1. Tämä sivusto käyttää keksejä (cookie). Jatkamalla sivuston käyttämistä hyväksyt keksien käyttämisen. Lue lisää.

Kone jumissa, mahdollisesti troijalaisia Hjt

Viestiketju Virukset ja haittaohjelmat - HijackThis -logit -osiossa. Ketjun avasi japi83 03.09.2012.

Sivu 2 / 2
  1. kalminen

    kalminen Regular member

    Liittynyt:
    04.05.2007
    Viestejä:
    3,915
    Kiitokset:
    0
    Pisteet:
    46
    .
    Eipä sen pahan pöpön käynnistystiedostoja koneelta enään löytynyt.

    ------------------------------------------------------

    Kirjoita windowsin Aloita haku kenttään Combofix /uninstall paina OK

    sekä poista kansio => C:\QooBox\

    ************************************************************************

    * TuplaklikkaaOTL.exe.
    * Klikkaa CleanUp!.
    * Valitse Yes kun kysytään "Begin cleanup Process?".
    * Jos pyydetään, että saako koneen käynnistää uudeelleen, valitse Yes.
    * OTL poistaa itsensä kun se on valmis, jos näin ei käy poista se itse.

    -----------------------------------------------------------

    TrenMicron poistotyökalu => Trend Micro

    Lähtikö ???

    :)
     
    kalminen, 13.09.2012
    #21
  2.  
  3. japi83

    japi83 Member

    Liittynyt:
    03.03.2008
    Viestejä:
    64
    Kiitokset:
    0
    Pisteet:
    16
    Sain ton otl:n poistettua, mutta latasin ton trend poistotyökalun eikä se löytänyt koneelta tota internet securityä. tarkottaako, että se on poistunut?
     
    japi83, 13.09.2012
    #22
  4. kalminen

    kalminen Regular member

    Liittynyt:
    04.05.2007
    Viestejä:
    3,915
    Kiitokset:
    0
    Pisteet:
    46
    .
    Ei me sitä ole poistettu. Siellä voi olla jämiä siitä.

    ------------------------------------------------

    Tällä ne löytyy =>

    Lataa työpöydälle => TÄMÄ
    * Sulje kaikki päälläolevat ikkunat ja sovellukset.
    * XP:ssä Tuplaklikkaa OTL.exeä käynnistääksesi OTListIt:n.
    * Vista/7:ssa käynnistät OTL.exen = tee se hiiren oikealla napilla
    ja valitset Suorita Järjestelmänvalvojana

    - [​IMG]

    * Laita siihen ruxit kuvan mukaan.

    [​IMG]

    * Klikkaa Run Scan nappulaa.
    * Kun tarkistus on valmis, OTListIt luo kaksi tekstitiedostoa työpöydälle, tai alapalkkiin OTListIt.Txt ja Extras.txt

    * Kopioi ja lähetä tiedostojen sisältö tänne.

    Teen Fixin huomenna :)
     
    kalminen, 13.09.2012
    #23
  5. japi83

    japi83 Member

    Liittynyt:
    03.03.2008
    Viestejä:
    64
    Kiitokset:
    0
    Pisteet:
    16
    otl ei luonut kun vain tämän yhden txt tiedoston?:

    OTL logfile created on: 9/13/2012 7:48:46 PM - Run 1
    OTL by OldTimer - Version 3.2.61.3 Folder = C:\Users\mini\Downloads
    Starter Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
    Internet Explorer (Version = 8.0.7601.17514)
    Locale: 00000409 | Country: Suomi | Language: FIN | Date Format: d.M.yyyy

    1014.18 Mb Total Physical Memory | 217.42 Mb Available Physical Memory | 21.44% Memory free
    1.99 Gb Paging File | 0.98 Gb Available in Paging File | 49.15% Paging File free
    Paging file location(s): ?:\pagefile.sys [binary data]

    %SystemDrive% = C: | %SystemRoot% = C:\windows | %ProgramFiles% = C:\Program Files
    Drive C: | 100.00 Gb Total Space | 44.97 Gb Free Space | 44.97% Space Free | Partition Type: NTFS
    Drive D: | 117.87 Gb Total Space | 117.56 Gb Free Space | 99.74% Space Free | Partition Type: NTFS

    Computer Name: MINI-PC | User Name: mini | Logged in as Administrator.
    Boot Mode: Normal | Scan Mode: All users
    Company Name Whitelist: Off | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

    ========== Processes (SafeList) ==========

    PRC - [2012/09/13 19:17:18 | 000,600,064 | ---- | M] (OldTimer Tools) -- C:\Users\mini\Downloads\OTL.exe
    PRC - [2012/09/12 11:03:46 | 001,807,560 | ---- | M] (Adobe Systems, Inc.) -- C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe
    PRC - [2012/08/25 19:05:14 | 001,193,176 | ---- | M] () -- C:\Users\mini\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
    PRC - [2012/07/21 10:55:15 | 000,913,888 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
    PRC - [2012/03/26 17:08:12 | 000,931,200 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Security Client\msseces.exe
    PRC - [2012/03/26 17:03:40 | 000,011,552 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Security Client\MsMpEng.exe
    PRC - [2011/10/01 09:30:42 | 000,219,496 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe
    PRC - [2011/10/01 09:30:36 | 000,508,776 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe
    PRC - [2011/07/13 09:38:14 | 001,095,080 | ---- | M] (AsusTek Computer Inc.) -- C:\Program Files\ASUS\LiveUpdate\LiveUpdate.exe
    PRC - [2011/02/25 08:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
    PRC - [2010/11/20 15:17:47 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
    PRC - [2010/06/10 00:26:34 | 000,412,600 | ---- | M] (ASUSTeK Computer Inc.) -- C:\Program Files\EeePC\SHE\SuperHybridEngine.exe
    PRC - [2010/06/04 05:40:30 | 001,242,544 | ---- | M] (ASUSTeK Computer Inc.) -- C:\Program Files\EeePC\HotkeyService\HotkeyService.exe
    PRC - [2010/05/29 02:41:36 | 000,445,344 | ---- | M] (ASUS) -- C:\Program Files\EeePC\CapsHook\CapsHook.exe
    PRC - [2010/04/13 05:37:47 | 000,083,240 | ---- | M] (Synaptics Incorporated) -- C:\Program Files\Synaptics\SynTP\SynAsusAcpi.exe
    PRC - [2010/03/16 04:48:34 | 001,754,448 | ---- | M] () -- C:\Program Files\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe
    PRC - [2009/09/11 21:41:02 | 000,100,328 | ---- | M] (ASUSTeK Computer Inc.) -- C:\Program Files\EeePC\HotkeyService\HotKeyMon.exe
    PRC - [2009/08/19 03:35:56 | 000,219,136 | ---- | M] () -- C:\Windows\System32\AsusService.exe
    PRC - [2009/06/05 05:03:32 | 000,186,904 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
    PRC - [2009/06/05 05:03:06 | 000,354,840 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe


    ========== Modules (No Company Name) ==========

    MOD - [2012/09/12 11:03:46 | 009,813,704 | ---- | M] () -- C:\Windows\System32\Macromed\Flash\NPSWF32_11_4_402_265.dll
    MOD - [2012/08/25 19:05:14 | 001,193,176 | ---- | M] () -- C:\Users\mini\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
    MOD - [2012/07/21 10:55:13 | 002,003,424 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll
    MOD - [2012/06/15 14:48:08 | 001,670,144 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\6c59a14a23f734093e80d6093e25302a\Microsoft.VisualBasic.ni.dll
    MOD - [2012/06/15 14:34:57 | 012,436,480 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\7b7fbe651c6e72f12099a298654c9594\System.Windows.Forms.ni.dll
    MOD - [2012/06/15 14:34:19 | 001,591,808 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6bb439b3f87736d3248ae27d43e2c0d6\System.Drawing.ni.dll
    MOD - [2012/05/11 11:19:00 | 001,051,136 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Management\9b2f17fb61b7197f2a04108f5d1a1cc6\System.Management.ni.dll
    MOD - [2012/05/11 11:12:21 | 000,628,224 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.EnterpriseSe#\168755d010e5a96ac940b0ddd27616a4\System.EnterpriseServices.ni.dll
    MOD - [2012/05/11 11:12:18 | 000,627,200 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\80fae9f16f80075535e72458ef293f7a\System.Transactions.ni.dll
    MOD - [2012/05/11 11:12:16 | 006,611,456 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Data\f3814b488d9e083cbbc623e01b389f09\System.Data.ni.dll
    MOD - [2012/05/11 11:08:57 | 005,452,800 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ba3d70b651454c7d49b407b93663bfed\System.Xml.ni.dll
    MOD - [2012/05/11 11:08:41 | 000,971,264 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\cfa9c506bfb9254c89dace7b83bc9f9d\System.Configuration.ni.dll
    MOD - [2012/05/11 11:08:38 | 007,967,232 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\System\ce9ff6baf9053ed2ed673d948179195c\System.ni.dll
    MOD - [2012/05/11 11:08:17 | 011,492,864 | ---- | M] () -- C:\windows\assembly\NativeImages_v2.0.50727_32\mscorlib\acfc1391e45fedd2a359778ea57d914c\mscorlib.ni.dll
    MOD - [2010/11/13 05:03:36 | 000,413,696 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\System.Windows.Forms.resources\2.0.0.0_fi_b77a5c561934e089\System.Windows.Forms.resources.dll
    MOD - [2010/11/13 05:03:27 | 000,299,008 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_fi_b77a5c561934e089\mscorlib.resources.dll
    MOD - [2010/11/05 04:58:05 | 002,927,616 | ---- | M] () -- C:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
    MOD - [2010/06/25 07:27:43 | 000,839,680 | ---- | M] () -- C:\windows\assembly\GAC_32\System.Data.SQLite\1.0.60.0__db937bc2d44ff139\System.Data.SQLite.dll
    MOD - [2010/06/25 07:27:43 | 000,030,032 | ---- | M] () -- C:\windows\assembly\GAC_MSIL\SqliteShared\1.0.3726.20828__0d0f4b69e50e559b\SqliteShared.dll
    MOD - [2010/03/16 04:48:46 | 000,148,816 | ---- | M] () -- C:\Program Files\ASUS\ASUS WebStorage\EcaremeDLL.dll
    MOD - [2010/03/16 04:48:34 | 001,754,448 | ---- | M] () -- C:\Program Files\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe
    MOD - [2009/06/11 00:23:19 | 000,261,632 | ---- | M] () -- C:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll


    ========== Services (SafeList) ==========

    SRV - [2012/09/12 11:03:46 | 000,250,568 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
    SRV - [2012/07/21 10:55:13 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
    SRV - [2012/03/26 17:03:40 | 000,214,952 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Microsoft Security Client\NisSrv.exe -- (NisSrv)
    SRV - [2012/03/26 17:03:40 | 000,011,552 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft Security Client\MsMpEng.exe -- (MsMpSvc)
    SRV - [2011/10/01 09:30:42 | 000,219,496 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe -- (sftvsa)
    SRV - [2011/10/01 09:30:36 | 000,508,776 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe -- (sftlist)
    SRV - [2009/08/19 03:35:56 | 000,219,136 | ---- | M] () [Auto | Running] -- C:\Windows\System32\AsusService.exe -- (AsusService)
    SRV - [2009/07/14 04:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
    SRV - [2009/06/05 05:03:06 | 000,354,840 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe -- (IAANTMON)


    ========== Driver Services (SafeList) ==========

    DRV - File not found [Kernel | On_Demand | Stopped] -- C:\windows\system32\DRIVERS\btwrchid.sys -- (btwrchid)
    DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\btwl2cap.sys -- (btwl2cap)
    DRV - File not found [Kernel | On_Demand | Stopped] -- C:\windows\system32\DRIVERS\btwavdt.sys -- (btwavdt)
    DRV - File not found [Kernel | On_Demand | Stopped] -- system32\drivers\btwaudio.sys -- (btwaudio)
    DRV - [2012/09/13 17:05:30 | 000,029,904 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{AEA6565E-A2F3-4249-9EE5-3216506955B6}\MpKsla0c9401e.sys -- (MpKsla0c9401e)
    DRV - [2012/03/20 20:44:12 | 000,074,112 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\NisDrvWFP.sys -- (NisDrv)
    DRV - [2012/02/16 00:24:36 | 000,181,432 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssudmdm.sys -- (ssudmdm)
    DRV - [2012/02/16 00:24:36 | 000,080,824 | ---- | M] (DEVGURU Co., LTD.(www.devguru.co.kr)) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssudbus.sys -- (dg_ssudbus)
    DRV - [2011/10/30 13:14:50 | 000,027,600 | ---- | M] (CrystalIdea Software) [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\CisUtMonitor.sys -- (CisUtMonitor)
    DRV - [2011/10/01 09:30:42 | 000,019,304 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Sftvollh.sys -- (Sftvol)
    DRV - [2011/10/01 09:30:40 | 000,021,864 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\Sftredirlh.sys -- (Sftredir)
    DRV - [2011/10/01 09:30:38 | 000,194,408 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Sftplaylh.sys -- (Sftplay)
    DRV - [2011/10/01 09:30:36 | 000,579,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Sftfslh.sys -- (Sftfs)
    DRV - [2011/06/27 01:37:12 | 002,191,872 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\athr.sys -- (athr)
    DRV - [2011/02/09 15:03:00 | 000,011,832 | ---- | M] () [Kernel | System | Running] -- C:\Windows\System32\drivers\AsUpIO.sys -- (AsUpIO)
    DRV - [2010/11/20 13:24:41 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
    DRV - [2010/11/20 12:59:44 | 000,035,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
    DRV - [2010/04/13 05:39:17 | 000,051,712 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\L1C62x86.sys -- (L1C)
    DRV - [2010/04/13 05:36:46 | 000,043,944 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\btusbflt.sys -- (btusbflt)
    DRV - [2010/04/13 05:36:12 | 000,013,880 | ---- | M] ( ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\kbfiltr.sys -- (kbfiltr)


    ========== Standard Registry (SafeList) ==========


    ========== Internet Explorer ==========

    IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
    IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=MAAU&src=IE-SearchBox


    IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

    IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



    IE - HKU\S-1-5-21-1918800264-2417731387-868386128-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://eeepc.asus.com [binary data]
    IE - HKU\S-1-5-21-1918800264-2417731387-868386128-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://asus.msn.com
    IE - HKU\S-1-5-21-1918800264-2417731387-868386128-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
    IE - HKU\S-1-5-21-1918800264-2417731387-868386128-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=MAAU&src=IE-SearchBox
    IE - HKU\S-1-5-21-1918800264-2417731387-868386128-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

    ========== FireFox ==========

    FF - prefs.js..extensions.enabledAddons: {ba14329e-9550-4989-b3f2-9732e92d17cc}:3.15.1.0
    FF - user.js - File not found

    FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\windows\system32\Macromed\Flash\NPSWF32_11_4_402_265.dll ()
    FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.5.1: C:\windows\system32\npDeployJava1.dll (Oracle Corporation)
    FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.5.1: C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
    FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
    FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
    FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8081.0709: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
    FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.1: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)

    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012/07/21 10:55:16 | 000,000,000 | ---D | M]
    FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012/08/17 10:04:30 | 000,000,000 | ---D | M]
    FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012/07/21 10:55:16 | 000,000,000 | ---D | M]
    FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012/08/17 10:04:30 | 000,000,000 | ---D | M]

    [2011/06/09 19:41:58 | 000,000,000 | ---D | M] (No name found) -- C:\Users\mini\AppData\Roaming\mozilla\Extensions
    [2012/08/25 19:04:02 | 000,000,000 | ---D | M] (No name found) -- C:\Users\mini\AppData\Roaming\mozilla\Firefox\Profiles\8xll5b63.default\extensions
    [2012/08/25 19:04:02 | 000,000,000 | ---D | M] (Vuze Remote Community Toolbar) -- C:\Users\mini\AppData\Roaming\mozilla\Firefox\Profiles\8xll5b63.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}
    [2012/02/13 13:58:13 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
    [2012/07/21 10:55:16 | 000,136,672 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
    [2011/03/22 21:38:12 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\mozilla firefox\plugins\npwachk.dll
    [2012/06/20 23:47:56 | 000,002,252 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
    [2012/06/20 23:47:56 | 000,002,062 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bookplus-fi.xml
    [2012/06/20 23:47:56 | 000,000,972 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-fi.xml
    [2012/06/20 23:47:56 | 000,001,183 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-fi.xml
    [2012/06/20 23:47:56 | 000,001,100 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-fi.xml

    O1 HOSTS File: ([2012/09/13 12:17:44 | 000,000,027 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
    O1 - Hosts: 127.0.0.1 localhost
    O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation)
    O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation)
    O3 - HKU\S-1-5-21-1918800264-2417731387-868386128-1000\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
    O4 - HKLM..\Run: [ASUS WebStorage] C:\Program Files\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe ()
    O4 - HKLM..\Run: [ASUSPRP] C:\Program Files\ASUS\APRP\aprp.exe (ASUSTek Computer Inc.)
    O4 - HKLM..\Run: [CapsHook] C:\windows\System32\AsusSender.exe (ASUSTek Computer Inc.)
    O4 - HKLM..\Run: [Eee Docking] C:\Program Files\ASUS\Eee Docking\Eee Docking.exe ()
    O4 - HKLM..\Run: [HotkeyMon] C:\windows\System32\AsusSender.exe (ASUSTek Computer Inc.)
    O4 - HKLM..\Run: [HotkeyService] C:\windows\System32\AsusSender.exe (ASUSTek Computer Inc.)
    O4 - HKLM..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation)
    O4 - HKLM..\Run: [LiveUpdate] C:\windows\System32\AsusSender.exe (ASUSTek Computer Inc.)
    O4 - HKLM..\Run: [MSC] C:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
    O4 - HKLM..\Run: [SuperHybridEngine] C:\windows\System32\AsusSender.exe (ASUSTek Computer Inc.)
    O4 - HKLM..\Run: [SynAsusAcpi] C:\Program Files\Synaptics\SynTP\SynAsusAcpi.exe (Synaptics Incorporated)
    O4 - HKU\S-1-5-21-1918800264-2417731387-868386128-1000..\Run: [Spotify Web Helper] C:\Users\mini\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe ()
    O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
    O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
    O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
    O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
    O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
    O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
    O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
    O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
    O7 - HKU\S-1-5-21-1918800264-2417731387-868386128-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel present
    O7 - HKU\S-1-5-21-1918800264-2417731387-868386128-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
    O7 - HKU\S-1-5-21-1918800264-2417731387-868386128-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
    O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 10.5.1)
    O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
    O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
    O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 10.5.1)
    O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.100.1
    O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{491AAA2A-8974-4846-B645-819F4BE5CDF7}: DhcpNameServer = 192.168.100.1
    O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
    O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\windows\explorer.exe (Microsoft Corporation)
    O20 - HKLM Winlogon: UserInit - (C:\windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
    O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
    O32 - HKLM CDRom: AutoRun - 1
    O32 - AutoRun File - [2009/06/11 00:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
    O34 - HKLM BootExecute: (autocheck autochk *)
    O35 - HKLM\..comfile [open] -- "%1" %*
    O35 - HKLM\..exefile [open] -- "%1" %*
    O37 - HKLM\...com [@ = comfile] -- "%1" %*
    O37 - HKLM\...exe [@ = exefile] -- "%1" %*
    O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
    O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
    O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

    ========== Files/Folders - Created Within 30 Days ==========

    [2030/01/04 09:49:20 | 000,000,000 | ---D | C] -- C:\Boot
    [2012/09/13 17:14:09 | 000,027,600 | ---- | C] (CrystalIdea Software) -- C:\windows\System32\drivers\CisUtMonitor.sys
    [2012/09/13 17:14:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uninstall Tool
    [2012/09/13 17:14:08 | 000,000,000 | ---D | C] -- C:\Users\mini\AppData\Roaming\CrystalIdea Software
    [2012/09/13 17:14:02 | 000,000,000 | ---D | C] -- C:\Program Files\Uninstall Tool
    [2012/09/13 17:00:35 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
    [2012/09/13 12:22:16 | 000,000,000 | ---D | C] -- C:\Users\mini\AppData\Local\temp
    [2012/09/12 15:54:35 | 000,000,000 | ---D | C] -- C:\windows\erdnt
    [2012/09/12 15:46:26 | 000,000,000 | ---D | C] -- C:\TDSSKiller_Quarantine
    [2012/09/10 14:36:26 | 000,000,000 | ---D | C] -- C:\Users\mini\AppData\Roaming\Malwarebytes
    [2012/09/10 14:35:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
    [2012/09/03 21:39:16 | 000,000,000 | -HSD | C] -- C:\windows\System32\%APPDATA%
    [2012/08/18 21:45:08 | 000,000,000 | ---D | C] -- C:\Program Files\ESET
    [2012/08/17 15:28:11 | 000,000,000 | ---D | C] -- C:\Users\mini\AppData\Local\Macromedia
    [2012/08/17 10:17:26 | 000,696,520 | ---- | C] (Adobe Systems Incorporated) -- C:\windows\System32\FlashPlayerApp.exe
    [2012/08/17 10:05:00 | 000,000,000 | ---D | C] -- C:\Program Files\Oracle
    [2012/08/17 10:04:30 | 000,227,760 | ---- | C] (Oracle Corporation) -- C:\windows\System32\javaws.exe
    [2012/08/17 10:03:32 | 000,174,064 | ---- | C] (Oracle Corporation) -- C:\windows\System32\javaw.exe
    [2012/08/17 10:03:32 | 000,174,064 | ---- | C] (Oracle Corporation) -- C:\windows\System32\java.exe
    [2012/08/15 16:42:48 | 000,000,000 | ---D | C] -- C:\loki
    [2012/08/15 16:40:22 | 000,000,000 | ---D | C] -- C:\Users\mini\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HiJackThis

    ========== Files - Modified Within 30 Days ==========

    [2012/09/13 19:37:00 | 000,000,830 | ---- | M] () -- C:\windows\tasks\Adobe Flash Player Updater.job
    [2012/09/13 17:11:58 | 000,009,696 | -H-- | M] () -- C:\windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
    [2012/09/13 17:11:58 | 000,009,696 | -H-- | M] () -- C:\windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
    [2012/09/13 17:07:51 | 000,007,000 | ---- | M] () -- C:\Users\mini\Documents\cc_20120913_170743.reg
    [2012/09/13 17:04:05 | 000,067,584 | --S- | M] () -- C:\windows\bootstat.dat
    [2012/09/13 17:03:55 | 797,581,312 | -HS- | M] () -- C:\hiberfil.sys
    [2012/09/13 12:17:44 | 000,000,027 | ---- | M] () -- C:\windows\System32\drivers\etc\hosts
    [2012/09/12 14:24:20 | 000,285,519 | ---- | M] () -- C:\Users\mini\Desktop\keinutuoli ikea.php
    [2012/09/12 11:03:46 | 000,696,520 | ---- | M] (Adobe Systems Incorporated) -- C:\windows\System32\FlashPlayerApp.exe
    [2012/09/12 11:03:46 | 000,073,416 | ---- | M] (Adobe Systems Incorporated) -- C:\windows\System32\FlashPlayerCPLApp.cpl
    [2012/08/19 17:38:38 | 000,618,552 | ---- | M] () -- C:\windows\System32\perfh009.dat
    [2012/08/19 17:38:38 | 000,444,112 | ---- | M] () -- C:\windows\System32\perfh00B.dat
    [2012/08/19 17:38:38 | 000,107,574 | ---- | M] () -- C:\windows\System32\perfc009.dat
    [2012/08/19 17:38:38 | 000,083,492 | ---- | M] () -- C:\windows\System32\perfc00B.dat
    [2012/08/15 16:42:48 | 000,002,941 | ---- | M] () -- C:\Users\mini\Desktop\HiJackThis.lnk

    ========== Files Created - No Company Name ==========

    [2030/01/04 09:49:20 | 000,383,786 | RHS- | C] () -- C:\bootmgr
    [2012/09/13 17:07:49 | 000,007,000 | ---- | C] () -- C:\Users\mini\Documents\cc_20120913_170743.reg
    [2012/09/12 14:24:10 | 000,285,519 | ---- | C] () -- C:\Users\mini\Desktop\keinutuoli ikea.php
    [2012/08/17 10:17:27 | 000,000,830 | ---- | C] () -- C:\windows\tasks\Adobe Flash Player Updater.job
    [2012/08/15 16:40:22 | 000,002,941 | ---- | C] () -- C:\Users\mini\Desktop\HiJackThis.lnk
    [2012/07/29 13:43:57 | 000,000,024 | ---- | C] () -- C:\Users\mini\random.dat
    [2012/07/27 22:23:50 | 000,000,804 | ---- | C] () -- C:\windows\Installer\{0ae480f9-4ece-209f-4524-24673a2416a2}\L\00000004.@
    [2012/04/25 01:29:48 | 000,007,597 | ---- | C] () -- C:\Users\mini\AppData\Local\Resmon.ResmonCfg
    [2011/12/03 11:42:10 | 000,000,004 | ---- | C] () -- C:\Users\mini\cache.dat
    [2011/11/07 02:20:27 | 000,002,048 | ---- | C] () -- C:\Users\mini\AppData\Roaming\Kuvatkirjaksi Prefs
    [2011/08/27 17:31:18 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
    [2011/06/11 14:26:15 | 000,006,144 | ---- | C] () -- C:\windows\System32\drivers\ASUSHWIO.SYS
    [2011/06/09 19:18:47 | 000,004,692 | ---- | C] () -- C:\windows\System32\drivers\SamSfPa.dat
    [2011/06/09 19:18:47 | 000,000,008 | ---- | C] () -- C:\windows\System32\drivers\rtkhdaud.dat

    ========== Files - Unicode (All) ==========
    [2012/09/13 17:14:09 | 000,001,032 | ---- | M] ()(C:\Users\mini\Desktop\Un?nstall Tool.lnk) -- C:\Users\mini\Desktop\Unіnstall Tool.lnk
    [2012/09/13 17:14:09 | 000,001,032 | ---- | C] ()(C:\Users\mini\Desktop\Un?nstall Tool.lnk) -- C:\Users\mini\Desktop\Unіnstall Tool.lnk

    ========== Alternate Data Streams ==========

    @Alternate Data Stream - 168 bytes -> C:\Users\mini\Desktop\teron lausunto.jpeg:3or4kl4x13tuuug3Byamue2s4b
    @Alternate Data Stream - 168 bytes -> C:\Users\mini\Desktop\ostotarjous 2.jpeg:3or4kl4x13tuuug3Byamue2s4b
    @Alternate Data Stream - 168 bytes -> C:\Users\mini\Desktop\ostotarjous 1.jpeg:3or4kl4x13tuuug3Byamue2s4b
    @Alternate Data Stream - 168 bytes -> C:\Users\mini\Desktop\kosteusmittaus 2007.jpeg:3or4kl4x13tuuug3Byamue2s4b

    < End of report >
     
    japi83, 13.09.2012
    #24
  6. kalminen

    kalminen Regular member

    Liittynyt:
    04.05.2007
    Viestejä:
    3,915
    Kiitokset:
    0
    Pisteet:
    46
    .
    Kyllä se TrendMicro on pois koneelta !!!

    ------------------------------------------------------------------

    Kopioi alla olevasta laatikosta kaikki muistiin. (Ctrl+C)

    Koodi:
    :services
btwrchid
btwl2cap
btwavdt
btwaudio

:files
C:\TDSSKiller_Quarantine

:OTL
FF - prefs.js..extensions.enabledAddons: {ba14329e-9550-4989-b3f2-9732e92d17cc}:3.15.1.0
[2012/08/25 19:04:02 | 000,000,000 | ---D | M] (Vuze Remote Community Toolbar) -- C:\Users\mini\AppData\Roaming\mozilla\Firefox\Profiles\8xll5b63.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}
O3 - HKU\S-1-5-21-1918800264-2417731387-868386128-1000\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} [url]http://java.sun.com/update/1.6.0/jinsta...indows-i586.cab[/url] (Java Plug-in 10.5.1)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} [url]http://java.sun.com/update/1.6.0/jinsta...indows-i586.cab[/url] (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} [url]http://java.sun.com/update/1.6.0/jinsta...indows-i586.cab[/url] (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} [url]http://java.sun.com/update/1.6.0/jinsta...indows-i586.cab[/url] (Java Plug-in 10.5.1)
@Alternate Data Stream - 168 bytes -> C:\Users\mini\Desktop\teron lausunto.jpeg:3or4kl4x13tuuug3Byamue2s4b
@Alternate Data Stream - 168 bytes -> C:\Users\mini\Desktop\ostotarjous 2.jpeg:3or4kl4x13tuuug3Byamue2s4b
@Alternate Data Stream - 168 bytes -> C:\Users\mini\Desktop\ostotarjous 1.jpeg:3or4kl4x13tuuug3Byamue2s4b
@Alternate Data Stream - 168 bytes -> C:\Users\mini\Desktop\kosteusmittaus 2007.jpeg:3or4kl4x13tuuug3Byamue2s4b 

:commands
[EMPTYTEMP]
    Käynnistä OTL.EXE ohjelma. (Vista / 7 tee hiiren kakkosnapilla ja JV:nä)
    Liitä muistista texti OTL:n valkoiseen laatikkoon (Custom Scans/Fixes)
    Paina sitten Run Fix nappia
    Lopuksi se pyytää koneen ReStarttia => OK
    Logi aukeaa muistioon josta kopioit sen viestiisi.
    Tällä kertaa ei tule enään Extra.txt logia.

    ***************************************************************************

    Java sulla tuntuuisi olevan hiukan sekaisin. Onko sulla tarkoituksella
    tämä Javan JavaFX 2.1 ???

    poista jos et tarvii kaikki vanhat javat ja asenna seuraava =>

    Asenna uusin Java päivitys seuraavasta linkistä..

    Windows x86 Offline 29.73 MB jre-7u7-windows-i586.exe

    Lähetä uusin OTL.log

    :)
     
    kalminen, 14.09.2012
    #25
  7. japi83

    japi83 Member

    Liittynyt:
    03.03.2008
    Viestejä:
    64
    Kiitokset:
    0
    Pisteet:
    16
    Yritin poistaa noita javoja, mutta uninstall tool ilmoitti jostain jäänteistä enkä vielä ole asentanut tosta antamastasi linkistä uutta. tämän jälkeen yritin käynnistää netin, mutta ei löytänyt dns palvelinta? tällähetkellä olen jonkun toisen avoimella nettiyhteydellä. en tiedä liittyykö toi toisiinsa. tässä otl loki:

    All processes killed
    ========== SERVICES/DRIVERS ==========
    Service btwrchid stopped successfully!
    Service btwrchid deleted successfully!
    Service btwl2cap stopped successfully!
    Service btwl2cap deleted successfully!
    Service btwavdt stopped successfully!
    Service btwavdt deleted successfully!
    Service btwaudio stopped successfully!
    Service btwaudio deleted successfully!
    ========== FILES ==========
    C:\TDSSKiller_Quarantine\12.09.2012_15.45.12\zasubsys0000\zafs0000 folder moved successfully.
    C:\TDSSKiller_Quarantine\12.09.2012_15.45.12\zasubsys0000\file0000 folder moved successfully.
    C:\TDSSKiller_Quarantine\12.09.2012_15.45.12\zasubsys0000 folder moved successfully.
    C:\TDSSKiller_Quarantine\12.09.2012_15.45.12 folder moved successfully.
    C:\TDSSKiller_Quarantine folder moved successfully.
    ========== OTL ==========
    Prefs.js: {ba14329e-9550-4989-b3f2-9732e92d17cc}:3.15.1.0 removed from extensions.enabledAddons
    C:\Users\mini\AppData\Roaming\mozilla\Firefox\Profiles\8xll5b63.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}\searchplugin folder moved successfully.
    C:\Users\mini\AppData\Roaming\mozilla\Firefox\Profiles\8xll5b63.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}\Plugins folder moved successfully.
    C:\Users\mini\AppData\Roaming\mozilla\Firefox\Profiles\8xll5b63.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}\modules folder moved successfully.
    C:\Users\mini\AppData\Roaming\mozilla\Firefox\Profiles\8xll5b63.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}\META-INF folder moved successfully.
    C:\Users\mini\AppData\Roaming\mozilla\Firefox\Profiles\8xll5b63.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}\defaults folder moved successfully.
    C:\Users\mini\AppData\Roaming\mozilla\Firefox\Profiles\8xll5b63.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}\components folder moved successfully.
    C:\Users\mini\AppData\Roaming\mozilla\Firefox\Profiles\8xll5b63.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc}\chrome folder moved successfully.
    C:\Users\mini\AppData\Roaming\mozilla\Firefox\Profiles\8xll5b63.default\extensions\{ba14329e-9550-4989-b3f2-9732e92d17cc} folder moved successfully.
    Registry value HKEY_USERS\S-1-5-21-1918800264-2417731387-868386128-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{21FA44EF-376D-4D53-9B0F-8A89D3229068} deleted successfully.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{21FA44EF-376D-4D53-9B0F-8A89D3229068}\ not found.
    Starting removal of ActiveX control {8AD9C840-044E-11D1-B3E9-00805F499D93}
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ deleted successfully.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}\ not found.
    Starting removal of ActiveX control {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\ not found.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\ not found.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\ not found.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\ not found.
    Starting removal of ActiveX control {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}\ not found.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}\ not found.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}\ not found.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}\ not found.
    Starting removal of ActiveX control {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ deleted successfully.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
    Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}\ not found.
    ADS C:\Users\mini\Desktop\teron lausunto.jpeg:3or4kl4x13tuuug3Byamue2s4b deleted successfully.
    ADS C:\Users\mini\Desktop\ostotarjous 2.jpeg:3or4kl4x13tuuug3Byamue2s4b deleted successfully.
    ADS C:\Users\mini\Desktop\ostotarjous 1.jpeg:3or4kl4x13tuuug3Byamue2s4b deleted successfully.
    ADS C:\Users\mini\Desktop\kosteusmittaus 2007.jpeg:3or4kl4x13tuuug3Byamue2s4b deleted successfully.
    ========== COMMANDS ==========

    [EMPTYTEMP]

    User: All Users

    User: Default
    ->Temp folder emptied: 0 bytes
    ->Temporary Internet Files folder emptied: 0 bytes
    ->Flash cache emptied: 0 bytes

    User: Default User
    ->Temp folder emptied: 0 bytes
    ->Temporary Internet Files folder emptied: 0 bytes
    ->Flash cache emptied: 0 bytes

    User: mini
    ->Temp folder emptied: 53389 bytes
    ->Temporary Internet Files folder emptied: 32768 bytes
    ->Java cache emptied: 0 bytes
    ->FireFox cache emptied: 59647799 bytes
    ->Flash cache emptied: 506 bytes

    User: Public
    ->Temp folder emptied: 0 bytes

    %systemdrive% .tmp files removed: 0 bytes
    %systemroot% .tmp files removed: 0 bytes
    %systemroot%\System32 .tmp files removed: 0 bytes
    %systemroot%\System32\drivers .tmp files removed: 0 bytes
    Windows Temp folder emptied: 677302 bytes
    RecycleBin emptied: 0 bytes

    Total Files Cleaned = 58.00 mb


    OTL by OldTimer - Version 3.2.61.3 log created on 09142012_142915

    Files\Folders moved on Reboot...
    C:\windows\temp\HS.log moved successfully.

    PendingFileRenameOperations files...

    Registry entries deleted on Reboot...
     
    japi83, 14.09.2012
    #26
  8. kalminen

    kalminen Regular member

    Liittynyt:
    04.05.2007
    Viestejä:
    3,915
    Kiitokset:
    0
    Pisteet:
    46
    .
    Näillä toimilla ei ole netin kanssa mitään tekenistä !!!

    Noilla HJT logeilla ei ole näkynyt yhdessäkään O17 riville
    kuuluvaa nimipalvelinmääritystä (DNS).

    Mene Ohjauspaneeli\Verkko- ja jakamiskeskus\Muuta sovittimen asetuksia\lähiverkkoyhteys\
    sieltä löytyy korjaa verkkoyhteys nappula. (Luo mm. nimipalvelimet.)

    Ja voithan ottaa palautuspisteen riittävän kaukaa.
    :)
     
    kalminen, 14.09.2012
    #27
  9. japi83

    japi83 Member

    Liittynyt:
    03.03.2008
    Viestejä:
    64
    Kiitokset:
    0
    Pisteet:
    16
    Selvä. Kiitokset avusta kone tuntuisi toimivan taas :)
     
    japi83, 15.09.2012
    #28
Sivu 2 / 2

Jaa tämä sivu