1. Tämä sivusto käyttää keksejä (cookie). Jatkamalla sivuston käyttämistä hyväksyt keksien käyttämisen. Lue lisää.

Ei saa taustakuvaa!

Viestiketju Virukset ja haittaohjelmat -osiossa. Ketjun avasi gix666 28.12.2005.

  1. gix666

    gix666 Member

    Liittynyt:
    29.06.2005
    Viestejä:
    41
    Kiitokset:
    0
    Pisteet:
    16
    Kone ei ota vastaan mitään taustakuvaa, eikä pysty taustakuva valikkoa selaamaan. Alimpana kuva valikossa on DESKTOP kuvake joku on omituisen näköinen. Eli kokovalikko on jumissa. tällä hetkellä on taustana vain sininenpohja työpöydällä!!

    Tätä toiminta estymistä edelsi jonkinmoinen troijalaisen hyökkäys!
    virus scanneri löytää edelleen niitä koneelta, mutta ei saada poistettua niitä!?
     
    gix666, 28.12.2005
    #1
  2.  
  3. -kemisti-

    -kemisti- Active member

    Liittynyt:
    06.06.2005
    Viestejä:
    6,305
    Kiitokset:
    0
    Pisteet:
    96
    -kemisti-, 28.12.2005
    #2
  4. Jannejt

    Jannejt Moderator Ylläpitäjä

    Liittynyt:
    10.02.2005
    Viestejä:
    5,045
    Kiitokset:
    6
    Pisteet:
    118
    siirretty paremmalle alueelle.
     
    Jannejt, 28.12.2005
    #3
  5. gix666

    gix666 Member

    Liittynyt:
    29.06.2005
    Viestejä:
    41
    Kiitokset:
    0
    Pisteet:
    16
    Logfile of HijackThis v1.99.1
    Scan saved at 21:46:18, on 28.12.2005
    Platform: Windows 2000 SP4 (WinNT 5.00.2195)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINNT\System32\smss.exe
    C:\WINNT\system32\winlogon.exe
    C:\WINNT\system32\services.exe
    C:\WINNT\system32\lsass.exe
    C:\WINNT\system32\svchost.exe
    C:\WINNT\system32\spoolsv.exe
    C:\WINNT\System32\svchost.exe
    C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
    C:\Program Files\Network Associates\VirusScan\Mcshield.exe
    C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
    C:\WINNT\system32\regsvc.exe
    C:\WINNT\system32\MSTask.exe
    C:\WINNT\System32\WBEM\WinMgmt.exe
    C:\WINNT\system32\mspmspsv.exe
    C:\WINNT\system32\svchost.exe
    C:\WINNT\system32\svchost.exe
    C:\WINNT\Explorer.EXE
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\WINNT\System32\igfxtray.exe
    C:\WINNT\System32\hkcmd.exe
    C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
    C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
    C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    C:\Program Files\WebSecureAlert\WebSecureAlert.exe
    C:\WINNT\System32\msdtc.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINNT\mkscd.dll/sp.html#83556%resultposition.net
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINNT\mkscd.dll/sp.html#83556%resultposition.net
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://aineistot.lehtiyhtyma.fi/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
    R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINNT\mkscd.dll/sp.html#83556%resultposition.net
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = www-cache.kolumbus.fi:8080
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 194.188.72.*;isolaatu.vtt.fi;<local>
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    R3 - Default URLSearchHook is missing
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
    O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
    O3 - Toolbar: MSN-työkalurivi - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar\01.01.2607.0\fi\msntb.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
    O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
    O4 - HKLM\..\Run: [IgfxTray] C:\WINNT\System32\igfxtray.exe
    O4 - HKLM\..\Run: [HotKeysCmds] C:\WINNT\System32\hkcmd.exe
    O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
    O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    O4 - HKLM\..\Run: [MW1HelperStartUp] C:\PROGRA~1\MAGICW~1\MW1HEL~1.EXE /partner MW1
    O4 - HKLM\..\Run: [BI1HelperStartUp] C:\PROGRA~1\BEACHI~1\BI1HEL~1.EXE /partner BI1
    O4 - HKLM\..\Run: [sdkqt.exe] C:\WINNT\sdkqt.exe
    O4 - HKLM\..\Run: [B05.tmp] C:\DOCUME~1\painajat\LOCALS~1\Temp\B05.tmp.exe
    O4 - HKLM\..\Run: [B06.tmp] C:\DOCUME~1\painajat\LOCALS~1\Temp\B06.tmp.exe
    O4 - HKLM\..\Run: [winno.exe] C:\WINNT\winno.exe
    O4 - HKCU\..\Run: [Registry Cleaner] "C:\Program Files\Registry Cleaner Trial\regclean.exe"
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
    O4 - HKCU\..\Run: [Windows installer] C:\winstall.exe
    O4 - Global Startup: GStartup.lnk = C:\Program Files\Common Files\GMT\GMT.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
    O4 - Global Startup: WebSecureAlert.lnk = C:\Program Files\WebSecureAlert\WebSecureAlert.exe
    O8 - Extra context menu item: &Google-haku - res://c:\program files\google\GoogleToolbar3.dll/cmsearch.html
    O8 - Extra context menu item: &Käännä englanninkielinen sana - res://c:\program files\google\GoogleToolbar3.dll/cmwordtrans.html
    O8 - Extra context menu item: Linkit taaksepäin - res://c:\program files\google\GoogleToolbar3.dll/cmbacklinks.html
    O8 - Extra context menu item: Samankaltaisia sivuja - res://c:\program files\google\GoogleToolbar3.dll/cmsimilar.html
    O8 - Extra context menu item: Välimuistissa oleva kuvakaappaus sivusta - res://c:\program files\google\GoogleToolbar3.dll/cmcache.html
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
    O16 - DPF: {012F24D4-35B0-11D0-BF2D-0000E8D0D146} (AtlCam Class) - http://193.65.43.90/sns100.ocx
    O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/MediaAccessVerisign/ie/Bridge-c139.cab
    O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
    O16 - DPF: {D719897A-B07A-4C0C-AEA9-9B663A28DFCB} (iTunesDetector Class) - http://ax.phobos.apple.com.edgesuite.net/detection/ITDetector.cab
    O17 - HKLM\System\CCS\Services\Tcpip\..\{6A2EF33A-A472-4EA3-B22F-EE1E53EAD43D}: NameServer = 193.229.0.40,193.229.0.42
    O17 - HKLM\System\CS1\Services\Tcpip\..\{6A2EF33A-A472-4EA3-B22F-EE1E53EAD43D}: NameServer = 193.229.0.40,193.229.0.42
    O17 - HKLM\System\CS2\Services\Tcpip\..\{6A2EF33A-A472-4EA3-B22F-EE1E53EAD43D}: NameServer = 193.229.0.40,193.229.0.42
    O20 - Winlogon Notify: igfxcui - C:\WINNT\SYSTEM32\igfxsrvc.dll
    O20 - Winlogon Notify: nwprovau - C:\WINNT\SYSTEM32\nwprovau.dll
    O23 - Service: Workstation NetLogon Service ( 11Fßä#·ºÄÖ`I) - Unknown owner - C:\WINNT\sysma32.exe (file missing)
    O23 - Service: Loogisen levyn hallinnan valvontapalvelu (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
    O23 - Service: McAfee Framework Service (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
    O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
    O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe



    Siis tämmöinen??
     
    gix666, 28.12.2005
    #4
  6. spertti

    spertti Active member

    Liittynyt:
    01.06.2005
    Viestejä:
    1,222
    Kiitokset:
    0
    Pisteet:
    66
    -kemisti- Laittoi paremmat ohjeet =)
     
    Viimeksi muokattu: 29.12.2005
    spertti, 28.12.2005
    #5
  7. -kemisti-

    -kemisti- Active member

    Liittynyt:
    06.06.2005
    Viestejä:
    6,305
    Kiitokset:
    0
    Pisteet:
    96
    Laita piilotiedostot näkyviin -> http://keskustelu.afterdawn.com/thread_view.cfm/248944

    Hae CWShredder täältä -> http://www.intermute.com/spysubtract/cwshredder_download.html

    Päivitä, mutta älä käytä sitä vielä

    Hae aboutbuster -> http://koti.mbnet.fi/pattaya1/aboutbuster.htm , päivitä se, mutta älä käytä sitäkään vielä.

    Hae Registrar Lite -> http://www.resplendence.com/reglite/ ja asenna se hakemistoon C:\Program Files\RegLite\ .


    Lataa ja asenna Ewido -> http://www.ewido.net/en/download/
    Päivitä se, mutta älä käytä vielä.


    Hae HSfix ->
    http://users.telenet.be/marcvn/regfiles/HSfix.zip .
    Tuplaklikkaa HSfix.zip ja se purkaa itsensä työpöydälle kansioon HSfix
    Älä käytä sitäkään vielä.

    Poista ohjauspaneelin kautta (lisää/poista sovellus):

    Beach Islands Screensaver
    Magic Waterfall Screensaver
    Synchronization Manager
    GStartup ( voi olla myös nimelllä GMT tai vastaava )
    WebSecureAlert

    Käynnistä vikasietotilaan (F8 käynnistyksen yhteydessä)


    Poista seuraavat, jos löytyy:

    C:\WINNT\==>mkscd.dll<==
    C:\PROGRA~1\==>MAGICW~1<==
    C:\PROGRA~1\==>BEACHI~1<==
    C:\DOCUME~1\painajat\LOCALS~1\Temp\==>B05.tmp.exe<==
    C:\DOCUME~1\painajat\LOCALS~1\Temp\==>B06.tmp.exe<==
    C:\WINNT\==>winno.exe<==
    C:\==>winstall.exe<==
    C:\Program Files\Common Files\==>GMT<==
    C:\Program Files\==>WebSecureAlert<==
    C:\WINNT\==>sysma32.exe<==


    Sitten sulje kaikki ohjelmat ja käynnistä hijackthis. Merkkaa nämä ja klikkaa fix checked:

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINNT\mkscd.dll/sp.html#83556%resultposition.net
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINNT\mkscd.dll/sp.html#83556%resultposition.net
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
    R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINNT\mkscd.dll/sp.html#83556%resultposition.net
    R3 - Default URLSearchHook is missing
    O4 - HKLM\..\Run: [MW1HelperStartUp] C:\PROGRA~1\MAGICW~1\MW1HEL~1.EXE /partner MW1
    O4 - HKLM\..\Run: [BI1HelperStartUp] C:\PROGRA~1\BEACHI~1\BI1HEL~1.EXE /partner BI1
    O4 - HKLM\..\Run: [sdkqt.exe] C:\WINNT\sdkqt.exe
    O4 - HKLM\..\Run: [B05.tmp] C:\DOCUME~1\painajat\LOCALS~1\Temp\B05.tmp.exe
    O4 - HKLM\..\Run: [B06.tmp] C:\DOCUME~1\painajat\LOCALS~1\Temp\B06.tmp.exe
    O4 - HKLM\..\Run: [winno.exe] C:\WINNT\winno.exe
    O4 - HKCU\..\Run: [Windows installer] C:\winstall.exe
    O4 - Global Startup: GStartup.lnk = C:\Program Files\Common Files\GMT\GMT.exe
    O4 - Global Startup: WebSecureAlert.lnk = C:\Program Files\WebSecureAlert\WebSecureAlert.exe
    O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/MediaAccessVerisign/ie/Bridge-c...
    O23 - Service: Workstation NetLogon Service ( 11Fßä#·ºÄÖ`I) - Unknown owner - C:\WINNT\sysma32.exe (file missing)

    Sitten sammuta tuo service näin: Käynnistä -> suorita -> services.msc -> ok. Etsi listalta Workstation NetLogon Service, tuplaklikkaa, paina seis ja valitse käynnistymistavaksi "ei käytössä".

    Mene HSfix-kansioon
    Tuplaklikkaa HSfix.reg ja paina Yes.

    SULJE KAIKKI IKKUNAT paitsi CWShredder

    Aja ohjelma painamalla fix ja anna korjata kaikki mitä löytää.

    Skannaa aboutbusterilla kaksi kertaa ja säästä loki.

    Skannaa ewidolla ja anna poistaa, mitä löytyy. Tallenna loki ja postita se tänne.

    Käynnistä kone normaalisti

    Postita hijackthisin, aboutbusterin ja ewidon lokit.


     
    -kemisti-, 29.12.2005
    #6
  8. gix666

    gix666 Member

    Liittynyt:
    29.06.2005
    Viestejä:
    41
    Kiitokset:
    0
    Pisteet:
    16
    Tässä nämä olisi:


    AboutBuster 6.0
    Scan started on [29.12.2005] at [18:19:39]
    -------------------------------------------------------------
    Internet Explorer Instances Terminated!
    HomeSearch Service stopped if present
    -------------------------------------------------------------
    No Ads Found!
    -------------------------------------------------------------
    No Files Found!
    -------------------------------------------------------------
    Scan was COMPLETED SUCCESSFULLY at 18:21:29


    AboutBuster 6.0
    Scan started on [29.12.2005] at [19:07:20]
    -------------------------------------------------------------
    Internet Explorer Instances Terminated!
    HomeSearch Service stopped if present
    -------------------------------------------------------------
    No Ads Found!
    -------------------------------------------------------------
    No Files Found!
    -------------------------------------------------------------
    Scan was ABORTED at 19:07:29

    ------------------------------------------------------------


    Logfile of HijackThis v1.99.1
    Scan saved at 19:08:04, on 29.12.2005
    Platform: Windows 2000 SP4 (WinNT 5.00.2195)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINNT\System32\smss.exe
    C:\WINNT\system32\winlogon.exe
    C:\WINNT\system32\services.exe
    C:\WINNT\system32\lsass.exe
    C:\WINNT\system32\svchost.exe
    C:\WINNT\System32\WBEM\WinMgmt.exe
    C:\WINNT\Explorer.EXE
    C:\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = www-cache.kolumbus.fi:8080
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 194.188.72.*;isolaatu.vtt.fi;<local>
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
    O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
    O3 - Toolbar: MSN-työkalurivi - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar\01.01.2607.0\fi\msntb.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
    O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
    O4 - HKLM\..\Run: [IgfxTray] C:\WINNT\System32\igfxtray.exe
    O4 - HKLM\..\Run: [HotKeysCmds] C:\WINNT\System32\hkcmd.exe
    O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
    O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    O4 - HKCU\..\Run: [Registry Cleaner] "C:\Program Files\Registry Cleaner Trial\regclean.exe"
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
    O8 - Extra context menu item: &Google-haku - res://c:\program files\google\GoogleToolbar3.dll/cmsearch.html
    O8 - Extra context menu item: &Käännä englanninkielinen sana - res://c:\program files\google\GoogleToolbar3.dll/cmwordtrans.html
    O8 - Extra context menu item: Linkit taaksepäin - res://c:\program files\google\GoogleToolbar3.dll/cmbacklinks.html
    O8 - Extra context menu item: Samankaltaisia sivuja - res://c:\program files\google\GoogleToolbar3.dll/cmsimilar.html
    O8 - Extra context menu item: Välimuistissa oleva kuvakaappaus sivusta - res://c:\program files\google\GoogleToolbar3.dll/cmcache.html
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS\nppdf32.dll
    O16 - DPF: {012F24D4-35B0-11D0-BF2D-0000E8D0D146} (AtlCam Class) - http://193.65.43.90/sns100.ocx
    O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
    O16 - DPF: {D719897A-B07A-4C0C-AEA9-9B663A28DFCB} (iTunesDetector Class) - http://ax.phobos.apple.com.edgesuite.net/detection/ITDetector.cab
    O17 - HKLM\System\CCS\Services\Tcpip\..\{6A2EF33A-A472-4EA3-B22F-EE1E53EAD43D}: NameServer = 193.229.0.40,193.229.0.42
    O17 - HKLM\System\CS1\Services\Tcpip\..\{6A2EF33A-A472-4EA3-B22F-EE1E53EAD43D}: NameServer = 193.229.0.40,193.229.0.42
    O17 - HKLM\System\CS2\Services\Tcpip\..\{6A2EF33A-A472-4EA3-B22F-EE1E53EAD43D}: NameServer = 193.229.0.40,193.229.0.42
    O20 - Winlogon Notify: igfxcui - C:\WINNT\SYSTEM32\igfxsrvc.dll
    O20 - Winlogon Notify: nwprovau - C:\WINNT\SYSTEM32\nwprovau.dll
    O23 - Service: Loogisen levyn hallinnan valvontapalvelu (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
    O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
    O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido anti-malware\ewidoguard.exe
    O23 - Service: McAfee Framework Service (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
    O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
    O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe

    --------------------------------------------------------------------

    ---------------------------------------------------------
    ewido anti-malware - Scan report
    ---------------------------------------------------------

    + Created on: 19:05:33, 29.12.2005
    + Report-Checksum: DAE2130E

    + Scan result:

    HKLM\SOFTWARE\Classes\Interface\{AA4939C3-DECA-4A48-A454-97CD587C0EF5} -> Spyware.ISTBar : Ignored
    HKLM\SOFTWARE\aaowier -> Spyware.Blazefind : Cleaned with backup
    HKLM\SOFTWARE\Classes\Interface\{EEE4A2E5-9F56-432F-A6ED-F6F625B551E0} -> Dialer.Generic : Cleaned with backup
    HKLM\SOFTWARE\Gator.com -> Spyware.Gator : Cleaned with backup
    HKLM\SOFTWARE\Gator.com\WebSecureAlert -> Spyware.Gator : Cleaned with backup
    HKLM\SOFTWARE\Gator.com\WebSecureAlert\AutoUpdate -> Spyware.Gator : Cleaned with backup
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\AMeOpt -> Spyware.InternetOptimizer : Cleaned with backup
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Rotue -> Spyware.InternetOptimizer : Cleaned with backup
    HKLM\SOFTWARE\SearchRelevancy -> Spyware.SearchRelevancy : Cleaned with backup
    HKLM\SOFTWARE\SearchRelevancy\Update -> Spyware.SearchRelevancy : Cleaned with backup
    HKU\S-1-5-21-2052111302-1390067357-839522115-1001\Software\Gator.com -> Spyware.Gator : Cleaned with backup
    HKU\S-1-5-21-2052111302-1390067357-839522115-1001\Software\Gator.com\WebSecureAlert -> Spyware.Gator : Cleaned with backup
    HKU\S-1-5-21-2052111302-1390067357-839522115-1001\Software\Gator.com\WebSecureAlert\HomePageProtection -> Spyware.Gator : Cleaned with backup
    HKU\S-1-5-21-2052111302-1390067357-839522115-1001\Software\Gator.com\WebSecureAlert\Monitoring -> Spyware.Gator : Cleaned with backup
    HKU\S-1-5-21-2052111302-1390067357-839522115-1001\Software\Gator.com\WebSecureAlert\Monitoring\Snapshot -> Spyware.Gator : Cleaned with backup
    HKU\S-1-5-21-2052111302-1390067357-839522115-1001\Software\Gator.com\WebSecureAlert\Monitoring\Snapshot\General -> Spyware.Gator : Cleaned with backup
    HKU\S-1-5-21-2052111302-1390067357-839522115-1001\Software\Gator.com\WebSecureAlert\Monitoring\Snapshot\Security -> Spyware.Gator : Cleaned with backup
    HKU\S-1-5-21-2052111302-1390067357-839522115-1001\Software\Gator.com\WebSecureAlert\Monitoring\Snapshot\Security\Zone_1 -> Spyware.Gator : Cleaned with backup
    HKU\S-1-5-21-2052111302-1390067357-839522115-1001\Software\Gator.com\WebSecureAlert\Monitoring\Snapshot\Security\Zone_2 -> Spyware.Gator : Cleaned with backup
    HKU\S-1-5-21-2052111302-1390067357-839522115-1001\Software\Gator.com\WebSecureAlert\Monitoring\Snapshot\Security\Zone_3 -> Spyware.Gator : Cleaned with backup
    HKU\S-1-5-21-2052111302-1390067357-839522115-1001\Software\Gator.com\WebSecureAlert\Monitoring\Snapshot\Security\Zone_4 -> Spyware.Gator : Cleaned with backup
    HKU\S-1-5-21-2052111302-1390067357-839522115-1001\Software\Premium Web Service -> Dialer.Generic : Cleaned with backup
    HKU\S-1-5-21-2052111302-1390067357-839522115-1001\Software\Premium Web Service\Content Browser -> Dialer.Generic : Cleaned with backup
    HKU\S-1-5-21-2052111302-1390067357-839522115-1001\Software\Premium Web Service\Content Browser\Settings -> Dialer.Generic : Cleaned with backup
    C:\Documents and Settings\järjestelmänvalvoja.GOSS-PAGEVISION\Local Settings\Temporary Internet Files\Content.IE5\P3U70YHS\driverguide[1].htm -> Spyware.BookedSpace : Cleaned with backup
    :mozilla.8:C:\Documents and Settings\painajat\Application Data\Mozilla\Firefox\Profiles\default.he9\cookies.txt -> Spyware.Cookie.Doubleclick : Cleaned with backup
    :mozilla.12:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Doubleclick : Cleaned with backup
    :mozilla.16:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
    :mozilla.17:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
    :mozilla.23:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Tradedoubler : Cleaned with backup
    :mozilla.24:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Tradedoubler : Cleaned with backup
    :mozilla.25:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Tradedoubler : Cleaned with backup
    :mozilla.26:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Tradedoubler : Cleaned with backup
    :mozilla.43:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
    :mozilla.44:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
    :mozilla.46:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
    :mozilla.47:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
    :mozilla.80:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
    :mozilla.81:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
    :mozilla.82:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
    :mozilla.83:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
    :mozilla.84:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
    :mozilla.85:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
    :mozilla.86:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
    :mozilla.87:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
    :mozilla.88:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Yieldmanager : Cleaned with backup
    :mozilla.102:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Onestat : Cleaned with backup
    :mozilla.103:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Onestat : Cleaned with backup
    :mozilla.104:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Onestat : Cleaned with backup
    :mozilla.110:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Fastclick : Cleaned with backup
    :mozilla.111:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Fastclick : Cleaned with backup
    :mozilla.113:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Euroclick : Cleaned with backup
    :mozilla.120:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Mediaplex : Cleaned with backup
    :mozilla.121:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Mediaplex : Cleaned with backup
    :mozilla.123:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Qksrv : Cleaned with backup
    :mozilla.124:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Qksrv : Cleaned with backup
    :mozilla.126:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Statcounter : Cleaned with backup
    :mozilla.127:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Statcounter : Cleaned with backup
    :mozilla.128:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Statcounter : Cleaned with backup
    :mozilla.129:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Statcounter : Cleaned with backup
    :mozilla.130:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Statcounter : Cleaned with backup
    :mozilla.131:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Statcounter : Cleaned with backup
    :mozilla.132:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Statcounter : Cleaned with backup
    :mozilla.133:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Statcounter : Cleaned with backup
    :mozilla.134:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Statcounter : Cleaned with backup
    :mozilla.135:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Statcounter : Cleaned with backup
    :mozilla.140:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
    :mozilla.141:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
    :mozilla.142:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Adtech : Cleaned with backup
    :mozilla.143:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Adtech : Cleaned with backup
    :mozilla.144:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Advertising : Cleaned with backup
    :mozilla.151:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
    :mozilla.153:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
    :mozilla.154:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Casalemedia : Cleaned with backup
    :mozilla.155:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Casalemedia : Cleaned with backup
    :mozilla.156:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Casalemedia : Cleaned with backup
    :mozilla.157:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Casalemedia : Cleaned with backup
    :mozilla.158:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Casalemedia : Cleaned with backup
    :mozilla.159:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
    :mozilla.160:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
    :mozilla.161:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
    :mozilla.162:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Trafficmp : Cleaned with backup
    :mozilla.163:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Casalemedia : Cleaned with backup
    :mozilla.174:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Webtrendslive : Cleaned with backup
    :mozilla.180:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Tribalfusion : Cleaned with backup
    :mozilla.192:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Atdmt : Cleaned with backup
    :mozilla.193:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
    :mozilla.194:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
    :mozilla.195:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
    :mozilla.196:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
    :mozilla.197:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
    :mozilla.198:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
    :mozilla.199:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
    :mozilla.202:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Com : Cleaned with backup
    :mozilla.203:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Com : Cleaned with backup
    :mozilla.204:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Bridgetrack : Cleaned with backup
    :mozilla.205:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Questionmarket : Cleaned with backup
    :mozilla.206:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Ru4 : Cleaned with backup
    :mozilla.207:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Ru4 : Cleaned with backup
    :mozilla.208:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Ru4 : Cleaned with backup
    :mozilla.214:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Googleadservices : Cleaned with backup
    :mozilla.223:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Weborama : Cleaned with backup
    :mozilla.255:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Serving-sys : Cleaned with backup
    :mozilla.256:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Serving-sys : Cleaned with backup
    :mozilla.257:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Serving-sys : Cleaned with backup
    :mozilla.258:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Serving-sys : Cleaned with backup
    :mozilla.259:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup
    :mozilla.260:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup
    :mozilla.261:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup
    :mozilla.264:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Falkag : Cleaned with backup
    :mozilla.274:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Liveperson : Cleaned with backup
    :mozilla.275:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Liveperson : Cleaned with backup
    :mozilla.288:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
    :mozilla.289:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
    :mozilla.332:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.2o7 : Cleaned with backup
    :mozilla.379:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Targetnet : Cleaned with backup
    :mozilla.380:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Adbrite : Cleaned with backup
    :mozilla.395:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Valueclick : Cleaned with backup
    :mozilla.399:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Adbrite : Cleaned with backup
    :mozilla.409:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Revenue : Cleaned with backup
    :mozilla.425:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Bluestreak : Cleaned with backup
    :mozilla.427:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    :mozilla.429:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    :mozilla.430:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Esomniture : Cleaned with backup
    :mozilla.444:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Ivwbox : Cleaned with backup
    :mozilla.480:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Adviva : Cleaned with backup
    :mozilla.497:C:\Documents and Settings\painajat\Application Data\Mozilla\Profiles\default\fj35rhb7.slt\cookies.txt -> Spyware.Cookie.Hitbox : Cleaned with backup
    C:\Documents and Settings\painajat\Cookies\painajat@tradedoubler[1].txt -> Spyware.Cookie.Tradedoubler : Cleaned with backup
    C:\Program Files\180searchassistant -> Spyware.180Solutions : Cleaned with backup
    C:\Program Files\180searchassistant\salmau.dat -> Spyware.180Solutions : Cleaned with backup
    C:\Program Files\180searchassistant\salm_gdf.dat -> Spyware.180Solutions : Cleaned with backup
    C:\Program Files\180searchassistant\salm_kyf.dat -> Spyware.180Solutions : Cleaned with backup
    C:\Program Files\mozilla.org\Mozilla\plugins\npzango.dll -> Spyware.WinAD : Cleaned with backup
    C:\RECYCLER\S-1-5-21-2052111302-1390067357-839522115-1001\Dc1\WebSecureAlert.exe -> Adware.Gator : Cleaned with backup
    C:\RECYCLER\S-1-5-21-2052111302-1390067357-839522115-1001\Dc1\WSAHelper.dll -> Adware.Gator : Cleaned with backup


    ::Report End


     
    gix666, 29.12.2005
    #7
  9. -kemisti-

    -kemisti- Active member

    Liittynyt:
    06.06.2005
    Viestejä:
    6,305
    Kiitokset:
    0
    Pisteet:
    96
    Kaikki lokit ovat ok. Vielä ongelmia?
     
    -kemisti-, 29.12.2005
    #8
  10. gix666

    gix666 Member

    Liittynyt:
    29.06.2005
    Viestejä:
    41
    Kiitokset:
    0
    Pisteet:
    16
    Kyllä ongelmia, ei ole mitään muutoksia tullut!?!
     
    gix666, 29.12.2005
    #9
  11. -kemisti-

    -kemisti- Active member

    Liittynyt:
    06.06.2005
    Viestejä:
    6,305
    Kiitokset:
    0
    Pisteet:
    96
    Selvä.

    Hae täältä -> http://www.billsway.com/vbspage/ registry search tool ja tee haku "desktop.html":llä. Jos antivirus herjaa, anna ajaa. Jos ei löydy, kokeile "warnhp.html"-hakusanaa

    Lähetä registry searchin tulokset.
     
    -kemisti-, 29.12.2005
    #10
  12. gix666

    gix666 Member

    Liittynyt:
    29.06.2005
    Viestejä:
    41
    Kiitokset:
    0
    Pisteet:
    16
    Jep. Tämmöistä ilmotti...


    REGEDIT4
    ; RegSrch.vbs © Bill James

    ; Registry search results for string "desktop.html" 29.12.2005 20:32:10

    ; NOTE: This file will be deleted when you close WordPad.
    ; You must manually save this file to a new location if you want to refer to it again later.
    ; (If you save the file with a .reg extension, you can use it to restore any Registry changes you make to these values.)


    [HKEY_USERS\S-1-5-21-2052111302-1390067357-839522115-1001\Software\Microsoft\Windows\CurrentVersion\Policies\System]
    "Wallpaper"="C:\\WINNT\\desktop.html"
     
    gix666, 29.12.2005
    #11
  13. -kemisti-

    -kemisti- Active member

    Liittynyt:
    06.06.2005
    Viestejä:
    6,305
    Kiitokset:
    0
    Pisteet:
    96
    Ota ensin rekisteristä näin varmuuskopio:

    Suorita -> regedit -> ok. Sitten Tiedosto -> Vie. Kirjoita sille joku nimi ja sitten Tallenna(ja laita muistiin, mihin tallensit sen).

    Sitten tallenna tämä alla oleva tekstinpätkä nimellä fix.reg vaikka muistiossa ja vaikka työpöydälle (tallennusmuoto kaikki tiedostot)

    Windows Registry Editor Version 5.00

    [-HKEY_USERS\S-1-5-21-2052111302-1390067357-839522115-1001\Software\Microsoft\Windows\CurrentVersion\Policies\System]
    "Wallpaper"="C:\\WINNT\\desktop.html"

    Tuplaklikkaa ja paina kyllä ja ok. Käynnistä kone uudelleen. Auttoiko?
     
    -kemisti-, 29.12.2005
    #12
  14. gix666

    gix666 Member

    Liittynyt:
    29.06.2005
    Viestejä:
    41
    Kiitokset:
    0
    Pisteet:
    16
    Laite lähti toimimaan!! Voidaanko edelliset ladatut ohjelmat poistaa, vai voiko niistä olla hyötyä jatkossa?

    Suuri kiitos ja hyvää uuttavuotta!!

    T.SamiTeemu
     
    gix666, 29.12.2005
    #13
  15. spertti

    spertti Active member

    Liittynyt:
    01.06.2005
    Viestejä:
    1,222
    Kiitokset:
    0
    Pisteet:
    66
    Kaikki muut voit mielestäni poistaa, mutta tuon Ewidon jättäisin koneelle.Se on tällä hetkellä yksi parhaita spywaren poisto-ohjelmia. Taustasuojaus loppuu 14 pvän jälkeen, mutta senkin jälkeen onnistuu manuaalinen päivitys ja scannailu. Tuolla vielä perusteelliset ohjeet >http://keskustelu.afterdawn.com/thread_view.cfm/269186
     
    spertti, 29.12.2005
    #14
  16. Tonski

    Tonski Regular member

    Liittynyt:
    18.11.2005
    Viestejä:
    670
    Kiitokset:
    0
    Pisteet:
    26
    Itselläni on melko sama ongelma. Taustaa ei saa näkyviin. Työpöydän taustalla näkyy vain välkettä. Hitaasti välillä näkyy valkoinen ja välillä vaaleanruskea ruutu.
     
    Tonski, 29.12.2005
    #15
  17. aaxxeell

    aaxxeell Regular member

    Liittynyt:
    28.07.2005
    Viestejä:
    2,145
    Kiitokset:
    0
    Pisteet:
    46
    @Tonski

    pistäppä myös hjt lokisi tänne palstalle arvioitavaksi, ohjeet tuossa -kemisti-:n ensimmäisessä viestissä. Tee kuitenkin oma viestiketju että tämä ei sekoitu.
     
    aaxxeell, 29.12.2005
    #16

Jaa tämä sivu