b.gen!eldorado

MöttönenPihalla kirjoitti:

Kone tökkii, windows käynnistyy hitaasti ja muutamat toiminnot takkuaa. Tällaisen viruksen löysi CyperDefender ohjelmalla. Avast ja muutamat muut ohjelmat eivät tuota tunnista.

Saiskos apua näihin murheisiin?

Tällaisen listan sain antimalwarella:

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Tietokantaversio: 5952

Windows 5.1.2600 Service Pack 3
Internet Explorer 7.0.5730.13

4.3.2011 19:39:41
mbam-log-2011-03-04 (19-39-41).txt

Tarkistustyyppi: Täysi tarkistus (C:\|D:\|)
Tarkistettuja kohteita: 287404
Kulunut aika: 42 minuutti(a), 24 sekunti(a)

Saastuneita muistiprosesseja: 1
Saastuneita muistimoduuleja: 1
Saastuneita rekisteriavaimia: 5
Saastuneita rekisteriarvoja: 4
Saastuneita rekisterikohteita: 0
Saastuneita kansioita: 0
Saastuneita tiedostoja: 9

Saastuneita muistiprosesseja:
c:\program files\application updater\applicationupdater.exe (PUP.Dealio) -> 524 -> Unloaded process successfully.

Saastuneita muistimoduuleja:
c:\program files\common files\Spigot\wtxpcom\components\widgitoolbarff.dll (Adware.WidgiToolbar) -> Delete on reboot.

Saastuneita rekisteriavaimia:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Application Updater (PUP.Dealio) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{B922D405-6D13-4A2B-AE89-08A030DA4402} (PUP.Dealio) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B922D405-6D13-4A2B-AE89-08A030DA4402} (PUP.Dealio) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{B922D405-6D13-4A2B-AE89-08A030DA4402} (PUP.Dealio) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{E312764E-7706-43F1-8DAB-FCDD2B1E416D} (PUP.Dealio) -> Quarantined and deleted successfully.

Saastuneita rekisteriarvoja:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\PROGRAM FILES\APPLICATION UPDATER\APPLICATIONUPDATER.EXE (PUP.Dealio) -> Value: APPLICATIONUPDATER.EXE -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\PROGRAM FILES\COMMON FILES\SPIGOT\WTXPCOM\COMPONENTS\WIDGITOOLBARFF.DLL (Adware.WidgiToolbar) -> Value: WIDGITOOLBARFF.DLL -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\{B922D405-6D13-4A2B-AE89-08A030DA4402} (PUP.Dealio) -> Value: {B922D405-6D13-4A2B-AE89-08A030DA4402} -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{B922D405-6D13-4A2B-AE89-08A030DA4402} (PUP.Dealio) -> Value: {B922D405-6D13-4A2B-AE89-08A030DA4402} -> Quarantined and deleted successfully.

Saastuneita rekisterikohteita:
(Ei haitallisia kohteita)

Saastuneita kansioita:
(Ei haitallisia kohteita)

Saastuneita tiedostoja:
c:\program files\application updater\applicationupdater.exe (PUP.Dealio) -> Quarantined and deleted successfully.
c:\program files\common files\Spigot\wtxpcom\components\widgitoolbarff.dll (Adware.WidgiToolbar) -> Delete on reboot.
c:\program files\pdfforge toolbar\IE\4.3\pdfforgetoolbarie.dll (PUP.Dealio) -> Quarantined and deleted successfully.
c:\documents and settings\Pojat\local settings\application data\Nokia\nokia ovi player\20090929.log (Extension.Mismatch) -> Quarantined and deleted successfully.
c:\program files\pdfforge toolbar\widgihelper.exe (PUP.Dealio) -> Quarantined and deleted successfully.
c:\system volume information\_restore{d09789d3-21bc-447d-bf25-411c769ea04f}\RP705\A0068296.rbf (PUP.Dealio) -> Quarantined and deleted successfully.
c:\system volume information\_restore{d09789d3-21bc-447d-bf25-411c769ea04f}\RP705\A0068297.rbf (PUP.Dealio) -> Quarantined and deleted successfully.
c:\system volume information\_restore{d09789d3-21bc-447d-bf25-411c769ea04f}\RP705\A0068298.rbf (PUP.Dealio) -> Quarantined and deleted successfully.
c:\system volume information\_restore{d09789d3-21bc-447d-bf25-411c769ea04f}\RP705\A0068312.old (Adware.WidgiToolbar) -> Quarantined and deleted successfully.

kirjoitti:

Anonyymi

Kirjoita kommentti

5000

Lähetä