Logfile of HijackThis v1.99.1 Scan saved at 10:05:18, on 7.2.2006 Platform: Windows 98 SE (Win9x 4.10.2222A) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\SYSTEM\KERNEL32.DLL C:\WINDOWS\SYSTEM\MSGSRV32.EXE C:\WINDOWS\SYSTEM\MPREXE.EXE C:\NOVELL\CLIENT32\NWRECMSG.EXE C:\WINDOWS\SYSTEM\MSTASK.EXE C:\NOVELL\CLIENT32\WM95.EXE c:\windows\SYSTEM\KB891711\KB891711.EXE C:\WINDOWS\SYSTEM\mmtask.tsk C:\WINDOWS\EXPLORER.EXE C:\PROGRAM\DATA FELLOWS\F-SECURE\ANTI-VIRUS\DVP95_0.EXE C:\OHJELMATIEDOSTOT\MOUSEWARE\SYSTEM\EM_EXEC.EXE C:\WINDOWS\SYSTEM\SYSTRAY.EXE C:\WINDOWS\SYSTEM\ATIPTAXX.EXE C:\WINDOWS\SYSTEM\STIMON.EXE C:\PROGRAM\DATA FELLOWS\F-SECURE\ANTI-VIRUS\F-AGNT95.EXE C:\PROGRAM\MSN MESSENGER\MSNMSGR.EXE C:\WINDOWS\SYSTEM\WMIEXE.EXE C:\OHJELMATIEDOSTOT\INTERNET EXPLORER\IEXPLORE.EXE C:\OHJELMATIEDOSTOT\INTERNET EXPLORER\IEXPLORE.EXE C:\OHJELMATIEDOSTOT\INTERNET EXPLORER\IEXPLORE.EXE C:\WINDOWS\SYSTEM\DDHELP.EXE S:\82006\822006\PATTE\HIJACKTHIS.EXE R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = about:blank R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = res://C:\PROGRAM\TOOLBAR\TOOLBAR.DLL/sa R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = res://C:\PROGRAM\TOOLBAR\TOOLBAR.DLL/sa R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 172.16.51.241:8080 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - Default URLSearchHook is missing O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX O2 - BHO: PosHelp - {CDEEC43D-3572-4E95-A2A5-F519D29F00C0} - C:\PROGRAM\INTERNET EXPLORER 2\ADVANCED SEARCHBAR\ADVANCEDSEARCHBAR.DLL O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX O3 - Toolbar: Advanced Searchbar - {57F02779-3D88-4958-8AD3-83C12D86ADC7} - C:\PROGRAM\INTERNET EXPLORER 2\ADVANCED SEARCHBAR\ADVANCEDSEARCHBAR.DLL O4 - HKLM\..\Run: [F-Secure Gatekeeper] C:\PROGRAM\DATAFE~1\F-SECURE\ANTI-V~1\DVP95.EXE O4 - HKLM\..\Run: [EM_EXEC] C:\OHJELM~1\MOUSEW~1\SYSTEM\EM_EXEC.EXE O4 - HKLM\..\Run: [SystemTray] SysTray.Exe O4 - HKLM\..\Run: [AtiPTA] Atiptaxx.exe O4 - HKLM\..\Run: [CriticalUpdate] c:\windows\SYSTEM\wucrtupd.exe -startup O4 - HKLM\..\Run: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE O4 - HKLM\..\Run: [F-Secure Anti-Virus] C:\Program\Data Fellows\F-Secure\Anti-Virus\F-AGNT95.EXE O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe O4 - HKLM\..\RunServices: [Workstation Scheduler] C:\novell\client32\wm95.exe O4 - HKLM\..\RunServices: [KB891711] c:\windows\SYSTEM\KB891711\KB891711.EXE O4 - HKCU\..\Run: [msnmsgr] "C:\PROGRAM\MSN MESSENGER\MSNMSGR.EXE" /background O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Toolbars\Restrictions present O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Toolbars\Restrictions present O8 - Extra context menu item: E&xport to Microsoft Excel - res://c:\PROGRAM\MICROS~1\OFFICE10\EXCEL.EXE/3000 O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file) O9 - Extra button: ATI TV - {44226DFF-747E-4edc-B30C-78752E50CD0C} - C:\PROGRAM\ATI MULTIMEDIA\TV\EXPLBAR.DLL O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\SYSTEM\MSJAVA.DLL O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\SYSTEM\MSJAVA.DLL O9 - Extra button: Advanced Searchbar - {57F02779-3D88-4958-8AD3-83C12D86ADC7} - C:\PROGRAM\INTERNET EXPLORER 2\ADVANCED SEARCHBAR\ADVANCEDSEARCHBAR.DLL O9 - Extra 'Tools' menuitem: Advanced Searchbar - {57F02779-3D88-4958-8AD3-83C12D86ADC7} - C:\PROGRAM\INTERNET EXPLORER 2\ADVANCED SEARCHBAR\ADVANCEDSEARCHBAR.DLL O16 - DPF: {86A88967-7A20-11D2-8EDA-00600818EDB1} (ParallelGraphics Cortona Control) - http://www.parallelgraphics.com/bin/cortvrml.cab O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by1fd.bay1.hotmail.msn.com/resources/MsnPUpld.cab
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = about:blank ? Mikä merkitys on jos HJT:tä ei ajeta paikasta , josta sitä suositellaan?
ei se sit löydä kaikkea , mun tehätävä oli puhdistaa yks koulun koneista ja se oli ladattu väärään paikkaa. siivon ite ton login sit!
administrator kone estää mitään muita pistämästä tonne mitään nii en saanu sitän sinne jonku novelli järjestelmän takii
