Extra context menu item: Cached Snapshot of Page - res://f:\program files\google\GoogleToolbar2.dll/cmcache.html
      O8 - Extra context menu item: Similar Pages - res://f:\program files\google\GoogleToolbar2.dll/cmsimilar.html
      O8 - Extra context menu item: Translate Page into English - res://f:\program files\google\GoogleToolbar2.dll/cmtrans.html
      O8 - Extra context menu item: Vie Microsoft E&xceliin - res://F:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra button: Oheistiedot - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - F:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Program Files\Messenger\msmsgs.exe
      O10 - Hijacked Internet access by New.Net
      O10 - Hijacked Internet access by New.Net
      O10 - Hijacked Internet access by New.Net
      O10 - Hijacked Internet access by New.Net
      O16 - DPF: {33331111-1111-1111-1111-611111193423} -
      O16 - DPF: {33331111-1111-1111-1111-611111193429} -
      O16 - DPF: {33331111-1111-1111-1111-615111193427} -
      O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1137321963250
      O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
      O17 - HKLM\System\CCS\Services\Tcpip\..\{363E1991-96D9-4A74-B9D6-CFF60A286A44}: NameServer = 85.255.115.115,85.255.112.152
      O17 - HKLM\System\CCS\Services\Tcpip\..\{45BB403B-7BC8-4B68-9B70-43FCEFCFE6D0}: NameServer = 85.255.115.115,85.255.112.152
      O17 - HKLM\System\CCS\Services\Tcpip\..\{4C1348FD-65D9-4E8E-BBFE-F8A150A75697}: NameServer = 212.116.32.218 212.116.32.222
      O17 - HKLM\System\CCS\Services\Tcpip\..\{F59AF469-500C-4C80-A148-61B07F7FDBD1}: NameServer = 85.255.115.115,85.255.112.152
      O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.115.115 85.255.112.152
      O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 85.255.115.115 85.255.112.152
      O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.115.115 85.255.112.152
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "F:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
      O21 - SSODL: SystemCheck2 - {54645654-2225-4455-44A1-9F4543D34546} - F:\WINDOWS\system32\vbsys2.dll
      O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - F:\WINDOWS\system32\Ati2evxx.exe
      O23 - Service: ATI Smart - Unknown owner - F:\WINDOWS\system32\ati2sgag.exe
      O23 - Service: F-Secure Automatic Update (BackWeb Client - 7681197) - Unknown owner - F:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
      O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - F:\WINDOWS\system32\CTSvcCDA.exe
      O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - F:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
      O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - F:\Program Files\F-Secure\Common\FNRB32.EXE
      O23 - Service: fsbwsys - F-Secure Corp. - F:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
      O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - F:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
      O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - F:\Program Files\F-Secure\Common\FSMA32.EXE
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - F:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: iPodService - Apple Computer, Inc. - F:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: PPPoE Service (PPPoEService) - Unknown owner - F:\PROGRA~1\EFFICI~1\ENTERN~1\app\pppoeservice.exe
      O23 - Service: Sandra Data Service (SandraDataSrv) - SiSoftware - F:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005.SR3\RpcDataSrv.exe
      O23 - Service: Sandra Service (SandraTheSrv) - SiSoftware - F:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005.SR3\RpcSandraSrv.exe

      Fixaa nämä, ruksit näiden rivien eteen ja paina Fix checked:

      O1 - Hosts: localhost 127.0.0.1
      O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - F:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - F:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (file missing)
      O2 - BHO: URLLink - {4A2AACF3-ADF6-11D5-98A9-00E018981B9E} - F:\Program Files\NewDotNet\newdotnet7_22.dll
      O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - F:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O4 - HKLM\..\Run: [New.net Startup] rundll32 F:\PROGRA~1\NEWDOT~1\NEWDOT~2.DLL,ClientStartup -s
      O16 - DPF: {33331111-1111-1111-1111-611111193423} -
      O16 - DPF: {33331111-1111-1111-1111-611111193429} -
      O16 - DPF: {33331111-1111-1111-1111-615111193427} -

      Hae NNuninstall täältä ja aja se läpi: http://www.newdotnet.com/removal.html

      Fixaa nämä rivit HJT:llä:

      O10 - Hijacked Internet access by New.Net
      O10 - Hijacked Internet access by New.Net
      O10 - Hijacked Internet access by New.Net
      O10 - Hijacked Internet access by New.Net

      Sit käy hae eScan tuolta: http://koti.mbnet.fi/pattaya1/escanmwav.htm
      Muista päivittää se ihan ensimmäiseks, ohjeet löytyy tuolta sivulta, tapa 2.

      Poista java lisää poista sovellutuksesta

      Lataa tuolta uusi java
      http://java.sun.com/javase/downloads/index.jsp
      Java Runtime Environment (JRE) 5.0 Update 8

      Kun nämä on tehty, lähetä eScan logi jos se jotain löytää, ja uus HJT logi.

      Äänestä

    • fix it kirjoitti:

      Fixaa nämä, ruksit näiden rivien eteen ja paina Fix checked:

      O1 - Hosts: localhost 127.0.0.1
      O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - F:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - F:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (file missing)
      O2 - BHO: URLLink - {4A2AACF3-ADF6-11D5-98A9-00E018981B9E} - F:\Program Files\NewDotNet\newdotnet7_22.dll
      O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - F:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O4 - HKLM\..\Run: [New.net Startup] rundll32 F:\PROGRA~1\NEWDOT~1\NEWDOT~2.DLL,ClientStartup -s
      O16 - DPF: {33331111-1111-1111-1111-611111193423} -
      O16 - DPF: {33331111-1111-1111-1111-611111193429} -
      O16 - DPF: {33331111-1111-1111-1111-615111193427} -

      Hae NNuninstall täältä ja aja se läpi: http://www.newdotnet.com/removal.html

      Fixaa nämä rivit HJT:llä:

      O10 - Hijacked Internet access by New.Net
      O10 - Hijacked Internet access by New.Net
      O10 - Hijacked Internet access by New.Net
      O10 - Hijacked Internet access by New.Net

      Sit käy hae eScan tuolta: http://koti.mbnet.fi/pattaya1/escanmwav.htm
      Muista päivittää se ihan ensimmäiseks, ohjeet löytyy tuolta sivulta, tapa 2.

      Poista java lisää poista sovellutuksesta

      Lataa tuolta uusi java
      http://java.sun.com/javase/downloads/index.jsp
      Java Runtime Environment (JRE) 5.0 Update 8

      Kun nämä on tehty, lähetä eScan logi jos se jotain löytää, ja uus HJT logi.

      Siis aja ensin tuo NNuninstall, ja sen jälkeen jos vielä löytyy nämä rivit (ei pitäs löytyä) niin fixaa pois HJT:llä:

      O10 - Hijacked Internet access by New.Net
      O10 - Hijacked Internet access by New.Net
      O10 - Hijacked Internet access by New.Net
      O10 - Hijacked Internet access by New.Net

      Äänestä

    Logfile of HijackThis v1.99.1
    Scan saved at 14:02:30, on 29.9.2006
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    F:\WINDOWS\System32\smss.exe
    F:\WINDOWS\system32\winlogon.exe
    F:\WINDOWS\system32\services.exe
    F:\WINDOWS\system32\lsass.exe
    F:\WINDOWS\system32\Ati2evxx.exe
    F:\WINDOWS\system32\svchost.exe
    F:\WINDOWS\System32\svchost.exe
    F:\WINDOWS\system32\spoolsv.exe
    F:\WINDOWS\system32\Ati2evxx.exe
    F:\WINDOWS\Explorer.EXE
    F:\Program Files\F-Secure\Common\FSM32.EXE
    F:\Program Files\DAEMON Tools\daemon.exe
    F:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    F:\WINDOWS\system32\CTHELPER.EXE
    F:\WINDOWS\system32\LVCOMSX.EXE
    F:\Program Files\Logitech\Video\LogiTray.exe
    F:\Program Files\Common Files\PCSuite\DataLayer\DataLayer.exe
    F:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
    F:\Program Files\iTunes\iTunesHelper.exe
    F:\Program Files\QuickTime\qttask.exe
    F:\Program Files\Skype\Phone\Skype.exe
    F:\Program Files\PeerGuardian2\pg2.exe
    F:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
    F:\WINDOWS\system32\ctfmon.exe
    F:\PROGRA~1\COMMON~1\PCSuite\Services\SERVIC~1.EXE
    F:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe
    F:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
    F:\WINDOWS\system32\CTSvcCDA.exe
    F:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
    F:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
    F:\Program Files\F-Secure\BackWeb\7681197\Program\BackWeb-7681197.exe
    F:\Program Files\F-Secure\Anti-Virus\fssm32.exe
    F:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
    F:\Program Files\F-Secure\Common\FSMA32.EXE
    F:\Program Files\F-Secure\Common\FSMB32.EXE
    F:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
    F:\PROGRA~1\EFFICI~1\ENTERN~1\app\pppoeservice.exe
    F:\Program Files\Logitech\Video\FxSvr2.exe
    F:\Program Files\F-Secure\Common\FCH32.EXE
    F:\WINDOWS\system32\svchost.exe
    F:\Program Files\F-Secure\Common\FAMEH32.EXE
    F:\Program Files\iPod\bin\iPodService.exe
    F:\Program Files\F-Secure\Common\FNRB32.EXE
    F:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
    F:\Program Files\F-Secure\Common\FIH32.EXE
    F:\Program Files\F-Secure\Anti-Virus\fsav32.exe
    F:\WINDOWS\system32\wscntfy.exe
    F:\WINDOWS\System32\svchost.exe
    F:\Program Files\Internet Explorer\iexplore.exe
    C:\Kaspersky\mwavscan.com
    C:\Kaspersky\kavss.exe
    F:\WINDOWS\system32\notepad.exe
    F:\WINDOWS\system32\cmd.exe
    c:\kaspersky\kavupd.exe
    F:\Program Files\scanner.exe\scanner.exe.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.fi/
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - F:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - f:\program files\google\googletoolbar2.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - f:\program files\google\googletoolbar2.dll
    O4 - HKLM\..\Run: [F-Secure Manager] "F:\Program Files\F-Secure\Common\FSM32.EXE" /splash
    O4 - HKLM\..\Run: [F-Secure TNB] "F:\Program Files\F-Secure\TNB\TNBUtil.exe" /CHECKALL
    O4 - HKLM\..\Run: [DAEMON Tools] "F:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
    O4 - HKLM\..\Run: [SunJavaUpdateSched] F:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
    O4 - HKLM\..\Run: [Speed racer] F:\Program Files\Creative\SBLive2k\PlayCenter\CTSRReg.exe
    O4 - HKLM\..\Run: [UpdReg] F:\WINDOWS\UpdReg.EXE
    O4 - HKLM\..\Run: [Jet Detection] "F:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe"
    O4 - HKLM\..\Run: [LVCOMSX] F:\WINDOWS\system32\LVCOMSX.EXE
    O4 - HKLM\..\Run: [LogitechVideoRepair] F:\Program Files\Logitech\Video\ISStart.exe
    O4 - HKLM\..\Run: [LogitechVideoTray] F:\Program Files\Logitech\Video\LogiTray.exe
    O4 - HKLM\..\Run: [DataLayer] F:\Program Files\Common Files\PCSuite\DataLayer\DataLayer.exe
    O4 - HKLM\..\Run: [PCSuiteTrayApplication] F:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -onlytray
    O4 - HKLM\..\Run: [iTunesHelper] "F:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "F:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [NeroFilterCheck] F:\WINDOWS\system32\NeroCheck.exe
    O4 - HKCU\..\Run: [Skype] "F:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
    O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "F:\Program Files\Logitech\Video\ManifestEngine.exe" boot
    O4 - HKCU\..\Run: [PeerGuardian] F:\Program Files\PeerGuardian2\pg2.exe
    O4 - HKCU\..\Run: [PcSync] F:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
    O4 - HKCU\..\Run: [ctfmon.exe] F:\WINDOWS\system32\ctfmon.exe
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = F:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O8 - Extra context menu item: &Google Search - res://f:\program files\google\GoogleToolbar2.dll/cmsearch.html
    O8 - Extra context menu item: &Translate English Word - res://f:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
    O8 - Extra context menu item: Backward Links - res://f:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
    O8 - Extra context menu item: Cached Snapshot of Page - res://f:\program files\google\GoogleToolbar2.dll/cmcache.html
    O8 - Extra context menu item: Similar Pages - res://f:\program files\google\GoogleToolbar2.dll/cmsimilar.html
    O8 - Extra context menu item: Translate Page into English - res://f:\program files\google\GoogleToolbar2.dll/cmtrans.html
    O8 - Extra context menu item: Vie Microsoft E&xceliin - res://F:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra button: Oheistiedot - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - F:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1137321963250
    O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
    O17 - HKLM\System\CCS\Services\Tcpip\..\{363E1991-96D9-4A74-B9D6-CFF60A286A44}: NameServer = 85.255.115.115,85.255.112.152
    O17 - HKLM\System\CCS\Services\Tcpip\..\{45BB403B-7BC8-4B68-9B70-43FCEFCFE6D0}: NameServer = 85.255.115.115,85.255.112.152
    O17 - HKLM\System\CCS\Services\Tcpip\..\{4C1348FD-65D9-4E8E-BBFE-F8A150A75697}: NameServer = 212.116.32.218 212.116.32.222
    O17 - HKLM\System\CCS\Services\Tcpip\..\{F59AF469-500C-4C80-A148-61B07F7FDBD1}: NameServer = 85.255.115.115,85.255.112.152
    O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.115.115 85.255.112.152
    O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 85.255.115.115 85.255.112.152
    O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.115.115 85.255.112.152
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "F:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - F:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - F:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: F-Secure Automatic Update (BackWeb Client - 7681197) - Unknown owner - F:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
    O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - F:\WINDOWS\system32\CTSvcCDA.exe
    O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - F:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
    O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - F:\Program Files\F-Secure\Common\FNRB32.EXE
    O23 - Service: fsbwsys - F-Secure Corp. - F:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
    O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - F:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
    O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - F:\Program Files\F-Secure\Common\FSMA32.EXE
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - F:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: iPodService - Apple Computer, Inc. - F:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: PPPoE Service (PPPoEService) - Unknown owner - F:\PROGRA~1\EFFICI~1\ENTERN~1\app\pppoeservice.exe
    O23 - Service: Sandra Data Service (SandraDataSrv) - SiSoftware - F:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005.SR3\RpcDataSrv.exe
    O23 - Service: Sandra Service (SandraTheSrv) - SiSoftware - F:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005.SR3\RpcSandraSrv.exe
    Logfile of HijackThis v1.99.1
    Scan saved at 14:02:30, on 29.9.2006
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    F:\WINDOWS\System32\smss.exe
    F:\WINDOWS\system32\winlogon.exe
    F:\WINDOWS\system32\services.exe
    F:\WINDOWS\system32\lsass.exe
    F:\WINDOWS\system32\Ati2evxx.exe
    F:\WINDOWS\system32\svchost.exe
    F:\WINDOWS\System32\svchost.exe
    F:\WINDOWS\system32\spoolsv.exe
    F:\WINDOWS\system32\Ati2evxx.exe
    F:\WINDOWS\Explorer.EXE
    F:\Program Files\F-Secure\Common\FSM32.EXE
    F:\Program Files\DAEMON Tools\daemon.exe
    F:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    F:\WINDOWS\system32\CTHELPER.EXE
    F:\WINDOWS\system32\LVCOMSX.EXE
    F:\Program Files\Logitech\Video\LogiTray.exe
    F:\Program Files\Common Files\PCSuite\DataLayer\DataLayer.exe
    F:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
    F:\Program Files\iTunes\iTunesHelper.exe
    F:\Program Files\QuickTime\qttask.exe
    F:\Program Files\Skype\Phone\Skype.exe
    F:\Program Files\PeerGuardian2\pg2.exe
    F:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
    F:\WINDOWS\system32\ctfmon.exe
    F:\PROGRA~1\COMMON~1\PCSuite\Services\SERVIC~1.EXE
    F:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe
    F:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
    F:\WINDOWS\system32\CTSvcCDA.exe
    F:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
    F:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
    F:\Program Files\F-Secure\BackWeb\7681197\Program\BackWeb-7681197.exe
    F:\Program Files\F-Secure\Anti-Virus\fssm32.exe
    F:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
    F:\Program Files\F-Secure\Common\FSMA32.EXE
    F:\Program Files\F-Secure\Common\FSMB32.EXE
    F:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
    F:\PROGRA~1\EFFICI~1\ENTERN~1\app\pppoeservice.exe
    F:\Program Files\Logitech\Video\FxSvr2.exe
    F:\Program Files\F-Secure\Common\FCH32.EXE
    F:\WINDOWS\system32\svchost.exe
    F:\Program Files\F-Secure\Common\FAMEH32.EXE
    F:\Program Files\iPod\bin\iPodService.exe
    F:\Program Files\F-Secure\Common\FNRB32.EXE
    F:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
    F:\Program Files\F-Secure\Common\FIH32.EXE
    F:\Program Files\F-Secure\Anti-Virus\fsav32.exe
    F:\WINDOWS\system32\wscntfy.exe
    F:\WINDOWS\System32\svchost.exe
    F:\Program Files\Internet Explorer\iexplore.exe
    C:\Kaspersky\mwavscan.com
    C:\Kaspersky\kavss.exe
    F:\WINDOWS\system32\notepad.exe
    F:\WINDOWS\system32\cmd.exe
    c:\kaspersky\kavupd.exe
    F:\Program Files\scanner.exe\scanner.exe.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.fi/
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - F:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - f:\program files\google\googletoolbar2.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - f:\program files\google\googletoolbar2.dll
    O4 - HKLM\..\Run: [F-Secure Manager] "F:\Program Files\F-Secure\Common\FSM32.EXE" /splash
    O4 - HKLM\..\Run: [F-Secure TNB] "F:\Program Files\F-Secure\TNB\TNBUtil.exe" /CHECKALL
    O4 - HKLM\..\Run: [DAEMON Tools] "F:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
    O4 - HKLM\..\Run: [SunJavaUpdateSched] F:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
    O4 - HKLM\..\Run: [Speed racer] F:\Program Files\Creative\SBLive2k\PlayCenter\CTSRReg.exe
    O4 - HKLM\..\Run: [UpdReg] F:\WINDOWS\UpdReg.EXE
    O4 - HKLM\..\Run: [Jet Detection] "F:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe"
    O4 - HKLM\..\Run: [LVCOMSX] F:\WINDOWS\system32\LVCOMSX.EXE
    O4 - HKLM\..\Run: [LogitechVideoRepair] F:\Program Files\Logitech\Video\ISStart.exe
    O4 - HKLM\..\Run: [LogitechVideoTray] F:\Program Files\Logitech\Video\LogiTray.exe
    O4 - HKLM\..\Run: [DataLayer] F:\Program Files\Common Files\PCSuite\DataLayer\DataLayer.exe
    O4 - HKLM\..\Run: [PCSuiteTrayApplication] F:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -onlytray
    O4 - HKLM\..\Run: [iTunesHelper] "F:\Program Files\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "F:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [NeroFilterCheck] F:\WINDOWS\system32\NeroCheck.exe
    O4 - HKCU\..\Run: [Skype] "F:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
    O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "F:\Program Files\Logitech\Video\ManifestEngine.exe" boot
    O4 - HKCU\..\Run: [PeerGuardian] F:\Program Files\PeerGuardian2\pg2.exe
    O4 - HKCU\..\Run: [PcSync] F:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
    O4 - HKCU\..\Run: [ctfmon.exe] F:\WINDOWS\system32\ctfmon.exe
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = F:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O8 - Extra context menu item: &Google Search - res://f:\program files\google\GoogleToolbar2.dll/cmsearch.html
    O8 - Extra context menu item: &Translate English Word - res://f:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
    O8 - Extra context menu item: Backward Links - res://f:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
    O8 - Extra context menu item: Cached Snapshot of Page - res://f:\program files\google\GoogleToolbar2.dll/cmcache.html
    O8 - Extra context menu item: Similar Pages - res://f:\program files\google\GoogleToolbar2.dll/cmsimilar.html
    O8 - Extra context menu item: Translate Page into English - res://f:\program files\google\GoogleToolbar2.dll/cmtrans.html
    O8 - Extra context menu item: Vie Microsoft E&xceliin - res://F:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra button: Oheistiedot - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - F:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1137321963250
    O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
    O17 - HKLM\System\CCS\Services\Tcpip\..\{363E1991-96D9-4A74-B9D6-CFF60A286A44}: NameServer = 85.255.115.115,85.255.112.152
    O17 - HKLM\System\CCS\Services\Tcpip\..\{45BB403B-7BC8-4B68-9B70-43FCEFCFE6D0}: NameServer = 85.255.115.115,85.255.112.152
    O17 - HKLM\System\CCS\Services\Tcpip\..\{4C1348FD-65D9-4E8E-BBFE-F8A150A75697}: NameServer = 212.116.32.218 212.116.32.222
    O17 - HKLM\System\CCS\Services\Tcpip\..\{F59AF469-500C-4C80-A148-61B07F7FDBD1}: NameServer = 85.255.115.115,85.255.112.152
    O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.115.115 85.255.112.152
    O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 85.255.115.115 85.255.112.152
    O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.115.115 85.255.112.152
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "F:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - F:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - F:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: F-Secure Automatic Update (BackWeb Client - 7681197) - Unknown owner - F:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
    O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - F:\WINDOWS\system32\CTSvcCDA.exe
    O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - F:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
    O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - F:\Program Files\F-Secure\Common\FNRB32.EXE
    O23 - Service: fsbwsys - F-Secure Corp. - F:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
    O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - F:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
    O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - F:\Program Files\F-Secure\Common\FSMA32.EXE
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - F:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: iPodService - Apple Computer, Inc. - F:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: PPPoE Service (PPPoEService) - Unknown owner - F:\PROGRA~1\EFFICI~1\ENTERN~1\app\pppoeservice.exe
    O23 - Service: Sandra Data Service (SandraDataSrv) - SiSoftware - F:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005.SR3\RpcDataSrv.exe
    O23 - Service: Sandra Service (SandraTheSrv) - SiSoftware - F:\Program Files\SiSoftware\SiSoftware Sandra Lite 2005.SR3\RpcSandraSrv.exe

    Äänestä

    jepulis fix itin neuvoja noudattaen onkelma ratkesi ja kone toimii jälleen ok kiitos kovasti neuvoista!!!!

    Äänestä

    jepulis fix itin neuvoja noudattaen onkelma ratkesi ja kone toimii jälleen ok kiitos kovasti neuvoista!!!!

    Äänestä

    • Hyvä että alko pelittämään, fixaa vielä nämä rivit:

      O17 - HKLM\System\CCS\Services\Tcpip\..\{363E1991-96D9-4A74-B9D6-CFF60A286A44}: NameServer = 85.255.115.115,85.255.112.152
      O17 - HKLM\System\CCS\Services\Tcpip\..\{45BB403B-7BC8-4B68-9B70-43FCEFCFE6D0}: NameServer = 85.255.115.115,85.255.112.152
      O17 - HKLM\System\CCS\Services\Tcpip\..\{4C1348FD-65D9-4E8E-BBFE-F8A150A75697}: NameServer = 212.116.32.218 212.116.32.222
      O17 - HKLM\System\CCS\Services\Tcpip\..\{F59AF469-500C-4C80-A148-61B07F7FDBD1}: NameServer = 85.255.115.115,85.255.112.152
      O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.115.115 85.255.112.152
      O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 85.255.115.115 85.255.112.152
      O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.115.115 85.255.112.152

      Ja sit päivitä tuo Java, niin kone taas kiiltää vähä aikaa..=)

      Äänestä

    Odottaa vastausta

    Näihin keskusteluihin ei ole vielä vastattu. Ole ensimmäinen.

    Luetuimmat keskustelut

    Kommentoi aloitusta

    jeeesus kirjoitti:

    ongelma on tämä kun netin aukaisee ja pääsivu on auennut, niin aukeaa myös pokeri sivusto ja treffi sivusto ja nämä ei ole pop-upeja??

    Anonyymi
    5000

    Ilmoita asiaton sisältö

    • Sisältää materiaalia, joka on loukkaavaa, herjaavaa, rasistista, uhkailevaa tai ahdistelevaa.

    • Materiaali sisältää nimiä, yhteystietoja tai muita henkilökohtaisia tietoja. Julkisuuden henkilöistä, julkisissa viroissa toimivista ihmisistä sekä yritysten vastuuhenkilöistä saa keskustella työhön liittyen. Myös yksityiselämään liittyvistä asioista voi keskustella siltä osin, kuin niistä on julkisesti kerrottu.

    • Sisältää lapsille haitallista tai heiltä kiellettyä materiaalia. Seksuaalinen sisältö on sallittua aiheeseen tarkoitetuilla palstoilla, joiden ikäraja on 18 vuotta.

    • Lainvastaista sisältöä voi olla mm. yksityiselämää loukkaavan tiedon levitys, kiihottaminen kansanryhmää vastaan, laiton uhkaaminen, alaikäisiin liittyvä seksuaalinen sisältö/grooming, petokset, identiteettivarkaudet, kunnianloukkaukset ja tekijänoikeusrikkomukset.

    • Sisältö ei liity palstan tai keskusteluketjun aiheeseen.

    • Viesti ei ole suomea tai ruotsia (pl. International Forums), se sisältää mainontaa, se sisältää tekijänoikeuksin suojattua materiaalia, se on massapostitus tai jokin muu syy.

    Jaa keskustelu