Logfile of HijackThis v1.99.1 Scan saved at 22:37:22, on 14.7.2005 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Sygate\SPF\smc.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\AVPersonal\AVGUARD.EXE C:\Program Files\AVPersonal\AVWUPSRV.EXE C:\WINDOWS\System32\tcpsvcs.exe C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe C:\Program Files\AVPersonal\AVGNT.EXE C:\Program Files\Winamp\winampa.exe C:\WINDOWS\System32\ctfmon.exe C:\Program Files\Skype\Phone\Skype.exe C:\WINDOWS\System32\wuauclt.exe C:\WINDOWS\explorer.exe C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe C:\Documents and Settings\Jukka\Työpöytä\hijackthis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit R3 - Default URLSearchHook is missing O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O4 - HKLM\..\Run: [HLL Data Parameter] hllcxpa.exe O4 - HKLM\..\Run: [Dot.net Networking] SNSS32.EXE O4 - HKLM\..\Run: [PPPOEO] pingppac.exe O4 - HKLM\..\Run: [Preview AdService] C:\Program Files\Preview AdService\PrevAdServ.exe O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033 O4 - HKLM\..\Run: [Windows Protectot] boxide.exe O4 - HKLM\..\Run: [IP Configre] winipcfg.exe O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe O4 - HKLM\..\Run: [AVGCtrl] "C:\Program Files\AVPersonal\AVGNT.EXE" /min O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe O4 - HKLM\..\RunServices: [HLL Data Parameter] hllcxpa.exe O4 - HKLM\..\RunServices: [Dot.net Networking] SNSS32.EXE O4 - HKLM\..\RunServices: [PPPOEO] pingppac.exe O4 - HKLM\..\RunServices: [Windows Protectot] boxide.exe O4 - HKLM\..\RunServices: [IP Configre] winipcfg.exe O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe O4 - HKCU\..\Run: [HLL Data Parameter] hllcxpa.exe O4 - HKCU\..\Run: [IP Configre] winipcfg.exe O4 - HKCU\..\Run: [Windows Protectot] boxide.exe O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized O4 - HKCU\..\RunServices: [HLL Data Parameter] hllcxpa.exe O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE O23 - Service: AntiVir Service (AntiVirService) - H+BEDV Datentechnik GmbH - C:\Program Files\AVPersonal\AVGUARD.EXE O23 - Service: AntiVir Update (AVWUpSrv) - H+BEDV Datentechnik GmbH, Germany - C:\Program Files\AVPersonal\AVWUPSRV.EXE O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe
Ainakin Windows ja IE pitää päivittää. Ja kyllä siellä töhnää on, Toymaatti ja muut gurut varmaan neuvovat tarkemmin.
Siirrä HjT kansioineen C:n juureen näin C:\hijackthis\HijackThis.exe Poista Lisää/Poista sovelluksesta Preview AdService Merkkaa nuo, sulje selain ja muut ikkunat, klikkaa Fix R3 - Default URLSearchHook is missing O4 - HKLM\..\Run: [HLL Data Parameter] hllcxpa.exe O4 - HKLM\..\Run: [HLL Data Parameter] hllcxpa.exe O4 - HKLM\..\Run: [Dot.net Networking] SNSS32.EXE O4 - HKLM\..\Run: [PPPOEO] pingppac.exe O4 - HKLM\..\Run: [Preview AdService] C:\Program Files\Preview AdService\PrevAdServ.exe O4 - HKLM\..\Run: [Windows Protectot] boxide.exe O4 - HKLM\..\RunServices: [HLL Data Parameter] hllcxpa.exe O4 - HKLM\..\RunServices: [Dot.net Networking] SNSS32.EXE O4 - HKLM\..\RunServices: [PPPOEO] pingppac.exe O4 - HKLM\..\RunServices: [Windows Protectot] boxide.exe O4 - HKCU\..\Run: [HLL Data Parameter] hllcxpa.exe O4 - HKCU\..\Run: [Windows Protectot] boxide.exe O4 - HKCU\..\RunServices: [HLL Data Parameter] hllcxpa.exe Poista tuo kansio jos se vielä löytyy C:\Program Files\===>Preview AdService<=== Sitten scannaa noilla online scannereilla ja anna poistaa kaikki mitä löytyy. - Trend Micro http://fi.trendmicro-europe.com/consumer/products/housecall_launch.php - Panda http://www.pandasoftware.com/activescan/com/activescan_principal.htm Ja vielä eScanilla - http://koti.mbnet.fi/pattaya1/escanmwav.htm Ja sitten tosiaankin, hae HETI uusimmat päivitykset XP:lle ja IE:lle
