kone on perkuleen hidas. en tajua miksi. giant antispywarella olen haittaohjelmia etsinyt eikä löydä mitään tällä hetkellä :S tässä hjt-logi jos vaikka joku pro osaisi sieltä spotata jotain haittaohjelmia: Logfile of HijackThis v1.99.1 Scan saved at 15:25:24, on 1.12.2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\PROGRA~1\F-Secure\ANTIVI~1\BackWeb\7681197\Program\SERVIC~1.EXE C:\WINDOWS\System32\CTsvcCDA.exe C:\Program Files\F-Secure\Antivirus ja Palomuuri\Anti-Virus\fsgk32st.exe C:\Program Files\F-Secure\Antivirus ja Palomuuri\Anti-Virus\FSGK32.EXE C:\Program Files\F-Secure\Antivirus ja Palomuuri\BackWeb\7681197\program\fsbwsys.exe C:\Program Files\F-Secure\Antivirus ja Palomuuri\Anti-Virus\fssm32.exe C:\Program Files\F-Secure\Antivirus ja Palomuuri\Common\FSMA32.EXE C:\Program Files\F-Secure\Antivirus ja Palomuuri\Common\FSMB32.EXE C:\WINDOWS\System32\nvsvc32.exe C:\WINDOWS\System32\tcpsvcs.exe C:\WINDOWS\System32\MsPMSPSv.exe C:\Program Files\F-Secure\Antivirus ja Palomuuri\Common\FCH32.EXE C:\Program Files\F-Secure\Antivirus ja Palomuuri\Common\FAMEH32.EXE C:\Program Files\F-Secure\Antivirus ja Palomuuri\Common\FNRB32.EXE C:\Program Files\F-Secure\Antivirus ja Palomuuri\Common\FIH32.EXE C:\Program Files\F-Secure\Antivirus ja Palomuuri\Anti-Virus\fsav32.exe C:\Program Files\F-Secure\Antivirus ja Palomuuri\FWES\Program\fsdfwd.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\RUNDLL32.EXE C:\Program Files\GIANT Company Software\GIANT AntiSpyware\gcasServ.exe C:\WINDOWS\MXOaldr.exe C:\Program Files\Common Files\Real\Update_OB\realsched.exe C:\WINDOWS\system32\rundll32.exe C:\Program Files\Common Files\Real\Update_OB\realevent.exe C:\Program Files\F-Secure\Antivirus ja Palomuuri\Common\FSM32.EXE C:\Program Files\F-Secure\Antivirus ja Palomuuri\BackWeb\7681197\Program\F-Secure Automatic Update.exe C:\Program Files\F-Secure\Antivirus ja Palomuuri\FSGUI\fsguiexe.exe C:\Program Files\PeerGuardian2\pg2.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Microsoft Office\Office\OSA.EXE C:\Documents and Settings\Anton\Omat tiedostot\Ohjelmat\Winamp\winamp.exe C:\Program Files\MSN Messenger\msnmsgr.exe C:\WINDOWS\system32\taskmgr.exe C:\Program Files\GIANT Company Software\GIANT AntiSpyware\gcasDtServ.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\GIANT Company Software\GIANT AntiSpyware\GIANTAntiSpywareMain.exe C:\Documents and Settings\Anton\Työpöytä\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.euro.dell.com/ R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yle.fi/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.euro.dell.com/ R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yle.fi/ R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll O3 - Toolbar: MSN-työkalurivi - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar\01.01.2607.0\fi\msntb.dll (file missing) O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [mmtask] c:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\GIANT Company Software\GIANT AntiSpyware\gcasServ.exe" O4 - HKLM\..\Run: [MXO Auto Loader] C:\WINDOWS\MXOaldr.exe O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\NeroCheck.exe O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Antivirus ja Palomuuri\Common\FSM32.EXE" /splash O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure\Antivirus ja Palomuuri\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW O4 - HKCU\..\Run: [PeerGuardian] C:\Program Files\PeerGuardian2\pg2.exe O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - Global Startup: Microsoft Office Pikahaku.lnk = C:\Program Files\Microsoft Office\Office\FINDFAST.EXE O4 - Global Startup: Officen käynnistys.lnk = C:\Program Files\Microsoft Office\Office\OSA.EXE O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html O8 - Extra context menu item: Translate into English - res://c:\program files\google\GoogleToolbar1.dll/cmtrans.html O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O15 - Trusted Zone: http://www.mbnet.fi O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com//PhotoUpload/MsnPUpld.cab O16 - DPF: {54B52E52-8000-4413-BD67-FC7FE24B59F2} (EARTPatchX Class) - http://files.ea.com/downloads/rtpatch/v2/EARTPX.cab O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/03d0d4f63d279ac62815/netzip/RdxIE601.cab O16 - DPF: {8EB3FF4E-86A1-4717-884D-7BA2D38272CB} (F-Secure Online Scanner) - http://support.f-secure.com/ols/fscax.cab O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing) O23 - Service: F-Secure Automatic Update (BackWeb Plug-in - 7681197) - Unknown owner - C:\PROGRA~1\F-Secure\ANTIVI~1\BackWeb\7681197\Program\SERVIC~1.EXE O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exe O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\F-Secure\Antivirus ja Palomuuri\Anti-Virus\fsgk32st.exe O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Antivirus ja Palomuuri\Common\FNRB32.EXE O23 - Service: F-Secure Anti-Virus Proxy (fsavproxy) - Unknown owner - c:\program files\f-secure\antivirus ja palomuuri\Anti-Virus Proxy\apache.exe O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\F-Secure\Antivirus ja Palomuuri\BackWeb\7681197\program\fsbwsys.exe O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure\Antivirus ja Palomuuri\FWES\Program\fsdfwd.exe O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Antivirus ja Palomuuri\Common\FSMA32.EXE O23 - Service: Intel(R) NMS (NMSSvc) - Intel Corporation - C:\WINDOWS\System32\NMSSvc.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
Siirrä HjT [bold]omaan[/bold] kansioonsa -> C:\hjt\HijackThis.exe Fixaa HjT:llä (do a system scan only, merkkaa ja paina fix checked): ' O3 - Toolbar: MSN-työkalurivi - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar\01.01.2607.0\fi\msntb.dll (file missing) O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/03d0d4f63d279ac62815/netzip/RdxIE601.cab Nämä voit myös halutessasi fixata (nopeuttaa konetta): O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [mmtask] c:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\NeroCheck.exe O4 - Global Startup: Microsoft Office Pikahaku.lnk = C:\Program Files\Microsoft Office\Office\FINDFAST.EXE O4 - Global Startup: Officen käynnistys.lnk = C:\Program Files\Microsoft Office\Office\OSA.EXE Lisäksi voisit ajaa eScannin -> http://koti.mbnet.fi/pattaya1/escanmwav.htm Asenna, päivitä ja skannaa sivulla olevien ohjeiden mukaan. Lähetä sitten "örkkitulokset" tänne (ohje alin kuva tuolla sivulla ja sen yläpuolella oleva teksti). Lähetä myös uusi HjT-loki.
tässä "örkit" mitä löytyi: File C:\WINDOWS\Hackercd-Online[hcd-11335,,].exe tagged as not-a-virusorn-Dialer.Win32.Intexdial. No Action Taken. File C:\Documents and Settings\Anton\Omat tiedostot\Ohjelmat\mIRC\BeFaScript\backup\mirc.exe tagged as not-a-virus:Client-IRC.Win32.mIRC.612. No Action Taken. File C:\Documents and Settings\Anton\Omat tiedostot\Ohjelmat\mIRC\BeFaScript\FIRC.exe tagged as not-a-virus:Client-IRC.Win32.mIRC.603. No Action Taken. File C:\Documents and Settings\Anton\Omat tiedostot\Ohjelmat\mIRC\BeFaScript\mirc.exe tagged as not-a-virus:Client-IRC.Win32.mIRC.614. No Action Taken. File C:\Documents and Settings\Anton\Omat tiedostot\Ohjelmat\mIRC\mirc.exe tagged as not-a-virus:Client-IRC.Win32.mIRC.614. No Action Taken. File C:\Program Files\GIANT Company Software\GIANT AntiSpyware\Quarantine\130FC036-A87D-48A5-810E-C94852\53BABAD6-E712-407C-94D3-539B6A tagged as not-a-virus:AdWare.Win32.WinAD.be. No Action Taken. File C:\Program Files\GIANT Company Software\GIANT AntiSpyware\Quarantine\21A3FE16-77FB-4481-AFAE-4A2B71\4BAA4994-895D-44DA-B608-23C0FC tagged as not-a-virus:AdWare.Win32.WinAD.bf. No Action Taken. File C:\Program Files\GIANT Company Software\GIANT AntiSpyware\Quarantine\222F5904-F12F-4B0A-88D4-BEC552\E0321F55-D722-445B-BD3D-9D58C6 tagged as not-a-virus:AdWare.Win32.WinAD.bg. No Action Taken. File C:\Program Files\GIANT Company Software\GIANT AntiSpyware\Quarantine\29D0402A-A89E-4F40-B899-807FD8\08BB319E-9A1D-47D9-ADB6-07BF1C tagged as not-a-virus:AdWare.Win32.WinAD.bg. No Action Taken. File C:\Program Files\GIANT Company Software\GIANT AntiSpyware\Quarantine\4FE96BC1-7654-4940-B1AC-008A1F\030BAE02-9FF7-40F5-A5D5-E0E387 tagged as not-a-virus:AdWare.Win32.WinAD.bj. No Action Taken. File C:\Program Files\GIANT Company Software\GIANT AntiSpyware\Quarantine\571C031F-433C-4821-8842-077557\C2AC24C7-2409-4F23-80C2-161482 tagged as not-a-virus:AdWare.Win32.BetterInternet. No Action Taken. File C:\Program Files\GIANT Company Software\GIANT AntiSpyware\Quarantine\7CD249C8-F94D-4886-AFF9-8731AD\F9A1D850-E880-4DD3-B13F-C17CB9 tagged as not-a-virus:AdWare.Win32.WinAD.be. No Action Taken. File C:\Program Files\GIANT Company Software\GIANT AntiSpyware\Quarantine\8158227F-0441-461D-BB84-05C831\202733AF-B563-4C65-899B-4B6B0D tagged as not-a-virus:AdWare.Win32.WinAD.bg. No Action Taken. File C:\Program Files\GIANT Company Software\GIANT AntiSpyware\Quarantine\8158227F-0441-461D-BB84-05C831\8B232B58-374B-4F9F-BF84-DC0F25 tagged as not-a-virus:AdWare.Win32.WinAD.bj. No Action Taken. File C:\Program Files\GIANT Company Software\GIANT AntiSpyware\Quarantine\8DFA387A-86B5-4020-BDD8-C58B4A\DA97A800-4F58-4AE5-9229-2BA31D tagged as not-a-virus:AdWare.Win32.WinAD.bg. No Action Taken. File C:\Program Files\GIANT Company Software\GIANT AntiSpyware\Quarantine\AC789805-18B6-4A32-AAD7-BE91B3\06E4898D-720A-4734-B441-E2C478 tagged as not-a-virus:AdWare.Win32.WinAD.be. No Action Taken. File C:\Program Files\GIANT Company Software\GIANT AntiSpyware\Quarantine\BC675711-FB9E-44A2-85BA-728C81\F37B0020-D931-49EC-A29A-91E06B tagged as not-a-virus:AdWare.Win32.WinAD.f. No Action Taken. File C:\Program Files\GIANT Company Software\GIANT AntiSpyware\Quarantine\C39F9796-5F11-4746-9F4C-2BF2A9\FFDCB83C-B3AE-4387-889D-EE90F0 tagged as not-a-virus:AdWare.Win32.WinAD.bg. No Action Taken. File C:\Program Files\GIANT Company Software\GIANT AntiSpyware\Quarantine\CBE188B0-46AE-4851-8765-290634\FA9173EE-E39E-49F5-B47B-1A3BA8 tagged as not-a-virus:AdWare.Win32.WinAD.bg. No Action Taken. File C:\Program Files\GIANT Company Software\GIANT AntiSpyware\Quarantine\FA98533C-2C8A-4806-973A-12DF42\1DD51A83-EF18-41FE-B125-5090EC tagged as not-a-virus:AdWare.Win32.WinAD.bg. No Action Taken. File C:\WINDOWS\Hackercd-Online[hcd-11335,,].exe tagged as not-a-virusorn-Dialer.Win32.Intexdial. No Action Taken.
tässä uusi logi: Logfile of HijackThis v1.99.1 Scan saved at 21:52:41, on 1.12.2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\System32\CTsvcCDA.exe C:\Program Files\F-Secure\Antivirus ja Palomuuri\Anti-Virus\fsgk32st.exe C:\Program Files\F-Secure\Antivirus ja Palomuuri\Anti-Virus\FSGK32.EXE C:\WINDOWS\System32\nvsvc32.exe C:\WINDOWS\System32\tcpsvcs.exe C:\WINDOWS\System32\MsPMSPSv.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\Program Files\GIANT Company Software\GIANT AntiSpyware\gcasServ.exe C:\WINDOWS\MXOaldr.exe C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\GIANT Company Software\GIANT AntiSpyware\gcasDtServ.exe C:\Kaspersky\mwavscan.com C:\Kaspersky\kavss.exe C:\Program Files\Webteh\BSplayerPro\bsplayer.exe C:\WINDOWS\explorer.exe C:\Program Files\F-Secure\Antivirus ja Palomuuri\Common\FSMA32.EXE C:\Program Files\F-Secure\Antivirus ja Palomuuri\Common\FSMB32.EXE C:\Program Files\F-Secure\Antivirus ja Palomuuri\Common\FCH32.EXE C:\Program Files\F-Secure\Antivirus ja Palomuuri\Common\FNRB32.EXE C:\Program Files\F-Secure\Antivirus ja Palomuuri\Common\FAMEH32.EXE C:\Program Files\F-Secure\Antivirus ja Palomuuri\FWES\Program\fsdfwd.exe C:\Program Files\F-Secure\Antivirus ja Palomuuri\Common\FIH32.EXE C:\Program Files\F-Secure\Antivirus ja Palomuuri\Anti-Virus\fsav32.exe C:\Program Files\F-Secure\Antivirus ja Palomuuri\Common\FSM32.EXE C:\Program Files\F-Secure\Antivirus ja Palomuuri\FSGUI\fsguiexe.exe C:\WINDOWS\system32\taskmgr.exe C:\Program Files\F-Secure\Antivirus ja Palomuuri\Anti-Virus\fssm32.exe C:\WINDOWS\system32\NOTEPAD.EXE C:\Program Files\F-Secure\Antivirus ja Palomuuri\FSGUI\fsavgui.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\hjt\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.euro.dell.com/ R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yle.fi/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.euro.dell.com/ R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yle.fi/ R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll O3 - Toolbar: MSN-työkalurivi - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar\01.01.2607.0\fi\msntb.dll (file missing) O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\GIANT Company Software\GIANT AntiSpyware\gcasServ.exe" O4 - HKLM\..\Run: [MXO Auto Loader] C:\WINDOWS\MXOaldr.exe O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Antivirus ja Palomuuri\Common\FSM32.EXE" /splash O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\F-Secure\Antivirus ja Palomuuri\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW O4 - HKLM\..\Run: [mwavscan] "C:\Kaspersky\mwavscan.com" /s O4 - HKCU\..\Run: [PeerGuardian] C:\Program Files\PeerGuardian2\pg2.exe O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html O8 - Extra context menu item: Translate into English - res://c:\program files\google\GoogleToolbar1.dll/cmtrans.html O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O15 - Trusted Zone: http://www.mbnet.fi O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com//PhotoUpload/MsnPUpld.cab O16 - DPF: {54B52E52-8000-4413-BD67-FC7FE24B59F2} (EARTPatchX Class) - http://files.ea.com/downloads/rtpatch/v2/EARTPX.cab O16 - DPF: {8EB3FF4E-86A1-4717-884D-7BA2D38272CB} (F-Secure Online Scanner) - http://support.f-secure.com/ols/fscax.cab O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing) O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exe O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\F-Secure\Antivirus ja Palomuuri\Anti-Virus\fsgk32st.exe O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Antivirus ja Palomuuri\Common\FNRB32.EXE O23 - Service: F-Secure Anti-Virus Proxy (fsavproxy) - Unknown owner - c:\program files\f-secure\antivirus ja palomuuri\Anti-Virus Proxy\apache.exe O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\F-Secure\Antivirus ja Palomuuri\FWES\Program\fsdfwd.exe O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Antivirus ja Palomuuri\Common\FSMA32.EXE O23 - Service: Intel(R) NMS (NMSSvc) - Intel Corporation - C:\WINDOWS\System32\NMSSvc.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe pitäisikö noi "örkit" nyt poistaa, mitkä löytyi?!?
kuinka paljon windows xp:n pitäisi suunnilleen viedä tilaa? mulla vie nyt ihan karvan verran alle 3 gigaa ja se tuntuu aika paljolta verrattuna siihen mitä se sillon vasta asennettuna vei..
Joo, pitää ne poistaa. Tyhjennä tämä hakemisto (siis poista sieltä kaikki tiedostot) vikasietotilassa (F8 käynnistyksen yhteydessä): C:\Program Files\GIANT Company Software\GIANT AntiSpyware\Quarantine Poista myös tämä siellä vikasiedossa: C:\WINDOWS\==>Hackercd-Online[hcd-11335,,].exe<==
