Rekisteröidy

Ilmoitukset

Ladataan…

    Näytä kaikki

    Logia viisaammille

    Ongelmana on siis itsestään aukeavat popup mainokset suht tiuhaan tahtii.. Löytyisikö tästä logista jotain vaivaan liittyvää saastaa..?

    Logfile of HijackThis v1.99.1
    Scan saved at 18:55:02, on 15.1.2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\DigitalPersona\Bin\DPWinLct.exe
    C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
    C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
    C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    C:\Program Files\DigitalPersona\Bin\DpHost.exe
    C:\WINDOWS\system32\mgabg.exe
    C:\Program Files\Norton AntiVirus\navapsvc.exe
    C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
    C:\Program Files\DigitalPersona\Bin\DPFUSMgr.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\RunDll32.exe
    C:\Program Files\Common Files\Symantec Shared\ccApp.exe
    C:\WINDOWS\system32\GSICON.EXE
    C:\WINDOWS\system32\dslagent.exe
    C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
    C:\WINDOWS\system32\PDesk\PDesk.exe
    C:\Program Files\Winamp\Winampa.exe
    C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
    C:\Program Files\Microsoft IntelliType Pro\type32.exe
    C:\Program Files\Microsoft IntelliPoint\point32.exe
    C:\Program Files\DigitalPersona\Bin\DPAgnt.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\MSN Messenger\MsnMsgr.Exe
    c:\progra~1\intern~1\iexplore.exe
    C:\Program Files\Skype\Phone\Skype.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\FinePixViewer\QuickDCF.exe
    C:\Program Files\VIA\RAID\raid_tool.exe
    C:\Program Files\Samurize\Client.exe
    C:\Program Files\Rainlendar\Rainlendar.exe
    C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Documents and Settings\****\Omat tiedostot\siivous\Skanneri.exe.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://webmail.saunalahti.fi/wm2/?fail=Sähköpostiosoite&d=1161373530868
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
    O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [GSICONEXE] GSICON.EXE
    O4 - HKLM\..\Run: [DSLAGENTEXE] dslagent.exe USB
    O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
    O4 - HKLM\..\Run: [Matrox Powerdesk] C:\WINDOWS\system32\PDesk\PDesk.exe /Autolaunch
    O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\Winampa.exe"
    O4 - HKLM\..\Run: [AnyDVD] C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
    O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
    O4 - HKLM\..\Run: [type32] "C:\Program Files\Microsoft IntelliType Pro\type32.exe"
    O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
    O4 - HKLM\..\Run: [DPAgnt] C:\Program Files\DigitalPersona\Bin\DPAgnt.exe
    O4 - HKLM\..\Run: [CakeOnlineScrProgram] C:\Documents and Settings\All Users\Application Data\buildbluecakeonline\Memo Dvd.exe
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
    O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
    O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
    O4 - HKCU\..\Run: [deafdupe] C:\DOCUME~1\Niko\APPLIC~1\SECTDE~1\bin bold fork.exe
    O4 - Startup: Client Default.lnk = C:\Program Files\Samurize\Client.exe
    O4 - Startup: Rainlendar.lnk = C:\Program Files\Rainlendar\Rainlendar.exe
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: AutoCAD Startup Accelerator.lnk = C:\Program Files\Common Files\Autodesk Shared\acstart16.exe
    O4 - Global Startup: Exif Launcher.lnk = C:\Program Files\FinePixViewer\QuickDCF.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
    O4 - Global Startup: VIA RAID TOOL.lnk = C:\Program Files\VIA\RAID\raid_tool.exe
    O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
    O9 - Extra button: Ladbrokes Poker - {C2A80015-C447-4dc4-82DD-AED83D6ED57E} - C:\Program Files\ladbrokesMPP\MPPoker.exe
    O9 - Extra button: NordicBet Poker - {E6073F93-9541-4be4-9800-109D378EB99B} - C:\Program Files\nordicbetMPP\MPPoker.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O20 - Winlogon Notify: DPWLN - C:\WINDOWS\system32\DPWLEvHd.dll
    O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
    O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
    O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    O23 - Service: Windows XP FUS Manager (DPFUSMgr) - DigitalPersona, Inc. - C:\Program Files\DigitalPersona\Bin\DPFUSMgr.exe
    O23 - Service: Biometric Authentication Service (DpHost) - DigitalPersona, Inc. - C:\Program Files\DigitalPersona\Bin\DpHost.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
    O23 - Service: MGABGEXE - Matrox Graphics Inc. - C:\WINDOWS\system32\mgabg.exe
    O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
    O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
    O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
    O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
    O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
    O23 - Service: SPBBCSvc - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
    O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
    11539
    Äänestä

    Muut lukivat myös

    Vastaukset 11

    Vanhimmat

    Loppihan se siellä mainostaa sulle.

    Merkkaa ja paina fix checked:

    O4 - HKLM\..\Run: [CakeOnlineScrProgram] C:\Documents and Settings\All Users\Application Data\buildbluecakeonline\Memo Dvd.exe
    O4 - HKCU\..\Run: [deafdupe] C:\DOCUME~1\Niko\APPLIC~1\SECTDE~1\bin bold fork.exe

    Käynnistä kone vikasietotilaan, laita piilotiedostot näkyviin ja poista nuo kansiot:

    C:\Documents and Settings\All Users\Application Data\--->buildbluecakeonlineSECTDE~1

    Äänestä

    • Mainos pommitus vaikuttaa loppuneen, kiitos selkeistä ohjeista!:)

      ja uudet logit:

      NoLop! Log by Skate_Punk_21

      Fix running from: C:\Documents and Settings\Niko\Työpöytä
      [15.1.2007]
      [20:26:08]

      ---Infection Files Found/Removed---
      C:\WINDOWS\tasks\A0E2AF1091B12100.job

      Beginning Removal...
      Rebooting...
      Removing Lop's Leftover Files/Folders...
      Editing Registry...
      **Fix Complete!**

      ---Listing AppData sub directories---

      C:\Documents and Settings\All Users\Application Data\Adobe
      C:\Documents and Settings\All Users\Application Data\Ahead
      C:\Documents and Settings\All Users\Application Data\Autodesk
      C:\Documents and Settings\All Users\Application Data\Downloaded Installations -- EMPTY Directory
      C:\Documents and Settings\All Users\Application Data\Elaborate Bytes
      C:\Documents and Settings\All Users\Application Data\Installshield
      C:\Documents and Settings\All Users\Application Data\Microsoft
      C:\Documents and Settings\All Users\Application Data\Pc Suite
      C:\Documents and Settings\All Users\Application Data\Quicktime
      C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
      C:\Documents and Settings\All Users\Application Data\Symantec
      C:\Documents and Settings\Default User\Application Data\Microsoft
      C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Microsoft
      C:\Documents and Settings\Localservice\Application Data\Microsoft
      C:\Documents and Settings\Networkservice\Application Data\Microsoft
      C:\Documents and Settings\Niko\Application Data\1clickdvdcopy -- EMPTY Directory
      C:\Documents and Settings\Niko\Application Data\Adobe
      C:\Documents and Settings\Niko\Application Data\Adobeaum
      C:\Documents and Settings\Niko\Application Data\Adobeum -- EMPTY Directory
      C:\Documents and Settings\Niko\Application Data\Ahead
      C:\Documents and Settings\Niko\Application Data\Autodesk
      C:\Documents and Settings\Niko\Application Data\Datalayer
      C:\Documents and Settings\Niko\Application Data\Digitalpersona
      C:\Documents and Settings\Niko\Application Data\Help -- EMPTY Directory
      C:\Documents and Settings\Niko\Application Data\Identities
      C:\Documents and Settings\Niko\Application Data\Jasc Software Inc
      C:\Documents and Settings\Niko\Application Data\Lavasoft
      C:\Documents and Settings\Niko\Application Data\Leadertech
      C:\Documents and Settings\Niko\Application Data\Macromedia
      C:\Documents and Settings\Niko\Application Data\Microgaming
      C:\Documents and Settings\Niko\Application Data\Microsoft
      C:\Documents and Settings\Niko\Application Data\Nokia
      C:\Documents and Settings\Niko\Application Data\Pc Suite
      C:\Documents and Settings\Niko\Application Data\Rainlendar
      C:\Documents and Settings\Niko\Application Data\Skype
      C:\Documents and Settings\Niko\Application Data\Symantec
      C:\Documents and Settings\Niko\Application Data\Vso
      C:\Documents and Settings\Vieras\Application Data\Adobe
      C:\Documents and Settings\Vieras\Application Data\Adobeaum
      C:\Documents and Settings\Vieras\Application Data\Adobeum -- EMPTY Directory
      C:\Documents and Settings\Vieras\Application Data\Digitalpersona
      C:\Documents and Settings\Vieras\Application Data\Identities
      C:\Documents and Settings\Vieras\Application Data\Jasc Software Inc
      C:\Documents and Settings\Vieras\Application Data\Macromedia
      C:\Documents and Settings\Vieras\Application Data\Microsoft
      C:\Documents and Settings\Vieras\Application Data\Nokia Multimedia Player
      C:\Documents and Settings\Vieras\Application Data\Pc Suite
      C:\Documents and Settings\Vieras\Application Data\Symantec




      -------------------------------------------------



      Logfile of HijackThis v1.99.1
      Scan saved at 21:06:43, on 15.1.2007
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\DigitalPersona\Bin\DPWinLct.exe
      C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
      C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
      C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
      C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
      C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
      C:\Program Files\DigitalPersona\Bin\DpHost.exe
      C:\WINDOWS\system32\mgabg.exe
      C:\Program Files\Norton AntiVirus\navapsvc.exe
      C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
      C:\Program Files\DigitalPersona\Bin\DPFUSMgr.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\RunDll32.exe
      C:\Program Files\Common Files\Symantec Shared\ccApp.exe
      C:\WINDOWS\system32\GSICON.EXE
      C:\WINDOWS\system32\dslagent.exe
      C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
      C:\WINDOWS\system32\PDesk\PDesk.exe
      C:\Program Files\Winamp\Winampa.exe
      C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
      C:\Program Files\Microsoft IntelliType Pro\type32.exe
      C:\Program Files\Microsoft IntelliPoint\point32.exe
      C:\Program Files\DigitalPersona\Bin\DPAgnt.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\Skype\Phone\Skype.exe
      C:\Program Files\FinePixViewer\QuickDCF.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\VIA\RAID\raid_tool.exe
      C:\Program Files\Samurize\Client.exe
      C:\Program Files\Rainlendar\Rainlendar.exe
      C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
      C:\Program Files\MSN Messenger\msnmsgr.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Documents and Settings\Niko\Omat tiedostot\siivous\Skanneri.exe.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton AntiVirus\NavShExt.dll
      O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton AntiVirus\NavShExt.dll
      O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
      O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
      O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
      O4 - HKLM\..\Run: [GSICONEXE] GSICON.EXE
      O4 - HKLM\..\Run: [DSLAGENTEXE] dslagent.exe USB
      O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
      O4 - HKLM\..\Run: [Matrox Powerdesk] C:\WINDOWS\system32\PDesk\PDesk.exe /Autolaunch
      O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\Winampa.exe"
      O4 - HKLM\..\Run: [AnyDVD] C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
      O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
      O4 - HKLM\..\Run: [type32] "C:\Program Files\Microsoft IntelliType Pro\type32.exe"
      O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
      O4 - HKLM\..\Run: [DPAgnt] C:\Program Files\DigitalPersona\Bin\DPAgnt.exe
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
      O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - Startup: Client Default.lnk = C:\Program Files\Samurize\Client.exe
      O4 - Startup: Rainlendar.lnk = C:\Program Files\Rainlendar\Rainlendar.exe
      O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      O4 - Global Startup: AutoCAD Startup Accelerator.lnk = C:\Program Files\Common Files\Autodesk Shared\acstart16.exe
      O4 - Global Startup: Exif Launcher.lnk = C:\Program Files\FinePixViewer\QuickDCF.exe
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
      O4 - Global Startup: VIA RAID TOOL.lnk = C:\Program Files\VIA\RAID\raid_tool.exe
      O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
      O9 - Extra button: Ladbrokes Poker - {C2A80015-C447-4dc4-82DD-AED83D6ED57E} - C:\Program Files\ladbrokesMPP\MPPoker.exe
      O9 - Extra button: NordicBet Poker - {E6073F93-9541-4be4-9800-109D378EB99B} - C:\Program Files\nordicbetMPP\MPPoker.exe
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O20 - Winlogon Notify: DPWLN - C:\WINDOWS\system32\DPWLEvHd.dll
      O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
      O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
      O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
      O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
      O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
      O23 - Service: Windows XP FUS Manager (DPFUSMgr) - DigitalPersona, Inc. - C:\Program Files\DigitalPersona\Bin\DPFUSMgr.exe
      O23 - Service: Biometric Authentication Service (DpHost) - DigitalPersona, Inc. - C:\Program Files\DigitalPersona\Bin\DpHost.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
      O23 - Service: MGABGEXE - Matrox Graphics Inc. - C:\WINDOWS\system32\mgabg.exe
      O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
      O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
      O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
      O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
      O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
      O23 - Service: SPBBCSvc - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
      O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

      Äänestä

    • toivoton tapaus kirjoitti:

      Mainos pommitus vaikuttaa loppuneen, kiitos selkeistä ohjeista!:)

      ja uudet logit:

      NoLop! Log by Skate_Punk_21

      Fix running from: C:\Documents and Settings\Niko\Työpöytä
      [15.1.2007]
      [20:26:08]

      ---Infection Files Found/Removed---
      C:\WINDOWS\tasks\A0E2AF1091B12100.job

      Beginning Removal...
      Rebooting...
      Removing Lop's Leftover Files/Folders...
      Editing Registry...
      **Fix Complete!**

      ---Listing AppData sub directories---

      C:\Documents and Settings\All Users\Application Data\Adobe
      C:\Documents and Settings\All Users\Application Data\Ahead
      C:\Documents and Settings\All Users\Application Data\Autodesk
      C:\Documents and Settings\All Users\Application Data\Downloaded Installations -- EMPTY Directory
      C:\Documents and Settings\All Users\Application Data\Elaborate Bytes
      C:\Documents and Settings\All Users\Application Data\Installshield
      C:\Documents and Settings\All Users\Application Data\Microsoft
      C:\Documents and Settings\All Users\Application Data\Pc Suite
      C:\Documents and Settings\All Users\Application Data\Quicktime
      C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
      C:\Documents and Settings\All Users\Application Data\Symantec
      C:\Documents and Settings\Default User\Application Data\Microsoft
      C:\Documents and Settings\Järjestelmänvalvoja\Application Data\Microsoft
      C:\Documents and Settings\Localservice\Application Data\Microsoft
      C:\Documents and Settings\Networkservice\Application Data\Microsoft
      C:\Documents and Settings\Niko\Application Data\1clickdvdcopy -- EMPTY Directory
      C:\Documents and Settings\Niko\Application Data\Adobe
      C:\Documents and Settings\Niko\Application Data\Adobeaum
      C:\Documents and Settings\Niko\Application Data\Adobeum -- EMPTY Directory
      C:\Documents and Settings\Niko\Application Data\Ahead
      C:\Documents and Settings\Niko\Application Data\Autodesk
      C:\Documents and Settings\Niko\Application Data\Datalayer
      C:\Documents and Settings\Niko\Application Data\Digitalpersona
      C:\Documents and Settings\Niko\Application Data\Help -- EMPTY Directory
      C:\Documents and Settings\Niko\Application Data\Identities
      C:\Documents and Settings\Niko\Application Data\Jasc Software Inc
      C:\Documents and Settings\Niko\Application Data\Lavasoft
      C:\Documents and Settings\Niko\Application Data\Leadertech
      C:\Documents and Settings\Niko\Application Data\Macromedia
      C:\Documents and Settings\Niko\Application Data\Microgaming
      C:\Documents and Settings\Niko\Application Data\Microsoft
      C:\Documents and Settings\Niko\Application Data\Nokia
      C:\Documents and Settings\Niko\Application Data\Pc Suite
      C:\Documents and Settings\Niko\Application Data\Rainlendar
      C:\Documents and Settings\Niko\Application Data\Skype
      C:\Documents and Settings\Niko\Application Data\Symantec
      C:\Documents and Settings\Niko\Application Data\Vso
      C:\Documents and Settings\Vieras\Application Data\Adobe
      C:\Documents and Settings\Vieras\Application Data\Adobeaum
      C:\Documents and Settings\Vieras\Application Data\Adobeum -- EMPTY Directory
      C:\Documents and Settings\Vieras\Application Data\Digitalpersona
      C:\Documents and Settings\Vieras\Application Data\Identities
      C:\Documents and Settings\Vieras\Application Data\Jasc Software Inc
      C:\Documents and Settings\Vieras\Application Data\Macromedia
      C:\Documents and Settings\Vieras\Application Data\Microsoft
      C:\Documents and Settings\Vieras\Application Data\Nokia Multimedia Player
      C:\Documents and Settings\Vieras\Application Data\Pc Suite
      C:\Documents and Settings\Vieras\Application Data\Symantec




      -------------------------------------------------



      Logfile of HijackThis v1.99.1
      Scan saved at 21:06:43, on 15.1.2007
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\DigitalPersona\Bin\DPWinLct.exe
      C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
      C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
      C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
      C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
      C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
      C:\Program Files\DigitalPersona\Bin\DpHost.exe
      C:\WINDOWS\system32\mgabg.exe
      C:\Program Files\Norton AntiVirus\navapsvc.exe
      C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
      C:\Program Files\DigitalPersona\Bin\DPFUSMgr.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\RunDll32.exe
      C:\Program Files\Common Files\Symantec Shared\ccApp.exe
      C:\WINDOWS\system32\GSICON.EXE
      C:\WINDOWS\system32\dslagent.exe
      C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
      C:\WINDOWS\system32\PDesk\PDesk.exe
      C:\Program Files\Winamp\Winampa.exe
      C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
      C:\Program Files\Microsoft IntelliType Pro\type32.exe
      C:\Program Files\Microsoft IntelliPoint\point32.exe
      C:\Program Files\DigitalPersona\Bin\DPAgnt.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\Skype\Phone\Skype.exe
      C:\Program Files\FinePixViewer\QuickDCF.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\VIA\RAID\raid_tool.exe
      C:\Program Files\Samurize\Client.exe
      C:\Program Files\Rainlendar\Rainlendar.exe
      C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
      C:\Program Files\MSN Messenger\msnmsgr.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Documents and Settings\Niko\Omat tiedostot\siivous\Skanneri.exe.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
      O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton AntiVirus\NavShExt.dll
      O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton AntiVirus\NavShExt.dll
      O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
      O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
      O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
      O4 - HKLM\..\Run: [GSICONEXE] GSICON.EXE
      O4 - HKLM\..\Run: [DSLAGENTEXE] dslagent.exe USB
      O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
      O4 - HKLM\..\Run: [Matrox Powerdesk] C:\WINDOWS\system32\PDesk\PDesk.exe /Autolaunch
      O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\Winampa.exe"
      O4 - HKLM\..\Run: [AnyDVD] C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
      O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
      O4 - HKLM\..\Run: [type32] "C:\Program Files\Microsoft IntelliType Pro\type32.exe"
      O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
      O4 - HKLM\..\Run: [DPAgnt] C:\Program Files\DigitalPersona\Bin\DPAgnt.exe
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
      O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - Startup: Client Default.lnk = C:\Program Files\Samurize\Client.exe
      O4 - Startup: Rainlendar.lnk = C:\Program Files\Rainlendar\Rainlendar.exe
      O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      O4 - Global Startup: AutoCAD Startup Accelerator.lnk = C:\Program Files\Common Files\Autodesk Shared\acstart16.exe
      O4 - Global Startup: Exif Launcher.lnk = C:\Program Files\FinePixViewer\QuickDCF.exe
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
      O4 - Global Startup: VIA RAID TOOL.lnk = C:\Program Files\VIA\RAID\raid_tool.exe
      O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
      O9 - Extra button: Ladbrokes Poker - {C2A80015-C447-4dc4-82DD-AED83D6ED57E} - C:\Program Files\ladbrokesMPP\MPPoker.exe
      O9 - Extra button: NordicBet Poker - {E6073F93-9541-4be4-9800-109D378EB99B} - C:\Program Files\nordicbetMPP\MPPoker.exe
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O20 - Winlogon Notify: DPWLN - C:\WINDOWS\system32\DPWLEvHd.dll
      O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
      O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
      O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
      O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
      O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
      O23 - Service: Windows XP FUS Manager (DPFUSMgr) - DigitalPersona, Inc. - C:\Program Files\DigitalPersona\Bin\DPFUSMgr.exe
      O23 - Service: Biometric Authentication Service (DpHost) - DigitalPersona, Inc. - C:\Program Files\DigitalPersona\Bin\DpHost.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
      O23 - Service: MGABGEXE - Matrox Graphics Inc. - C:\WINDOWS\system32\mgabg.exe
      O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
      O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
      O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
      O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
      O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
      O23 - Service: SPBBCSvc - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
      O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

      Tuon voit vielä fixata:

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =

      Oletkos millon ajanut tuota AVG Anti spywarea? Jos ei oo vähään aikaan ajettu niin käynnistä vikasietotilaan ja aja se siellä vielä varmuudeks, ja lähetä AVG:n raportti jos jotain löytyy.

      Äänestä

    • fix it kirjoitti:

      Tuon voit vielä fixata:

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =

      Oletkos millon ajanut tuota AVG Anti spywarea? Jos ei oo vähään aikaan ajettu niin käynnistä vikasietotilaan ja aja se siellä vielä varmuudeks, ja lähetä AVG:n raportti jos jotain löytyy.

      Fixasin vielä sen.. en ole ehtiny ajaa vielä sitä AVG hommaa, mutta nyt näiden fixaus hommien jälkeen huomasin, että en voi muuttaa kotisivua.. Jokin vaihtaa aina takaisin msn.fi osoitteen haluamani jippii.fi tilalle, mistäs tämmönen?:)

      Äänestä

    C:\Documents and Settings\Niko\Cookies\niko@adtech[2].txt -> TrackingCookie.Adtech : Ignored.
    C:\Documents and Settings\Vieras\Cookies\vieras@adtech[2].txt -> TrackingCookie.Adtech : Ignored.
    C:\Documents and Settings\Niko\Cookies\niko@atdmt[2].txt -> TrackingCookie.Atdmt : Ignored.
    C:\Documents and Settings\Vieras\Cookies\vieras@atdmt[1].txt -> TrackingCookie.Atdmt : Ignored.
    C:\Documents and Settings\Niko\Cookies\niko@doubleclick[1].txt -> TrackingCookie.Doubleclick : Ignored.
    C:\Documents and Settings\Vieras\Cookies\vieras@doubleclick[1].txt -> TrackingCookie.Doubleclick : Ignored.
    C:\Documents and Settings\Vieras\Cookies\[email protected][1].txt -> TrackingCookie.Hitbox : Ignored.
    C:\Documents and Settings\Vieras\Cookies\vieras@hitbox[2].txt -> TrackingCookie.Hitbox : Ignored.
    C:\Documents and Settings\Niko\Cookies\[email protected][2].txt -> TrackingCookie.Sexcounter : Ignored.
    C:\Documents and Settings\Niko\Cookies\niko@sexlist[2].txt -> TrackingCookie.Sexlist : Ignored.
    C:\Documents and Settings\Niko\Cookies\niko@tradedoubler[1].txt -> TrackingCookie.Tradedoubler : Ignored.
    C:\Documents and Settings\Vieras\Cookies\vieras@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Ignored.
    C:\Documents and Settings\Vieras\Cookies\[email protected][2].txt -> TrackingCookie.Yieldmanager : Ignored.


    ::Report end

    Äänestä

    • Siis sen jälkeenkö ei enää vaihtanut aloitussivua kun fixasit tuon pois?

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =

      Äänestä

    • fix it kirjoitti:

      Siis sen jälkeenkö ei enää vaihtanut aloitussivua kun fixasit tuon pois?

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =

      fixasin sen R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = ..mutta se tulee aina uudelleen takasi. Ruksasin tuon, ja painoin fix nappia.. ja ajoin sen NoLopin läpi vikasieto tilassa, mutta ei se löytäny mitään poistettavaa törkyä.. Kotisivun vaihdon esto taitaaki olla norttonissa.. Kokeilin vaihtaa vieras käyttäjän puolelta kotisivua, ja norttoni hyppäsi kysymään vahvistusta vaihdolle.. Pitäisi vain löytää norttonista joku valikko mistä sen eston saa pois päältä..

      Äänestä

    • fix it kirjoitti:

      Siis sen jälkeenkö ei enää vaihtanut aloitussivua kun fixasit tuon pois?

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =

      fixasin sen R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = ..mutta se tulee aina uudelleen takasi. Ruksasin tuon, ja painoin fix nappia.. ja ajoin sen NoLopin läpi vikasieto tilassa, mutta ei se löytäny mitään poistettavaa törkyä.. Kotisivun vaihdon esto taitaaki olla norttonissa.. Kokeilin vaihtaa vieras käyttäjän puolelta kotisivua, ja norttoni hyppäsi kysymään vahvistusta vaihdolle.. Pitäisi vain löytää norttonista joku valikko mistä sen eston saa pois päältä..

      Äänestä

    • toivoton tapaus kirjoitti:

      fixasin sen R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = ..mutta se tulee aina uudelleen takasi. Ruksasin tuon, ja painoin fix nappia.. ja ajoin sen NoLopin läpi vikasieto tilassa, mutta ei se löytäny mitään poistettavaa törkyä.. Kotisivun vaihdon esto taitaaki olla norttonissa.. Kokeilin vaihtaa vieras käyttäjän puolelta kotisivua, ja norttoni hyppäsi kysymään vahvistusta vaihdolle.. Pitäisi vain löytää norttonista joku valikko mistä sen eston saa pois päältä..

      Ei tuolla rivillä nyt sinänsä merkitystä ole, anna vaan olla se siellä logissa.

      Niin Nortonissa tosiaan taitaa olla kotisivun esto, hyvä kun mainitsit..=)

      Tuolta löytyy Nortonin ohjeita, jos sieltä löytys tuon eston poistamiseen ohjeet: http://service1.symantec.com/SUPPORT/INTER/emeacustserv.nsf/fidocid/20040920153904925?Open&csm=no&src=con_web_fi&tpre=fi

      Jos ei muu auta, koeta niin että ota nettipiuha irti, sammuta Norton. Ohjauspanelista valitse internet asetukset ja muuta sieltä se kotisivu mieleiseksesi. Sitte laita Norton päälle ja nettipiuha takasin.

      Äänestä

    • fix it kirjoitti:

      Ei tuolla rivillä nyt sinänsä merkitystä ole, anna vaan olla se siellä logissa.

      Niin Nortonissa tosiaan taitaa olla kotisivun esto, hyvä kun mainitsit..=)

      Tuolta löytyy Nortonin ohjeita, jos sieltä löytys tuon eston poistamiseen ohjeet: http://service1.symantec.com/SUPPORT/INTER/emeacustserv.nsf/fidocid/20040920153904925?Open&csm=no&src=con_web_fi&tpre=fi

      Jos ei muu auta, koeta niin että ota nettipiuha irti, sammuta Norton. Ohjauspanelista valitse internet asetukset ja muuta sieltä se kotisivu mieleiseksesi. Sitte laita Norton päälle ja nettipiuha takasin.

      Löytyhän se ruksi sieltä nortonin valikoista, nyt voi vaihdella kotisivua.. Kiitokset fix it, oli erittäin suuri apu!:) Olin jo melkein puskea xp:n levyä sisään, ja ottaa siinä samalla päivän urakan =/ Täytyykin palata näille sivuille toisenki kerran, jos tulee joku itselle ylipääsemätön ongelma!

      Äänestä

    • toivoton tapaus kirjoitti:

      Löytyhän se ruksi sieltä nortonin valikoista, nyt voi vaihdella kotisivua.. Kiitokset fix it, oli erittäin suuri apu!:) Olin jo melkein puskea xp:n levyä sisään, ja ottaa siinä samalla päivän urakan =/ Täytyykin palata näille sivuille toisenki kerran, jos tulee joku itselle ylipääsemätön ongelma!

      Ei vielä noin herkästi formatointia kannata tehdä, se on yleensä se viimenen vaihtoehto, mutta tuleehan se kone ainakin kerralla kuntoon silleen..:) Mutta hyvä että kone pelaa taas.

      Äänestä

    Odottaa vastausta

    Näihin keskusteluihin ei ole vielä vastattu. Ole ensimmäinen.

    Luetuimmat keskustelut

    Kommentoi aloitusta

    toivoton tapaus kirjoitti:

    Ongelmana on siis itsestään aukeavat popup mainokset suht tiuhaan tahtii.. Löytyisikö tästä logista jotain vaivaan liittyvää saastaa..?

    Logfile of HijackThis v1.99.1
    Scan saved at 18:55:02, on 15.1.2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\DigitalPersona\Bin\DPWinLct.exe
    C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
    C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
    C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    C:\Program Files\DigitalPersona\Bin\DpHost.exe
    C:\WINDOWS\system32\mgabg.exe
    C:\Program Files\Norton AntiVirus\navapsvc.exe
    C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
    C:\Program Files\DigitalPersona\Bin\DPFUSMgr.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\RunDll32.exe
    C:\Program Files\Common Files\Symantec Shared\ccApp.exe
    C:\WINDOWS\system32\GSICON.EXE
    C:\WINDOWS\system32\dslagent.exe
    C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
    C:\WINDOWS\system32\PDesk\PDesk.exe
    C:\Program Files\Winamp\Winampa.exe
    C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
    C:\Program Files\Microsoft IntelliType Pro\type32.exe
    C:\Program Files\Microsoft IntelliPoint\point32.exe
    C:\Program Files\DigitalPersona\Bin\DPAgnt.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\MSN Messenger\MsnMsgr.Exe
    c:\progra~1\intern~1\iexplore.exe
    C:\Program Files\Skype\Phone\Skype.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\FinePixViewer\QuickDCF.exe
    C:\Program Files\VIA\RAID\raid_tool.exe
    C:\Program Files\Samurize\Client.exe
    C:\Program Files\Rainlendar\Rainlendar.exe
    C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Documents and Settings\****\Omat tiedostot\siivous\Skanneri.exe.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://webmail.saunalahti.fi/wm2/?fail=Sähköpostiosoite&d=1161373530868
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
    O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [GSICONEXE] GSICON.EXE
    O4 - HKLM\..\Run: [DSLAGENTEXE] dslagent.exe USB
    O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
    O4 - HKLM\..\Run: [Matrox Powerdesk] C:\WINDOWS\system32\PDesk\PDesk.exe /Autolaunch
    O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\Winampa.exe"
    O4 - HKLM\..\Run: [AnyDVD] C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
    O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
    O4 - HKLM\..\Run: [type32] "C:\Program Files\Microsoft IntelliType Pro\type32.exe"
    O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
    O4 - HKLM\..\Run: [DPAgnt] C:\Program Files\DigitalPersona\Bin\DPAgnt.exe
    O4 - HKLM\..\Run: [CakeOnlineScrProgram] C:\Documents and Settings\All Users\Application Data\buildbluecakeonline\Memo Dvd.exe
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
    O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
    O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
    O4 - HKCU\..\Run: [deafdupe] C:\DOCUME~1\Niko\APPLIC~1\SECTDE~1\bin bold fork.exe
    O4 - Startup: Client Default.lnk = C:\Program Files\Samurize\Client.exe
    O4 - Startup: Rainlendar.lnk = C:\Program Files\Rainlendar\Rainlendar.exe
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: AutoCAD Startup Accelerator.lnk = C:\Program Files\Common Files\Autodesk Shared\acstart16.exe
    O4 - Global Startup: Exif Launcher.lnk = C:\Program Files\FinePixViewer\QuickDCF.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
    O4 - Global Startup: VIA RAID TOOL.lnk = C:\Program Files\VIA\RAID\raid_tool.exe
    O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
    O9 - Extra button: Ladbrokes Poker - {C2A80015-C447-4dc4-82DD-AED83D6ED57E} - C:\Program Files\ladbrokesMPP\MPPoker.exe
    O9 - Extra button: NordicBet Poker - {E6073F93-9541-4be4-9800-109D378EB99B} - C:\Program Files\nordicbetMPP\MPPoker.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O20 - Winlogon Notify: DPWLN - C:\WINDOWS\system32\DPWLEvHd.dll
    O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
    O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
    O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
    O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
    O23 - Service: Windows XP FUS Manager (DPFUSMgr) - DigitalPersona, Inc. - C:\Program Files\DigitalPersona\Bin\DPFUSMgr.exe
    O23 - Service: Biometric Authentication Service (DpHost) - DigitalPersona, Inc. - C:\Program Files\DigitalPersona\Bin\DpHost.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
    O23 - Service: MGABGEXE - Matrox Graphics Inc. - C:\WINDOWS\system32\mgabg.exe
    O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
    O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
    O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Console\NSCSRVCE.EXE
    O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
    O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
    O23 - Service: SPBBCSvc - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
    O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

    Anonyymi
    5000

    Ilmoita asiaton sisältö

    • Sisältää materiaalia, joka on loukkaavaa, herjaavaa, rasistista, uhkailevaa tai ahdistelevaa.

    • Materiaali sisältää nimiä, yhteystietoja tai muita henkilökohtaisia tietoja. Julkisuuden henkilöistä, julkisissa viroissa toimivista ihmisistä sekä yritysten vastuuhenkilöistä saa keskustella työhön liittyen. Myös yksityiselämään liittyvistä asioista voi keskustella siltä osin, kuin niistä on julkisesti kerrottu.

    • Sisältää lapsille haitallista tai heiltä kiellettyä materiaalia. Seksuaalinen sisältö on sallittua aiheeseen tarkoitetuilla palstoilla, joiden ikäraja on 18 vuotta.

    • Lainvastaista sisältöä voi olla mm. yksityiselämää loukkaavan tiedon levitys, kiihottaminen kansanryhmää vastaan, laiton uhkaaminen, alaikäisiin liittyvä seksuaalinen sisältö/grooming, petokset, identiteettivarkaudet, kunnianloukkaukset ja tekijänoikeusrikkomukset.

    • Sisältö ei liity palstan tai keskusteluketjun aiheeseen.

    • Viesti ei ole suomea tai ruotsia (pl. International Forums), se sisältää mainontaa, se sisältää tekijänoikeuksin suojattua materiaalia, se on massapostitus tai jokin muu syy.

    Jaa keskustelu