1. Tämä sivusto käyttää keksejä (cookie). Jatkamalla sivuston käyttämistä hyväksyt keksien käyttämisen. Lue lisää.

Virus ongelma (onko enään?)

Viestiketju Virukset ja haittaohjelmat -osiossa. Ketjun avasi Horghuz 04.02.2009.

  1. Horghuz

    Horghuz Member

    Liittynyt:
    31.12.2008
    Viestejä:
    13
    Kiitokset:
    0
    Pisteet:
    11
    Eli on ollut jonkin näköisiä ongelmia virusten kanssa, antivirus spämmää joka toinen sekunti että troijalainen olisi tullut tms. Katselin kuitenkin noit muita aiheita ja löysin sieltä ton "malwarebyten" jolla scannasin koneen ja laitoin poista tulokset.

    Nyt ei ole ainakaan antivirus sanonut mitään, mutta tuossa ois toi loki jos joku vilkaisisi että mitäs sieltä löytyy?

    -----------------------------------------
    Saastuneita muistiprosesseja: 0
    Saastuneita muistimoduuleja: 5
    Saastuneita rekisteriavaimia: 14
    Saastuneita rekisteriarvoja: 6
    Saastuneita rekisterikohteita: 5
    Saastuneita hakemistoja: 0
    Saastuneita tiedostoja: 11

    Saastuneita muistiprosesseja:
    (Haitallisia kohteita ei löydetty)

    Saastuneita muistimoduuleja:
    C:\WINDOWS\system32\vuvimuwe.dll (Trojan.Vundo.H) -> Delete on reboot.
    C:\WINDOWS\system32\natulevo.dll (Trojan.Vundo.H) -> Delete on reboot.
    C:\WINDOWS\system32\vahoremo.dll (Trojan.Vundo.H) -> Delete on reboot.
    c:\WINDOWS\system32\zojatuba.dll (Trojan.Vundo.H) -> Delete on reboot.
    C:\WINDOWS\system32\womezila.dll (Trojan.Vundo.H) -> Delete on reboot.

    Saastuneita rekisteriavaimia:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5f11d5d5-3fb2-4add-84ad-d69bc9a5d312} (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cbxqhfvo (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{5f11d5d5-3fb2-4add-84ad-d69bc9a5d312} (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{a0fc910a-6f27-4a0b-b31a-25fb9b1fa4ba} (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{a0fc910a-6f27-4a0b-b31a-25fb9b1fa4ba} (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{a0fc910a-6f27-4a0b-b31a-25fb9b1fa4ba} (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    HKEY_CLASSES_ROOT\CLSID\{ec43e3fd-5c60-46a6-97d7-e0b85dbdd6c4} (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{5f11d5d5-3fb2-4add-84ad-d69bc9a5d312} (Trojan.Vundo) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{b64f4a7c-97c9-11da-8bde-f66bad1e3f3a} (Rogue.WinAntivirus) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\contim (Trojan.Vundo) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\dslcnnct (Trojan.Vundo) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\rdfa (Trojan.Vundo) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\FCOVM (Trojan.Vundo) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemoveRP (Trojan.Vundo) -> Quarantined and deleted successfully.

    Saastuneita rekisteriarvoja:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\08bcd828 (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\fadeyahoki (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\cpm0b8febb4 (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler\{ec43e3fd-5c60-46a6-97d7-e0b85dbdd6c4} (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\ssodl (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\{5f11d5d5-3fb2-4add-84ad-d69bc9a5d312} (Trojan.Vundo) -> Quarantined and deleted successfully.

    Saastuneita rekisterikohteita:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs (Trojan.Vundo.H) -> Data: c:\windows\system32\zojatuba.dll -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs (Trojan.Vundo.H) -> Data: system32\zojatuba.dll -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs (Trojan.Vundo.H) -> Data: c:\windows\system32\womezila.dll -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\Notification Packages (Trojan.Vundo.H) -> Data: c:\windows\system32\womezila.dll -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs (Trojan.Vundo.H) -> Data: system32\womezila.dll -> Quarantined and deleted successfully.

    Saastuneita hakemistoja:
    (Haitallisia kohteita ei löydetty)

    Saastuneita tiedostoja:
    C:\WINDOWS\system32\cbXQhFVo.dll (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\natulevo.dll (Trojan.Vundo.H) -> Delete on reboot.
    C:\WINDOWS\system32\ovelutan.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\vuvimuwe.dll (Trojan.Vundo.H) -> Delete on reboot.
    C:\WINDOWS\system32\ewumivuv.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    c:\WINDOWS\system32\zojatuba.dll (Trojan.Vundo.H) -> Delete on reboot.
    C:\WINDOWS\system32\vahoremo.dll (Trojan.Vundo.H) -> Delete on reboot.
    C:\WINDOWS\system32\womezila.dll (Trojan.Vundo.H) -> Delete on reboot.
    C:\WINDOWS\system32\kokufara.dll (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\yuhituka.dll (Trojan.Vundo.H) -> Quarantined and deleted successfully.
    C:\WINDOWS\system32\clkcnt.txt (Trojan.Vundo) -> Quarantined and deleted successfully.
     
  2.  
  3. Hujo

    Hujo Guest

    kaikki tuosta lokista näkyviin

    hjt loki myös
     
    Moderaattorin viimeksi muokkaama: 04.02.2009

Jaa tämä sivu