Kone hyvin todennäköisesti pursuaa viruksia / sun muuta moskaa

Viestiketju Virukset ja haittaohjelmat - HijackThis -logit -osiossa. Ketjun avasi Ergelli 23.09.2007.

  1. Ergelli

    Ergelli Member

    Liittynyt:
    23.09.2007
    Viestejä:
    10
    Kiitokset:
    0
    Pisteet:
    11
    En ole kovinkaan etevä näiden tietokoneen puhdistus prosessien kanssa.
    Eli osaamiseni on virustorjuntaohjelmien automaattisen puhditusoperaation käynnistämisen tasolla, mutta kyllä jotain osaan tehdä.

    Ongelma: Kone tullut käsittämättömän hitaaksi ja "SecurePCCleaner" haittaohjelma kiusaa eikä lähde kirveelläkään irti. Arvostaisin kovasti jos saisin apua täältä ongelmaani ja kiitän jo etukäteen.

    Tässä on HJT-logit

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 12:51, on 2007-08-25
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
    C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
    C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\WINDOWS\system32\CTsvcCDA.exe
    C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
    C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
    C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
    C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
    C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nTrayFw.exe
    C:\WINDOWS\SOUNDMAN.EXE
    C:\Program Files\DAEMON Tools\daemon.exe
    C:\Program Files\Winamp\winampa.exe
    C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
    C:\Program Files\QuickTime\QTTask.exe
    C:\iTunes\iTunesHelper.exe
    C:\WINDOWS\system32\ctfmon.exe
    D:\Halflife ja CS Source\Steam.exe
    C:\Program Files\Skype\Phone\Skype.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
    C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
    C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe
    C:\Program Files\Logitech\SetPoint\SetPoint.exe
    C:\Program Files\Common Files\Logitech\KHAL\KHALMNPR.EXE
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Documents and Settings\Mikael\Työpöytä\HiJackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://softwarereferral.com/jump.php?wmid=6010&mid=MjI6Ojg5&lid=2
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: ContributeBHO Class - {074C1DC5-9320-4A9A-947D-C042949C6216} - E:\Photoshop\/Adobe Contribute CS3/contributeieplugin.dll
    O2 - BHO: MSVPS System - {283A0EE3-2CC1-45AB-8207-B1D7B69C7F83} - C:\WINDOWS\duocore.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\Ohjelmat\SPYBOT~1\SDHelper.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - D:\PROGRA~1\FlashGet\jccatch.dll
    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
    O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - D:\PROGRA~1\FlashGet\fgiebar.dll
    O3 - Toolbar: Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - E:\Photoshop\/Adobe Contribute CS3/contributeieplugin.dll
    O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
    O4 - HKLM\..\Run: [nTrayFw] C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nTrayFw.exe
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
    O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
    O4 - HKLM\..\Run: [dmxga.exe] C:\WINDOWS\system32\dmxga.exe
    O4 - HKLM\..\Run: [Adobe_ID0EYTHM] C:\PROGRA~1\COMMON~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "E:\adobe\adobe reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
    O4 - HKLM\..\Run: [iTunesHelper] "C:\iTunes\iTunesHelper.exe"
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [Steam] D:\Halflife ja CS Source\Steam.exe -silent
    O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
    O4 - HKCU\..\Run: [SsAAD.exe] C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
    O4 - HKCU\..\Run: [AdobeUpdater] C:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe
    O4 - HKCU\..\Run: [CTSyncU.exe] "C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe"
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Paikallinen palve')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Verkkopalve')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
    O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
    O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
    O8 - Extra context menu item: &Search - ?p=ZNfox000
    O8 - Extra context menu item: Lataa FlashGetillä - D:\Program Files\FlashGet\jc_link.htm
    O8 - Extra context menu item: Lataa kaikki FlashGetillä - D:\Program Files\FlashGet\jc_all.htm
    O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
    O9 - Extra button: Oheistiedot - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: PacificPoker - {94EDF7B4-4272-4af3-8F8B-4E2F68E225B7} - D:\PROGRA~1\PACIFI~1\pacificpoker.exe
    O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\PROGRA~1\FlashGet\flashget.exe
    O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\PROGRA~1\FlashGet\flashget.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
    O17 - HKLM\System\CCS\Services\Tcpip\..\{4F705067-7E1D-406E-AEB6-F190D88FC4BF}: NameServer = 208.67.220.220,208.67.222.222
    O17 - HKLM\System\CCS\Services\Tcpip\..\{6FE64CD9-2B24-4E23-90BD-45C45CC7F5FB}: NameServer = 85.255.114.4,85.255.112.137
    O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
    O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
    O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
    O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
    O21 - SSODL: wmpconf - {D7CEFFEA-C94D-4AD5-9F01-29180F04B362} - C:\WINDOWS\wmpconf.dll
    O21 - SSODL: wmpenv - {FEBBDD85-81BA-4579-B19D-C4CC5E8E1601} - C:\WINDOWS\wmpenv.dll
    O23 - Service: Adobe Version Cue CS3 - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe
    O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
    O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
    O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
    O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
    O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
    O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Apache Software Foundation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
    O23 - Service: iPod-palvelu (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
    O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
    O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
    O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
    O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
    O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe

    --
    End of file - 10902 bytes
     
    Ergelli, 23.09.2007
    #1
  2.  
  3. Hujo

    Hujo Guest

    Lataa SmitfraudFix (c) S!Ri
    Pura sisältö (kansio nimeltä SmitfraudFix) työpöydällesi:

    Avaa SmitfraudFix kansio ja tupla-klikkaa smitfraudfix.cmd
    Valitse optio #1 - Search kirjoittamalla 1 ja painamalla "Enter"; tekstitiedosto avautuu, joka listaa tarttuneet tiedostot (jos olemassa).
    Postita tämän tekstitiedoston sisältö viestiketjuusi.

    Huomaa : process.exe filun tunnistaa jotkut Anti-virus ohjelmat (AntiVir, Dr.Web, Kaspersky) "Haittakaluna"; se ei ole virus, vaan ohjelma joka pysäyttää prosesseja. A/V ohjelmat eivät pysty tunnistamaan hyvän ja pahan käytön tälläisten ohjelmian väliltä, silloin ne saattavat varoittaa käyttäjää.

    =====================

    Printtaa ohjeet ulos.

    Käynnistä koneesi vikasietotilaan ja valitse tavallinen käyttäjätilisi.

    Kun vikasietotilassa, avaa SmitfraudFix kansio ja tupla-klikkaa smitfraudfix.cmd
    Valitse optio #2 - Clean kirjoittamalla 2 ja painamalla "Enter" poistaaksesi tarttuneet tiedostot.

    Sinulta kysytään: "Registry cleaning - Do you want to clean the registry ?"; vastaa "Yes" kirjoittamalla Y ja paina "Enter" poistaaksesi työpöydän taustakuvan ja puhdistaaksesi tarttuneet rekisteriavaimet.

    Työkalu tarkistaa jos wininet.dll on tarttunut. Sinua saatetaan pyytää korvaamaan tarttunut .dll (jos löytyy); vastaa "Yes" kirjoittamalla Y ja painamalla "Enter".

    Työkalun saattaa tarvita käynnistää kone uudelleen; jos ei tee niin, käynnistä normaaliin Windowsiin.
    Tekstitiedosto ilmestyy, puhdistusprosessin jäljiltä; kopioi & liitä tämän raportin tulokset vastaukseesi.
    Raportti löytyy paikalliselta levyltäsi, useimmiten C:\rapport.txt.

    Varoitus : Ajamalla optio 2:n EI-tarttuneessa tietokoneessa, poistaa sinun työpöytäsi taustakuvan.

    ====================

    tee hommat ja laita kummastakin raportti

    ======================

    scannaa hjt:llä merkkaa paina Fix checked

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://softwarereferral.com/jump.php?wmid=6010&mid=MjI6Ojg5&lid=2
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

    ==================

    Lataa SDFix by AndyManchesta ja tallenna se työpöydällesi.

    Käynnistä koneesi vikasietotilaan ja valitse tavallinen käyttäjätilisi:
    " Käynnistä tietokone
    " Kun kuulet koneen piippaavan, paina F8, kuitenkin ennen Windowsin logon esiintuloa
    " Seuraavaksi pitäisi ilmestyä valikko
    " Valitse valikosta vikasietotila.

    " Kun vikasietotilassa, pura tiedoston SDFix.zip sisältö (SDFix kansio) työpöydällesi. Työpöydälle pitäisi ilmestyä kansio nimeltä SDFix.
    " Avaa SDFix-kansio ja tuplaklikkaa tiedostoa RunThis.bat käynnistääksesi ohjelman.
    " Paina Y käynnistääksesi skriptin.
    " Työkalu puhdistaa troijalaisen palvelut ja tekee myös joitakin korjauksia rekisteriin. Lopuksi se pyytää käynnistämään koneen uudelleen, "Press any key to Reboot".
    " Paina mitä tahansa näppäintä ja kone käynnistyy uudelleen.
    " Käynnistyminen kestää normaalia kauemmin sillä SDFix puhdistaa konetta.
    " Kun kone on käynnistynyt ja työpöytä latautunut, SDFix kertoo että puhdistus on suoritettu, "Finished".
    " Paina sitten mitä tahansa näppäintä sulkeaksesi skriptin ja ladataksesi pikakuvakkeet työpöydälle.
    " Lopuksi avaa SDFix kansio (työpöydällä) ja kopioi & liitä tiedoston Report.txt sisältö viestiketjuusi uuden HijackThis:n lokin kera.

    =====================

    Ohje AVG:n Anti-Spyware 7.5:n käyttöön
    Huom! Tässä ohjeessa sammutetaan tuo reaaliaikasuojaus (Shield). Näin vältetään tilanteet joissa suojaus estäisi esim HijackThis:n työkalun toimintaa.

    Tallenna nämä ohjeet tekstitiedostoon tai tulosta nämä, muuten et pääse niihin käsiksi vikasietotilasta

    Lataa AVG:n Anti-Spyware 7.5:n
    ja tallenna ohjelma työpöydällesi.
    o Kun olet ladannut ohjelman, kaksoisklikkaa asennuohjelman pikakuvaketta työpöydälläsi, asennus alkaa.
    o Asennuksen jälkeen täytyy ohjelma käynnistää ja sen tunnisteet päivittää.
    o Käynnistä AVG:n Anti-Spyware.
    o Klikkaa "Update" kuvaketta päävalikossa. Sen jälkeen klikkaa "Update now" painiketta.

    o Sitten klikkaa "Start Update" kuvaketta jolloin päivitys alkaa.

    o Kun päivitykset on ladattu, klikkaa "Scanner" kuvaketta ikkunan ylälaidassa. Valitse sitten "Settings" välilehti.
    o Kun "Settings" valikko on auennut, klikkaa "Recommended actions" ja sitten valitse "Quarantine".

    o Sitten "Reports" valikon alta:
    o Laita täppi kohtaan "Automatically generate report after every scan"
    o Ota täppi pois kohdasta"Only if threats were found"

    o Sitten klikkaa "Shield" kuvaketta ikkunan ylälaidassa
    o "Resident shield is", muuta tila active:sta inactive:ksi
    o Sulje ohjelma, ÄLÄ skannaa vielä.

    Käynnistä koneesi vikasietotilaan,
    sammuta ja käynnistä
    käynnistyksen yhteydessä naputtele F8
    valitse nuoli näppäimellä vikasietotila
    paina enter ja enter

    HUOM! Älä käytä muita ohjelmia AVG:n skannauksen aikana, tämä saattaa häiritä skannausta.
    o Kun vikasietotilassa, käynnistä AVG:n Anti-Spyware.
    o Klikkaa "Scanner" kuvaketta ikkunan ylälaidassa ja valitse "Scan" välilehti. Sitten klikkaa "Complete System Scan".
    o Ewido aloittaa nyt tietokoneen skannaamisen, ole kärsivällinen sillä skannaus vie aikaa.

    Kun skannaus on valmis:
    TÄRKEÄÄ : Älä klikkaa "Save Scan Report" ennen kuin klikkaat "Apply all Actions"
    o Varmistu, että Set all elements to: näyttää Quarantine (1), jos ei, klikkaa linkkiä ja valitse Quarantine popup-valikosta.
    o Sinulta kysytään mitä tehdä jos infektioita löytyi, valitse silloin "Apply all actions"
    [​IMG]
    o Sitten klikkaa "Reports" kuvaketta ohjelma yläosasta.
    o Klikkaa "Save report as" painiketta ikkunan vasemmassa alalaidassa ja tallenna raportti työpöydälle.
    o Sulje ohjelma, käynnistä kone normaalisti ja lähetä AVG:n raportti viestikejuusi.

    ======================

    Lataa tuolta http://www.ccleaner.com/download/builds.aspx
    CCleaner v2.00.500 - Standard Build, ÄLÄ aseenna Yahoo toolbaria!

    laita asetukset näin:
    Valinnat --> Lisäasetukset --> Ota ruksi pois kohdasta Poista vain yli 48 tuntia vanhat tilapäistiedostot.

    aja Puhdistaja > tutki nappi > aja ccleaner nappi oikea alakulma
    aja Virheet > etsi rekisteri virheitä nappi > Korjaa rekisteri virheet. nappi
     
    Hujo, 23.09.2007
    #2
  4. Ergelli

    Ergelli Member

    Liittynyt:
    23.09.2007
    Viestejä:
    10
    Kiitokset:
    0
    Pisteet:
    11
    Tässä on Smitfraudfixin raportit.

    SmitFraudFix v2.227

    Scan done at 18:13:03.65, 2007-09-23
    Run from C:\Documents and Settings\Mikael\Ty”p”yt„\SmitfraudFix\SmitfraudFix
    OS: Microsoft Windows XP [versio 5.1.2600] - Windows_NT
    The filesystem type is NTFS
    Fix run in normal mode

    »»»»»»»»»»»»»»»»»»»»»»»» Process

    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
    C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
    C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\WINDOWS\system32\CTsvcCDA.exe
    C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
    C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
    C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
    C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
    C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nTrayFw.exe
    C:\WINDOWS\SOUNDMAN.EXE
    C:\Program Files\DAEMON Tools\daemon.exe
    C:\Program Files\Winamp\winampa.exe
    C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
    C:\Program Files\QuickTime\QTTask.exe
    C:\iTunes\iTunesHelper.exe
    C:\WINDOWS\system32\ctfmon.exe
    D:\Halflife ja CS Source\Steam.exe
    C:\Program Files\Skype\Phone\Skype.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
    C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
    C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe
    C:\Program Files\Logitech\SetPoint\SetPoint.exe
    C:\Program Files\Common Files\Logitech\KHAL\KHALMNPR.EXE
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\WINDOWS\system32\NOTEPAD.EXE
    C:\WINDOWS\system32\cmd.exe

    »»»»»»»»»»»»»»»»»»»»»»»» hosts


    »»»»»»»»»»»»»»»»»»»»»»»» C:\


    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS

    C:\WINDOWS\duocore.dll FOUND !
    C:\WINDOWS\main_uninstaller.exe FOUND !
    C:\WINDOWS\wmpconf.dll FOUND !
    C:\WINDOWS\wmpenv.dll FOUND !

    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32


    »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Mikael


    »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Mikael\Application Data


    »»»»»»»»»»»»»»»»»»»»»»»» Start Menu


    »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\Mikael\Suosikit

    C:\DOCUME~1\Mikael\Suosikit\Error Cleaner.url FOUND !
    C:\DOCUME~1\Mikael\Suosikit\Privacy Protector.url FOUND !

    »»»»»»»»»»»»»»»»»»»»»»»» Desktop

    C:\DOCUME~1\Mikael\TYPYT~1\Error Cleaner.url FOUND !
    C:\DOCUME~1\Mikael\TYPYT~1\Privacy Protector.url FOUND !
    C:\DOCUME~1\Mikael\TYPYT~1\Spyware?Malware Protection.url FOUND !

    »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

    C:\Program Files\VideoAccessCodec\ FOUND !

    »»»»»»»»»»»»»»»»»»»»»»»» Corrupted keys


    »»»»»»»»»»»»»»»»»»»»»»»» Desktop Components

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
    "Source"="About:Home"
    "SubscribedURL"="About:Home"
    "FriendlyName"="Nykyinen kotisivu"


    »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
    !!!Attention, following keys are not inevitably infected!!!

    SrchSTS.exe by S!Ri
    Search SharedTaskScheduler's .dll


    »»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
    !!!Attention, following keys are not inevitably infected!!!

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
    "AppInit_DLLs"=""


    »»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
    !!!Attention, following keys are not inevitably infected!!!

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
    "System"="csxed.exe"


    »»»»»»»»»»»»»»»»»»»»»»»» Rustock



    »»»»»»»»»»»»»»»»»»»»»»»» DNS

    Description: NVIDIA nForce Networking Controller - Paketinajoituksen miniportti
    DNS Server Search Order: 208.67.220.220
    DNS Server Search Order: 208.67.222.222

    HKLM\SYSTEM\CCS\Services\Tcpip\..\{10114497-932F-42CE-8B5E-9FFEA1029953}: DhcpNameServer=208.67.220.220,208.67.222.222
    HKLM\SYSTEM\CCS\Services\Tcpip\..\{4F705067-7E1D-406E-AEB6-F190D88FC4BF}: DhcpNameServer=192.168.50.11 194.241.250.90
    HKLM\SYSTEM\CCS\Services\Tcpip\..\{4F705067-7E1D-406E-AEB6-F190D88FC4BF}: NameServer=208.67.220.220,208.67.222.222
    HKLM\SYSTEM\CCS\Services\Tcpip\..\{6FE64CD9-2B24-4E23-90BD-45C45CC7F5FB}: NameServer=85.255.114.4,85.255.112.137
    HKLM\SYSTEM\CS1\Services\Tcpip\..\{10114497-932F-42CE-8B5E-9FFEA1029953}: DhcpNameServer=208.67.220.220,208.67.222.222
    HKLM\SYSTEM\CS1\Services\Tcpip\..\{4F705067-7E1D-406E-AEB6-F190D88FC4BF}: DhcpNameServer=192.168.50.11 194.241.250.90
    HKLM\SYSTEM\CS1\Services\Tcpip\..\{4F705067-7E1D-406E-AEB6-F190D88FC4BF}: NameServer=208.67.220.220,208.67.222.222
    HKLM\SYSTEM\CS1\Services\Tcpip\..\{6FE64CD9-2B24-4E23-90BD-45C45CC7F5FB}: NameServer=85.255.114.4,85.255.112.137
    HKLM\SYSTEM\CS2\Services\Tcpip\..\{10114497-932F-42CE-8B5E-9FFEA1029953}: DhcpNameServer=208.67.220.220,208.67.222.222
    HKLM\SYSTEM\CS2\Services\Tcpip\..\{4F705067-7E1D-406E-AEB6-F190D88FC4BF}: DhcpNameServer=192.168.50.11 194.241.250.90
    HKLM\SYSTEM\CS2\Services\Tcpip\..\{4F705067-7E1D-406E-AEB6-F190D88FC4BF}: NameServer=208.67.220.220,208.67.222.222
    HKLM\SYSTEM\CS2\Services\Tcpip\..\{6FE64CD9-2B24-4E23-90BD-45C45CC7F5FB}: NameServer=85.255.114.4,85.255.112.137
    HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.50.11 194.241.250.90
    HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: NameServer=208.67.220.220,208.67.222.222
    HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.50.11 194.241.250.90
    HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: NameServer=208.67.220.220,208.67.222.222
    HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=192.168.50.11 194.241.250.90
    HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: NameServer=208.67.220.220,208.67.222.222


    »»»»»»»»»»»»»»»»»»»»»»»» Scanning for wininet.dll infection


    »»»»»»»»»»»»»»»»»»»»»»»» End


    SmitFraudFix v2.227

    Scan done at 18:30:03.71, 2007-09-23
    Run from C:\Documents and Settings\Mikael\Ty”p”yt„\SmitfraudFix\SmitfraudFix
    OS: Microsoft Windows XP [versio 5.1.2600] - Windows_NT
    The filesystem type is NTFS
    Fix run in safe mode

    »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Before SmitFraudFix
    !!!Attention, following keys are not inevitably infected!!!

    SrchSTS.exe by S!Ri
    Search SharedTaskScheduler's .dll

    »»»»»»»»»»»»»»»»»»»»»»»» Killing process


    »»»»»»»»»»»»»»»»»»»»»»»» hosts


    127.0.0.1 localhost

    »»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

    GenericRenosFix by S!Ri


    »»»»»»»»»»»»»»»»»»»»»»»» Deleting infected files

    C:\WINDOWS\duocore.dll Deleted
    C:\WINDOWS\main_uninstaller.exe Deleted
    C:\WINDOWS\wmpconf.dll Deleted
    Deleting [HKEY_CLASSES_ROOT\CLSID\{D7CEFFEA-C94D-4AD5-9F01-29180F04B362}]
    C:\WINDOWS\wmpenv.dll Deleted
    Deleting [HKEY_CLASSES_ROOT\CLSID\{FEBBDD85-81BA-4579-B19D-C4CC5E8E1601}]
    C:\DOCUME~1\Mikael\TYPYT~1\Error Cleaner.url Deleted
    C:\DOCUME~1\Mikael\Suosikit\Error Cleaner.url Deleted
    C:\DOCUME~1\Mikael\Suosikit\Privacy Protector.url Deleted
    C:\Program Files\VideoAccessCodec\ Deleted

    »»»»»»»»»»»»»»»»»»»»»»»» DNS

    HKLM\SYSTEM\CCS\Services\Tcpip\..\{10114497-932F-42CE-8B5E-9FFEA1029953}: DhcpNameServer=208.67.220.220,208.67.222.222
    HKLM\SYSTEM\CCS\Services\Tcpip\..\{4F705067-7E1D-406E-AEB6-F190D88FC4BF}: DhcpNameServer=192.168.50.11 194.241.250.90
    HKLM\SYSTEM\CCS\Services\Tcpip\..\{4F705067-7E1D-406E-AEB6-F190D88FC4BF}: NameServer=208.67.220.220,208.67.222.222
    HKLM\SYSTEM\CCS\Services\Tcpip\..\{6FE64CD9-2B24-4E23-90BD-45C45CC7F5FB}: NameServer=85.255.114.4,85.255.112.137
    HKLM\SYSTEM\CS1\Services\Tcpip\..\{10114497-932F-42CE-8B5E-9FFEA1029953}: DhcpNameServer=208.67.220.220,208.67.222.222
    HKLM\SYSTEM\CS1\Services\Tcpip\..\{4F705067-7E1D-406E-AEB6-F190D88FC4BF}: DhcpNameServer=192.168.50.11 194.241.250.90
    HKLM\SYSTEM\CS1\Services\Tcpip\..\{4F705067-7E1D-406E-AEB6-F190D88FC4BF}: NameServer=208.67.220.220,208.67.222.222
    HKLM\SYSTEM\CS1\Services\Tcpip\..\{6FE64CD9-2B24-4E23-90BD-45C45CC7F5FB}: NameServer=85.255.114.4,85.255.112.137
    HKLM\SYSTEM\CS2\Services\Tcpip\..\{10114497-932F-42CE-8B5E-9FFEA1029953}: DhcpNameServer=208.67.220.220,208.67.222.222
    HKLM\SYSTEM\CS2\Services\Tcpip\..\{4F705067-7E1D-406E-AEB6-F190D88FC4BF}: DhcpNameServer=192.168.50.11 194.241.250.90
    HKLM\SYSTEM\CS2\Services\Tcpip\..\{4F705067-7E1D-406E-AEB6-F190D88FC4BF}: NameServer=208.67.220.220,208.67.222.222
    HKLM\SYSTEM\CS2\Services\Tcpip\..\{6FE64CD9-2B24-4E23-90BD-45C45CC7F5FB}: NameServer=85.255.114.4,85.255.112.137
    HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.50.11 194.241.250.90
    HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: NameServer=208.67.220.220,208.67.222.222
    HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.50.11 194.241.250.90
    HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: NameServer=208.67.220.220,208.67.222.222
    HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: DhcpNameServer=192.168.50.11 194.241.250.90
    HKLM\SYSTEM\CS2\Services\Tcpip\Parameters: NameServer=208.67.220.220,208.67.222.222


    »»»»»»»»»»»»»»»»»»»»»»»» Deleting Temp Files


    »»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
    !!!Attention, following keys are not inevitably infected!!!

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
    "System"="csxed.exe"


    »»»»»»»»»»»»»»»»»»»»»»»» Registry Cleaning

    Registry Cleaning done.

    »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler After SmitFraudFix
    !!!Attention, following keys are not inevitably infected!!!

    SrchSTS.exe by S!Ri
    Search SharedTaskScheduler's .dll


    »»»»»»»»»»»»»»»»»»»»»»»» End

     
    Ergelli, 23.09.2007
    #3
  5. Ergelli

    Ergelli Member

    Liittynyt:
    23.09.2007
    Viestejä:
    10
    Kiitokset:
    0
    Pisteet:
    11
    En löytänyt HJT:llä fixattavaks tätä riviä mistään.

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://softwarereferral.com/jump.php?wmid=6010&mid=MjI6Ojg5&lid=2

    Tässä on HJT-logit smitfraudifixin jälkeen.

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 18:48, on 2007-09-23
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
    C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nTrayFw.exe
    C:\WINDOWS\SOUNDMAN.EXE
    C:\Program Files\DAEMON Tools\daemon.exe
    C:\Program Files\Winamp\winampa.exe
    C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
    C:\Program Files\QuickTime\QTTask.exe
    C:\iTunes\iTunesHelper.exe
    C:\WINDOWS\system32\ctfmon.exe
    D:\Halflife ja CS Source\Steam.exe
    C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
    C:\Program Files\Skype\Phone\Skype.exe
    C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
    C:\WINDOWS\system32\CTsvcCDA.exe
    C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
    C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe
    C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
    C:\Program Files\Logitech\SetPoint\SetPoint.exe
    C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
    C:\Program Files\Common Files\Logitech\KHAL\KHALMNPR.EXE
    C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
    C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Documents and Settings\Mikael\Työpöytä\HiJackThis.exe

    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: ContributeBHO Class - {074C1DC5-9320-4A9A-947D-C042949C6216} - E:\Photoshop\/Adobe Contribute CS3/contributeieplugin.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\Ohjelmat\SPYBOT~1\SDHelper.dll
    O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - D:\PROGRA~1\FlashGet\jccatch.dll
    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
    O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - D:\PROGRA~1\FlashGet\fgiebar.dll
    O3 - Toolbar: Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - E:\Photoshop\/Adobe Contribute CS3/contributeieplugin.dll
    O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
    O4 - HKLM\..\Run: [nTrayFw] C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nTrayFw.exe
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
    O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
    O4 - HKLM\..\Run: [dmxga.exe] C:\WINDOWS\system32\dmxga.exe
    O4 - HKLM\..\Run: [Adobe_ID0EYTHM] C:\PROGRA~1\COMMON~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "E:\adobe\adobe reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
    O4 - HKLM\..\Run: [iTunesHelper] "C:\iTunes\iTunesHelper.exe"
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [Steam] D:\Halflife ja CS Source\Steam.exe -silent
    O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
    O4 - HKCU\..\Run: [SsAAD.exe] C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
    O4 - HKCU\..\Run: [AdobeUpdater] C:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe
    O4 - HKCU\..\Run: [CTSyncU.exe] "C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe"
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Paikallinen palve')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Verkkopalve')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
    O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
    O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
    O8 - Extra context menu item: &Search - ?p=ZNfox000
    O8 - Extra context menu item: Lataa FlashGetillä - D:\Program Files\FlashGet\jc_link.htm
    O8 - Extra context menu item: Lataa kaikki FlashGetillä - D:\Program Files\FlashGet\jc_all.htm
    O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
    O9 - Extra button: Oheistiedot - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: PacificPoker - {94EDF7B4-4272-4af3-8F8B-4E2F68E225B7} - D:\PROGRA~1\PACIFI~1\pacificpoker.exe
    O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\PROGRA~1\FlashGet\flashget.exe
    O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\PROGRA~1\FlashGet\flashget.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
    O17 - HKLM\System\CCS\Services\Tcpip\..\{4F705067-7E1D-406E-AEB6-F190D88FC4BF}: NameServer = 208.67.220.220,208.67.222.222
    O17 - HKLM\System\CCS\Services\Tcpip\..\{6FE64CD9-2B24-4E23-90BD-45C45CC7F5FB}: NameServer = 85.255.114.4,85.255.112.137
    O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
    O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
    O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
    O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
    O23 - Service: Adobe Version Cue CS3 - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe
    O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
    O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
    O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
    O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
    O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
    O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Apache Software Foundation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
    O23 - Service: iPod-palvelu (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
    O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
    O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
    O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
    O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
    O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe

    --
    End of file - 10354 bytes
     
    Ergelli, 23.09.2007
    #4
  6. Hujo

    Hujo Guest

    Hujo, 23.09.2007
    #5
  7. Ergelli

    Ergelli Member

    Liittynyt:
    23.09.2007
    Viestejä:
    10
    Kiitokset:
    0
    Pisteet:
    11
    Tässä ois SDFix:n raportti ja sen jälkeen suoritetun HJT:n uusin raportti


    SDFix: Version 1.107

    Run by Mikael on 2007-09-23 at 18:59

    Microsoft Windows XP [versio 5.1.2600]

    Running From: C:\DOCUME~1\Mikael\TYPYT~1\SDFix

    Safe Mode:
    Checking Services:


    Restoring Windows Registry Values
    Restoring Windows Default Hosts File

    Rebooting...


    Normal Mode:
    Checking Files:

    Trojan Files Found:

    C:\Documents and Settings\Mikael\Ty”p”yt„\kuvat\Privacy Protector.url - Deleted
    C:\Documents and Settings\Mikael\Ty”p”yt„\kuvat\Spyware&Malware Protection.url - Deleted
    C:\WINDOWS\dat.txt - Deleted
    C:\WINDOWS\rs.txt - Deleted



    Removing Temp Files...

    ADS Check:

    C:\WINDOWS
    No streams found.

    C:\WINDOWS\system32
    No streams found.

    C:\WINDOWS\system32\svchost.exe
    No streams found.

    C:\WINDOWS\system32\ntoskrnl.exe
    No streams found.



    Final Check:

    Remaining Services:
    ------------------




    Authorized Application Key Export:

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
    "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:mad:xpsp2res.dll,-22019"
    "C:\\Program Files\\F-Secure\\BackWeb\\7681197\\program\\F-Secure Automatic Update.exe"="C:\\Program Files\\F-Secure\\BackWeb\\7681197\\program\\F-Secure Automatic Update.exe:*:Enabled:F-Secure Automatic Update"
    "C:\\Program Files\\NVIDIA Corporation\\NetworkAccessManager\\Apache Group\\Apache2\\bin\\Apache.exe"="C:\\Program Files\\NVIDIA Corporation\\NetworkAccessManager\\Apache Group\\Apache2\\bin\\Apache.exe:*:Enabled:Apache HTTP Server"
    "E:\\World of Warcraft\\WoW-1.6.0-enGB-downloader.exe"="E:\\World of Warcraft\\WoW-1.6.0-enGB-downloader.exe:*:Enabled:Blizzard Downloader"
    "D:\\Halflife ja CS Source\\Steam.exe"="D:\\Halflife ja CS Source\\Steam.exe:*:Enabled:Steam"
    "D:\\Halflife ja CS Source\\SteamApps\\tositappaja\\counter-strike source\\hl2.exe"="D:\\Halflife ja CS Source\\SteamApps\\tositappaja\\counter-strike source\\hl2.exe:*:Enabled:hl2"
    "C:\\Program Files\\ABC\\abc.exe"="C:\\Program Files\\ABC\\abc.exe:*:Enabled:abc"
    "E:\\World of Warcraft\\WoW-1.6.0.4500-to-1.6.1-enGB-downloader.exe"="E:\\World of Warcraft\\WoW-1.6.0.4500-to-1.6.1-enGB-downloader.exe:*:Enabled:Blizzard Downloader"
    "D:\\Mikael\\WoW-1.6.1.4544-to-0.7.0-enGB-downloader.exe"="D:\\Mikael\\WoW-1.6.1.4544-to-0.7.0-enGB-downloader.exe:*:Enabled:Blizzard Downloader"
    "C:\\Program Files\\Messenger\\msmsgs.exe"="C:\\Program Files\\Messenger\\msmsgs.exe:*:Enabled:Windows Messenger"
    "C:\\WINDOWS\\pchealth\\helpctr\\binaries\\HelpCtr.exe"="C:\\WINDOWS\\pchealth\\helpctr\\binaries\\HelpCtr.exe:*:Enabled:Et„tuki - Windows Messenger ja „„niyhteys"
    "C:\\Program Files\\DC++\\DCPlusPlus.exe"="C:\\Program Files\\DC++\\DCPlusPlus.exe:*:Enabled:DC++"
    "E:\\Battlefield 2142\\BF2142.exe"="E:\\Battlefield 2142\\BF2142.exe:*:Enabled:Battlefield 2"
    "C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"="C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger"
    "C:\\Program Files\\Bonjour\\mDNSResponder.exe"="C:\\Program Files\\Bonjour\\mDNSResponder.exe:*:Enabled:Bonjour"
    "C:\\Program Files\\Common Files\\Adobe\\Adobe Version Cue CS3\\Server\\bin\\VersionCueCS3.exe"="C:\\Program Files\\Common Files\\Adobe\\Adobe Version Cue CS3\\Server\\bin\\VersionCueCS3.exe:*:Enabled:Adobe Version Cue CS3 Server"
    "C:\\iTunes\\iTunes.exe"="C:\\iTunes\\iTunes.exe:*:Enabled:iTunes"
    "C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
    "C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
    "C:\\Program Files\\Skype\\Phone\\Skype.exe"="C:\\Program Files\\Skype\\Phone\\Skype.exe:*:Enabled:Skype"

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
    "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:mad:xpsp2res.dll,-22019"
    "C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"="C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger"
    "C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
    "C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"

    Remaining Files:
    ---------------

    File Backups: - C:\DOCUME~1\Mikael\TYPYT~1\SDFix\backups\backups.zip

    Files with Hidden Attributes:

    Thu 14 Jul 2005 56 ..SHR --- "C:\WINDOWS\system32\492FE3324A.sys"
    Thu 14 Jul 2005 1,682 A.SH. --- "C:\WINDOWS\system32\KGyGaAvL.sys"
    Sat 13 Aug 2005 4,348 A.SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak"

    Finished!




    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 19:12, on 2007-09-23
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
    C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
    C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\WINDOWS\system32\CTsvcCDA.exe
    C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
    C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
    C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
    C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\notepad.exe
    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
    C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nTrayFw.exe
    C:\WINDOWS\SOUNDMAN.EXE
    C:\Program Files\DAEMON Tools\daemon.exe
    C:\Program Files\Winamp\winampa.exe
    C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
    C:\Program Files\QuickTime\QTTask.exe
    C:\iTunes\iTunesHelper.exe
    C:\WINDOWS\system32\ctfmon.exe
    D:\Halflife ja CS Source\Steam.exe
    C:\Program Files\Skype\Phone\Skype.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
    C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
    C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe
    C:\Program Files\Logitech\SetPoint\SetPoint.exe
    C:\Program Files\Common Files\Logitech\KHAL\KHALMNPR.EXE
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Documents and Settings\Mikael\Työpöytä\HiJackThis.exe

    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: ContributeBHO Class - {074C1DC5-9320-4A9A-947D-C042949C6216} - E:\Photoshop\/Adobe Contribute CS3/contributeieplugin.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\Ohjelmat\SPYBOT~1\SDHelper.dll
    O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - D:\PROGRA~1\FlashGet\jccatch.dll
    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
    O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - D:\PROGRA~1\FlashGet\fgiebar.dll
    O3 - Toolbar: Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - E:\Photoshop\/Adobe Contribute CS3/contributeieplugin.dll
    O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
    O4 - HKLM\..\Run: [nTrayFw] C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nTrayFw.exe
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
    O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
    O4 - HKLM\..\Run: [dmxga.exe] C:\WINDOWS\system32\dmxga.exe
    O4 - HKLM\..\Run: [Adobe_ID0EYTHM] C:\PROGRA~1\COMMON~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "E:\adobe\adobe reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
    O4 - HKLM\..\Run: [iTunesHelper] "C:\iTunes\iTunesHelper.exe"
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [Steam] D:\Halflife ja CS Source\Steam.exe -silent
    O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
    O4 - HKCU\..\Run: [SsAAD.exe] C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
    O4 - HKCU\..\Run: [AdobeUpdater] C:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe
    O4 - HKCU\..\Run: [CTSyncU.exe] "C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe"
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Paikallinen palve')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Verkkopalve')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
    O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
    O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
    O8 - Extra context menu item: &Search - ?p=ZNfox000
    O8 - Extra context menu item: Lataa FlashGetillä - D:\Program Files\FlashGet\jc_link.htm
    O8 - Extra context menu item: Lataa kaikki FlashGetillä - D:\Program Files\FlashGet\jc_all.htm
    O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
    O9 - Extra button: Oheistiedot - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: PacificPoker - {94EDF7B4-4272-4af3-8F8B-4E2F68E225B7} - D:\PROGRA~1\PACIFI~1\pacificpoker.exe
    O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\PROGRA~1\FlashGet\flashget.exe
    O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\PROGRA~1\FlashGet\flashget.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
    O17 - HKLM\System\CCS\Services\Tcpip\..\{4F705067-7E1D-406E-AEB6-F190D88FC4BF}: NameServer = 208.67.220.220,208.67.222.222
    O17 - HKLM\System\CCS\Services\Tcpip\..\{6FE64CD9-2B24-4E23-90BD-45C45CC7F5FB}: NameServer = 85.255.114.4,85.255.112.137
    O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
    O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
    O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
    O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
    O23 - Service: Adobe Version Cue CS3 - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe
    O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
    O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
    O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
    O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
    O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
    O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Apache Software Foundation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
    O23 - Service: iPod-palvelu (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
    O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
    O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
    O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
    O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
    O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe

    --
    End of file - 10387 bytes

     
    Ergelli, 23.09.2007
    #6
  8. Hujo

    Hujo Guest

    katos tuolla ylenpänä on uusi ohjelma ajettavaksi
    nykäse se tässä välissä
     
    Moderaattorin viimeksi muokkaama: 23.09.2007
    Hujo, 23.09.2007
    #7
  9. Ergelli

    Ergelli Member

    Liittynyt:
    23.09.2007
    Viestejä:
    10
    Kiitokset:
    0
    Pisteet:
    11
    Tässä on Fixwareout:n reportaasi tilanteesta.

    Username "Mikael" - 2007-09-23 20:19:30 [Fixwareout edited 2007/07/05]

    »»»»»Prerun check
    HKLM\SOFTWARE\~\CurrentVersion\Run\ ="dmxga"
    HKLM\SOFTWARE\~\Winlogon\ "System"="csxed.exe"

    HKEY_LOCAL_MACHINE\system\currentcontrolset\services\tcpip\parameters\interfaces\{6FE64CD9-2B24-4E23-90BD-45C45CC7F5FB}
    "nameserver"="85.255.114.4,85.255.112.137" <Value cleared.

    DNS-tulkintatoiminnon välimuistin tyhjentäminen onnistui.


    System was rebooted successfully.

    »»»»» Postrun check
    HKLM\SOFTWARE\~\Winlogon\ "system"=""
    ....
    ....
    »»»»» Misc files.
    ....
    »»»»» Checking for older varients.
    ....

    »»»»» Current runs (hklm hkcu "run" Keys Only)
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "NVMixerTray"="\"C:\\Program Files\\NVIDIA Corporation\\NvMixer\\NVMixerTray.exe\""
    "ATIPTA"="C:\\Program Files\\ATI Technologies\\ATI Control Panel\\atiptaxx.exe"
    "SunJavaUpdateSched"="C:\\Program Files\\Java\\jre1.5.0_04\\bin\\jusched.exe"
    "nTrayFw"="C:\\Program Files\\NVIDIA Corporation\\NetworkAccessManager\\bin\\nTrayFw.exe"
    "SoundMan"="SOUNDMAN.EXE"
    "NeroFilterCheck"="C:\\WINDOWS\\system32\\NeroCheck.exe"
    "DAEMON Tools"="\"C:\\Program Files\\DAEMON Tools\\daemon.exe\" -lang 1033"
    "WinampAgent"="C:\\Program Files\\Winamp\\winampa.exe"
    "Adobe_ID0EYTHM"="C:\\PROGRA~1\\COMMON~1\\Adobe\\ADOBEV~1\\Server\\bin\\VERSIO~2.EXE"
    "Adobe Reader Speed Launcher"="\"E:\\adobe\\adobe reader 8.0\\Reader\\Reader_sl.exe\""
    "avgnt"="\"C:\\Program Files\\AntiVir PersonalEdition Classic\\avgnt.exe\" /min"
    "QuickTime Task"="\"C:\\Program Files\\QuickTime\\QTTask.exe\" -atboottime"
    "iTunesHelper"="\"C:\\iTunes\\iTunesHelper.exe\""
    "!AVG Anti-Spyware"="\"C:\\Program Files\\Grisoft\\AVG Anti-Spyware 7.5\\avgas.exe\" /minimized"

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "CTFMON.EXE"="C:\\WINDOWS\\system32\\ctfmon.exe"
    "Steam"="D:\\Halflife ja CS Source\\Steam.exe -silent"
    "Skype"="\"C:\\Program Files\\Skype\\Phone\\Skype.exe\" /nosplash /minimized"
    "msnmsgr"="\"C:\\Program Files\\MSN Messenger\\msnmsgr.exe\" /background"
    "LDM"="C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"
    "SsAAD.exe"="C:\\PROGRA~1\\Sony\\SONICS~1\\SsAAD.exe"
    "AdobeUpdater"="C:\\Program Files\\Common Files\\Adobe\\Updater5\\AdobeUpdater.exe"
    "CTSyncU.exe"="\"C:\\Program Files\\Creative\\Sync Manager Unicode\\CTSyncU.exe\""
    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\AdobeUpdater]
    ....
    Hosts file was reset, If you use a custom hosts file please replace it
    »»»»» End report »»»»»
     
    Ergelli, 23.09.2007
    #8
  10. Ergelli

    Ergelli Member

    Liittynyt:
    23.09.2007
    Viestejä:
    10
    Kiitokset:
    0
    Pisteet:
    11
    Ehdin kyllä ajaa AVG Anti-spyware 7.5:n scannauksen enne Fixwareout:n ajamista ja AVG oksensi tälläsen raportin.

    ---------------------------------------------------------
    AVG Anti-Spyware - Scan Report
    ---------------------------------------------------------

    + Created at: 20:12 2007-09-23

    + Scan result:



    D:\Mikael\CursorManiaFFSetup2.0.4.21.exe -> Dropper.Small : Cleaned with backup (quarantined).
    :mozilla.114:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned.
    :mozilla.115:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned.
    :mozilla.116:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.117:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.118:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.119:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.120:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.121:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.122:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.123:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.124:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.125:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.126:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.127:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.128:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.129:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.130:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.131:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.132:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.133:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.134:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.135:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.190:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.191:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.192:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.193:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.194:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.195:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.196:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.197:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.198:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.199:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.200:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.201:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.247:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.254:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.271:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.290:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.418:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.435:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.475:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.482:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.663:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.774:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.785:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.869:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    C:\Documents and Settings\Mikael\Cookies\mikael@2o7[2].txt -> TrackingCookie.2o7 : Cleaned.
    C:\Documents and Settings\Mikael\Cookies\mikael@blinck.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
    C:\Documents and Settings\Mikael\Cookies\mikael@msnaccountservices.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
    C:\Documents and Settings\Mikael\Cookies\mikael@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.626:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.71i : Cleaned.
    :mozilla.156:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
    :mozilla.157:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
    :mozilla.79:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
    :mozilla.80:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
    :mozilla.81:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
    :mozilla.82:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
    C:\Documents and Settings\Mikael\Cookies\mikael@adbrite[2].txt -> TrackingCookie.Adbrite : Cleaned.
    :mozilla.782:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Adjuggler : Cleaned.
    :mozilla.783:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Adjuggler : Cleaned.
    :mozilla.784:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Adjuggler : Cleaned.
    :mozilla.836:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Adobe : Cleaned.
    C:\Documents and Settings\Mikael\Cookies\mikael@www.adobe[1].txt -> TrackingCookie.Adobe : Cleaned.
    :mozilla.273:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Adrevolver : Cleaned.
    :mozilla.165:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.
    :mozilla.166:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.
    :mozilla.455:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Adtech : Cleaned.
    :mozilla.456:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Adtech : Cleaned.
    C:\Documents and Settings\Mikael\Cookies\mikael@adtech[2].txt -> TrackingCookie.Adtech : Cleaned.
    :mozilla.10:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
    :mozilla.242:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Advertising : Cleaned.
    :mozilla.243:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Advertising : Cleaned.
    :mozilla.244:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Advertising : Cleaned.
    :mozilla.245:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Advertising : Cleaned.
    :mozilla.246:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Advertising : Cleaned.
    :mozilla.6:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
    :mozilla.7:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
    :mozilla.8:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
    :mozilla.9:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
    :mozilla.119:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
    :mozilla.205:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
    C:\Documents and Settings\Mikael\Cookies\mikael@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned.
    :mozilla.234:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
    :mozilla.235:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
    :mozilla.338:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
    :mozilla.339:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
    C:\Documents and Settings\Mikael\Cookies\mikael@burstnet[1].txt -> TrackingCookie.Burstnet : Cleaned.
    :mozilla.368:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
    :mozilla.369:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
    :mozilla.370:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
    :mozilla.81:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
    :mozilla.82:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
    :mozilla.83:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
    :mozilla.84:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
    C:\Documents and Settings\Mikael\Cookies\mikael@centrport[1].txt -> TrackingCookie.Centrport : Cleaned.
    :mozilla.482:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Clickzs : Cleaned.
    :mozilla.483:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Clickzs : Cleaned.
    :mozilla.522:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Clickzs : Cleaned.
    :mozilla.523:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Clickzs : Cleaned.
    :mozilla.524:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Clickzs : Cleaned.
    :mozilla.525:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Clickzs : Cleaned.
    :mozilla.526:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Clickzs : Cleaned.
    :mozilla.676:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Clickzs : Cleaned.
    :mozilla.677:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Clickzs : Cleaned.
    :mozilla.564:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Cnn : Cleaned.
    :mozilla.249:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Com : Cleaned.
    :mozilla.250:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Com : Cleaned.
    :mozilla.672:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Com : Cleaned.
    C:\Documents and Settings\Mikael\Cookies\mikael@com[2].txt -> TrackingCookie.Com : Cleaned.
    :mozilla.16:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
    :mozilla.17:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
    :mozilla.83:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
    :mozilla.294:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Estat : Cleaned.
    :mozilla.687:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Estat : Cleaned.
    C:\Documents and Settings\Mikael\Cookies\mikael@estat[1].txt -> TrackingCookie.Estat : Cleaned.
    :mozilla.160:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Euroclick : Cleaned.
    :mozilla.394:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Euroclick : Cleaned.
    C:\Documents and Settings\Mikael\Cookies\mikael@as-us.falkag[2].txt -> TrackingCookie.Falkag : Cleaned.
    :mozilla.93:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
    :mozilla.94:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
    :mozilla.97:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
    C:\Documents and Settings\Mikael\Cookies\mikael@fortunecity[1].txt -> TrackingCookie.Fortunecity : Cleaned.
    :mozilla.66:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
    :mozilla.864:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
    :mozilla.90:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
    :mozilla.175:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
    :mozilla.258:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
    :mozilla.259:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
    :mozilla.260:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
    :mozilla.264:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
    :mozilla.62:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
    :mozilla.63:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
    :mozilla.66:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
    :mozilla.337:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Imrworldwide : Cleaned.
    :mozilla.338:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Imrworldwide : Cleaned.
    :mozilla.373:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Imrworldwide : Cleaned.
    :mozilla.374:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Imrworldwide : Cleaned.
    :mozilla.786:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Information : Cleaned.
    C:\Documents and Settings\Mikael\Cookies\mikael@searchportal.information[1].txt -> TrackingCookie.Information : Cleaned.
    C:\Documents and Settings\Mikael\Cookies\mikael@ilead.itrack[2].txt -> TrackingCookie.Itrack : Cleaned.
    :mozilla.348:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Ivwbox : Cleaned.
    :mozilla.726:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Ivwbox : Cleaned.
    C:\Documents and Settings\Mikael\Cookies\mikael@ivwbox[1].txt -> TrackingCookie.Ivwbox : Cleaned.
    :mozilla.735:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Komtrack : Cleaned.
    C:\Documents and Settings\Mikael\Cookies\mikael@search.live[1].txt -> TrackingCookie.Live : Cleaned.
    :mozilla.758:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Masterstats : Cleaned.
    :mozilla.141:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.
    C:\Documents and Settings\Mikael\Cookies\mikael@auto.search.msn[2].txt -> TrackingCookie.Msn : Cleaned.
    C:\Documents and Settings\Mikael\Cookies\mikael@search.msn[2].txt -> TrackingCookie.Msn : Cleaned.
    :mozilla.837:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Ne : Cleaned.
    :mozilla.18:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Netflame : Cleaned.
    :mozilla.23:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Netflame : Cleaned.
    :mozilla.800:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Onestat : Cleaned.
    :mozilla.801:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Onestat : Cleaned.
    :mozilla.503:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Overture : Cleaned.
    :mozilla.504:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Overture : Cleaned.
    :mozilla.87:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Overture : Cleaned.
    :mozilla.88:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Overture : Cleaned.
    :mozilla.89:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Overture : Cleaned.
    C:\Documents and Settings\Mikael\Cookies\mikael@overture[2].txt -> TrackingCookie.Overture : Cleaned.
    :mozilla.900:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Paypal : Cleaned.
    :mozilla.161:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
    :mozilla.162:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
    :mozilla.163:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
    :mozilla.164:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
    :mozilla.341:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
    :mozilla.342:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
    :mozilla.343:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
    :mozilla.344:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
    :mozilla.354:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
    :mozilla.355:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
    :mozilla.356:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
    C:\Documents and Settings\Mikael\Cookies\mikael@ads.pointroll[2].txt -> TrackingCookie.Pointroll : Cleaned.
    :mozilla.449:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Qksrv : Cleaned.
    :mozilla.450:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Qksrv : Cleaned.
    :mozilla.779:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Qksrv : Cleaned.
    :mozilla.780:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Qksrv : Cleaned.
    :mozilla.880:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Quarterserver : Cleaned.
    :mozilla.384:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
    :mozilla.385:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
    C:\Documents and Settings\Mikael\Cookies\mikael@questionmarket[1].txt -> TrackingCookie.Questionmarket : Cleaned.
    C:\Documents and Settings\Mikael\Cookies\mikael@ads.realcastmedia[1].txt -> TrackingCookie.Realcastmedia : Cleaned.
    :mozilla.105:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
    :mozilla.106:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
    :mozilla.107:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
    :mozilla.108:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
    :mozilla.454:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
    :mozilla.455:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
    :mozilla.456:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
    C:\Documents and Settings\Mikael\Cookies\mikael@realmedia[1].txt -> TrackingCookie.Realmedia : Cleaned.
    :mozilla.787:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Revenue : Cleaned.
    C:\Documents and Settings\Mikael\Cookies\mikael@revenue[1].txt -> TrackingCookie.Revenue : Cleaned.
    :mozilla.345:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Revsci : Cleaned.
    :mozilla.346:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Revsci : Cleaned.
    :mozilla.347:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Revsci : Cleaned.
    :mozilla.348:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Revsci : Cleaned.
    :mozilla.349:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Revsci : Cleaned.
    :mozilla.350:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Revsci : Cleaned.
    :mozilla.351:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Revsci : Cleaned.
    :mozilla.352:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Revsci : Cleaned.
    :mozilla.353:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Revsci : Cleaned.
    :mozilla.459:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
    :mozilla.460:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
    :mozilla.461:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
    :mozilla.462:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
    :mozilla.463:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
    :mozilla.464:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
    :mozilla.465:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
    :mozilla.466:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
    :mozilla.620:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
    :mozilla.24:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
    :mozilla.25:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
    :mozilla.26:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
    :mozilla.27:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
    :mozilla.28:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
    :mozilla.31:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
    :mozilla.546:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
    :mozilla.547:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
    :mozilla.548:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
    :mozilla.549:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
    :mozilla.550:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
    :mozilla.551:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
    C:\Documents and Settings\Mikael\Cookies\mikael@bs.serving-sys[1].txt -> TrackingCookie.Serving-sys : Cleaned.
    C:\Documents and Settings\Mikael\Cookies\mikael@serving-sys[1].txt -> TrackingCookie.Serving-sys : Cleaned.
    :mozilla.253:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.254:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.255:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.256:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.257:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.258:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.259:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.260:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.261:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.262:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.327:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.328:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.329:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.330:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.331:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.332:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.420:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Sitestat : Cleaned.
    :mozilla.759:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned.
    :mozilla.409:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Skype : Cleaned.
    :mozilla.489:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Skype : Cleaned.
    :mozilla.490:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Skype : Cleaned.
    :mozilla.554:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Skype : Cleaned.
    :mozilla.799:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Skype : Cleaned.
    C:\Documents and Settings\Mikael\Cookies\mikael@skype[2].txt -> TrackingCookie.Skype : Cleaned.
    :mozilla.584:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Smartadserver : Cleaned.
    :mozilla.585:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Smartadserver : Cleaned.
    :mozilla.586:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Smartadserver : Cleaned.
    :mozilla.587:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Smartadserver : Cleaned.
    :mozilla.588:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Smartadserver : Cleaned.
    :mozilla.907:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned.
    :mozilla.908:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned.
    :mozilla.909:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned.
    C:\Documents and Settings\Mikael\Cookies\mikael@www.smartadserver[2].txt -> TrackingCookie.Smartadserver : Cleaned.
    C:\Documents and Settings\Mikael\Cookies\mikael@starware[2].txt -> TrackingCookie.Starware : Cleaned.
    :mozilla.77:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
    :mozilla.13:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Statistik-gallup : Cleaned.
    :mozilla.14:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Statistik-gallup : Cleaned.
    :mozilla.56:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Statistik-gallup : Cleaned.
    C:\Documents and Settings\Mikael\Cookies\mikael@statistik-gallup[1].txt -> TrackingCookie.Statistik-gallup : Cleaned.
    :mozilla.295:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
    :mozilla.296:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
    :mozilla.297:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
    :mozilla.509:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
    :mozilla.510:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
    :mozilla.511:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
    :mozilla.512:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
    :mozilla.112:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
    :mozilla.113:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
    :mozilla.57:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
    :mozilla.58:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
    :mozilla.59:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned.
    C:\Documents and Settings\Mikael\Cookies\mikael@trafficmp[2].txt -> TrackingCookie.Trafficmp : Cleaned.
    :mozilla.32:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
    :mozilla.6:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
    C:\Documents and Settings\Mikael\Cookies\mikael@tribalfusion[2].txt -> TrackingCookie.Tribalfusion : Cleaned.
    :mozilla.539:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Weborama : Cleaned.
    :mozilla.217:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Webtrends : Cleaned.
    C:\Documents and Settings\Mikael\Cookies\mikael@m.webtrends[1].txt -> TrackingCookie.Webtrends : Cleaned.
    :mozilla.571:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Yadro : Cleaned.
    :mozilla.572:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Yadro : Cleaned.
    :mozilla.613:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
    :mozilla.614:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
    :mozilla.615:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
    :mozilla.616:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\zsh5jdp7.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
    :mozilla.88:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
    :mozilla.89:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
    :mozilla.90:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
    :mozilla.91:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
    :mozilla.92:C:\Documents and Settings\Mikael\Application Data\Mozilla\Firefox\Profiles\x7katqit.Mikael\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
    C:\System Volume Information\_restore{273BC510-EB93-43B0-9877-6DA505C20742}\RP472\A0223316.ocx -> Trojan.Agent.aqj : Cleaned with backup (quarantined).
    C:\System Volume Information\_restore{273BC510-EB93-43B0-9877-6DA505C20742}\RP461\A0208268.exe -> Trojan.DNSChanger.en : Cleaned with backup (quarantined).
    D:\System Volume Information\_restore{273BC510-EB93-43B0-9877-6DA505C20742}\RP466\A0210637.exe/mwsSetup.CommonCodebase.exe -> Trojan.Isbar.s : Cleaned with backup (quarantined).


    ::Report end

     
    Ergelli, 23.09.2007
    #9
  11. Hujo

    Hujo Guest

    scannaa uusi hjt:n loki
     
    Hujo, 23.09.2007
    #10
  12. Ergelli

    Ergelli Member

    Liittynyt:
    23.09.2007
    Viestejä:
    10
    Kiitokset:
    0
    Pisteet:
    11
    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 16:53, on 2007-09-25
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
    C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
    C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
    C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\WINDOWS\system32\CTsvcCDA.exe
    C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
    C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
    C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
    C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
    C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nTrayFw.exe
    C:\WINDOWS\SOUNDMAN.EXE
    C:\Program Files\DAEMON Tools\daemon.exe
    C:\Program Files\Winamp\winampa.exe
    C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
    C:\Program Files\QuickTime\QTTask.exe
    C:\iTunes\iTunesHelper.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
    C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    C:\WINDOWS\system32\ctfmon.exe
    D:\Halflife ja CS Source\Steam.exe
    C:\Program Files\Skype\Phone\Skype.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
    C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe
    C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
    C:\Program Files\Logitech\SetPoint\SetPoint.exe
    C:\Program Files\Common Files\Logitech\KHAL\KHALMNPR.EXE
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Documents and Settings\Mikael\Työpöytä\HiJackThis.exe

    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: ContributeBHO Class - {074C1DC5-9320-4A9A-947D-C042949C6216} - E:\Photoshop\/Adobe Contribute CS3/contributeieplugin.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\Ohjelmat\SPYBOT~1\SDHelper.dll
    O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - D:\PROGRA~1\FlashGet\jccatch.dll
    O3 - Toolbar: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
    O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - D:\PROGRA~1\FlashGet\fgiebar.dll
    O3 - Toolbar: Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - E:\Photoshop\/Adobe Contribute CS3/contributeieplugin.dll
    O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
    O4 - HKLM\..\Run: [nTrayFw] C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nTrayFw.exe
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
    O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
    O4 - HKLM\..\Run: [Adobe_ID0EYTHM] C:\PROGRA~1\COMMON~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "E:\adobe\adobe reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
    O4 - HKLM\..\Run: [iTunesHelper] "C:\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
    O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [Steam] D:\Halflife ja CS Source\Steam.exe -silent
    O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
    O4 - HKCU\..\Run: [SsAAD.exe] C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
    O4 - HKCU\..\Run: [AdobeUpdater] C:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe
    O4 - HKCU\..\Run: [CTSyncU.exe] "C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe"
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Paikallinen palve')
    O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Paikallinen palve')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Verkkopalve')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
    O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
    O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
    O8 - Extra context menu item: &Search - ?p=ZNfox000
    O8 - Extra context menu item: Lataa FlashGetillä - D:\Program Files\FlashGet\jc_link.htm
    O8 - Extra context menu item: Lataa kaikki FlashGetillä - D:\Program Files\FlashGet\jc_all.htm
    O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
    O9 - Extra button: Oheistiedot - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: PacificPoker - {94EDF7B4-4272-4af3-8F8B-4E2F68E225B7} - D:\PROGRA~1\PACIFI~1\pacificpoker.exe
    O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\PROGRA~1\FlashGet\flashget.exe
    O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - D:\PROGRA~1\FlashGet\flashget.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
    O17 - HKLM\System\CCS\Services\Tcpip\..\{4F705067-7E1D-406E-AEB6-F190D88FC4BF}: NameServer = 208.67.220.220,208.67.222.222
    O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
    O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
    O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222
    O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
    O23 - Service: Adobe Version Cue CS3 - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe
    O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
    O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
    O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
    O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
    O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
    O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
    O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
    O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
    O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Apache Software Foundation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
    O23 - Service: iPod-palvelu (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
    O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
    O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
    O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
    O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
    O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe

    --
    End of file - 11614 bytes
     
    Ergelli, 25.09.2007
    #11
  13. Hujo

    Hujo Guest

    sulla on siellä kaksi virustorjuntaa

    avast ja avg kumpaa käytät ?

     
    Hujo, 27.09.2007
    #12

Jaa tämä sivu