Logfile of HijackThis v1.99.1
Scan saved at 7:02:03 PM, on 11/16/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2
(6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\system32\rundll32.exe
C:\acer\epm\epm-dm.exe
C:\Program Files\Launch Manager\QtZgAcer.EXE
C:\Program Files\Java\jre1.5.0_08\bin\jusched.exe
C:\Program Files\Common
Files\Real\Update_OB\realsched.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Acer\eManager\anbmServ.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\WINDOWS\system32\ZONELABS\vsmon.exe
C:\PROGRA~1\ZONELA~1\ZONEAL~1\MAILFR~1
\mantispm.exe
C:\WINDOWS\system32\ZoneLabs\isafe.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Azureus\Azureus.exe
C:\Program Files\Winamp\winamp.exe
C:\HijackThis\HijackThis.exe
O2 - BHO: Adobe PDF Reader Link Helper -
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -
C:\Program Files\Adobe\Acrobat 7.0
\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-
B6EB-D4DAF1D92D43} - C:\Program
Files\Java\jre1.5.0_08\bin\ssv.dll
O3 - Toolbar: (no name) - {EF99BD32-C1FB-11D2-
892F-0090271D4F88} - (no file)
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [SynTPLpr] C:\Program
Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program
Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program
Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [IMJPMIG8.1]
"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil
/RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32
\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync]
C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE
/SYNC
O4 - HKLM\..\Run: [PHIME2002A]
C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE
/IMEName
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent]
rundll32.exe
bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [EPM-DM] c:\acer\epm\epm-dm.exe
O4 - HKLM\..\Run: [ePowerManagement]
C:\Acer\ePM\ePM.exe boot
O4 - HKLM\..\Run: [LManager] C:\Program
Files\Launch Manager\QtZgAcer.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched]
"C:\Program Files\Java\jre1.5.0_08
\bin\jusched.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program
Files\Common Files\Real\Update_OB\realsched.exe"
-osboot
O4 - HKLM\..\Run: [NeroFilterCheck]
C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %
systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program
Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program
Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program
Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Skype] "C:\Program
Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - Global Startup: Adobe Reader Speed
Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0
\Reader\reader_sl.exe
O8 - Extra context menu item: E&xport to
Microsoft Excel - res://C:\PROGRA~1\MICROS~2
\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-
11CF-AAA5-00401C608501} - C:\Program
Files\Java\jre1.5.0_08\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console -
{08B0E5C0-4FCB-11CF-AAA5-00401C608501} -
C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-
41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2
\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-
7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1
\YAHOO!\MESSEN~1\YPAGER.EXE
O9 - Extra 'Tools' menuitem: Yahoo! Messenger -
{E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} -
C:\PROGRA~1\YAHOO!\MESSEN~1\YPAGER.EXE
O9 - Extra button: Messenger - {FB5F1910-F110-
11d2-BB9E-00C04F795683} - C:\Program
Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger -
{FB5F1910-F110-11d2-BB9E-00C04F795683} -
C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700}
(Windows Genuine Advantage Validation Tool) -
http://go.microsoft.com/fwlink/?linkid=39204
O17 -
HKLM\System\CCS\Services\Tcpip\..\{1A309C08-D034
-4D70-9441-D9D5D11B4023}: NameServer =
85.255.113.94,85.255.112.19
O17 -
HKLM\System\CCS\Services\Tcpip\..\{62DDAD8D-E3E9
-468C-87F1-B76335A9FB36}: NameServer =
85.255.113.94,85.255.112.19
O17 -
HKLM\System\CCS\Services\Tcpip\..\{D84B9DCD-3F53
-42E3-B745-D8C0E6238EB9}: NameServer =
85.255.113.94,85.255.112.19
O17 -
HKLM\System\CCS\Services\Tcpip\..\{F423DD0E-91D2
-4F4E-9A49-B3CFB3FE0792}: NameServer =
85.255.113.94,85.255.112.19
O17 - HKLM\System\CS1\Services\Tcpip\Parameters:
NameServer = 85.255.113.94 85.255.112.19
O17 - HKLM\System\CS1
\Services\Tcpip\..\{1A309C08-D034-4D70-9441-
D9D5D11B4023}: NameServer =
85.255.113.94,85.255.112.19
O17 - HKLM\System\CCS\Services\Tcpip\Parameters:
NameServer = 85.255.113.94 85.255.112.19
O18 - Protocol: msnim - {828030A1-22C1-4009-854F
-8E305202313F} - "C:\PROGRA~1\MSNMES~1
\msgrapp.dll" (file missing)
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-
45B0-95D7-94D524869DB5} - C:\WINDOWS\system32
\WPDShServiceObj.dll
O23 - Service: Notebook Manager Service
(anbmService) - OSA Technologies Inc. -
C:\Acer\eManager\anbmServ.exe
O23 - Service: Ati HotKey Poller - Unknown owner
- C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: CA ISafe (CAISafe) - Computer
Associates International, Inc. -
C:\WINDOWS\system32\ZoneLabs\isafe.exe
O23 - Service: InstallDriver Table Manager
(IDriverT) - Macrovision Corporation - C:\Program
Files\Common Files\InstallShield\Driver\11\Intel
32\IDriverT.exe
O23 - Service: TrueVector Internet Monitor
(vsmon) - Zone Labs, LLC - C:\WINDOWS\system32
\ZONELABS\vsmon.exe
Scan saved at 7:02:03 PM, on 11/16/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2
(6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\system32\rundll32.exe
C:\acer\epm\epm-dm.exe
C:\Program Files\Launch Manager\QtZgAcer.EXE
C:\Program Files\Java\jre1.5.0_08\bin\jusched.exe
C:\Program Files\Common
Files\Real\Update_OB\realsched.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Acer\eManager\anbmServ.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\WINDOWS\system32\ZONELABS\vsmon.exe
C:\PROGRA~1\ZONELA~1\ZONEAL~1\MAILFR~1
\mantispm.exe
C:\WINDOWS\system32\ZoneLabs\isafe.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Azureus\Azureus.exe
C:\Program Files\Winamp\winamp.exe
C:\HijackThis\HijackThis.exe
O2 - BHO: Adobe PDF Reader Link Helper -
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -
C:\Program Files\Adobe\Acrobat 7.0
\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-
B6EB-D4DAF1D92D43} - C:\Program
Files\Java\jre1.5.0_08\bin\ssv.dll
O3 - Toolbar: (no name) - {EF99BD32-C1FB-11D2-
892F-0090271D4F88} - (no file)
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [SynTPLpr] C:\Program
Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program
Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program
Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [IMJPMIG8.1]
"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil
/RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32
\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync]
C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE
/SYNC
O4 - HKLM\..\Run: [PHIME2002A]
C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE
/IMEName
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent]
rundll32.exe
bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [EPM-DM] c:\acer\epm\epm-dm.exe
O4 - HKLM\..\Run: [ePowerManagement]
C:\Acer\ePM\ePM.exe boot
O4 - HKLM\..\Run: [LManager] C:\Program
Files\Launch Manager\QtZgAcer.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched]
"C:\Program Files\Java\jre1.5.0_08
\bin\jusched.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program
Files\Common Files\Real\Update_OB\realsched.exe"
-osboot
O4 - HKLM\..\Run: [NeroFilterCheck]
C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %
systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program
Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program
Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program
Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Skype] "C:\Program
Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - Global Startup: Adobe Reader Speed
Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0
\Reader\reader_sl.exe
O8 - Extra context menu item: E&xport to
Microsoft Excel - res://C:\PROGRA~1\MICROS~2
\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-
11CF-AAA5-00401C608501} - C:\Program
Files\Java\jre1.5.0_08\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console -
{08B0E5C0-4FCB-11CF-AAA5-00401C608501} -
C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-
41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2
\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-
7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1
\YAHOO!\MESSEN~1\YPAGER.EXE
O9 - Extra 'Tools' menuitem: Yahoo! Messenger -
{E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} -
C:\PROGRA~1\YAHOO!\MESSEN~1\YPAGER.EXE
O9 - Extra button: Messenger - {FB5F1910-F110-
11d2-BB9E-00C04F795683} - C:\Program
Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger -
{FB5F1910-F110-11d2-BB9E-00C04F795683} -
C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700}
(Windows Genuine Advantage Validation Tool) -
http://go.microsoft.com/fwlink/?linkid=39204
O17 -
HKLM\System\CCS\Services\Tcpip\..\{1A309C08-D034
-4D70-9441-D9D5D11B4023}: NameServer =
85.255.113.94,85.255.112.19
O17 -
HKLM\System\CCS\Services\Tcpip\..\{62DDAD8D-E3E9
-468C-87F1-B76335A9FB36}: NameServer =
85.255.113.94,85.255.112.19
O17 -
HKLM\System\CCS\Services\Tcpip\..\{D84B9DCD-3F53
-42E3-B745-D8C0E6238EB9}: NameServer =
85.255.113.94,85.255.112.19
O17 -
HKLM\System\CCS\Services\Tcpip\..\{F423DD0E-91D2
-4F4E-9A49-B3CFB3FE0792}: NameServer =
85.255.113.94,85.255.112.19
O17 - HKLM\System\CS1\Services\Tcpip\Parameters:
NameServer = 85.255.113.94 85.255.112.19
O17 - HKLM\System\CS1
\Services\Tcpip\..\{1A309C08-D034-4D70-9441-
D9D5D11B4023}: NameServer =
85.255.113.94,85.255.112.19
O17 - HKLM\System\CCS\Services\Tcpip\Parameters:
NameServer = 85.255.113.94 85.255.112.19
O18 - Protocol: msnim - {828030A1-22C1-4009-854F
-8E305202313F} - "C:\PROGRA~1\MSNMES~1
\msgrapp.dll" (file missing)
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-
45B0-95D7-94D524869DB5} - C:\WINDOWS\system32
\WPDShServiceObj.dll
O23 - Service: Notebook Manager Service
(anbmService) - OSA Technologies Inc. -
C:\Acer\eManager\anbmServ.exe
O23 - Service: Ati HotKey Poller - Unknown owner
- C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: CA ISafe (CAISafe) - Computer
Associates International, Inc. -
C:\WINDOWS\system32\ZoneLabs\isafe.exe
O23 - Service: InstallDriver Table Manager
(IDriverT) - Macrovision Corporation - C:\Program
Files\Common Files\InstallShield\Driver\11\Intel
32\IDriverT.exe
O23 - Service: TrueVector Internet Monitor
(vsmon) - Zone Labs, LLC - C:\WINDOWS\system32
\ZONELABS\vsmon.exe
Vastaukset 6
Vanhimmat
toi on kuin pommin jäljiltä. Vaikeuttaa vain tarkistelua.
Mutta jotain tuostakin selvisi.
Lataa fixwareout.exe täältä > http://downloads.subratam.org/Fixwareout.exe
tai täältä >
http://www.bleepingcomputer.com/files/lonny/Fixwareout.exe
ja tallenna se työpöydälle. Tuplaklikkaa sitä ja seuraa ohjeita. Klikkaa Next, sitten Install ja varmistu, että "Run fixit" on valittu. Sinun pitää käynnistää kone uudelleen, kun niin käsketään.
Lähetä uusi HjT-loki ja c:\fixwareout\report.txt sisältö
Logfile of HijackThis v1.99.1
Scan saved at 9:44:17 PM, on 11/16/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Acer\eManager\anbmServ.exe
C:\WINDOWS\system32\ZONELABS\vsmon.exe
C:\WINDOWS\system32\ZoneLabs\isafe.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\system32\rundll32.exe
C:\acer\epm\epm-dm.exe
C:\Program Files\Launch Manager\QtZgAcer.EXE
C:\Program Files\Java\jre1.5.0_08\bin\jusched.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\PROGRA~1\ZONELA~1\ZONEAL~1\MAILFR~1\mantispm.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\HijackThis\HijackThis.exe
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O3 - Toolbar: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [EPM-DM] c:\acer\epm\epm-dm.exe
O4 - HKLM\..\Run: [ePowerManagement] C:\Acer\ePM\ePM.exe boot
O4 - HKLM\..\Run: [LManager] C:\Program Files\Launch Manager\QtZgAcer.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_08\bin\jusched.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\YAHOO!\MESSEN~1\YPAGER.EXE
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\YAHOO!\MESSEN~1\YPAGER.EXE
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O17 - HKLM\System\CCS\Services\Tcpip\..\{1A309C08-D034-4D70-9441-D9D5D11B4023}: NameServer = 85.255.113.94,85.255.112.19
O17 - HKLM\System\CCS\Services\Tcpip\..\{62DDAD8D-E3E9-468C-87F1-B76335A9FB36}: NameServer = 85.255.113.94,85.255.112.19
O17 - HKLM\System\CCS\Services\Tcpip\..\{D84B9DCD-3F53-42E3-B745-D8C0E6238EB9}: NameServer = 85.255.113.94,85.255.112.19
O17 - HKLM\System\CCS\Services\Tcpip\..\{F423DD0E-91D2-4F4E-9A49-B3CFB3FE0792}: NameServer = 85.255.113.94,85.255.112.19
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.113.94 85.255.112.19
O17 - HKLM\System\CS1\Services\Tcpip\..\{1A309C08-D034-4D70-9441-D9D5D11B4023}: NameServer = 85.255.113.94,85.255.112.19
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.113.94 85.255.112.19
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Notebook Manager Service (anbmService) - OSA Technologies Inc. - C:\Acer\eManager\anbmServ.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: CA ISafe (CAISafe) - Computer Associates International, Inc. - C:\WINDOWS\system32\ZoneLabs\isafe.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZONELABS\vsmon.exe
Fixwareout ver 1.003
Last edited 8/11/2006
Post this report in the forums please
Reg Entries that were deleted
...
Microsoft (R) Windows Script Host Version 5.6
Random Runs removed from HKLM
...
PLEASE NOTE, There WILL be LEGITIMATE FILES LISTED. IF YOU ARE UNSURE OF WHAT IT IS LEAVE THEM ALONE.
»»»»» Searching by size/names...
»»»»»
Search five digit cs, dm and jb files.
This WILL/CAN also list Legit Files, Submit them at Virustotal
Other suspects.
Directory of C:\WINDOWS\system32
{76E08E89-71FB-4D5C-BC71-28D8C506F91F}.exe
»»»»» Misc files.
»»»»» Checking for older varients covered by the Rem3 tool.
scannaa hjt:llä merkkaa paina fix checked
O3 - Toolbar: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O17 - HKLM\System\CCS\Services\Tcpip\..\{1A309C08-D034-4D70-9441-D9D5D11B4023}: NameServer = 85.255.113.94,85.255.112.19
O17 - HKLM\System\CCS\Services\Tcpip\..\{62DDAD8D-E3E9-468C-87F1-B76335A9FB36}: NameServer = 85.255.113.94,85.255.112.19
O17 - HKLM\System\CCS\Services\Tcpip\..\{D84B9DCD-3F53-42E3-B745-D8C0E6238EB9}: NameServer = 85.255.113.94,85.255.112.19
O17 - HKLM\System\CCS\Services\Tcpip\..\{F423DD0E-91D2-4F4E-9A49-B3CFB3FE0792}: NameServer = 85.255.113.94,85.255.112.19
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.113.94 85.255.112.19
O17 - HKLM\System\CS1\Services\Tcpip\..\{1A309C08-D034-4D70-9441-D9D5D11B4023}: NameServer = 85.255.113.94,85.255.112.19
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.113.94 85.255.112.19
Ohje AVG Anti-Spyware 7.5:n käyttöön
Huom! Tässä ohjeessa sammutetaan tuo reaaliaikasuojaus (Shield). Näin vältetään tilanteet joissa suojaus estäisi esim HijackThis työkalun toimintaa.
Tallenna nämä ohjeet tekstitiedostoon tai tulosta nämä, muuten et pääse niihin käsiksi vikasietotilasta
Lataa AVG Anti-Spyware 7.5 http://www.ewido.net/en/download/
ja tallenna ohjelma työpöydällesi.
• Kun olet ladannut ohjelman, kaksoisklikkaa asennuohjelman pikakuvaketta työpöydälläsi, asennus alkaa.
• Asennuksen jälkeen täytyy ohjelma käynnistää ja sen tunnisteet päivittää.
• Käynnistä AVG Anti-Spyware.
• Klikkaa "Update" kuvaketta päävalikossa. Sen jälkeen klikkaa "Update now" painiketta.
o Sitten klikkaa "Start Update" kuvaketta jolloin päivitys alkaa.
• Kun päivitykset on ladattu, klikkaa "Scanner" kuvaketta ikkunan ylälaidassa. Valitse sitten "Settings" välilehti.
• Kun "Settings" valikko on auennut, klikkaa "Recommended actions" ja sitten valitse "Quarantine".
• Sitten "Reports" valikon alta:
o Laita täppi kohtaan "Automatically generate report after every scan"
o Ota täppi pois kohdasta"Only if threats were found"
• Sitten klikkaa "Shield" kuvaketta ikkunan ylälaidassa
• "Resident shield is", muuta tila active:sta inactive:ksi
• Sulje ohjelma, ÄLÄ skannaa vielä.
Käynnistä koneesi vikasietotilaan,
sammuta ja käynnistä
käynnistyksen yhteydessä naputtele F8
valitse nuoli näppäimellä vikasietotila
paina enter ja enter
HUOM! Älä käytä muita ohjelmia AVG skannauksen aikana, tämä saattaa häiritä skannausta.
• Kun vikasietotilassa, käynnistä AVG Anti-Spyware.
• Klikkaa "Scanner" kuvaketta ikkunan ylälaidassa ja valitse "Scan" välilehti. Sitten klikkaa "Complete System Scan".
• Ewido aloittaa nyt tietokoneen skannaamisen, ole kärsivällinen sillä skannaus vie aikaa.
Kun skannaus on valmis:
TÄRKEÄÄ : Älä klikkaa "Save Scan Report" ennen kuin klikkaat "Apply all Actions"
• Varmistu, että Set all elements to: näyttää Quarantine (1), jos ei, klikkaa linkkiä ja valitse Quarantine popup-valikosta.
• Sinulta kysytään mitä tehdä jos infektioita löytyi, valitse silloin "Apply all actions"
• Sitten klikkaa "Reports" kuvaketta ohjelma yläosasta.
• Klikkaa "Save report as" painiketta ikkunan vasemmassa alalaidassa ja tallenna raportti työpöydälle.
• Sulje ohjelma, käynnistä kone normaalisti ja lähetä AVG:n raportti viestikejuusi.
laita myös uusi hjt-loki
---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------
Created at: 4:01:15 PM 11/19/2006
Scan result:
C:\WINDOWS\system32\{76E08E89-71FB-4D5C-BC71-28D8C506F91F}.exe -> Adware.Casino : Cleaned with backup (quarantined).
C:\Program Files\Common Files\Real\WeatherBug\MiniBugTransporter.dll -> Adware.Minibug : Cleaned with backup (quarantined).
C:\Documents and Settings\Ernesto1\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-2c9e9eae-22d738d1.zip/NewSecurityClassLoader.class -> Not-A-Virus.Exploit.ByteVerify : Cleaned with backup (quarantined).
C:\Documents and Settings\Ernesto1\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\java.jar-2c9e9eae-22d738d1.zip/NewURLClassLoader.class -> Not-A-Virus.Exploit.ByteVerify : Cleaned with backup (quarantined).
C:\Program Files\KCeasy\giFT\giFT.dll -> Not-A-Virus.PornTool.Win32.Porn2Peer.a : Cleaned with backup (quarantined).
:mozilla.114:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.116:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.118:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.120:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.170:C:\FOUND.005\FILE0003.CHK -> TrackingCookie.2o7 : Cleaned.
:mozilla.197:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.417:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.136:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.137:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.138:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.139:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.140:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.150:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.151:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.165:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.201:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Adition : Cleaned.
:mozilla.202:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Adition : Cleaned.
:mozilla.179:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Admarketplace : Cleaned.
:mozilla.193:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.
:mozilla.194:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.
:mozilla.13:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.14:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.15:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.16:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.17:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.7:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.283:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.Bfast : Cleaned.
:mozilla.326:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned.
:mozilla.327:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned.
:mozilla.229:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.230:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.229:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.230:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.320:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.282:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.Clickbank : Cleaned.
:mozilla.169:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Clickhype : Cleaned.
:mozilla.114:C:\FOUND.005\FILE0003.CHK -> TrackingCookie.Clickzs : Cleaned.
:mozilla.115:C:\FOUND.005\FILE0003.CHK -> TrackingCookie.Clickzs : Cleaned.
:mozilla.204:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Clickzs : Cleaned.
:mozilla.205:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Clickzs : Cleaned.
:mozilla.206:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Clickzs : Cleaned.
:mozilla.363:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Clickzs : Cleaned.
:mozilla.364:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Clickzs : Cleaned.
:mozilla.412:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Clickzs : Cleaned.
:mozilla.413:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Clickzs : Cleaned.
:mozilla.138:C:\FOUND.005\FILE0003.CHK -> TrackingCookie.Com : Cleaned.
:mozilla.139:C:\FOUND.005\FILE0003.CHK -> TrackingCookie.Com : Cleaned.
:mozilla.75:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.Com : Cleaned.
:mozilla.131:C:\FOUND.005\FILE0003.CHK -> TrackingCookie.Cqcounter : Cleaned.
:mozilla.365:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Cqcounter : Cleaned.
:mozilla.18:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.277:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.Esomniture : Cleaned.
:mozilla.172:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.174:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.175:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Falkag : Cleaned.
:mozilla.77:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.78:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.204:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.21:C:\FOUND.005\FILE0003.CHK -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.27:C:\Documents and Settings\Ernesto1\Application Data\Azureus\downloads.config.bad -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.464:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.490:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.96:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.350:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.395:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.408:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.409:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.410:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.441:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.Hotlog : Cleaned.
:mozilla.345:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.346:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.347:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.100:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Masterstats : Cleaned.
:mozilla.118:C:\FOUND.005\FILE0003.CHK -> TrackingCookie.Masterstats : Cleaned.
:mozilla.106:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.107:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.389:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.Overture : Cleaned.
:mozilla.76:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.Overture : Cleaned.
:mozilla.163:C:\FOUND.005\FILE0003.CHK -> TrackingCookie.Pointroll : Cleaned.
:mozilla.164:C:\FOUND.005\FILE0003.CHK -> TrackingCookie.Pointroll : Cleaned.
:mozilla.165:C:\FOUND.005\FILE0003.CHK -> TrackingCookie.Pointroll : Cleaned.
:mozilla.166:C:\FOUND.005\FILE0003.CHK -> TrackingCookie.Pointroll : Cleaned.
:mozilla.167:C:\FOUND.005\FILE0003.CHK -> TrackingCookie.Pointroll : Cleaned.
:mozilla.87:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.88:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.89:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.90:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.91:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.64:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.65:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.49:C:\FOUND.005\FILE0003.CHK -> TrackingCookie.Realcastmedia : Cleaned.
:mozilla.50:C:\FOUND.005\FILE0003.CHK -> TrackingCookie.Realcastmedia : Cleaned.
:mozilla.171:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Revenue : Cleaned.
:mozilla.54:C:\FOUND.005\FILE0003.CHK -> TrackingCookie.Revenue : Cleaned.
:mozilla.127:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.128:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.129:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.130:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.131:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.250:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.251:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.252:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.253:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.254:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.255:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.120:C:\FOUND.005\FILE0003.CHK -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.121:C:\FOUND.005\FILE0003.CHK -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.23:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.24:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.27:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.28:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.29:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.30:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.31:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.32:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.33:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.34:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.35:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.36:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.37:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.38:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.39:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.40:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.41:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.42:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.43:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.44:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.45:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.46:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.47:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.48:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.49:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.50:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.51:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.52:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.53:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.54:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.55:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.56:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.57:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.58:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.59:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.60:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.61:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.62:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.63:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.64:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.65:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.66:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.67:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.68:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.69:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.70:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.71:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.72:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.73:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.74:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.379:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned.
:mozilla.149:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.231:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.232:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.236:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.241:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.242:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.358:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.360:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.361:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.79:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.300:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.Valueclick : Cleaned.
:mozilla.448:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Web-stat : Cleaned.
:mozilla.449:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Web-stat : Cleaned.
:mozilla.198:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned.
:mozilla.125:C:\FOUND.005\FILE0003.CHK -> TrackingCookie.Xhit : Cleaned.
:mozilla.126:C:\FOUND.005\FILE0003.CHK -> TrackingCookie.Xhit : Cleaned.
:mozilla.153:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Yadro : Cleaned.
:mozilla.427:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.Yadro : Cleaned.
:mozilla.176:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.177:C:\Documents and Settings\Ernesto1\Application Data\Mozilla\Firefox\Profiles\xw9619up.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.33:C:\FOUND.005\FILE0003.CHK -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.34:C:\FOUND.005\FILE0003.CHK -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.35:C:\FOUND.005\FILE0003.CHK -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.39:C:\FOUND.005\FILE0003.CHK -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.40:C:\FOUND.005\FILE0003.CHK -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.41:C:\FOUND.005\FILE0003.CHK -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.42:C:\FOUND.005\FILE0003.CHK -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.80:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.81:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.82:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.183:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.186:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.187:C:\Documents and Settings\Guest\Application Data\Mozilla\Firefox\Profiles\mjmez3h1.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
::Report end
Logfile of HijackThis v1.99.1
Scan saved at 4:07:37 PM, on 11/19/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Acer\eManager\anbmServ.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\ZONELABS\vsmon.exe
C:\WINDOWS\system32\ZoneLabs\isafe.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\system32\rundll32.exe
C:\acer\epm\epm-dm.exe
C:\Program Files\Launch Manager\QtZgAcer.EXE
C:\Program Files\Java\jre1.5.0_08\bin\jusched.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\PROGRA~1\ZONELA~1\ZONEAL~1\MAILFR~1\mantispm.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\HijackThis\HijackThis.exe
C:\HijackThis\HijackThis.exe
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [EPM-DM] c:\acer\epm\epm-dm.exe
O4 - HKLM\..\Run: [ePowerManagement] C:\Acer\ePM\ePM.exe boot
O4 - HKLM\..\Run: [LManager] C:\Program Files\Launch Manager\QtZgAcer.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_08\bin\jusched.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\YAHOO!\MESSEN~1\YPAGER.EXE
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\YAHOO!\MESSEN~1\YPAGER.EXE
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Notebook Manager Service (anbmService) - OSA Technologies Inc. - C:\Acer\eManager\anbmServ.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: CA ISafe (CAISafe) - Computer Associates International, Inc. - C:\WINDOWS\system32\ZoneLabs\isafe.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZONELABS\vsmon.exe
Siinäpä tuota litanjaa, miltäs se nyt rupee näyttämään?
koneen kanssa?
aja vielä onlain skanneri
Linkki: http://www.pandasoftware.com/products/activescan.htm
• Kun olet Pandan sivulla, klikkaa Scan your PC-painiketta
• Uusi ikkuna aukeaa, klikkaa Check Now-painiketta
• Valitse maa, Country
• Syötä kaupunki, State/Province
• Syötä sähköpostiosoitteesi, e-mail address ja klikkaa send-painiketta
• Valitse joko kotikäyttäjä Home User tai yritys Company
• Klikkaa suurta Scan Now-painiketta
• Jos ActiveX-komponentin asentamista kysytään, salli se.
• Tarvittavien tiedostojen lataaminen alkaa (Huom: Tämä vaihe voi viedä muutamia minuutteja)
• Kun lataukset ovat valmiit, klikkaa Local Disks aloittaaksesi skannauksen
• Kun skannaus on valmis, klikkaa See Report-painiketta jos infektioita löytyi. Klikkaa sitten Save Report ja tallenna raportti johonkin sopivaan sijaintiin (esim työpöydälle).
Kiitos, te olette kyllä mahtavia jotka näitä virustukia ylläpidätte!
Kone on ok, ei ole enää hidastellut. Ajan vielä Pandan lävitse, katsotaan tarttuuko sieltä mitään haaviin.