Rekisteröidy

Ilmoitukset

Ladataan…

    Näytä kaikki

    kernel32:ssa

    Logfile of HijackThis v1.99.1
    Scan saved at 14:33:22, on 17.6.2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16473)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    c:\program files\common files\logishrd\lvmvfm\LVPrcSrv.exe
    C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
    C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
    C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
    C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
    C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\ZoneLabs\vsmon.exe
    C:\WINDOWS\explorer.exe
    C:\HJT\pommi.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.xxx.net/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
    O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
    O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O11 - Options group: [INTERNATIONAL] International*
    O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) - http://support.euro.dell.com/systemprofiler/SysPro.CAB
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://xxx.spaces.live.com//PhotoUpload/MsnPUpld.cab
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1162101557812
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
    O16 - DPF: {9AA73F41-EC64-489E-9A73-9CD52E528BC4} (ZoneAxRcMgr Class) - http://cdn2.zone.msn.com/binframework/v10/ZAxRcMgr.cab31267.cab
    O16 - DPF: {DAF5D9A2-D982-4671-83E4-0398706A5F6A} (SCEWebLauncherCtl Object) - http://zone.msn.com/bingame/hsol/default/SCEWebLauncher.cab
    O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/controls/msnchat45.cab
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
    O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
    O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
    O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
    O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
    O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\common files\logishrd\lvmvfm\LVPrcSrv.exe
    O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe
    O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

    Kaspersky onlinescanneri sanoo mircin olevan syy?
    -------------------------------------------------------------------------------
    KASPERSKY ONLINE SCANNER REPORT
    Sunday, June 17, 2007 4:02:08 PM
    Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
    Kaspersky Online Scanner version: 5.0.93.0
    Kaspersky Anti-Virus database last update: 17/06/2007
    Kaspersky Anti-Virus database records: 347668
    -------------------------------------------------------------------------------

    Scan Settings:
       Scan using the following antivirus database: extended
       Scan Archives: true
       Scan Mail Bases: true

    Scan Target - My Computer:
       A:\
       C:\
       D:\

    Scan Statistics:
       Total number of scanned objects: 30149
       Number of viruses found: 1
       Number of infected objects: 4
       Number of suspicious objects: 0
       Duration of the scan process: 00:46:57

    Infected Object Name / Virus Name / Last Action
    C:\Documents and Settings\All Users\Application Data\avg7\Log\emc.log   Object is locked   skipped
    C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\avg7log.log   Object is locked   skipped
    C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\avg7log.log.lck   Object is locked   skipped
    C:\Documents and Settings\koti\Application Data\Opera\Opera\mail\indexer\indexer.dat   Object is locked   skipped
    C:\Documents and Settings\koti\Application Data\Opera\Opera\mail\indexer\indexer_2048.dat   Object is locked   skipped
    C:\Documents and Settings\koti\Application Data\Opera\Opera\mail\lexicon\lexicon.dat   Object is locked   skipped
    C:\Documents and Settings\koti\Application Data\Opera\Opera\mail\mailbase.dat   Object is locked   skipped
    C:\Documents and Settings\koti\Cookies\index.dat   Object is locked   skipped
    C:\Documents and Settings\koti\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat   Object is locked   skipped
    C:\Documents and Settings\koti\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG   Object is locked   skipped
    C:\Documents and Settings\koti\Local Settings\Sivuhistoria\History.IE5\index.dat   Object is locked   skipped
    C:\Documents and Settings\koti\Local Settings\Temp\Perflib_Perfdata_6f8.dat   Object is locked   skipped
    C:\Documents and Settings\koti\Local Settings\Temporary Internet Files\Content.IE5\index.dat   Object is locked   skipped
    C:\Documents and Settings\koti\NTUSER.DAT   Object is locked   skipped
    C:\Documents and Settings\koti\NTUSER.DAT.LOG   Object is locked   skipped
    C:\Documents and Settings\koti\Omat tiedostot\mirc621.exe/stream/data0008   Infected: not-a-virus:Client-IRC.Win32.mIRC.621   skipped
    C:\Documents and Settings\koti\Omat tiedostot\mirc621.exe/stream   Infected: not-a-virus:Client-IRC.Win32.mIRC.621   skipped
    C:\Documents and Settings\koti\Omat tiedostot\mirc621.exe   NSIS: infected - 2   skipped
    C:\Documents and Settings\LocalService\Cookies\index.dat   Object is locked   skipped
    C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat   Object is locked   skipped
    C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG   Object is locked   skipped
    C:\Documents and Settings\LocalService\Local Settings\Sivuhistoria\History.IE5\index.dat   Object is locked   skipped
    C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat   Object is locked   skipped
    C:\Documents and Settings\LocalService\NTUSER.DAT   Object is locked   skipped
    C:\Documents and Settings\LocalService\ntuser.dat.LOG   Object is locked   skipped
    C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat   Object is locked   skipped
    C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG   Object is locked   skipped
    C:\Documents and Settings\NetworkService\NTUSER.DAT   Object is locked   skipped
    C:\Documents and Settings\NetworkService\ntuser.dat.LOG   Object is locked   skipped
    C:\Program Files\mIRC\mirc.exe   Infected: not-a-virus:Client-IRC.Win32.mIRC.621   skipped
    C:\System Volume Information\MountPointManagerRemoteDatabase   Object is locked   skipped
    C:\System Volume Information\_restore{476B9ACE-DC16-4BBB-BA67-38832BFA6CF5}\RP290\change.log   Object is locked   skipped
    C:\WINDOWS\Debug\PASSWD.LOG   Object is locked   skipped
    C:\WINDOWS\Internet Logs\fwdbglog.txt   Object is locked   skipped
    C:\WINDOWS\Internet Logs\fwpktlog.txt   Object is locked   skipped
    C:\WINDOWS\Internet Logs\IAMDB.RDB   Object is locked   skipped
    C:\WINDOWS\Internet Logs\KOTITIET-HEEIXH.ldb   Object is locked   skipped
    C:\WINDOWS\Internet Logs\tvDebug.log   Object is locked   skipped
    C:\WINDOWS\SchedLgU.Txt   Object is locked   skipped
    C:\WINDOWS\SoftwareDistribution\ReportingEvents.log   Object is locked   skipped
    C:\WINDOWS\Sti_Trace.log   Object is locked   skipped
    C:\WINDOWS\system32\CatRoot2\edb.log   Object is locked   skipped
    C:\WINDOWS\system32\CatRoot2\tmp.edb   Object is locked   skipped
    C:\WINDOWS\system32\config\AppEvent.Evt   Object is locked   skipped
    C:\WINDOWS\system32\config\default   Object is locked   skipped
    C:\WINDOWS\system32\config\default.LOG   Object is locked   skipped
    C:\WINDOWS\system32\config\Internet.evt   Object is locked   skipped
    C:\WINDOWS\system32\config\SAM   Object is locked   skipped
    C:\WINDOWS\system32\config\SAM.LOG   Object is locked   skipped
    C:\WINDOWS\system32\config\SecEvent.Evt   Object is locked   skipped
    C:\WINDOWS\system32\config\SECURITY   Object is locked   skipped
    C:\WINDOWS\system32\config\SECURITY.LOG   Object is locked   skipped
    C:\WINDOWS\system32\config\software   Object is locked   skipped
    C:\WINDOWS\system32\config\software.LOG   Object is locked   skipped
    C:\WINDOWS\system32\config\SysEvent.Evt   Object is locked   skipped
    C:\WINDOWS\system32\config\system   Object is locked   skipped
    C:\WINDOWS\system32\config\system.LOG   Object is locked   skipped
    C:\WINDOWS\system32\h323log.txt   Object is locked   skipped
    C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR   Object is locked   skipped
    C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP   Object is locked   skipped
    C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER   Object is locked   skipped
    C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP   Object is locked   skipped
    C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP   Object is locked   skipped
    C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA   Object is locked   skipped
    C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP   Object is locked   skipped
    C:\WINDOWS\Temp\Perflib_Perfdata_600.dat   Object is locked   skipped
    C:\WINDOWS\Temp\ZLT05b12.TMP   Object is locked   skipped
    C:\WINDOWS\Temp\ZLT05b19.TMP   Object is locked   skipped
    C:\WINDOWS\wiadebug.log   Object is locked   skipped
    C:\WINDOWS\wiaservc.log   Object is locked   skipped
    C:\WINDOWS\WindowsUpdate.log   Object is locked   skipped

    Scan process completed.

    avg free edition ilmoitti siis system32\kernel32.dll olevan ongelman kohde, pari kertaa avg antispywaren resident shield mennyt itsekseen pois päältä. Nyt avg antispyware sitten on kadonnut tehtäväpalkista kokonaan.
    t.Ninne
    3355
    Äänestä

    Muut lukivat myös

    Vastaukset 3

    Vanhimmat

    Ohjeet tuolla sivulla.
    http://koti.mbnet.fi/pattaya1/escanmwav.htm
    lataa tuosta
    http://www.spywareinfo.dk/download/mwav.exe
    päivitä tuosta
    http://koti.mbnet.fi/pattaya1/lataus/Mwav.bat
    laita täpit merkkauksien mukaan
    http://koti.mbnet.fi/pattaya1/eScan6.jpg

    scannaa

    jos ala luukkuun tulee jotain niin kopioi se näin:
    Käytä komentoa Ctrl A.
    Kopioi rivit komennolla Ctrl C.
    Liitä rivit komennolla Ctrl V.

    Laita virus log tänne.

    ===========

    Lataa tuolta http://www.ccleaner.com/download/builds.aspx
    CCleaner v1.34.407 - Basic, ÄLÄ aseenna Yahoo toolbaria!

    laita asetukset näin:
    Valinnat --> Lisäasetukset --> Ota ruksi pois kohdasta Poista vain yli 48 tuntia vanhat tilapäistiedostot.

    aja Puhdistaja > tutki nappi > aja ccleaner nappi oikea alakulma
    aja Virheet > etsi rekisteri virheitä nappi > Korjaa rekisteri virheet. nappi

    Äänestä

    • File C:\Documents and Settings\koti\Omat tiedostot\mirc621.exe tagged as not-a-virus:Client-IRC.Win32.mIRC.621. No Action Taken.
      File C:\Program Files\mIRC\mirc.exe tagged as not-a-virus:Client-IRC.Win32.mIRC.621. No Action Taken.
      Eli eipä sekään paljoa auta
      t.Ninne

      Äänestä

    • aloittaja kirjoitti:

      File C:\Documents and Settings\koti\Omat tiedostot\mirc621.exe tagged as not-a-virus:Client-IRC.Win32.mIRC.621. No Action Taken.
      File C:\Program Files\mIRC\mirc.exe tagged as not-a-virus:Client-IRC.Win32.mIRC.621. No Action Taken.
      Eli eipä sekään paljoa auta
      t.Ninne

      irc kuuluvia ei ongelmaa

      ================

      Lataa tuolta http://www.ccleaner.com/download/builds.aspx
      CCleaner v1.34.407 - Basic, ÄLÄ aseenna Yahoo toolbaria!

      laita asetukset näin:
      Valinnat --> Lisäasetukset --> Ota ruksi pois kohdasta Poista vain yli 48 tuntia vanhat tilapäistiedostot.

      aja Puhdistaja > tutki nappi > aja ccleaner nappi oikea alakulma
      aja Virheet > etsi rekisteri virheitä nappi > Korjaa rekisteri virheet. nappi

      Äänestä

    Odottaa vastausta

    Näihin keskusteluihin ei ole vielä vastattu. Ole ensimmäinen.

    Luetuimmat keskustelut

    Kommentoi aloitusta

    häikkää? kirjoitti:

    Logfile of HijackThis v1.99.1
    Scan saved at 14:33:22, on 17.6.2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16473)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    c:\program files\common files\logishrd\lvmvfm\LVPrcSrv.exe
    C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
    C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
    C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
    C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
    C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\ZoneLabs\vsmon.exe
    C:\WINDOWS\explorer.exe
    C:\HJT\pommi.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.xxx.net/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
    O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
    O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O11 - Options group: [INTERNATIONAL] International*
    O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) - http://support.euro.dell.com/systemprofiler/SysPro.CAB
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://xxx.spaces.live.com//PhotoUpload/MsnPUpld.cab
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1162101557812
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
    O16 - DPF: {9AA73F41-EC64-489E-9A73-9CD52E528BC4} (ZoneAxRcMgr Class) - http://cdn2.zone.msn.com/binframework/v10/ZAxRcMgr.cab31267.cab
    O16 - DPF: {DAF5D9A2-D982-4671-83E4-0398706A5F6A} (SCEWebLauncherCtl Object) - http://zone.msn.com/bingame/hsol/default/SCEWebLauncher.cab
    O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/controls/msnchat45.cab
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
    O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
    O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
    O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
    O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
    O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
    O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\common files\logishrd\lvmvfm\LVPrcSrv.exe
    O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe
    O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

    Kaspersky onlinescanneri sanoo mircin olevan syy?
    -------------------------------------------------------------------------------
    KASPERSKY ONLINE SCANNER REPORT
    Sunday, June 17, 2007 4:02:08 PM
    Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
    Kaspersky Online Scanner version: 5.0.93.0
    Kaspersky Anti-Virus database last update: 17/06/2007
    Kaspersky Anti-Virus database records: 347668
    -------------------------------------------------------------------------------

    Scan Settings:
       Scan using the following antivirus database: extended
       Scan Archives: true
       Scan Mail Bases: true

    Scan Target - My Computer:
       A:\
       C:\
       D:\

    Scan Statistics:
       Total number of scanned objects: 30149
       Number of viruses found: 1
       Number of infected objects: 4
       Number of suspicious objects: 0
       Duration of the scan process: 00:46:57

    Infected Object Name / Virus Name / Last Action
    C:\Documents and Settings\All Users\Application Data\avg7\Log\emc.log   Object is locked   skipped
    C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\avg7log.log   Object is locked   skipped
    C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\avg7log.log.lck   Object is locked   skipped
    C:\Documents and Settings\koti\Application Data\Opera\Opera\mail\indexer\indexer.dat   Object is locked   skipped
    C:\Documents and Settings\koti\Application Data\Opera\Opera\mail\indexer\indexer_2048.dat   Object is locked   skipped
    C:\Documents and Settings\koti\Application Data\Opera\Opera\mail\lexicon\lexicon.dat   Object is locked   skipped
    C:\Documents and Settings\koti\Application Data\Opera\Opera\mail\mailbase.dat   Object is locked   skipped
    C:\Documents and Settings\koti\Cookies\index.dat   Object is locked   skipped
    C:\Documents and Settings\koti\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat   Object is locked   skipped
    C:\Documents and Settings\koti\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG   Object is locked   skipped
    C:\Documents and Settings\koti\Local Settings\Sivuhistoria\History.IE5\index.dat   Object is locked   skipped
    C:\Documents and Settings\koti\Local Settings\Temp\Perflib_Perfdata_6f8.dat   Object is locked   skipped
    C:\Documents and Settings\koti\Local Settings\Temporary Internet Files\Content.IE5\index.dat   Object is locked   skipped
    C:\Documents and Settings\koti\NTUSER.DAT   Object is locked   skipped
    C:\Documents and Settings\koti\NTUSER.DAT.LOG   Object is locked   skipped
    C:\Documents and Settings\koti\Omat tiedostot\mirc621.exe/stream/data0008   Infected: not-a-virus:Client-IRC.Win32.mIRC.621   skipped
    C:\Documents and Settings\koti\Omat tiedostot\mirc621.exe/stream   Infected: not-a-virus:Client-IRC.Win32.mIRC.621   skipped
    C:\Documents and Settings\koti\Omat tiedostot\mirc621.exe   NSIS: infected - 2   skipped
    C:\Documents and Settings\LocalService\Cookies\index.dat   Object is locked   skipped
    C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat   Object is locked   skipped
    C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG   Object is locked   skipped
    C:\Documents and Settings\LocalService\Local Settings\Sivuhistoria\History.IE5\index.dat   Object is locked   skipped
    C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat   Object is locked   skipped
    C:\Documents and Settings\LocalService\NTUSER.DAT   Object is locked   skipped
    C:\Documents and Settings\LocalService\ntuser.dat.LOG   Object is locked   skipped
    C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat   Object is locked   skipped
    C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG   Object is locked   skipped
    C:\Documents and Settings\NetworkService\NTUSER.DAT   Object is locked   skipped
    C:\Documents and Settings\NetworkService\ntuser.dat.LOG   Object is locked   skipped
    C:\Program Files\mIRC\mirc.exe   Infected: not-a-virus:Client-IRC.Win32.mIRC.621   skipped
    C:\System Volume Information\MountPointManagerRemoteDatabase   Object is locked   skipped
    C:\System Volume Information\_restore{476B9ACE-DC16-4BBB-BA67-38832BFA6CF5}\RP290\change.log   Object is locked   skipped
    C:\WINDOWS\Debug\PASSWD.LOG   Object is locked   skipped
    C:\WINDOWS\Internet Logs\fwdbglog.txt   Object is locked   skipped
    C:\WINDOWS\Internet Logs\fwpktlog.txt   Object is locked   skipped
    C:\WINDOWS\Internet Logs\IAMDB.RDB   Object is locked   skipped
    C:\WINDOWS\Internet Logs\KOTITIET-HEEIXH.ldb   Object is locked   skipped
    C:\WINDOWS\Internet Logs\tvDebug.log   Object is locked   skipped
    C:\WINDOWS\SchedLgU.Txt   Object is locked   skipped
    C:\WINDOWS\SoftwareDistribution\ReportingEvents.log   Object is locked   skipped
    C:\WINDOWS\Sti_Trace.log   Object is locked   skipped
    C:\WINDOWS\system32\CatRoot2\edb.log   Object is locked   skipped
    C:\WINDOWS\system32\CatRoot2\tmp.edb   Object is locked   skipped
    C:\WINDOWS\system32\config\AppEvent.Evt   Object is locked   skipped
    C:\WINDOWS\system32\config\default   Object is locked   skipped
    C:\WINDOWS\system32\config\default.LOG   Object is locked   skipped
    C:\WINDOWS\system32\config\Internet.evt   Object is locked   skipped
    C:\WINDOWS\system32\config\SAM   Object is locked   skipped
    C:\WINDOWS\system32\config\SAM.LOG   Object is locked   skipped
    C:\WINDOWS\system32\config\SecEvent.Evt   Object is locked   skipped
    C:\WINDOWS\system32\config\SECURITY   Object is locked   skipped
    C:\WINDOWS\system32\config\SECURITY.LOG   Object is locked   skipped
    C:\WINDOWS\system32\config\software   Object is locked   skipped
    C:\WINDOWS\system32\config\software.LOG   Object is locked   skipped
    C:\WINDOWS\system32\config\SysEvent.Evt   Object is locked   skipped
    C:\WINDOWS\system32\config\system   Object is locked   skipped
    C:\WINDOWS\system32\config\system.LOG   Object is locked   skipped
    C:\WINDOWS\system32\h323log.txt   Object is locked   skipped
    C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR   Object is locked   skipped
    C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP   Object is locked   skipped
    C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER   Object is locked   skipped
    C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP   Object is locked   skipped
    C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP   Object is locked   skipped
    C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA   Object is locked   skipped
    C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP   Object is locked   skipped
    C:\WINDOWS\Temp\Perflib_Perfdata_600.dat   Object is locked   skipped
    C:\WINDOWS\Temp\ZLT05b12.TMP   Object is locked   skipped
    C:\WINDOWS\Temp\ZLT05b19.TMP   Object is locked   skipped
    C:\WINDOWS\wiadebug.log   Object is locked   skipped
    C:\WINDOWS\wiaservc.log   Object is locked   skipped
    C:\WINDOWS\WindowsUpdate.log   Object is locked   skipped

    Scan process completed.

    avg free edition ilmoitti siis system32\kernel32.dll olevan ongelman kohde, pari kertaa avg antispywaren resident shield mennyt itsekseen pois päältä. Nyt avg antispyware sitten on kadonnut tehtäväpalkista kokonaan.
    t.Ninne

    Anonyymi
    5000

    Ilmoita asiaton sisältö

    • Sisältää materiaalia, joka on loukkaavaa, herjaavaa, rasistista, uhkailevaa tai ahdistelevaa.

    • Materiaali sisältää nimiä, yhteystietoja tai muita henkilökohtaisia tietoja. Julkisuuden henkilöistä, julkisissa viroissa toimivista ihmisistä sekä yritysten vastuuhenkilöistä saa keskustella työhön liittyen. Myös yksityiselämään liittyvistä asioista voi keskustella siltä osin, kuin niistä on julkisesti kerrottu.

    • Sisältää lapsille haitallista tai heiltä kiellettyä materiaalia. Seksuaalinen sisältö on sallittua aiheeseen tarkoitetuilla palstoilla, joiden ikäraja on 18 vuotta.

    • Lainvastaista sisältöä voi olla mm. yksityiselämää loukkaavan tiedon levitys, kiihottaminen kansanryhmää vastaan, laiton uhkaaminen, alaikäisiin liittyvä seksuaalinen sisältö/grooming, petokset, identiteettivarkaudet, kunnianloukkaukset ja tekijänoikeusrikkomukset.

    • Sisältö ei liity palstan tai keskusteluketjun aiheeseen.

    • Viesti ei ole suomea tai ruotsia (pl. International Forums), se sisältää mainontaa, se sisältää tekijänoikeuksin suojattua materiaalia, se on massapostitus tai jokin muu syy.

    Jaa keskustelu