Rekisteröidy

Ilmoitukset

Ladataan…

    Näytä kaikki

    hjt log - apua?

    Jospa joku osais autella

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 14:31:32, on 1.10.2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Online Video Add-on\icthis.exe
    C:\Program Files\Online Video Add-on\isfmntr.exe
    C:\WINDOWS\system32\VTTimer.exe
    C:\WINDOWS\system32\VTtrayp.exe
    C:\Program Files\VIAudioi\SBADeck\ADeck.exe
    C:\Program Files\D-Link\AirXpert Utility\AirXCFG.exe
    C:\Program Files\F-Secure\Common\FSM32.EXE
    C:\Program Files\Creative\Creative Live! Cam\VideoFX\StartFX.exe
    C:\WINDOWS\V0220Mon.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Online Video Add-on\icmntr.exe
    C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\Program Files\Online Video Add-on\isfmm.exe
    C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
    C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
    C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
    C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
    C:\Program Files\F-Secure\Common\FSMA32.EXE
    C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
    C:\Program Files\F-Secure\Common\FSMB32.EXE
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\F-Secure\BackWeb\7681197\Program\F-Secure Automatic Update.exe
    C:\Program Files\F-Secure\Common\FCH32.EXE
    C:\Program Files\WZCBDL Service\WZCBDLS.exe
    C:\Program Files\F-Secure\Common\FAMEH32.EXE
    C:\Program Files\F-Secure\Anti-Virus\fsqh.exe
    C:\Program Files\F-Secure\Anti-Virus\fsrw.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\Program Files\F-Secure\Common\FNRB32.EXE
    C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
    C:\Program Files\F-Secure\Common\FIH32.EXE
    C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
    C:\PROGRA~1\F-Secure\ANTI-S~1\fsaw.exe
    C:\Program Files\F-Secure\FSGUI\fsguidll.exe
    C:\Program Files\MSN Messenger\usnsvc.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: (no name) - {D579A683-0CC7-4023-BAE7-0544D0D1DA3A} - C:\Program Files\Online Video Add-on\isfmdl.dll
    O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
    O3 - Toolbar: IE Custom Tools - {41F6170D-6AF8-4188-8D92-9DDAB3C71A78} - C:\Program Files\Online Video Add-on\ictmdl.dll
    O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
    O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
    O4 - HKLM\..\Run: [AudioDeck] C:\Program Files\VIAudioi\SBADeck\ADeck.exe 1
    O4 - HKLM\..\Run: [D-Link AirXpert Utility] C:\Program Files\D-Link\AirXpert Utility\AirXCFG.exe
    O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
    O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [AVFX Engine] C:\Program Files\Creative\Creative Live! Cam\VideoFX\StartFX.exe
    O4 - HKLM\..\Run: [V0220Mon.exe] C:\WINDOWS\V0220Mon.exe
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [Creative Live! Cam Manager] "C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe"
    O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - HKLM\..\Policies\Explorer\Run: [some] C:\Program Files\Online Video Add-on\icthis.exe
    O4 - HKLM\..\Policies\Explorer\Run: [start] C:\Program Files\Online Video Add-on\isfmntr.exe
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Paikallinen palve')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Verkkopalve')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
    O4 - Global Startup: F-Secure Automatic Update.lnk = C:\Program Files\F-Secure\BackWeb\7681197\program\F-Secure Automatic Update.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
    O8 - Extra context menu item: &Block this popup - C:\Program Files\F-Secure\Anti-Spyware\blockpopups.htm
    O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
    O9 - Extra button: IE Shield - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure\Anti-Spyware\ieshield.dll
    O9 - Extra 'Tools' menuitem: IE Shield... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure\Anti-Spyware\ieshield.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.mail.live.com/mail/w1/resources/MSNPUpld.cab
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1186056805046
    O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} - http://go.divx.com/plugin/DivXBrowserPlugin.cab
    O22 - SharedTaskScheduler: checkman - {8a96d76c-97fc-42c8-8e68-5613bacef854} - (no file)
    O23 - Service: F-Secure Automatic Update (BackWeb Plug-in - 7681197) - F-Secure Automatic Update - C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
    O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corp. - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
    O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
    O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
    O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
    O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
    O23 - Service: WZCBDL Service (WZCBDLService) - D-Link - C:\Program Files\WZCBDL Service\WZCBDLS.exe

    --
    End of file - 6809 bytes
    12892
    Äänestä

    Muut lukivat myös

    Vastaukset 12

    Vanhimmat

    Lataa SmitfraudFix (c) S!Ri http://siri.urz.free.fr/Fix/SmitfraudFix.zip
    Pura sisältö (kansio nimeltä SmitfraudFix) työpöydällesi:

    Avaa SmitfraudFix kansio ja tupla-klikkaa smitfraudfix.cmd
    Valitse optio #1 - Search kirjoittamalla 1 ja painamalla "Enter"; tekstitiedosto avautuu, joka listaa tarttuneet tiedostot (jos olemassa).
    Postita tämän tekstitiedoston sisältö viestiketjuusi.

    Huomaa : process.exe filun tunnistaa jotkut Anti-virus ohjelmat (AntiVir, Dr.Web, Kaspersky) "Haittakaluna"; se ei ole virus, vaan ohjelma joka pysäyttää prosesseja. A/V ohjelmat eivät pysty tunnistamaan hyvän ja pahan käytön tälläisten ohjelmian väliltä, silloin ne saattavat varoittaa käyttäjää.

    Äänestä

    • SmitFraudFix v2.234

      Scan done at 18:13:13,32, ma 01.10.2007
      Run from C:\Documents and Settings\Sanna\Ty”p”yt„\SmitfraudFix
      OS: Microsoft Windows XP [versio 5.1.2600] - Windows_NT
      The filesystem type is NTFS
      Fix run in normal mode

      »»»»»»»»»»»»»»»»»»»»»»»» Process

      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\spoolsv.exe
      C:\WINDOWS\system32\VTTimer.exe
      C:\WINDOWS\system32\VTtrayp.exe
      C:\Program Files\VIAudioi\SBADeck\ADeck.exe
      C:\Program Files\D-Link\AirXpert Utility\AirXCFG.exe
      C:\Program Files\Creative\Creative Live! Cam\VideoFX\StartFX.exe
      C:\WINDOWS\V0220Mon.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe
      C:\Program Files\Messenger\msmsgs.exe
      C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
      C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
      C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
      C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
      C:\Program Files\F-Secure\Common\FSMA32.EXE
      C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
      C:\Program Files\F-Secure\Common\FSMB32.EXE
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\F-Secure\BackWeb\7681197\Program\F-Secure Automatic Update.exe
      C:\Program Files\F-Secure\Common\FCH32.EXE
      C:\Program Files\WZCBDL Service\WZCBDLS.exe
      C:\Program Files\F-Secure\Common\FAMEH32.EXE
      C:\Program Files\F-Secure\Anti-Virus\fsqh.exe
      C:\Program Files\F-Secure\Anti-Virus\fsrw.exe
      C:\Program Files\MSN Messenger\msnmsgr.exe
      C:\Program Files\F-Secure\Common\FNRB32.EXE
      C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
      C:\Program Files\F-Secure\Common\FIH32.EXE
      C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
      C:\PROGRA~1\F-Secure\ANTI-S~1\fsaw.exe
      C:\Program Files\F-Secure\FSGUI\fsguidll.exe
      C:\Program Files\MSN Messenger\usnsvc.exe
      C:\WINDOWS\system32\wuauclt.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Program Files\Windows Media Player\wmplayer.exe
      C:\WINDOWS\system32\cmd.exe

      »»»»»»»»»»»»»»»»»»»»»»»» hosts


      »»»»»»»»»»»»»»»»»»»»»»»» C:\


      »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS


      »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


      »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


      »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32


      »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles


      »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Sanna


      »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Sanna\Application Data


      »»»»»»»»»»»»»»»»»»»»»»»» Start Menu


      »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\Sanna\Suosikit


      »»»»»»»»»»»»»»»»»»»»»»»» Desktop


      »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

      C:\Program Files\Online Video Add-on\ FOUND !

      »»»»»»»»»»»»»»»»»»»»»»»» Corrupted keys


      »»»»»»»»»»»»»»»»»»»»»»»» Desktop Components

      [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
      "Source"="About:Home"
      "SubscribedURL"="About:Home"
      "FriendlyName"="Nykyinen kotisivu"


      »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
      !!!Attention, following keys are not inevitably infected!!!

      SrchSTS.exe by S!Ri
      Search SharedTaskScheduler's .dll

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
      "{8a96d76c-97fc-42c8-8e68-5613bacef854}"="checkman"



      »»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
      !!!Attention, following keys are not inevitably infected!!!

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
      "AppInit_DLLs"=""


      »»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
      !!!Attention, following keys are not inevitably infected!!!

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
      "System"=""


      »»»»»»»»»»»»»»»»»»»»»»»» Rustock



      »»»»»»»»»»»»»»»»»»»»»»»» DNS

      Description: VIA Compatable Fast Ethernet Adapter - Paketinajoituksen miniportti
      DNS Server Search Order: 212.146.0.10
      DNS Server Search Order: 212.146.30.200
      DNS Server Search Order: 212.146.30.201

      HKLM\SYSTEM\CCS\Services\Tcpip\..\{167F972F-E0B5-41DF-8DD4-A349169698AA}: DhcpNameServer=212.146.0.10 212.146.30.200 212.146.30.201
      HKLM\SYSTEM\CS1\Services\Tcpip\..\{167F972F-E0B5-41DF-8DD4-A349169698AA}: DhcpNameServer=212.146.0.10 212.146.30.200 212.146.30.201
      HKLM\SYSTEM\CS3\Services\Tcpip\..\{167F972F-E0B5-41DF-8DD4-A349169698AA}: DhcpNameServer=212.146.0.10 212.146.30.200 212.146.30.201
      HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=212.146.0.10 212.146.30.200 212.146.30.201
      HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=212.146.0.10 212.146.30.200 212.146.30.201
      HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=212.146.0.10 212.146.30.200 212.146.30.201


      »»»»»»»»»»»»»»»»»»»»»»»» Scanning for wininet.dll infection


      »»»»»»»»»»»»»»»»»»»»»»»» End

      Äänestä

    • ............................. kirjoitti:

      SmitFraudFix v2.234

      Scan done at 18:13:13,32, ma 01.10.2007
      Run from C:\Documents and Settings\Sanna\Ty”p”yt„\SmitfraudFix
      OS: Microsoft Windows XP [versio 5.1.2600] - Windows_NT
      The filesystem type is NTFS
      Fix run in normal mode

      »»»»»»»»»»»»»»»»»»»»»»»» Process

      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\spoolsv.exe
      C:\WINDOWS\system32\VTTimer.exe
      C:\WINDOWS\system32\VTtrayp.exe
      C:\Program Files\VIAudioi\SBADeck\ADeck.exe
      C:\Program Files\D-Link\AirXpert Utility\AirXCFG.exe
      C:\Program Files\Creative\Creative Live! Cam\VideoFX\StartFX.exe
      C:\WINDOWS\V0220Mon.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe
      C:\Program Files\Messenger\msmsgs.exe
      C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
      C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
      C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
      C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
      C:\Program Files\F-Secure\Common\FSMA32.EXE
      C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
      C:\Program Files\F-Secure\Common\FSMB32.EXE
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\F-Secure\BackWeb\7681197\Program\F-Secure Automatic Update.exe
      C:\Program Files\F-Secure\Common\FCH32.EXE
      C:\Program Files\WZCBDL Service\WZCBDLS.exe
      C:\Program Files\F-Secure\Common\FAMEH32.EXE
      C:\Program Files\F-Secure\Anti-Virus\fsqh.exe
      C:\Program Files\F-Secure\Anti-Virus\fsrw.exe
      C:\Program Files\MSN Messenger\msnmsgr.exe
      C:\Program Files\F-Secure\Common\FNRB32.EXE
      C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
      C:\Program Files\F-Secure\Common\FIH32.EXE
      C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
      C:\PROGRA~1\F-Secure\ANTI-S~1\fsaw.exe
      C:\Program Files\F-Secure\FSGUI\fsguidll.exe
      C:\Program Files\MSN Messenger\usnsvc.exe
      C:\WINDOWS\system32\wuauclt.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Program Files\Windows Media Player\wmplayer.exe
      C:\WINDOWS\system32\cmd.exe

      »»»»»»»»»»»»»»»»»»»»»»»» hosts


      »»»»»»»»»»»»»»»»»»»»»»»» C:\


      »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS


      »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


      »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


      »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32


      »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles


      »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Sanna


      »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Sanna\Application Data


      »»»»»»»»»»»»»»»»»»»»»»»» Start Menu


      »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\Sanna\Suosikit


      »»»»»»»»»»»»»»»»»»»»»»»» Desktop


      »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

      C:\Program Files\Online Video Add-on\ FOUND !

      »»»»»»»»»»»»»»»»»»»»»»»» Corrupted keys


      »»»»»»»»»»»»»»»»»»»»»»»» Desktop Components

      [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
      "Source"="About:Home"
      "SubscribedURL"="About:Home"
      "FriendlyName"="Nykyinen kotisivu"


      »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
      !!!Attention, following keys are not inevitably infected!!!

      SrchSTS.exe by S!Ri
      Search SharedTaskScheduler's .dll

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
      "{8a96d76c-97fc-42c8-8e68-5613bacef854}"="checkman"



      »»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
      !!!Attention, following keys are not inevitably infected!!!

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
      "AppInit_DLLs"=""


      »»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
      !!!Attention, following keys are not inevitably infected!!!

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
      "System"=""


      »»»»»»»»»»»»»»»»»»»»»»»» Rustock



      »»»»»»»»»»»»»»»»»»»»»»»» DNS

      Description: VIA Compatable Fast Ethernet Adapter - Paketinajoituksen miniportti
      DNS Server Search Order: 212.146.0.10
      DNS Server Search Order: 212.146.30.200
      DNS Server Search Order: 212.146.30.201

      HKLM\SYSTEM\CCS\Services\Tcpip\..\{167F972F-E0B5-41DF-8DD4-A349169698AA}: DhcpNameServer=212.146.0.10 212.146.30.200 212.146.30.201
      HKLM\SYSTEM\CS1\Services\Tcpip\..\{167F972F-E0B5-41DF-8DD4-A349169698AA}: DhcpNameServer=212.146.0.10 212.146.30.200 212.146.30.201
      HKLM\SYSTEM\CS3\Services\Tcpip\..\{167F972F-E0B5-41DF-8DD4-A349169698AA}: DhcpNameServer=212.146.0.10 212.146.30.200 212.146.30.201
      HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=212.146.0.10 212.146.30.200 212.146.30.201
      HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=212.146.0.10 212.146.30.200 212.146.30.201
      HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=212.146.0.10 212.146.30.200 212.146.30.201


      »»»»»»»»»»»»»»»»»»»»»»»» Scanning for wininet.dll infection


      »»»»»»»»»»»»»»»»»»»»»»»» End

      Printtaa ohjeet ulos.

      Käynnistä koneesi vikasietotilaan ja valitse tavallinen käyttäjätilisi.

      Kun vikasietotilassa, avaa SmitfraudFix kansio ja tupla-klikkaa smitfraudfix.cmd
      Valitse optio #2 - Clean kirjoittamalla 2 ja painamalla "Enter" poistaaksesi tarttuneet tiedostot.

      Sinulta kysytään: "Registry cleaning - Do you want to clean the registry ?"; vastaa "Yes" kirjoittamalla Y ja paina "Enter" poistaaksesi työpöydän taustakuvan ja puhdistaaksesi tarttuneet rekisteriavaimet.

      Työkalu tarkistaa jos wininet.dll on tarttunut. Sinua saatetaan pyytää korvaamaan tarttunut .dll (jos löytyy); vastaa "Yes" kirjoittamalla Y ja painamalla "Enter".

      Työkalun saattaa tarvita käynnistää kone uudelleen; jos ei tee niin, käynnistä normaaliin Windowsiin.
      Tekstitiedosto ilmestyy, puhdistusprosessin jäljiltä; kopioi & liitä tämän raportin tulokset vastaukseesi.
      Raportti löytyy paikalliselta levyltäsi, useimmiten C:\rapport.txt.

      Varoitus : Ajamalla optio 2:n EI-tarttuneessa tietokoneessa, poistaa sinun työpöytäsi taustakuvan.

      Äänestä

    • Poistelen vain kirjoitti:

      Printtaa ohjeet ulos.

      Käynnistä koneesi vikasietotilaan ja valitse tavallinen käyttäjätilisi.

      Kun vikasietotilassa, avaa SmitfraudFix kansio ja tupla-klikkaa smitfraudfix.cmd
      Valitse optio #2 - Clean kirjoittamalla 2 ja painamalla "Enter" poistaaksesi tarttuneet tiedostot.

      Sinulta kysytään: "Registry cleaning - Do you want to clean the registry ?"; vastaa "Yes" kirjoittamalla Y ja paina "Enter" poistaaksesi työpöydän taustakuvan ja puhdistaaksesi tarttuneet rekisteriavaimet.

      Työkalu tarkistaa jos wininet.dll on tarttunut. Sinua saatetaan pyytää korvaamaan tarttunut .dll (jos löytyy); vastaa "Yes" kirjoittamalla Y ja painamalla "Enter".

      Työkalun saattaa tarvita käynnistää kone uudelleen; jos ei tee niin, käynnistä normaaliin Windowsiin.
      Tekstitiedosto ilmestyy, puhdistusprosessin jäljiltä; kopioi & liitä tämän raportin tulokset vastaukseesi.
      Raportti löytyy paikalliselta levyltäsi, useimmiten C:\rapport.txt.

      Varoitus : Ajamalla optio 2:n EI-tarttuneessa tietokoneessa, poistaa sinun työpöytäsi taustakuvan.

      SmitFraudFix v2.234

      Scan done at 1:47:35,26, to 04.10.2007
      Run from C:\Documents and Settings\Sanna\Ty”p”yt„\SmitfraudFix
      OS: Microsoft Windows XP [versio 5.1.2600] - Windows_NT
      The filesystem type is NTFS
      Fix run in safe mode

      »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Before SmitFraudFix
      !!!Attention, following keys are not inevitably infected!!!

      SrchSTS.exe by S!Ri
      Search SharedTaskScheduler's .dll

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
      "{8a96d76c-97fc-42c8-8e68-5613bacef854}"="checkman"


      »»»»»»»»»»»»»»»»»»»»»»»» Killing process


      »»»»»»»»»»»»»»»»»»»»»»»» hosts





      vai pitäisikö sen näin mennä......

      Äänestä

    • kesti hetken mut kirjoitti:

      SmitFraudFix v2.234

      Scan done at 1:47:35,26, to 04.10.2007
      Run from C:\Documents and Settings\Sanna\Ty”p”yt„\SmitfraudFix
      OS: Microsoft Windows XP [versio 5.1.2600] - Windows_NT
      The filesystem type is NTFS
      Fix run in safe mode

      »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Before SmitFraudFix
      !!!Attention, following keys are not inevitably infected!!!

      SrchSTS.exe by S!Ri
      Search SharedTaskScheduler's .dll

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
      "{8a96d76c-97fc-42c8-8e68-5613bacef854}"="checkman"


      »»»»»»»»»»»»»»»»»»»»»»»» Killing process


      »»»»»»»»»»»»»»»»»»»»»»»» hosts





      vai pitäisikö sen näin mennä......

      kokonaisena tuossa

      Äänestä

    • Poistelen vain kirjoitti:

      kokonaisena tuossa

      Eli tässä loki kokonaisena tälläkertaa... ajattelinkin sen näyttävän vähän oudolta



      SmitFraudFix v2.234

      Scan done at 1:47:35,26, to 04.10.2007
      Run from C:\Documents and Settings\Sanna\Ty”p”yt„\SmitfraudFix
      OS: Microsoft Windows XP [versio 5.1.2600] - Windows_NT
      The filesystem type is NTFS
      Fix run in safe mode

      »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Before SmitFraudFix
      !!!Attention, following keys are not inevitably infected!!!

      SrchSTS.exe by S!Ri
      Search SharedTaskScheduler's .dll

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
      "{8a96d76c-97fc-42c8-8e68-5613bacef854}"="checkman"


      »»»»»»»»»»»»»»»»»»»»»»»» Killing process


      »»»»»»»»»»»»»»»»»»»»»»»» hosts




      »»»»»»»»»»»»»»»»»»»»»»»» Winsock2 Fix

      S!Ri's WS2Fix: LSP not Found.
      »»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

      GenericRenosFix by S!Ri


      »»»»»»»»»»»»»»»»»»»»»»»» Deleting infected files

      C:\Program Files\Online Video Add-on\ Deleted

      »»»»»»»»»»»»»»»»»»»»»»»» DNS

      HKLM\SYSTEM\CCS\Services\Tcpip\..\{167F972F-E0B5-41DF-8DD4-A349169698AA}: DhcpNameServer=212.146.0.10 212.146.30.200 212.146.30.201
      HKLM\SYSTEM\CS1\Services\Tcpip\..\{167F972F-E0B5-41DF-8DD4-A349169698AA}: DhcpNameServer=212.146.0.10 212.146.30.200 212.146.30.201
      HKLM\SYSTEM\CS3\Services\Tcpip\..\{167F972F-E0B5-41DF-8DD4-A349169698AA}: DhcpNameServer=212.146.0.10 212.146.30.200 212.146.30.201
      HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=212.146.0.10 212.146.30.200 212.146.30.201
      HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=212.146.0.10 212.146.30.200 212.146.30.201
      HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=212.146.0.10 212.146.30.200 212.146.30.201


      »»»»»»»»»»»»»»»»»»»»»»»» Deleting Temp Files


      »»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
      !!!Attention, following keys are not inevitably infected!!!

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
      "System"=""


      »»»»»»»»»»»»»»»»»»»»»»»» Registry Cleaning

      Registry Cleaning done.

      »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler After SmitFraudFix
      !!!Attention, following keys are not inevitably infected!!!

      SrchSTS.exe by S!Ri
      Search SharedTaskScheduler's .dll

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
      "{8a96d76c-97fc-42c8-8e68-5613bacef854}"="checkman"



      »»»»»»»»»»»»»»»»»»»»»»»» End

      Äänestä

    • eipä niin kirjoitti:

      Eli tässä loki kokonaisena tälläkertaa... ajattelinkin sen näyttävän vähän oudolta



      SmitFraudFix v2.234

      Scan done at 1:47:35,26, to 04.10.2007
      Run from C:\Documents and Settings\Sanna\Ty”p”yt„\SmitfraudFix
      OS: Microsoft Windows XP [versio 5.1.2600] - Windows_NT
      The filesystem type is NTFS
      Fix run in safe mode

      »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Before SmitFraudFix
      !!!Attention, following keys are not inevitably infected!!!

      SrchSTS.exe by S!Ri
      Search SharedTaskScheduler's .dll

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
      "{8a96d76c-97fc-42c8-8e68-5613bacef854}"="checkman"


      »»»»»»»»»»»»»»»»»»»»»»»» Killing process


      »»»»»»»»»»»»»»»»»»»»»»»» hosts




      »»»»»»»»»»»»»»»»»»»»»»»» Winsock2 Fix

      S!Ri's WS2Fix: LSP not Found.
      »»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

      GenericRenosFix by S!Ri


      »»»»»»»»»»»»»»»»»»»»»»»» Deleting infected files

      C:\Program Files\Online Video Add-on\ Deleted

      »»»»»»»»»»»»»»»»»»»»»»»» DNS

      HKLM\SYSTEM\CCS\Services\Tcpip\..\{167F972F-E0B5-41DF-8DD4-A349169698AA}: DhcpNameServer=212.146.0.10 212.146.30.200 212.146.30.201
      HKLM\SYSTEM\CS1\Services\Tcpip\..\{167F972F-E0B5-41DF-8DD4-A349169698AA}: DhcpNameServer=212.146.0.10 212.146.30.200 212.146.30.201
      HKLM\SYSTEM\CS3\Services\Tcpip\..\{167F972F-E0B5-41DF-8DD4-A349169698AA}: DhcpNameServer=212.146.0.10 212.146.30.200 212.146.30.201
      HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=212.146.0.10 212.146.30.200 212.146.30.201
      HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=212.146.0.10 212.146.30.200 212.146.30.201
      HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=212.146.0.10 212.146.30.200 212.146.30.201


      »»»»»»»»»»»»»»»»»»»»»»»» Deleting Temp Files


      »»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
      !!!Attention, following keys are not inevitably infected!!!

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
      "System"=""


      »»»»»»»»»»»»»»»»»»»»»»»» Registry Cleaning

      Registry Cleaning done.

      »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler After SmitFraudFix
      !!!Attention, following keys are not inevitably infected!!!

      SrchSTS.exe by S!Ri
      Search SharedTaskScheduler's .dll

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler]
      "{8a96d76c-97fc-42c8-8e68-5613bacef854}"="checkman"



      »»»»»»»»»»»»»»»»»»»»»»»» End

      Escan
      Ohjeet tuolla sivulla.
      http://koti.mbnet.fi/pattaya1/escanmwav.htm
      lataa tuosta
      http://www.spywareinfo.dk/download/mwav.exe
      päivitä tuosta
      http://koti.mbnet.fi/pattaya1/lataus/Mwav.bat
      laita täpit merkkauksien mukaan
      http://koti.mbnet.fi/pattaya1/eScan6.jpg

      scannaa

      jos ala luukkuun tulee jotain niin kopioi se näin:
      Käytä komentoa Ctrl A.
      Kopioi rivit komennolla Ctrl C.
      Liitä rivit komennolla Ctrl V.

      Laita virus log tänne.

      Äänestä

    • Poistelen vain kirjoitti:

      Escan
      Ohjeet tuolla sivulla.
      http://koti.mbnet.fi/pattaya1/escanmwav.htm
      lataa tuosta
      http://www.spywareinfo.dk/download/mwav.exe
      päivitä tuosta
      http://koti.mbnet.fi/pattaya1/lataus/Mwav.bat
      laita täpit merkkauksien mukaan
      http://koti.mbnet.fi/pattaya1/eScan6.jpg

      scannaa

      jos ala luukkuun tulee jotain niin kopioi se näin:
      Käytä komentoa Ctrl A.
      Kopioi rivit komennolla Ctrl C.
      Liitä rivit komennolla Ctrl V.

      Laita virus log tänne.

      File C:\Documents and Settings\Sanna\Työpöytä\SmitfraudFix\Reboot.exe tagged as not-a-virus:RiskTool.Win32.Reboot.f. No Action Taken.
      File C:\Documents and Settings\Sanna\Työpöytä\SmitfraudFix.exe tagged as not-a-virus:RiskTool.Win32.Reboot.f. No Action Taken.
      File C:\Documents and Settings\Sanna123\Cookies\sanna123@247realmedia[2].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\sanna123@2o7[1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][2].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\sanna123@about[2].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][2].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][2].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][2].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\sanna123@estat[1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\sanna123@fastclick[1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][2].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\sanna123@fortunecity[1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\sanna123@hotlog[2].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\sanna123@indexstats[1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\sanna123@indextools[2].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\sanna123@inet-traffic[1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\sanna123@insightexpressai[1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\sanna123@instadia[1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\sanna123@ivwbox[1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\sanna123@live365[2].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\sanna123@maxserving[2].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][2].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][3].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\sanna123@mediaplex[1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\sanna123@partypoker[1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\sanna123@please[1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\sanna123@pro-market[2].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\sanna123@questionmarket[1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\sanna123@rambler[1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\sanna123@realmedia[2].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\sanna123@real[1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\sanna123@specificclick[1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\sanna123@spylog[2].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][2].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\sanna123@statcounter[1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\sanna123@statistik-gallup[2].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\sanna123@tacoda[2].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\sanna123@targetnet[2].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\sanna123@weborama[2].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\sanna123@webpower[1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\sanna123@webstat[1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][2].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][3].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][5].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\System Volume Information\_restore{CDAEFB49-2B29-4C81-AC2B-336A6B00EADE}\RP70\A0012282.dll tagged as not-a-virus:AdWare.Win32.HotBar.cc. No Action Taken.
      File C:\System Volume Information\_restore{CDAEFB49-2B29-4C81-AC2B-336A6B00EADE}\RP70\A0012293.exe tagged as not-a-virus:AdWare.Win32.180Solutions.bj. No Action Taken.
      File C:\System Volume Information\_restore{CDAEFB49-2B29-4C81-AC2B-336A6B00EADE}\RP70\A0012608.0XE infected by "not-virus:Hoax.Win32.Renos.ky" Virus. Action Taken: File Renamed.
      File C:\System Volume Information\_restore{CDAEFB49-2B29-4C81-AC2B-336A6B00EADE}\RP70\A0012609.0LL infected by "not-virus:Hoax.Win32.Renos.kz" Virus. Action Taken: File Renamed.
      File C:\System Volume Information\_restore{CDAEFB49-2B29-4C81-AC2B-336A6B00EADE}\RP73\A0015074.dll tagged as not-a-virus:AdWare.Win32.Agent.lk. No Action Taken.

      Äänestä

    • tässäpänäitä kirjoitti:

      File C:\Documents and Settings\Sanna\Työpöytä\SmitfraudFix\Reboot.exe tagged as not-a-virus:RiskTool.Win32.Reboot.f. No Action Taken.
      File C:\Documents and Settings\Sanna\Työpöytä\SmitfraudFix.exe tagged as not-a-virus:RiskTool.Win32.Reboot.f. No Action Taken.
      File C:\Documents and Settings\Sanna123\Cookies\sanna123@247realmedia[2].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\sanna123@2o7[1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][2].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\sanna123@about[2].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][2].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][2].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][2].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\sanna123@estat[1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\sanna123@fastclick[1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][2].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\sanna123@fortunecity[1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\sanna123@hotlog[2].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\sanna123@indexstats[1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\sanna123@indextools[2].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\sanna123@inet-traffic[1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\sanna123@insightexpressai[1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\sanna123@instadia[1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\sanna123@ivwbox[1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\sanna123@live365[2].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\sanna123@maxserving[2].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][2].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][3].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\sanna123@mediaplex[1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\sanna123@partypoker[1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\sanna123@please[1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\sanna123@pro-market[2].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\sanna123@questionmarket[1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\sanna123@rambler[1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\sanna123@realmedia[2].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\sanna123@real[1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\sanna123@specificclick[1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\sanna123@spylog[2].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][2].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\sanna123@statcounter[1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\sanna123@statistik-gallup[2].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\sanna123@tacoda[2].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\sanna123@targetnet[2].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\sanna123@weborama[2].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\sanna123@webpower[1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\sanna123@webstat[1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][2].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][3].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][5].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\Documents and Settings\Sanna123\Cookies\[email protected][1].txt infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
      File C:\System Volume Information\_restore{CDAEFB49-2B29-4C81-AC2B-336A6B00EADE}\RP70\A0012282.dll tagged as not-a-virus:AdWare.Win32.HotBar.cc. No Action Taken.
      File C:\System Volume Information\_restore{CDAEFB49-2B29-4C81-AC2B-336A6B00EADE}\RP70\A0012293.exe tagged as not-a-virus:AdWare.Win32.180Solutions.bj. No Action Taken.
      File C:\System Volume Information\_restore{CDAEFB49-2B29-4C81-AC2B-336A6B00EADE}\RP70\A0012608.0XE infected by "not-virus:Hoax.Win32.Renos.ky" Virus. Action Taken: File Renamed.
      File C:\System Volume Information\_restore{CDAEFB49-2B29-4C81-AC2B-336A6B00EADE}\RP70\A0012609.0LL infected by "not-virus:Hoax.Win32.Renos.kz" Virus. Action Taken: File Renamed.
      File C:\System Volume Information\_restore{CDAEFB49-2B29-4C81-AC2B-336A6B00EADE}\RP73\A0015074.dll tagged as not-a-virus:AdWare.Win32.Agent.lk. No Action Taken.

      Lataa tuolta http://www.ccleaner.com/download/builds.aspx
      CCleaner v2.00.500 - Standard Build, ÄLÄ aseenna Yahoo toolbaria!

      laita asetukset näin:
      Valinnat --> Lisäasetukset --> Ota ruksi pois kohdasta Poista vain yli 48 tuntia vanhat tilapäistiedostot.

      aja Puhdistaja > tutki nappi > aja ccleaner nappi oikea alakulma
      aja Virheet > etsi rekisteri virheitä nappi > Korjaa rekisteri virheet. nappi

      ====


      1. Klikkaa käynnistä > Oma tietokone oikean puoleisella hiiren napilla
      2. Valitse ominaisuudet
      3. Valitse järjestelmän palauttaminen välilehti
      4. Ruksi eteen ¤ poista järjestelmän palauttaminen kaikissa asemissa
      5. Paina Käytä
      6. Paina ok
      7. Sammuta ja käynnistä
      8. Ota ruksi pois ¤ poista järjestelmän palauttaminen kaikissa asemissa
      9. Käytä ja OK

      Äänestä

    • Poistelen vain kirjoitti:

      Lataa tuolta http://www.ccleaner.com/download/builds.aspx
      CCleaner v2.00.500 - Standard Build, ÄLÄ aseenna Yahoo toolbaria!

      laita asetukset näin:
      Valinnat --> Lisäasetukset --> Ota ruksi pois kohdasta Poista vain yli 48 tuntia vanhat tilapäistiedostot.

      aja Puhdistaja > tutki nappi > aja ccleaner nappi oikea alakulma
      aja Virheet > etsi rekisteri virheitä nappi > Korjaa rekisteri virheet. nappi

      ====


      1. Klikkaa käynnistä > Oma tietokone oikean puoleisella hiiren napilla
      2. Valitse ominaisuudet
      3. Valitse järjestelmän palauttaminen välilehti
      4. Ruksi eteen ¤ poista järjestelmän palauttaminen kaikissa asemissa
      5. Paina Käytä
      6. Paina ok
      7. Sammuta ja käynnistä
      8. Ota ruksi pois ¤ poista järjestelmän palauttaminen kaikissa asemissa
      9. Käytä ja OK

      Tehty on. Mitäs nyt?

      Äänestä

    • juupshfd kirjoitti:

      Tehty on. Mitäs nyt?

      miten toimii?

      Äänestä

    • Poistelen vain kirjoitti:

      miten toimii?

      toimii, ISO KIITOS SINULLE

      Äänestä

    Odottaa vastausta

    Näihin keskusteluihin ei ole vielä vastattu. Ole ensimmäinen.

    Luetuimmat keskustelut

    Kommentoi aloitusta

    .................. kirjoitti:

    Jospa joku osais autella

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 14:31:32, on 1.10.2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Online Video Add-on\icthis.exe
    C:\Program Files\Online Video Add-on\isfmntr.exe
    C:\WINDOWS\system32\VTTimer.exe
    C:\WINDOWS\system32\VTtrayp.exe
    C:\Program Files\VIAudioi\SBADeck\ADeck.exe
    C:\Program Files\D-Link\AirXpert Utility\AirXCFG.exe
    C:\Program Files\F-Secure\Common\FSM32.EXE
    C:\Program Files\Creative\Creative Live! Cam\VideoFX\StartFX.exe
    C:\WINDOWS\V0220Mon.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Online Video Add-on\icmntr.exe
    C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\Program Files\Online Video Add-on\isfmm.exe
    C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
    C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
    C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
    C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
    C:\Program Files\F-Secure\Common\FSMA32.EXE
    C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
    C:\Program Files\F-Secure\Common\FSMB32.EXE
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\F-Secure\BackWeb\7681197\Program\F-Secure Automatic Update.exe
    C:\Program Files\F-Secure\Common\FCH32.EXE
    C:\Program Files\WZCBDL Service\WZCBDLS.exe
    C:\Program Files\F-Secure\Common\FAMEH32.EXE
    C:\Program Files\F-Secure\Anti-Virus\fsqh.exe
    C:\Program Files\F-Secure\Anti-Virus\fsrw.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\Program Files\F-Secure\Common\FNRB32.EXE
    C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
    C:\Program Files\F-Secure\Common\FIH32.EXE
    C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
    C:\PROGRA~1\F-Secure\ANTI-S~1\fsaw.exe
    C:\Program Files\F-Secure\FSGUI\fsguidll.exe
    C:\Program Files\MSN Messenger\usnsvc.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: (no name) - {D579A683-0CC7-4023-BAE7-0544D0D1DA3A} - C:\Program Files\Online Video Add-on\isfmdl.dll
    O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
    O3 - Toolbar: IE Custom Tools - {41F6170D-6AF8-4188-8D92-9DDAB3C71A78} - C:\Program Files\Online Video Add-on\ictmdl.dll
    O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
    O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
    O4 - HKLM\..\Run: [AudioDeck] C:\Program Files\VIAudioi\SBADeck\ADeck.exe 1
    O4 - HKLM\..\Run: [D-Link AirXpert Utility] C:\Program Files\D-Link\AirXpert Utility\AirXCFG.exe
    O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
    O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [AVFX Engine] C:\Program Files\Creative\Creative Live! Cam\VideoFX\StartFX.exe
    O4 - HKLM\..\Run: [V0220Mon.exe] C:\WINDOWS\V0220Mon.exe
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [Creative Live! Cam Manager] "C:\Program Files\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe"
    O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - HKLM\..\Policies\Explorer\Run: [some] C:\Program Files\Online Video Add-on\icthis.exe
    O4 - HKLM\..\Policies\Explorer\Run: [start] C:\Program Files\Online Video Add-on\isfmntr.exe
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Paikallinen palve')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Verkkopalve')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
    O4 - Global Startup: F-Secure Automatic Update.lnk = C:\Program Files\F-Secure\BackWeb\7681197\program\F-Secure Automatic Update.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
    O8 - Extra context menu item: &Block this popup - C:\Program Files\F-Secure\Anti-Spyware\blockpopups.htm
    O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
    O9 - Extra button: IE Shield - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure\Anti-Spyware\ieshield.dll
    O9 - Extra 'Tools' menuitem: IE Shield... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\F-Secure\Anti-Spyware\ieshield.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.mail.live.com/mail/w1/resources/MSNPUpld.cab
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1186056805046
    O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} - http://go.divx.com/plugin/DivXBrowserPlugin.cab
    O22 - SharedTaskScheduler: checkman - {8a96d76c-97fc-42c8-8e68-5613bacef854} - (no file)
    O23 - Service: F-Secure Automatic Update (BackWeb Plug-in - 7681197) - F-Secure Automatic Update - C:\PROGRA~1\F-Secure\BackWeb\7681197\Program\SERVIC~1.EXE
    O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corp. - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
    O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
    O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\F-Secure\BackWeb\7681197\program\fsbwsys.exe
    O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure\FWES\Program\fsdfwd.exe
    O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE
    O23 - Service: WZCBDL Service (WZCBDLService) - D-Link - C:\Program Files\WZCBDL Service\WZCBDLS.exe

    --
    End of file - 6809 bytes

    Anonyymi
    5000

    Ilmoita asiaton sisältö

    • Sisältää materiaalia, joka on loukkaavaa, herjaavaa, rasistista, uhkailevaa tai ahdistelevaa.

    • Materiaali sisältää nimiä, yhteystietoja tai muita henkilökohtaisia tietoja. Julkisuuden henkilöistä, julkisissa viroissa toimivista ihmisistä sekä yritysten vastuuhenkilöistä saa keskustella työhön liittyen. Myös yksityiselämään liittyvistä asioista voi keskustella siltä osin, kuin niistä on julkisesti kerrottu.

    • Sisältää lapsille haitallista tai heiltä kiellettyä materiaalia. Seksuaalinen sisältö on sallittua aiheeseen tarkoitetuilla palstoilla, joiden ikäraja on 18 vuotta.

    • Lainvastaista sisältöä voi olla mm. yksityiselämää loukkaavan tiedon levitys, kiihottaminen kansanryhmää vastaan, laiton uhkaaminen, alaikäisiin liittyvä seksuaalinen sisältö/grooming, petokset, identiteettivarkaudet, kunnianloukkaukset ja tekijänoikeusrikkomukset.

    • Sisältö ei liity palstan tai keskusteluketjun aiheeseen.

    • Viesti ei ole suomea tai ruotsia (pl. International Forums), se sisältää mainontaa, se sisältää tekijänoikeuksin suojattua materiaalia, se on massapostitus tai jokin muu syy.

    Jaa keskustelu