Käynistäessä konetta Win XP:n oikealle alas ei ilmesty kuin Avast- ja Zonealarm-kuvake, muttei esim asus probe, nero tai MSN-kuvake. Myös daemoon tools ja pari muuta ohjelmaa eivät näy alapalkissa, jotka normaalista näkyvät käynnistäessä. Joten onkohan koneelle tullut jotain örkkejä vai kiukutteleeko XP omaa huonouttaan? Tässä olisi HjT-logi: Logfile of HijackThis v1.99.1 Scan saved at 12:05:44, on 21.12.2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: H:\WINDOWS\System32\smss.exe H:\WINDOWS\system32\winlogon.exe H:\WINDOWS\system32\services.exe H:\WINDOWS\system32\lsass.exe H:\WINDOWS\system32\Ati2evxx.exe H:\WINDOWS\system32\svchost.exe H:\WINDOWS\System32\svchost.exe H:\Program Files\Ahead\InCD\InCDsrv.exe H:\WINDOWS\system32\spoolsv.exe C:\Photoshop Elements 3\PhotoshopElementsFileAgent.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe H:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE C:\Photoshop Elements 3\PhotoshopElementsDeviceConnect.exe H:\Program Files\Analog Devices\SoundMAX\SMAgent.exe H:\WINDOWS\System32\svchost.exe H:\WINDOWS\system32\ZoneLabs\vsmon.exe H:\WINDOWS\system32\Ati2evxx.exe H:\WINDOWS\Explorer.EXE H:\Program Files\Analog Devices\SoundMAX\SMTray.exe C:\Program Files\ASUS\Probe\AsusProb.exe H:\Program Files\Microsoft Hardware\Keyboard\type32.exe C:\Daemon Tools\daemon.exe H:\WINDOWS\system32\LVCOMSX.EXE C:\Program Files\Microsoft AntiSpyware\gcasServ.exe H:\Program Files\Ahead\InCD\InCD.exe H:\Program Files\lg_fwupdate\fwupdate.exe C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Logitech\Video\LogiTray.exe C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\Logitech\MouseWare\system\em_exec.exe H:\Program Files\MSN Messenger\msnmsgr.exe H:\WINDOWS\system32\ctfmon.exe H:\Program Files\Messenger\msmsgs.exe H:\Program Files\ASUS\ASUS Digital VCR\Schedule.exe C:\Program Files\Logitech\Video\FxSvr2.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe H:\Program Files\iPod\bin\iPodService.exe H:\Program Files\MSN Messenger\msnmsgr.exe H:\Documents and Settings\asdsf\Omat tiedostot\HjT\HijackThis.exe C:\Program Files\Firefox\firefox.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.fi R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.fi R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.hotmail.com/secure/start...422\DCPlusPlus.rar^::DCPlusPlus.rar::^454447; R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit O4 - HKLM\..\Run: [Smapp] H:\Program Files\Analog Devices\SoundMAX\SMTray.exe O4 - HKLM\..\Run: [ASUS Probe] C:\Program Files\ASUS\Probe\AsusProb.exe O4 - HKLM\..\Run: [IntelliType] "H:\Program Files\Microsoft Hardware\Keyboard\type32.exe" O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Daemon Tools\daemon.exe" -lang 1033 O4 - HKLM\..\Run: [PinnacleDriverCheck] H:\WINDOWS\system32\PSDrvCheck.exe -CheckReg O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe O4 - HKLM\..\Run: [LVCOMSX] H:\WINDOWS\system32\LVCOMSX.EXE O4 - HKLM\..\Run: [ATIPTA] "H:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe" O4 - HKLM\..\Run: [Ptipbmf] rundll32.exe ptipbmf.dll,SetWriteCacheMode O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe" O4 - HKLM\..\Run: [InCD] H:\Program Files\Ahead\InCD\InCD.exe O4 - HKLM\..\Run: [LGODDFU] "H:\Program Files\lg_fwupdate\fwupdate.exe" O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKCU\..\Run: [msnmsgr] "H:\Program Files\MSN Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [ctfmon.exe] H:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [MSMSGS] "H:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [ASUSDVCRAgent] H:\Program Files\ASUS\ASUS Digital VCR\Schedule.exe O4 - Global Startup: Adobe Gamma Loader.lnk = H:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1122925485250 O23 - Service: Adobe LM Service - Adobe Systems - H:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: Adobe Active File Monitor (AdobeActiveFileMonitor) - Unknown owner - C:\Photoshop Elements 3\PhotoshopElementsFileAgent.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - H:\WINDOWS\system32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - H:\WINDOWS\system32\ati2sgag.exe O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - H:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: InCD Helper (InCDsrv) - Nero AG - H:\Program Files\Ahead\InCD\InCDsrv.exe O23 - Service: iPodService - Apple Computer, Inc. - H:\Program Files\iPod\bin\iPodService.exe O23 - Service: Photoshop Elements Device Connect (PhotoshopElementsDeviceConnect) - Unknown owner - C:\Photoshop Elements 3\PhotoshopElementsDeviceConnect.exe O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing) O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - H:\Program Files\Analog Devices\SoundMAX\SMAgent.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - H:\WINDOWS\system32\ZoneLabs\vsmon.exe
Sikäli mikäli mä jaksoin tosissaan/osaan enään niin ei tuossa mitään örkkejä näy ja Avast ja Zonealarm on päällä. Mielenrauhan vuoksi voit kokeilla jotain palomuuri testiä. Tuossa pari linkkiä: - Sygate Online Service (Quick-, Steatlth-, Trojan-, TCP-, UDP-, ICMP Scan: http://scan.sygate.com/ - Pc Flank: http://www.pcflank.com/about.htm Kokeile testiviruksella onko Avast! hereillä. Pitäis alkaa hälytys sireenien huutamaan kun klikkaat tätä linkkiä: http://www.eicar.org/download/eicar.com
