Ongelma on seuraava:
Koneessani on vanhastaam Internet Explorer mutta jo 1,5 vuotta käyttämättä tuliketun tultua koneeseen. Nyt kuitenkin mozillalla selatessa on alkanut aukeilla pop.up -ikkunoita explorerin kautta. Ja tietenkin myös itse kone aivan tukossa.
Toinen (ehkä olematon) huolenaihe ovat kaksi työpöydälle tupsahtanutta pikakuvaketta; toinen nimellä "Windows update" ja toinen nimellä "Help and Support Center". Osoitteeksi pikakuvakkeista ilmoitetaan "explorer", joka vähän jännittää. Kuvakkeet poistettaessa toiset tulevat heti takaisin.
Apuja kiitos!
Koneessani on vanhastaam Internet Explorer mutta jo 1,5 vuotta käyttämättä tuliketun tultua koneeseen. Nyt kuitenkin mozillalla selatessa on alkanut aukeilla pop.up -ikkunoita explorerin kautta. Ja tietenkin myös itse kone aivan tukossa.
Toinen (ehkä olematon) huolenaihe ovat kaksi työpöydälle tupsahtanutta pikakuvaketta; toinen nimellä "Windows update" ja toinen nimellä "Help and Support Center". Osoitteeksi pikakuvakkeista ilmoitetaan "explorer", joka vähän jännittää. Kuvakkeet poistettaessa toiset tulevat heti takaisin.
Apuja kiitos!
Vastaukset 2
Vanhimmat
Scannaa koneesi SuperAntiSpywarella
Lataa SuperAntiSpyware täältä:
(Free Version Home Users)
http://www.superantispyware.com/
* Tuplaklikkaa SUPERAntiSpyware.exe ja asenna se käyttäen normaaleja asetuksia.
* Kuvake ilmestyy työpöydällesi. Tuplaklikkaa sitä aukaistaksesi SuperAntiSpywaren.
* Jos ohjelma pyytää päivittämään tunnisteet, klikkaa "Yes". Jos ei, päivitä tunnisteet ennen scannausta valitsemalla "Check for Updates". (Jos tulee ongelmia tunnisteiden päivityksen kanssa, niin täältä saat ladattua ne manuaalisesti.)
* "Configuration and Preferences" kohdan alla klikkaa Preferences-nappia.
* Klikkaa Scanning Control-välilehteä.
* Scanner Options-kohdan alla varmista, että seuraavat ovat merkattuja (jätä muut merkkaamatta):
o Close browsers before scanning.
o Scan for tracking cookies.
o Terminate memory threats before quarantining.
* Klikkaa "Close"-nappia.
* Päävalikon "Scan for Harmful Software"-kohdan alla klikkaa Scan your computer.
* Varmista, että kaikki asemasi ovat valittuja vasemmalla.
* Oikealla olevan "Complete Scan"-kohdan alta valitse Perform Complete Scan.
* Klikkaa "Next"/"Seuraava" aloittaaksesi scannauksen.
* Kun scannaus on valmis, scannauksen yhteenvetoikkuna aukeaa, josta näet scannauksen tulokset. Klikkaa "OK".
* Varmista, että kaikki ovat merkattuja ja klikkaa "Next".
* Kun "Quarantine and Removal is Complete"-ilmoitus aukeaa, klikkaa "OK" ja sen jälkeen klikkaa "Finish"-nappia palataksesi päävalikkoon.
* Jos sinua pyydetään käynnistämään kone uudelleen, klikkaa "Yes".
* Scannausraportin saamiseksi toimi seuraavasti:
o Avaa SuperAntiSpyware.
o Klikkaa Preferences, Klikkaa Statistics/Logs-välilehteä.
o "Scanner Logs"-kohdan alla tuplaklikkaa SUPERAntiSpyware Scan Log.
o Jos löytyy useampi loki, klikkaa uusinta lokia ja klikkaa View log. Teksti aukeaa muistioon.
o Kopioi lokin sisältö viestiketjuusi (valitse kaikki: Ctrl A, kopioi: Ctrl C ja liitä: Ctrl V)
* Klikkaa Close sammuttaaksesi ohjelman.
Tein puoli tuntia kestäneen skannauksen (työt puskevat päälle) ja tuloksena tällainen:
SUPERAntiSpyware Scan Log
http://www.superantispyware.com
Generated 12/22/2007 at 12:24 PM
Application Version : 3.9.1008
Core Rules Database Version : 3366
Trace Rules Database Version: 1365
Scan type : Quick Scan
Total Scan Time : 00:27:08
Memory items scanned : 380
Memory threats detected : 11
Registry items scanned : 736
Registry threats detected : 135
File items scanned : 16201
File threats detected : 145
Adware.Vundo-Variant/Small
C:\WINDOWS\SYSTEM32\URQPQOL.DLL
C:\WINDOWS\SYSTEM32\URQPQOL.DLL
Software\Microsoft\Windows NT\CurrentVersion\WinLogon\Notify\urqpqol
Unclassified.Unknown Origin/System
C:\WINDOWS\SYSTEM32\DDCYW.DLL
C:\WINDOWS\SYSTEM32\DDCYW.DLL
Unclassified.Unknown Origin
C:\WINDOWS\SMFTAWU\COMMAND.EXE
C:\WINDOWS\SMFTAWU\COMMAND.EXE
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{08FB9690-30FF-4B50-89B4-EF3713569F66}
HKCR\CLSID\{08FB9690-30FF-4B50-89B4-EF3713569F66}
HKCR\CLSID\{08FB9690-30FF-4B50-89B4-EF3713569F66}
HKCR\CLSID\{08FB9690-30FF-4B50-89B4-EF3713569F66}\InProcServer32
HKCR\CLSID\{08FB9690-30FF-4B50-89B4-EF3713569F66}\InProcServer32#ThreadingModel
C:\PROGRAM FILES\MESSENGER\NIPYS83122.DLL
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BBA4C131-E287-4636-A789-CED09610B0BA}
HKCR\CLSID\{BBA4C131-E287-4636-A789-CED09610B0BA}
HKCR\CLSID\{BBA4C131-E287-4636-A789-CED09610B0BA}
HKCR\CLSID\{BBA4C131-E287-4636-A789-CED09610B0BA}\InProcServer32
HKCR\CLSID\{BBA4C131-E287-4636-A789-CED09610B0BA}\InProcServer32#ThreadingModel
C:\PROGRAM FILES\MESSENGER\NIPYS4444.DLL
HKLM\System\ControlSet001\Services\cmdService
HKLM\System\ControlSet003\Services\cmdService
HKLM\System\CurrentControlSet\Services\cmdService
HKCR\CLSID\{11A69AE4-FBED-4832-A2BF-45AF82825583}
HKCR\CLSID\{11A69AE4-FBED-4832-A2BF-45AF82825583}\InprocServer32
HKCR\CLSID\{11A69AE4-FBED-4832-A2BF-45AF82825583}\InprocServer32#ThreadingModel
Adware.eZula
C:\WINDOWS\SYSTEM32\XCYCUEXS.EXE
C:\WINDOWS\SYSTEM32\XCYCUEXS.EXE
Trojan.NetMon/DNSChange
C:\PROGRAM FILES\NETWORK MONITOR\NETMON.EXE
C:\PROGRAM FILES\NETWORK MONITOR\NETMON.EXE
HKLM\SYSTEM\CurrentControlSet\Services\Network Monitor
HKLM\SYSTEM\CurrentControlSet\Services\Network Monitor#Type
HKLM\SYSTEM\CurrentControlSet\Services\Network Monitor#Start
HKLM\SYSTEM\CurrentControlSet\Services\Network Monitor#ErrorControl
HKLM\SYSTEM\CurrentControlSet\Services\Network Monitor#ImagePath
HKLM\SYSTEM\CurrentControlSet\Services\Network Monitor#DisplayName
HKLM\SYSTEM\CurrentControlSet\Services\Network Monitor#ObjectName
HKLM\SYSTEM\CurrentControlSet\Services\Network Monitor\Security
HKLM\SYSTEM\CurrentControlSet\Services\Network Monitor\Security#Security
HKLM\SYSTEM\CurrentControlSet\Services\Network Monitor\Enum
HKLM\SYSTEM\CurrentControlSet\Services\Network Monitor\Enum#0
HKLM\SYSTEM\CurrentControlSet\Services\Network Monitor\Enum#Count
HKLM\SYSTEM\CurrentControlSet\Services\Network Monitor\Enum#NextInstance
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NETWORK_MONITOR
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NETWORK_MONITOR#NextInstance
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NETWORK_MONITOR\0000
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NETWORK_MONITOR\0000#Service
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NETWORK_MONITOR\0000#Legacy
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NETWORK_MONITOR\0000#ConfigFlags
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NETWORK_MONITOR\0000#Class
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NETWORK_MONITOR\0000#ClassGUID
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NETWORK_MONITOR\0000#DeviceDesc
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NETWORK_MONITOR\0000\Control
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_NETWORK_MONITOR\0000\Control#ActiveService
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A394E835-C8D6-4B4B-884B-D2709059F3BE}
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A394E835-C8D6-4B4B-884B-D2709059F3BE}#Contact
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A394E835-C8D6-4B4B-884B-D2709059F3BE}#DisplayName
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A394E835-C8D6-4B4B-884B-D2709059F3BE}#DisplayVersion
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A394E835-C8D6-4B4B-884B-D2709059F3BE}#NoModify
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A394E835-C8D6-4B4B-884B-D2709059F3BE}#NoRemove
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A394E835-C8D6-4B4B-884B-D2709059F3BE}#NoRepair
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A394E835-C8D6-4B4B-884B-D2709059F3BE}#UninstallString
C:\Program Files\Network Monitor
Adware.Adservs
C:\WINDOWS\SMFTAWU\ASAPPSRV.DLL
C:\WINDOWS\SMFTAWU\ASAPPSRV.DLL
C:\WINDOWS\system32\atmtd.dll
C:\WINDOWS\system32\atmtd.dll._
Adware.Vundo-Variant/Small-A
C:\WINDOWS\SYSTEM32\KODSCWXQ.DLL
C:\WINDOWS\SYSTEM32\KODSCWXQ.DLL
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{59617b47-e27c-42f2-abc1-3b65f0b947e3}
HKCR\CLSID\{59617B47-E27C-42F2-ABC1-3B65F0B947E3}
HKCR\CLSID\{59617B47-E27C-42F2-ABC1-3B65F0B947E3}\InprocServer32
HKCR\CLSID\{59617B47-E27C-42F2-ABC1-3B65F0B947E3}\InprocServer32#ThreadingModel
C:\WINDOWS\SYSTEM32\HMRPJXKF.DLL
C:\DOCUMENTS AND SETTINGS\LINDA\LOCAL SETTINGS\TEMP\ACXWNMPV.DLL
C:\DOCUMENTS AND SETTINGS\LINDA\LOCAL SETTINGS\TEMP\NJDHWHOV.DLL
C:\DOCUMENTS AND SETTINGS\LINDA\LOCAL SETTINGS\TEMP\XFHPJKQB.DLL
C:\DOCUMENTS AND SETTINGS\LINDA\LOCAL SETTINGS\TEMP\XPIWPBPQ.DLL
C:\DOCUMENTS AND SETTINGS\LINDA\LOCAL SETTINGS\TEMP\XRJWLQVC.DLL
C:\DOCUMENTS AND SETTINGS\LINDA\LOCAL SETTINGS\TEMP\XYBXRAEK.DLL
Trojan.Downloader-Gen/MROFIN
C:\WINDOWS\MROFINU572.EXE
C:\WINDOWS\MROFINU572.EXE
[runner1] C:\WINDOWS\MROFINU572.EXE
Rogue.AVSystemCare/Component
C:\PROGRAM FILES\COMMON FILES\STORAGEPROTECTOR\STRPMON.EXE
C:\PROGRAM FILES\COMMON FILES\STORAGEPROTECTOR\STRPMON.EXE
Trojan.Net-Winable
C:\PROGRAM FILES\WINABLE\WINABLE.EXE
C:\PROGRAM FILES\WINABLE\WINABLE.EXE
[WinAble] C:\PROGRAM FILES\WINABLE\WINABLE.EXE
Trojan.Downloader-Gen/Insider
C:\PROGRAM FILES\INSIDER\INSIDER.EXE
C:\PROGRAM FILES\INSIDER\INSIDER.EXE
[Insider] C:\PROGRAM FILES\INSIDER\INSIDER.EXE
Rogue.StorageProtector/Trace
[Salestart] C:\PROGRAM FILES\COMMON FILES\STORAGEPROTECTOR\STRPMON.EXE
Adware.Vundo Variant
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2ABAAC42-84DF-4C00-89DA-BC7EB2B0E70B}
HKCR\CLSID\{2ABAAC42-84DF-4C00-89DA-BC7EB2B0E70B}
HKCR\CLSID\{2ABAAC42-84DF-4C00-89DA-BC7EB2B0E70B}\InprocServer32
HKCR\CLSID\{2ABAAC42-84DF-4C00-89DA-BC7EB2B0E70B}\InprocServer32#ThreadingModel
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3FF3F7BA-A1A5-4FE4-AC4E-86F35D41DB4B}
HKCR\CLSID\{3FF3F7BA-A1A5-4FE4-AC4E-86F35D41DB4B}
HKCR\CLSID\{3FF3F7BA-A1A5-4FE4-AC4E-86F35D41DB4B}\InprocServer32
HKCR\CLSID\{3FF3F7BA-A1A5-4FE4-AC4E-86F35D41DB4B}\InprocServer32#ThreadingModel
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A95B2816-1D7E-4561-A202-68C0DE02353A}
HKCR\CLSID\{A95B2816-1D7E-4561-A202-68C0DE02353A}
HKCR\CLSID\{A95B2816-1D7E-4561-A202-68C0DE02353A}\InprocServer32
HKCR\CLSID\{A95B2816-1D7E-4561-A202-68C0DE02353A}\InprocServer32#ThreadingModel
C:\WINDOWS\SYSTEM32\GPHYNGCO.DLL
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks#{2ABAAC42-84DF-4C00-89DA-BC7EB2B0E70B}
HKCR\CLSID\{2ABAAC42-84DF-4C00-89DA-BC7EB2B0E70B}
HKCR\CLSID\{A95B2816-1D7E-4561-A202-68C0DE02353A}
Trojan.ZQuest
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{325601BA-8B28-4EC0-759B-F01E3E425D9D}
HKCR\CLSID\{325601BA-8B28-4EC0-759B-F01E3E425D9D}
HKCR\CLSID\{325601BA-8B28-4EC0-759B-F01E3E425D9D}\InProcServer32
HKCR\CLSID\{325601BA-8B28-4EC0-759B-F01E3E425D9D}\InProcServer32#ThreadingModel
C:\PROGRAM FILES\MSN GAMING ZONE\RYBIMOB439.DLL
Trojan.Downloader-Gen/DDC
HKLM\System\ControlSet001\Services\DomainService
HKLM\System\ControlSet003\Services\DomainService
HKLM\System\CurrentControlSet\Services\DomainService
C:\DOCUMENTS AND SETTINGS\DANI\LOCAL SETTINGS\TEMP\MYVKASJI.EXE
C:\DOCUMENTS AND SETTINGS\LINDA\LOCAL SETTINGS\TEMP\OFHMIUOV.EXE
C:\DOCUMENTS AND SETTINGS\LINDA\LOCAL SETTINGS\TEMP\OYHFCDEJ.EXE
C:\DOCUMENTS AND SETTINGS\LINDA\LOCAL SETTINGS\TEMP\YEKQRHML.EXE
Adware.Tracking Cookie
C:\Documents and Settings\DANI\Cookies\dani@adbrite[2].txt
C:\Documents and Settings\DANI\Cookies\dani@adrevolver[1].txt
C:\Documents and Settings\DANI\Cookies\dani@spyguardpro[2].txt
C:\Documents and Settings\DANI\Cookies\[email protected][1].txt
C:\Documents and Settings\DANI\Cookies\dani@cassava[1].txt
C:\Documents and Settings\DANI\Cookies\dani@mb[1].txt
C:\Documents and Settings\DANI\Cookies\[email protected][1].txt
C:\Documents and Settings\DANI\Cookies\[email protected][1].txt
C:\Documents and Settings\DANI\Cookies\[email protected][1].txt
C:\Documents and Settings\DANI\Cookies\dani@serving-sys[2].txt
C:\Documents and Settings\DANI\Cookies\dani@adtech[2].txt
C:\Documents and Settings\DANI\Cookies\[email protected][1].txt
C:\Documents and Settings\DANI\Cookies\[email protected][1].txt
C:\Documents and Settings\DANI\Cookies\dani@fastclick[2].txt
C:\Documents and Settings\DANI\Cookies\dani@ex=0_[2].txt
C:\Documents and Settings\DANI\Cookies\[email protected][2].txt
C:\Documents and Settings\DANI\Cookies\[email protected][2].txt
C:\Documents and Settings\DANI\Cookies\dani@ex=1_[2].txt
C:\Documents and Settings\DANI\Cookies\dani@888[1].txt
C:\Documents and Settings\DANI\Cookies\[email protected][1].txt
C:\Documents and Settings\DANI\Cookies\[email protected][1].txt
C:\Documents and Settings\DANI\Cookies\[email protected][2].txt
C:\Documents and Settings\DANI\Cookies\[email protected][1].txt
C:\Documents and Settings\DANI\Cookies\dani@tradedoubler[1].txt
C:\Documents and Settings\DANI\Cookies\[email protected][1].txt
C:\Documents and Settings\DANI\Cookies\[email protected][1].txt
C:\Documents and Settings\DANI\Cookies\[email protected][1].txt
C:\Documents and Settings\DANI\Cookies\[email protected][1].txt
C:\Documents and Settings\DANI\Cookies\dani@zedo[2].txt
C:\Documents and Settings\DANI\Cookies\dani@focalex[2].txt
C:\Documents and Settings\DANI\Cookies\dani@atdmt[2].txt
C:\Documents and Settings\DANI\Cookies\dani@partypoker[2].txt
C:\Documents and Settings\DANI\Cookies\[email protected][1].txt
C:\Documents and Settings\DANI\Cookies\dani@288_[2].txt
C:\Documents and Settings\DANI\Cookies\dani@apmebf[1].txt
C:\Documents and Settings\DANI\Cookies\dani@cgi-bin[1].txt
C:\Documents and Settings\DANI\Cookies\dani@doubleclick[1].txt
C:\Documents and Settings\Jamie\Cookies\jamie@adultfriendfinder[1].txt
C:\Documents and Settings\Jamie\Cookies\jamie@serials[1].txt
C:\Documents and Settings\Jamie\Cookies\jamie@starware[2].txt
C:\Documents and Settings\Jamie\Cookies\jamie@Warez-P2P[1].txt
C:\Documents and Settings\Jamie\Cookies\[email protected][2].txt
C:\Documents and Settings\Jamie\Cookies\[email protected][1].txt
C:\Documents and Settings\Jamie\Cookies\[email protected][1].txt
C:\Documents and Settings\KIKKA\Cookies\[email protected][2].txt
C:\Documents and Settings\KIKKA\Cookies\[email protected][1].txt
C:\Documents and Settings\KIKKA\Cookies\[email protected][1].txt
C:\Documents and Settings\KIKKA\Cookies\[email protected][1].txt
C:\Documents and Settings\KIKKA\Cookies\[email protected][1].txt
C:\Documents and Settings\KIKKA\Cookies\[email protected][1].txt
C:\Documents and Settings\KIKKA\Cookies\kikka@adsrevenue[1].txt
C:\Documents and Settings\KIKKA\Cookies\[email protected][1].txt
C:\Documents and Settings\KIKKA\Cookies\[email protected][1].txt
C:\Documents and Settings\KIKKA\Cookies\kikka@partypoker[2].txt
C:\Documents and Settings\KIKKA\Cookies\[email protected][2].txt
C:\Documents and Settings\LINDA\Cookies\linda@2o7[1].txt
C:\Documents and Settings\LINDA\Cookies\[email protected][1].txt
C:\Documents and Settings\LINDA\Cookies\[email protected][1].txt
C:\Documents and Settings\LINDA\Cookies\[email protected][2].txt
C:\Documents and Settings\LINDA\Cookies\[email protected][2].txt
C:\Documents and Settings\LINDA\Cookies\[email protected][1].txt
C:\Documents and Settings\LINDA\Cookies\[email protected][2].txt
C:\Documents and Settings\LINDA\Cookies\linda@adtech[1].txt
C:\Documents and Settings\LINDA\Cookies\linda@advertising[1].txt
C:\Documents and Settings\LINDA\Cookies\linda@atdmt[2].txt
C:\Documents and Settings\LINDA\Cookies\linda@atwola[1].txt
C:\Documents and Settings\LINDA\Cookies\linda@azjmp[1].txt
C:\Documents and Settings\LINDA\Cookies\[email protected][1].txt
C:\Documents and Settings\LINDA\Cookies\[email protected][2].txt
C:\Documents and Settings\LINDA\Cookies\linda@burstnet[2].txt
C:\Documents and Settings\LINDA\Cookies\[email protected][2].txt
C:\Documents and Settings\LINDA\Cookies\linda@casalemedia[1].txt
C:\Documents and Settings\LINDA\Cookies\linda@doubleclick[1].txt
C:\Documents and Settings\LINDA\Cookies\linda@emarketmakers[1].txt
C:\Documents and Settings\LINDA\Cookies\linda@fastclick[2].txt
C:\Documents and Settings\LINDA\Cookies\linda@findallresults[1].txt
C:\Documents and Settings\LINDA\Cookies\[email protected][1].txt
C:\Documents and Settings\LINDA\Cookies\[email protected][2].txt
C:\Documents and Settings\LINDA\Cookies\[email protected][2].txt
C:\Documents and Settings\LINDA\Cookies\linda@mediaonenetwork[1].txt
C:\Documents and Settings\LINDA\Cookies\linda@mediaplayer[2].txt
C:\Documents and Settings\LINDA\Cookies\linda@mediax[2].txt
C:\Documents and Settings\LINDA\Cookies\[email protected][1].txt
C:\Documents and Settings\LINDA\Cookies\linda@optimost[1].txt
C:\Documents and Settings\LINDA\Cookies\linda@realmedia[1].txt
C:\Documents and Settings\LINDA\Cookies\linda@rightmedia[2].txt
C:\Documents and Settings\LINDA\Cookies\linda@screensavers[2].txt
C:\Documents and Settings\LINDA\Cookies\linda@serving-sys[1].txt
C:\Documents and Settings\LINDA\Cookies\[email protected][1].txt
C:\Documents and Settings\LINDA\Cookies\[email protected][2].txt
C:\Documents and Settings\LINDA\Cookies\[email protected][1].txt
C:\Documents and Settings\LINDA\Cookies\[email protected][2].txt
C:\Documents and Settings\LINDA\Cookies\linda@tradedoubler[2].txt
C:\Documents and Settings\LINDA\Cookies\[email protected][1].txt
C:\Documents and Settings\LINDA\Cookies\linda@windowsmedia[2].txt
C:\Documents and Settings\LINDA\Cookies\[email protected][2].txt
C:\Documents and Settings\LINDA\Cookies\[email protected][1].txt
C:\Documents and Settings\LINDA\Cookies\linda@zedo[1].txt
C:\Documents and Settings\OP\Cookies\[email protected][2].txt
C:\Documents and Settings\OP\Cookies\op@adtech[2].txt
C:\Documents and Settings\OP\Cookies\op@doubleclick[1].txt
C:\Documents and Settings\OP\Cookies\[email protected][1].txt
C:\Documents and Settings\OP\Cookies\[email protected][1].txt
C:\Documents and Settings\OP\Cookies\op@hitbox[2].txt
C:\Documents and Settings\OP\Cookies\[email protected][1].txt
C:\Documents and Settings\OP\Cookies\[email protected][1].txt
C:\Documents and Settings\OP\Cookies\op@tradedoubler[2].txt
Adware.ClickSpring
HKLM\Software\ClickSpring
HKLM\Software\ClickSpring#UBWKR
C:\DOCUMENTS AND SETTINGS\DANI\LOCAL SETTINGS\TEMP\SDEXE.EXE
Trojan.NewDotNet
HKU\.DEFAULT\Software\New.net
HKU\S-1-5-21-1214440339-861567501-682003330-1005\Software\New.net
HKU\S-1-5-18\Software\New.net
HKLM\Software\New.net
HKLM\Software\New.net#InstalledVersion
HKLM\Software\New.net#InstalledPath
HKLM\Software\New.net#Tag
HKLM\Software\New.net#DiscardTag
HKLM\Software\New.net#FirstTime
HKLM\Software\New.net#Source
HKLM\Software\New.net#Prt
HKLM\Software\New.net#LSPStatus
HKLM\Software\New.net#NextUpgradeHi
HKLM\Software\New.net#NextUpgradeLo
HKLM\Software\New.net#UpgradeCounter
HKLM\Software\New.net#Search
Trojan.cmdService
HKLM\SYSTEM\CurrentControlSet\Services\cmdService#Type
HKLM\SYSTEM\CurrentControlSet\Services\cmdService#Start
HKLM\SYSTEM\CurrentControlSet\Services\cmdService#ErrorControl
HKLM\SYSTEM\CurrentControlSet\Services\cmdService#ImagePath
HKLM\SYSTEM\CurrentControlSet\Services\cmdService#DisplayName
HKLM\SYSTEM\CurrentControlSet\Services\cmdService#ObjectName
HKLM\SYSTEM\CurrentControlSet\Services\cmdService\Security
HKLM\SYSTEM\CurrentControlSet\Services\cmdService\Security#Security
HKLM\SYSTEM\CurrentControlSet\Services\cmdService\Enum
HKLM\SYSTEM\CurrentControlSet\Services\cmdService\Enum#0
HKLM\SYSTEM\CurrentControlSet\Services\cmdService\Enum#Count
HKLM\SYSTEM\CurrentControlSet\Services\cmdService\Enum#NextInstance
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3877C2CD-F137-4144-BDB2-0A811492F920}
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3877C2CD-F137-4144-BDB2-0A811492F920}#Contact
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3877C2CD-F137-4144-BDB2-0A811492F920}#DisplayName
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3877C2CD-F137-4144-BDB2-0A811492F920}#DisplayVersion
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3877C2CD-F137-4144-BDB2-0A811492F920}#NoModify
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3877C2CD-F137-4144-BDB2-0A811492F920}#NoRemove
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3877C2CD-F137-4144-BDB2-0A811492F920}#NoRepair
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3877C2CD-F137-4144-BDB2-0A811492F920}#UninstallString
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_CMDSERVICE
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_CMDSERVICE#NextInstance
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_CMDSERVICE\0000
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_CMDSERVICE\0000#Service
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_CMDSERVICE\0000#Legacy
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_CMDSERVICE\0000#ConfigFlags
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_CMDSERVICE\0000#Class
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_CMDSERVICE\0000#ClassGUID
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_CMDSERVICE\0000#DeviceDesc
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_CMDSERVICE\0000\Control
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_CMDSERVICE\0000\Control#ActiveService
Trojan.Downloader-Gen/RetAd
HKLM\Software\Microsoft\Windows\CurrentVersion\Run#runner1 [ C:\WINDOWS\mrofinu572.exe 61A847B5BBF728173599284503996897C881250221C8670836AC4FA7C88332017491394662E901F09DDF7618419154310B87659CA5E04E4F70C46E0F2CBC14E4C09D775A67 ]
Malware.LocusSoftware Inc/ConfidentSurf
HKLM\Software\Microsoft\Windows\CurrentVersion\Run#Salestart [ "C:\Program Files\Common Files\StorageProtector\strpmon.exe" dm=http://storageprotector.com ad=http://storageprotector.com sd=http://inspaid.storageprotector.com ]
Malware.LocusSoftware Inc/PCPrivacyTool
HKLM\Software\Purchased Products
HKLM\Software\Purchased Products\System Error Repair
HKLM\Software\Purchased Products\System Error Repair#domain
HKLM\Software\Purchased Products\System Error Repair#pname
HKLM\Software\Purchased Products\System Error Repair#cname
C:\Program Files\Common Files\StorageProtector
Malware.LocusSoftware Inc/BestSellerAntivirus
C:\DOCUMENTS AND SETTINGS\DANI\LOCAL SETTINGS\TEMP\MOFUGCLQ.EXE
C:\DOCUMENTS AND SETTINGS\DANI\LOCAL SETTINGS\TEMP\NI.UGES_0001_N122M2111\SETUP.EXE
C:\DOCUMENTS AND SETTINGS\DANI\LOCAL SETTINGS\TEMP\QRJATYDI.EXE
C:\DOCUMENTS AND SETTINGS\DANI\LOCAL SETTINGS\TEMP\URCLQECD.EXE
C:\DOCUMENTS AND SETTINGS\DANI\LOCAL SETTINGS\TEMP\WINVSNET.EXE
Trojan.Downloader-Gen/SnapSNet
C:\DOCUMENTS AND SETTINGS\DANI\LOCAL SETTINGS\TEMP\SNAPSNET.EXE
Adware.webHancer
C:\DOCUMENTS AND SETTINGS\OP\LOCAL SETTINGS\TEMP\TEMP.FR34C2\PROGRAMS\WHIEHLPR.DLL
En tiedä kevenikö kone mutta kiitoksia jo etukäteen!