Aikaisemman Hijack-lokin myötä sain ohjeeksi ladata SDFix ja NoLop-tiedostot. Tässä niiden lokit Hijac This loki:
--------------------------------------
SDFix: Version 1.95
Run by annika on su 05.08.2007 at 16:30
Microsoft Windows XP [versio 5.1.2600]
Running From: C:\DOCUME~1\annika\TYPYT~1\SDFix
Safe Mode:
Checking Services:
Name:
SysLibrary
ImagePath:
\??\C:\WINDOWS\system32\DefLib.sys
SysLibrary - Deleted
Restoring Windows Registry Values
Restoring Windows Default Hosts File
Restoring Missing Security Center Service
Restoring Missing SharedAccess Service
Rebooting...
Normal Mode:
Checking Files:
Trojan Files Found:
C:\Documents and Settings\annika\new.txt - Deleted
C:\DOCUME~1\annika\LOCALS~1\Temp\winlogon.exe - Deleted
Removing Temp Files...
ADS Check:
C:\WINDOWS
No streams found.
C:\WINDOWS\system32
No streams found.
C:\WINDOWS\system32\svchost.exe
No streams found.
C:\WINDOWS\system32\ntoskrnl.exe
No streams found.
Final Check:
Remaining Services:
------------------
Authorized Application Key Export:
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Messenger\\msmsgs.exe"="C:\\Program Files\\Messenger\\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\\Program Files\\iTunes\\iTunes.exe"="C:\\Program Files\\iTunes\\iTunes.exe:*:Enabled:iTunes"
"C:\\Program Files\\MSN Messenger\\msncall.exe"="C:\\Program Files\\MSN Messenger\\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\LimeWire\\LimeWire.exe"="C:\\Program Files\\LimeWire\\LimeWire.exe:*:Enabled:LimeWire"
"C:\\Program Files\\Skype\\Phone\\Skype.exe"="C:\\Program Files\\Skype\\Phone\\Skype.exe:*:Enabled:Skype"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\MSN Messenger\\msncall.exe"="C:\\Program Files\\MSN Messenger\\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
Remaining Files:
---------------
Backups Folder: - C:\DOCUME~1\annika\TYPYT~1\SDFix\backups\backups.zip
Files with Hidden Attributes:
C:\Documents and Settings\annika\Local Settings\Application Data\Microsoft\Messenger\[email protected]\Sharing Folders\[email protected]\Thumbs.db
C:\Documents and Settings\annika\Local Settings\Application Data\Microsoft\Messenger\[email protected]\Sharing Folders\[email protected]\Thumbs.db
C:\Documents and Settings\annika\Local Settings\Application Data\Microsoft\Messenger\[email protected]\Sharing Folders\[email protected]\Thumbs.db
C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp
C:\Program Files\InterActual\InterActual Player\iti1D3.tmp
Finished
-------------------------------------------
NoLop! Log by Skate_Punk_21
Fix running from: C:\Documents and Settings\annika\Työpöytä
[5.8.2007]
[16:50:01]
---Infection Files Found/Removed---
NO INFECTION FILES FOUND - Cleaning Aborted.
---Listing AppData sub directories---
C:\Documents and Settings\All Users\Application Data\Adobe
C:\Documents and Settings\All Users\Application Data\Apple Computer
C:\Documents and Settings\All Users\Application Data\Cyberlink
C:\Documents and Settings\All Users\Application Data\Downloaded Installations -- EMPTY Directory
C:\Documents and Settings\All Users\Application Data\Microsoft
C:\Documents and Settings\All Users\Application Data\Pc Suite
C:\Documents and Settings\All Users\Application Data\Prism Deploy
C:\Documents and Settings\All Users\Application Data\Sbt
C:\Documents and Settings\All Users\Application Data\Skype -- EMPTY Directory
C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
C:\Documents and Settings\Annika\Application Data\Adobe
C:\Documents and Settings\Annika\Application Data\Adobeum -- EMPTY Directory
C:\Documents and Settings\Annika\Application Data\Apple Computer
C:\Documents and Settings\Annika\Application Data\Cyberlink
C:\Documents and Settings\Annika\Application Data\Datalayer
C:\Documents and Settings\Annika\Application Data\Google
C:\Documents and Settings\Annika\Application Data\Help -- EMPTY Directory
C:\Documents and Settings\Annika\Application Data\Hewlett-packard
C:\Documents and Settings\Annika\Application Data\Identities
C:\Documents and Settings\Annika\Application Data\Irfanview
C:\Documents and Settings\Annika\Application Data\Macromedia
C:\Documents and Settings\Annika\Application Data\Mailfrontier -- EMPTY Directory
C:\Documents and Settings\Annika\Application Data\Microsoft
C:\Documents and Settings\Annika\Application Data\Microsoft Web Folders -- EMPTY Directory
C:\Documents and Settings\Annika\Application Data\Mozilla
C:\Documents and Settings\Annika\Application Data\Nokia
C:\Documents and Settings\Annika\Application Data\Nokia Multimedia Player
C:\Documents and Settings\Annika\Application Data\Pc Suite
C:\Documents and Settings\Annika\Application Data\Real -- EMPTY Directory
C:\Documents and Settings\Annika\Application Data\Sampleview -- EMPTY Directory
C:\Documents and Settings\Annika\Application Data\Skype
C:\Documents and Settings\Annika\Application Data\Sony Corporation
C:\Documents and Settings\Annika\Application Data\Sun
C:\Documents and Settings\Annika\Application Data\Template
C:\Documents and Settings\Default User\Application Data\Identities
C:\Documents and Settings\Default User\Application Data\Microsoft
C:\Documents and Settings\Default User\Application Data\Sampleview -- EMPTY Directory
C:\Documents and Settings\Default User\Application Data\Sun
C:\Documents and Settings\Localservice\Application Data\Microsoft
C:\Documents and Settings\Networkservice\Application Data\Microsoft
-----------------------------------------------
Hijackthis:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:56:50, on 5.8.2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Eset\nod32krn.exe
C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\WINDOWS\zHotkey.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Digital Media Reader\shwiconem.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\TW-IA300C ADSL\CnxDslTb.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Microsoft IntelliPoint\point32.exe
C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Eset\nod32kui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\BigFix\BigFix.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Program Files\Mozilla Firefox\firefox.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fi/0SEFIFI/SAOS01
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?linkid=677
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
R3 - URLSearchHook: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll (file missing)
O2 - BHO: SWEETIE - {1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A} - C:\PROGRA~1\MACROG~1\SWEETI~1\toolbar.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fi\msntb.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fi\msntb.dll
O3 - Toolbar: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [CHotkey] zHotkey.exe
O4 - HKLM\..\Run: [ShowWnd] ShowWnd.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [SunKistEM] C:\Program Files\Digital Media Reader\shwiconem.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [CnxDslTaskBar] "C:\Program Files\\TW-IA300C ADSL\CnxDslTb.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup
O4 - HKLM\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Paikallinen palve')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Verkkopalve')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Picture Motion Browser Media Check Tool.lnk = C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: BigFix.lnk = C:\Program Files\BigFix\BigFix.exe
O4 - Global Startup: hp psc 1000 series.lnk = ?
O4 - Global Startup: hpoddt01.exe.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O12 - Plugin for .png: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin6.dll
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1111398434134
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1132692192187
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PrismXL - New Boundary Technologies, Inc. - C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
--
End of file - 9951 bytes
--------------------------------------
SDFix: Version 1.95
Run by annika on su 05.08.2007 at 16:30
Microsoft Windows XP [versio 5.1.2600]
Running From: C:\DOCUME~1\annika\TYPYT~1\SDFix
Safe Mode:
Checking Services:
Name:
SysLibrary
ImagePath:
\??\C:\WINDOWS\system32\DefLib.sys
SysLibrary - Deleted
Restoring Windows Registry Values
Restoring Windows Default Hosts File
Restoring Missing Security Center Service
Restoring Missing SharedAccess Service
Rebooting...
Normal Mode:
Checking Files:
Trojan Files Found:
C:\Documents and Settings\annika\new.txt - Deleted
C:\DOCUME~1\annika\LOCALS~1\Temp\winlogon.exe - Deleted
Removing Temp Files...
ADS Check:
C:\WINDOWS
No streams found.
C:\WINDOWS\system32
No streams found.
C:\WINDOWS\system32\svchost.exe
No streams found.
C:\WINDOWS\system32\ntoskrnl.exe
No streams found.
Final Check:
Remaining Services:
------------------
Authorized Application Key Export:
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Messenger\\msmsgs.exe"="C:\\Program Files\\Messenger\\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\\Program Files\\iTunes\\iTunes.exe"="C:\\Program Files\\iTunes\\iTunes.exe:*:Enabled:iTunes"
"C:\\Program Files\\MSN Messenger\\msncall.exe"="C:\\Program Files\\MSN Messenger\\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\LimeWire\\LimeWire.exe"="C:\\Program Files\\LimeWire\\LimeWire.exe:*:Enabled:LimeWire"
"C:\\Program Files\\Skype\\Phone\\Skype.exe"="C:\\Program Files\\Skype\\Phone\\Skype.exe:*:Enabled:Skype"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\MSN Messenger\\msncall.exe"="C:\\Program Files\\MSN Messenger\\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
Remaining Files:
---------------
Backups Folder: - C:\DOCUME~1\annika\TYPYT~1\SDFix\backups\backups.zip
Files with Hidden Attributes:
C:\Documents and Settings\annika\Local Settings\Application Data\Microsoft\Messenger\[email protected]\Sharing Folders\[email protected]\Thumbs.db
C:\Documents and Settings\annika\Local Settings\Application Data\Microsoft\Messenger\[email protected]\Sharing Folders\[email protected]\Thumbs.db
C:\Documents and Settings\annika\Local Settings\Application Data\Microsoft\Messenger\[email protected]\Sharing Folders\[email protected]\Thumbs.db
C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp
C:\Program Files\InterActual\InterActual Player\iti1D3.tmp
Finished
-------------------------------------------
NoLop! Log by Skate_Punk_21
Fix running from: C:\Documents and Settings\annika\Työpöytä
[5.8.2007]
[16:50:01]
---Infection Files Found/Removed---
NO INFECTION FILES FOUND - Cleaning Aborted.
---Listing AppData sub directories---
C:\Documents and Settings\All Users\Application Data\Adobe
C:\Documents and Settings\All Users\Application Data\Apple Computer
C:\Documents and Settings\All Users\Application Data\Cyberlink
C:\Documents and Settings\All Users\Application Data\Downloaded Installations -- EMPTY Directory
C:\Documents and Settings\All Users\Application Data\Microsoft
C:\Documents and Settings\All Users\Application Data\Pc Suite
C:\Documents and Settings\All Users\Application Data\Prism Deploy
C:\Documents and Settings\All Users\Application Data\Sbt
C:\Documents and Settings\All Users\Application Data\Skype -- EMPTY Directory
C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
C:\Documents and Settings\Annika\Application Data\Adobe
C:\Documents and Settings\Annika\Application Data\Adobeum -- EMPTY Directory
C:\Documents and Settings\Annika\Application Data\Apple Computer
C:\Documents and Settings\Annika\Application Data\Cyberlink
C:\Documents and Settings\Annika\Application Data\Datalayer
C:\Documents and Settings\Annika\Application Data\Google
C:\Documents and Settings\Annika\Application Data\Help -- EMPTY Directory
C:\Documents and Settings\Annika\Application Data\Hewlett-packard
C:\Documents and Settings\Annika\Application Data\Identities
C:\Documents and Settings\Annika\Application Data\Irfanview
C:\Documents and Settings\Annika\Application Data\Macromedia
C:\Documents and Settings\Annika\Application Data\Mailfrontier -- EMPTY Directory
C:\Documents and Settings\Annika\Application Data\Microsoft
C:\Documents and Settings\Annika\Application Data\Microsoft Web Folders -- EMPTY Directory
C:\Documents and Settings\Annika\Application Data\Mozilla
C:\Documents and Settings\Annika\Application Data\Nokia
C:\Documents and Settings\Annika\Application Data\Nokia Multimedia Player
C:\Documents and Settings\Annika\Application Data\Pc Suite
C:\Documents and Settings\Annika\Application Data\Real -- EMPTY Directory
C:\Documents and Settings\Annika\Application Data\Sampleview -- EMPTY Directory
C:\Documents and Settings\Annika\Application Data\Skype
C:\Documents and Settings\Annika\Application Data\Sony Corporation
C:\Documents and Settings\Annika\Application Data\Sun
C:\Documents and Settings\Annika\Application Data\Template
C:\Documents and Settings\Default User\Application Data\Identities
C:\Documents and Settings\Default User\Application Data\Microsoft
C:\Documents and Settings\Default User\Application Data\Sampleview -- EMPTY Directory
C:\Documents and Settings\Default User\Application Data\Sun
C:\Documents and Settings\Localservice\Application Data\Microsoft
C:\Documents and Settings\Networkservice\Application Data\Microsoft
-----------------------------------------------
Hijackthis:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:56:50, on 5.8.2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Eset\nod32krn.exe
C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\WINDOWS\zHotkey.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Digital Media Reader\shwiconem.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\TW-IA300C ADSL\CnxDslTb.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Microsoft IntelliPoint\point32.exe
C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Eset\nod32kui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\BigFix\BigFix.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Program Files\Mozilla Firefox\firefox.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fi/0SEFIFI/SAOS01
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?linkid=677
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
R3 - URLSearchHook: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll (file missing)
O2 - BHO: SWEETIE - {1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A} - C:\PROGRA~1\MACROG~1\SWEETI~1\toolbar.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fi\msntb.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fi\msntb.dll
O3 - Toolbar: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [CHotkey] zHotkey.exe
O4 - HKLM\..\Run: [ShowWnd] ShowWnd.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [SunKistEM] C:\Program Files\Digital Media Reader\shwiconem.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [CnxDslTaskBar] "C:\Program Files\\TW-IA300C ADSL\CnxDslTb.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup
O4 - HKLM\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Paikallinen palve')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Verkkopalve')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Picture Motion Browser Media Check Tool.lnk = C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: BigFix.lnk = C:\Program Files\BigFix\BigFix.exe
O4 - Global Startup: hp psc 1000 series.lnk = ?
O4 - Global Startup: hpoddt01.exe.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O12 - Plugin for .png: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin6.dll
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1111398434134
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1132692192187
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PrismXL - New Boundary Technologies, Inc. - C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
--
End of file - 9951 bytes
Vastaukset 4
Vanhimmat
Poista lisää poista sovelutuksesta
ewido
Eset
SWEETIE
==============C:\
scannaa hjt:llä merkkaa paina Fix checked
R3 - URLSearchHook: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll
O2 - BHO: SWEETIE - {1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A} - C:\PROGRA~1\MACROG~1\SWEETI~1\toolbar.dll
O3 - Toolbar: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll
O4 - HKLM\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKCU\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
käynnistä > suorita kirjoita alla olevat rivit ja jokaisen rivin jälkeen paina enter
sc stop NOD32krn
sc delete NOD32krn
====================
Poista vikasiedossa kansiot
C:\Program Files\===> ewido Eset Macrogaming Lisäasetukset --> Ota ruksi pois kohdasta Poista vain yli 48 tuntia vanhat tilapäistiedostot.
aja Puhdistaja > tutki nappi > aja ccleaner nappi oikea alakulma
aja Virheet > etsi rekisteri virheitä nappi > Korjaa rekisteri virheet. nappi
=================
• Lataa Dr.Web CureIt työpöydälle:
ftp://ftp.drweb.com/pub/drweb/cureit/drweb-cureit.exe
•
[*]Tuplaklikkaa drweb-cureit.exe ja anna sen tehdä express scan
[*]Se skannaa käynnissä olevat ohjelmat ja jos jotain löytyy, klikkaa yes kun se kysyy haluatko poistaa sen. Tämä on vain lyhyt scan.
[*]Kun scan on valmis, merkkaa asemat, jotka haluat scannata.
[*]Valitse kaikki asemat. Punainen piste osoittaa, mitkä asemat on valittu.
[*]Klikaa vihreää nuolta oikealla ja scan alkaa.
[*]Klikkaa 'Yes to all', jos kysytään haluatko poistaa/siirtää tiedoston.
[*]Kun scan on valmis, katso voitko klikata next-kuvaketta löytyneiden tiedostojen vieressä:
http://users.telenet.be/bluepatchy/miekiemoes/images/check.gif
[*]Jos asia on niin, klikkaa sitä ja sitten klikkaa next-kuvaketta oikealla alhaalla ja valitse Move incurable kuten alla olevalla kuvassa:
http://users.telenet.be/bluepatchy/miekiemoes/images/move.gif
Tämä siirtää sen %userprofile%\DoctorWeb\quarantine-hakemistoon.
[*]Tämän jälkeen klikkaa Dr.Web CureIt-valikossa file ja valitse save report list
[*]Tallenna raportti työpöydälle. Raportin nimi on DrWeb.csv
[*]Sulje Dr.Web Cureit.
[*]Käynnistä kone uudelleen !! Tämä siksi, että käytössä olevat tiedostot poistetaan/siirretään käynnistyksen yhteydessä.
[*]Käynnistyksen jälkeen liitä Dr.Web-lokin, jonka tallensit aiemmin, sisältö seuraavaan vastaukseesi.
Tein tarvittavat toiminnot Anti-Spywarella,CCleanerilla sekä Dr. Webillä. Miltäs nyt näyttää?
Tässä lokeja:
---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------
Created at: 20:02:05 5.8.2007
Scan result:
C:\System Volume Information\_restore{3EE839A4-12F6-4820-BBAD-15621A619E09}\RP667\A0140817.dll -> Adware.BHO : Cleaned.
C:\Documents and Settings\annika\Local Settings\Temporary Internet Files\Content.IE5\N7A6LFF2\sex[1].exe -> Backdoor.IRCBot.acu : Cleaned.
C:\System Volume Information\_restore{3EE839A4-12F6-4820-BBAD-15621A619E09}\RP663\A0140261.exe -> Backdoor.IRCBot.acu : Cleaned.
C:\System Volume Information\_restore{3EE839A4-12F6-4820-BBAD-15621A619E09}\RP663\A0140266.exe -> Backdoor.IRCBot.acu : Cleaned.
C:\System Volume Information\_restore{3EE839A4-12F6-4820-BBAD-15621A619E09}\RP663\A0140276.exe -> Backdoor.IRCBot.acu : Cleaned.
C:\System Volume Information\_restore{3EE839A4-12F6-4820-BBAD-15621A619E09}\RP664\A0140632.exe -> Backdoor.IRCBot.acu : Cleaned.
C:\System Volume Information\_restore{3EE839A4-12F6-4820-BBAD-15621A619E09}\RP664\A0140633.dll -> Backdoor.IRCBot.acu : Cleaned.
:mozilla.199:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.200:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.201:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.202:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.203:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.210:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.217:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.407:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.408:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.587:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.754:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.755:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.768:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.893:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.599:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.600:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.601:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.407:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies-4.txt -> TrackingCookie.Admarketplace : Cleaned.
:mozilla.195:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies-2.txt -> TrackingCookie.Adobe : Cleaned.
:mozilla.271:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies-1.txt -> TrackingCookie.Adobe : Cleaned.
:mozilla.418:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies-4.txt -> TrackingCookie.Adobe : Cleaned.
:mozilla.527:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies-3.txt -> TrackingCookie.Adobe : Cleaned.
:mozilla.100:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.
:mozilla.99:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.
C:\Documents and Settings\annika\Cookies\annika@adtech[2].txt -> TrackingCookie.Adtech : Cleaned.
:mozilla.78:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.79:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.87:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.88:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.89:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
C:\Documents and Settings\annika\Cookies\annika@advertising[2].txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.263:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
C:\Documents and Settings\annika\Cookies\annika@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.444:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.445:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.434:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies-4.txt -> TrackingCookie.Cnn : Cleaned.
:mozilla.461:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies-3.txt -> TrackingCookie.Connextra : Cleaned.
:mozilla.462:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies-3.txt -> TrackingCookie.Connextra : Cleaned.
:mozilla.794:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Cqcounter : Cleaned.
:mozilla.22:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
C:\Documents and Settings\annika\Cookies\annika@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned.
C:\Documents and Settings\annika\Cookies\[email protected][1].txt -> TrackingCookie.Euroclick : Cleaned.
:mozilla.436:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.437:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.173:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies-2.txt -> TrackingCookie.Fortunecity : Cleaned.
:mozilla.174:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies-2.txt -> TrackingCookie.Fortunecity : Cleaned.
:mozilla.380:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Fortunecity : Cleaned.
:mozilla.381:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Fortunecity : Cleaned.
:mozilla.454:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies-3.txt -> TrackingCookie.Fortunecity : Cleaned.
:mozilla.455:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies-3.txt -> TrackingCookie.Fortunecity : Cleaned.
:mozilla.465:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.584:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.670:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.676:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.679:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.690:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.347:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.348:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.351:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.539:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.649:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.826:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.827:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
C:\Documents and Settings\annika\Cookies\[email protected][2].txt -> TrackingCookie.Hitbox : Cleaned.
C:\Documents and Settings\annika\Cookies\annika@hitbox[1].txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.412:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies-3.txt -> TrackingCookie.Idot : Cleaned.
:mozilla.936:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies-4.txt -> TrackingCookie.Idot : Cleaned.
:mozilla.113:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies-3.txt -> TrackingCookie.Imrworldwide : Cleaned.
:mozilla.114:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies-3.txt -> TrackingCookie.Imrworldwide : Cleaned.
:mozilla.150:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies-4.txt -> TrackingCookie.Imrworldwide : Cleaned.
:mozilla.151:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies-4.txt -> TrackingCookie.Imrworldwide : Cleaned.
:mozilla.15:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies-2.txt -> TrackingCookie.Imrworldwide : Cleaned.
:mozilla.16:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies-2.txt -> TrackingCookie.Imrworldwide : Cleaned.
:mozilla.184:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Imrworldwide : Cleaned.
:mozilla.185:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Imrworldwide : Cleaned.
:mozilla.25:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies-1.txt -> TrackingCookie.Imrworldwide : Cleaned.
:mozilla.308:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies-3.txt -> TrackingCookie.Information : Cleaned.
:mozilla.396:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies-4.txt -> TrackingCookie.Information : Cleaned.
:mozilla.748:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Information : Cleaned.
:mozilla.601:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies-4.txt -> TrackingCookie.Live : Cleaned.
:mozilla.602:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies-4.txt -> TrackingCookie.Live : Cleaned.
:mozilla.653:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Live : Cleaned.
:mozilla.654:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Live : Cleaned.
:mozilla.655:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Live : Cleaned.
C:\Documents and Settings\annika\Cookies\[email protected][2].txt -> TrackingCookie.Live : Cleaned.
:mozilla.354:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.799:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Masterstats : Cleaned.
:mozilla.501:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.
C:\Documents and Settings\annika\Cookies\annika@mediaplex[1].txt -> TrackingCookie.Mediaplex : Cleaned.
:mozilla.608:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies-4.txt -> TrackingCookie.Msn : Cleaned.
:mozilla.609:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies-4.txt -> TrackingCookie.Msn : Cleaned.
:mozilla.610:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies-4.txt -> TrackingCookie.Msn : Cleaned.
C:\Documents and Settings\annika\Cookies\[email protected][3].txt -> TrackingCookie.Msn : Cleaned.
:mozilla.411:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies-3.txt -> TrackingCookie.Navrcholu : Cleaned.
C:\Documents and Settings\annika\Cookies\annika@navrcholu[1].txt -> TrackingCookie.Navrcholu : Cleaned.
:mozilla.9:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Netflame : Cleaned.
:mozilla.264:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies-4.txt -> TrackingCookie.Paypal : Cleaned.
:mozilla.358:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Paypal : Cleaned.
:mozilla.364:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies-3.txt -> TrackingCookie.Paypal : Cleaned.
C:\Documents and Settings\annika\Cookies\[email protected][1].txt -> TrackingCookie.Paypal : Cleaned.
:mozilla.592:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.593:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.594:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.595:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.408:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies-4.txt -> TrackingCookie.Real : Cleaned.
:mozilla.409:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies-4.txt -> TrackingCookie.Real : Cleaned.
:mozilla.470:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies-3.txt -> TrackingCookie.Real : Cleaned.
:mozilla.166:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies-4.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.167:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies-4.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.168:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies-4.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.169:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies-4.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.178:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies-3.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.180:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies-3.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.873:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.747:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Revenue : Cleaned.
:mozilla.801:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.802:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
:mozilla.250:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies-2.txt -> TrackingCookie.Skype : Cleaned.
:mozilla.256:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies-3.txt -> TrackingCookie.Skype : Cleaned.
:mozilla.780:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies-4.txt -> TrackingCookie.Skype : Cleaned.
C:\Documents and Settings\annika\Cookies\annika@skype[1].txt -> TrackingCookie.Skype : Cleaned.
:mozilla.310:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.311:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.312:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.313:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.314:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.315:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.316:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.317:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.318:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.319:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.320:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.321:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.322:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.11:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Statistik-gallup : Cleaned.
:mozilla.12:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Statistik-gallup : Cleaned.
:mozilla.14:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies-2.txt -> TrackingCookie.Statistik-gallup : Cleaned.
:mozilla.43:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies-3.txt -> TrackingCookie.Statistik-gallup : Cleaned.
:mozilla.69:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies-4.txt -> TrackingCookie.Statistik-gallup : Cleaned.
:mozilla.6:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies-1.txt -> TrackingCookie.Statistik-gallup : Cleaned.
:mozilla.71:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies-4.txt -> TrackingCookie.Statistik-gallup : Cleaned.
C:\Documents and Settings\annika\Cookies\annika@statistik-gallup[1].txt -> TrackingCookie.Statistik-gallup : Cleaned.
:mozilla.302:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies-1.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.446:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.447:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.448:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.13:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.14:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.15:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.16:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.17:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
C:\Documents and Settings\annika\Cookies\annika@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Cleaned.
:mozilla.811:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.896:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Valuead : Cleaned.
:mozilla.897:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Valuead : Cleaned.
:mozilla.898:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Valuead : Cleaned.
:mozilla.899:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Valuead : Cleaned.
:mozilla.900:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Valuead : Cleaned.
:mozilla.901:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Valuead : Cleaned.
:mozilla.126:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Webtrends : Cleaned.
:mozilla.266:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies-3.txt -> TrackingCookie.Webtrends : Cleaned.
:mozilla.684:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies-4.txt -> TrackingCookie.Webtrends : Cleaned.
C:\Documents and Settings\annika\Cookies\[email protected][2].txt -> TrackingCookie.Webtrends : Cleaned.
:mozilla.412:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.413:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.414:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.360:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies-1.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.361:C:\Documents and Settings\annika\Application Data\Mozilla\Firefox\Profiles\7je6eqnt.default\cookies-1.txt -> TrackingCookie.Zedo : Cleaned.
C:\Documents and Settings\annika\Omat tiedostot\Omat musiikkitiedostot\Ransun & Johannan musaa\01 Track 1.wma -> Trojan.Wimad.a : Cleaned.
C:\Documents and Settings\annika\Omat tiedostot\Omat musiikkitiedostot\Ransun & Johannan musaa\Steven Spielberg gets a hilarious prank phone call.wma -> Trojan.Wimad.a : Cleaned.
::Report end
--------------------------------------------------
Dr. Web:
Process.exe;C:\Documents and Settings\annika\Työpöytä\MSNFix\incl;Tool.Prockill;Incurable.Moved.;
Process.exe;C:\Documents and Settings\annika\Työpöytä\SDFix\apps;Tool.Prockill;Incurable.Moved.;
A0140615.sys;C:\System Volume Information\_restore{3EE839A4-12F6-4820-BBAD-15621A619E09}\RP664;Trojan.NtRootKit.312;Deleted.;
A0140707.exe;C:\System Volume Information\_restore{3EE839A4-12F6-4820-BBAD-15621A619E09}\RP664;Trojan.Spambot.2384;Deleted.;
--------------------------------------------------
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:42:21, on 5.8.2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\WINDOWS\zHotkey.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Digital Media Reader\shwiconem.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\TW-IA300C ADSL\CnxDslTb.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Microsoft IntelliPoint\point32.exe
C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\BigFix\BigFix.exe
C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fi/0SEFIFI/SAOS01
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?linkid=677
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fi\msntb.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fi\msntb.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [CHotkey] zHotkey.exe
O4 - HKLM\..\Run: [ShowWnd] ShowWnd.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [SunKistEM] C:\Program Files\Digital Media Reader\shwiconem.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [CnxDslTaskBar] "C:\Program Files\\TW-IA300C ADSL\CnxDslTb.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Paikallinen palve')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Verkkopalve')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Picture Motion Browser Media Check Tool.lnk = C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: BigFix.lnk = C:\Program Files\BigFix\BigFix.exe
O4 - Global Startup: hp psc 1000 series.lnk = ?
O4 - Global Startup: hpoddt01.exe.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O12 - Plugin for .png: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin6.dll
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1111398434134
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1132692192187
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PrismXL - New Boundary Technologies, Inc. - C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
--
End of file - 9503 bytes
Merkkaa ja paina Fix checked
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll (file missing)
================
Lataa tuolta http://www.ccleaner.com/download/builds.aspx
CCleaner v1.41.544 - Basic, ÄLÄ aseenna Yahoo toolbaria!
laita asetukset näin:
Valinnat --> Lisäasetukset --> Ota ruksi pois kohdasta Poista vain yli 48 tuntia vanhat tilapäistiedostot.
aja Puhdistaja > tutki nappi > aja ccleaner nappi oikea alakulma
aja Virheet > etsi rekisteri virheitä nappi > Korjaa rekisteri virheet. nappi
=================
1. Klikkaa käynnistä > Oma tietokone oikean puoleisella hiiren napilla
2. Valitse ominaisuudet
3. Valitse järjestelmän palauttaminen välilehti
4. Ruksi eteen ¤ poista järjestelmän palauttaminen kaikissa asemissa
5. Paina Käytä
6. Paina ok
7. Sammuta ja käynnistä
8. Ota ruksi pois ¤ poista järjestelmän palauttaminen kaikissa asemissa
9. Käytä ja OK
Kiitos sinulle avusta! Olet ollu suuri apu! :)