Teen virustarkiktuksen ad-awarella ja poistan listassa olevat "cookiessit" ja muut. Kun seuraavan kerran tulen koneelle ja käynnistän sen normaalisti, niin netti ei enää toimi. Vikana on TCP/IP-osoite ja tätä vikaa ei pysty korjaamaan uudistamalla ipeetä koska sen uudistaminen ei vaan yksin kertaisesti toimi. Mikäs avuksi? AD-aware poistaa jonkun tiedoston mikä aiheuttaa ongelman? Voin pistää tiedosto listaan tähän jos on avuksi.

ad-aware ei poista viruksia vaan spywareja ja muita vakoojaohjelmia
mitä tiedostoja poistit,ei cookiesseja

Tässä tätä listaa..

ArchiveData(auto-quarantine- 2004-12-23 11-26-12.bckp)
Referencefile : SE1R23 16.12.2004
======================================================

ALEXA
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
obj[0]=Regkey : softwaremicrosoftinternet explorerextensions{c95fe080-8f5d-11d2-a20b-00aa003c157a}
obj[1]=RegValue : softwaremicrosoftinternet explorerextensions{c95fe080-8f5d-11d2-a20b-00aa003c157a} "MenuText"
obj[2]=RegValue : softwaremicrosoftinternet explorerextensions{c95fe080-8f5d-11d2-a20b-00aa003c157a} "MenuStatusBar"
obj[3]=RegValue : softwaremicrosoftinternet explorerextensions{c95fe080-8f5d-11d2-a20b-00aa003c157a} "Script"
obj[4]=RegValue : softwaremicrosoftinternet explorerextensions{c95fe080-8f5d-11d2-a20b-00aa003c157a} "clsid"
obj[5]=RegValue : softwaremicrosoftinternet explorerextensions{c95fe080-8f5d-11d2-a20b-00aa003c157a} "Icon"
obj[6]=RegValue : softwaremicrosoftinternet explorerextensions{c95fe080-8f5d-11d2-a20b-00aa003c157a} "HotIcon"
obj[7]=RegValue : softwaremicrosoftinternet explorerextensions{c95fe080-8f5d-11d2-a20b-00aa003c157a} "ButtonText"
obj[372]=RegValue : .DEFAULTsoftwaremicrosoftinternet explorerextensionscmdmapping "{c95fe080-8f5d-11d2-a20b-00aa003c157a}"
obj[373]=RegValue : S-1-5-18softwaremicrosoftinternet explorerextensionscmdmapping "{c95fe080-8f5d-11d2-a20b-00aa003c157a}"
obj[374]=RegValue : S-1-5-21-57989841-113007714-1343024091-1005softwaremicrosoftinternet explorerextensionscmdmapping "{c95fe080-8f5d-11d2-a20b-00aa003c157a}"

BARGAINBUDDY
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
obj[8]=Regkey : typelib{4eb7bbe8-2e15-424b-9ddb-2cdb9516b2c3}1.0helpdir
obj[9]=RegValue : typelib{4eb7bbe8-2e15-424b-9ddb-2cdb9516b2c3}1.0helpdir ""
obj[10]=Regkey : typelib{4eb7bbe8-2e15-424b-9ddb-2cdb9516b2c3}1.0flags
obj[11]=RegValue : typelib{4eb7bbe8-2e15-424b-9ddb-2cdb9516b2c3}1.0flags ""
obj[12]=Regkey : typelib{4eb7bbe8-2e15-424b-9ddb-2cdb9516b2c3}1.0
obj[13]=Regkey : typelib{4eb7bbe8-2e15-424b-9ddb-2cdb9516b2c3}1.0
obj[14]=RegValue : typelib{4eb7bbe8-2e15-424b-9ddb-2cdb9516b2c3}1.0 ""
obj[15]=Regkey : typelib{4eb7bbe8-2e15-424b-9ddb-2cdb9516b2c3}
obj[16]=Regkey : interface{c6906a23-4717-4e1f-b6fd-f06ebed15678}
obj[17]=RegValue : interface{c6906a23-4717-4e1f-b6fd-f06ebed15678} ""
obj[18]=Regkey : interface{8eee58d5-130e-4cbd-9c83-35a0564e5678}
obj[19]=RegValue : interface{8eee58d5-130e-4cbd-9c83-35a0564e5678} ""
obj[20]=Regkey : clsid{f4e04583-354e-4076-be7d-ed6a80fd66da}
obj[21]=RegValue : clsid{f4e04583-354e-4076-be7d-ed6a80fd66da} ""
obj[22]=Regkey : adp.urlcatcher.1
obj[23]=RegValue : adp.urlcatcher.1 ""
obj[24]=Regkey : adp.urlcatcher
obj[25]=RegValue : adp.urlcatcher ""
obj[26]=Regkey : softwarebargains
obj[27]=RegValue : softwarebargains "MainDir"
obj[28]=RegValue : softwarebargains "Binary"
obj[29]=RegValue : softwarebargains "ConfigUpdateQueryUrl"
obj[30]=RegValue : softwarebargains "ADDataUpdateQueryUrl"
obj[31]=RegValue : softwarebargains "SoftwareUpdateQueryUrl"
obj[32]=RegValue : softwarebargains "ServerName"
obj[33]=RegValue : softwarebargains "ServerPath"
obj[34]=RegValue : softwarebargains "TrackingServerPath"
obj[35]=RegValue : softwarebargains "TrackingGIFURL"
obj[36]=RegValue : softwarebargains "SliderLegalText"
obj[37]=RegValue : softwarebargains "ServerPort"
obj[38]=RegValue : softwarebargains "UpdateQueryDuration"
obj[39]=RegValue : softwarebargains "UpdateQueryFailedDuration"
obj[40]=RegValue : softwarebargains "BuildNumber"
obj[41]=RegValue : softwarebargains "AdvDelaySec"
obj[42]=RegValue : softwarebargains "TrackingFileFlag"
obj[43]=RegValue : softwarebargains "PartnerName"
obj[44]=RegValue : softwarebargains "PartnerID"
obj[45]=RegValue : softwarebargains "UniqueKey"
obj[46]=RegValue : softwarebargains "SystemInstallTime"
obj[47]=RegValue : softwarebargains "IdleMinutesThreshold"
obj[48]=RegValue : softwarebargains "MinMinutesBetweenTwoADs"
obj[49]=RegValue : softwarebargains "MaxDomainCap"
obj[50]=RegValue : softwarebargains "MinCountOfUrlsBetweenTwoADs"
obj[51]=RegValue : softwarebargains "MaxDailyCapPerUSer"
obj[52]=RegValue : softwarebargains "ConfigVersion"
obj[53]=RegValue : softwarebargains "ADDataVersion"
obj[54]=RegValue : softwarebargains "LastQueryTime"
obj[55]=Regkey : softwaremicrosoftwindowscurrentversionuninstallbargainbuddy
obj[56]=RegValue : softwaremicrosoftwindowscurrentversionuninstallbargainbuddy "DisplayName"
obj[57]=RegValue : softwaremicrosoftwindowscurrentversionuninstallbargainbuddy "UninstallString"
obj[58]=RegValue : softwaremicrosoftwindowscurrentversionuninstallbargainbuddy "Publisher"
obj[59]=RegValue : softwaremicrosoftwindowscurrentversionuninstallbargainbuddy "URLInfoAbout"
obj[60]=RegValue : softwaremicrosoftwindowscurrentversionuninstallbargainbuddy "DisplayVersion"
obj[61]=RegValue : softwaremicrosoftwindowscurrentversionuninstallbargainbuddy "DisplayIcon"
obj[62]=RegValue : softwaremicrosoftwindowscurrentversionuninstallbargainbuddy "NoModify"
obj[63]=RegValue : softwaremicrosoftwindowscurrentversionuninstallbargainbuddy "NoRepair"
obj[375]=RegValue : softwaremicrosoftwindowscurrentversionrun "BullsEye Network"
obj[376]=RegValue : softwareexactutil "PartnerID"
obj[377]=RegValue : softwareexactutil "UtilFolder"
obj[378]=RegValue : softwareexactutil "PartnerName"
obj[379]=RegValue : softwareexactutil "FirstHit"
obj[380]=RegValue : softwareexactutil "BuildNumber"
obj[381]=RegValue : softwareexactutil "UninstallUrl"
obj[382]=RegValue : softwareexactutil "UniqueKeyUrl"
obj[383]=RegValue : softwareexactutil "FirstHitUrl"
obj[441]=Regkey : softwareexactutil
obj[442]=RegValue : softwareexactutil "System"
obj[443]=RegValue : softwareexactutil "UniqueKey"
obj[444]=Folder : C:Program FilesBullsEye Network
obj[552]=File : C:WINDOWSzeta.exe
obj[553]=File : C:WINDOWSSystem32angelex.exe
obj[555]=File : C:WINDOWSSystem32exclean.exe
obj[556]=File : C:WINDOWSSystem32exdl.exe
obj[557]=File : C:WINDOWSSystem32exdl0.exe
obj[558]=File : C:WINDOWSSystem32exdl1.exe
obj[559]=File : C:WINDOWSSystem32exul.exe
obj[560]=File : C:WINDOWSSystem32exul1.exe
obj[561]=File : C:WINDOWSSystem32javexulm.vxd
obj[579]=File : C:WINDOWSSystem32mqexdlm.srg
obj[580]=File : C:WINDOWSSystem32msbe.dll
obj[586]=File : C:WINDOWSSystem32bbchk.exe
obj[587]=File : C:Program Filesbullseye networkbinadv.exe
obj[588]=File : C:Program Filesbullseye networkbinadx.exe
obj[589]=File : C:Program Filesbullseye networkbinbargains.exe
obj[590]=File : C:Program Filesbullseye networkad.dat
obj[591]=File : C:Program Filesbullseye networkub.dat
obj[592]=File : C:Program Filesbullseye networkUninstall.exe

DYFUCA
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
obj[64]=Regkey : typelib{40b1d454-9ca4-43cc-86aa-cb175eac52fb}
obj[65]=Regkey : interface{1c01d150-91a4-4de0-9bf8-a35d1bdf1001}
obj[66]=RegValue : interface{1c01d150-91a4-4de0-9bf8-a35d1bdf1001} ""
obj[67]=Regkey : dyfuca_bh.bhobj.1
obj[68]=RegValue : dyfuca_bh.bhobj.1 ""
obj[69]=Regkey : dyfuca_bh.bhobj
obj[70]=RegValue : dyfuca_bh.bhobj ""
obj[71]=Regkey : clsid{00000010-6f7d-442c-93e3-4a4827c2e4c8}
obj[72]=RegValue : clsid{00000010-6f7d-442c-93e3-4a4827c2e4c8} ""
obj[73]=Regkey : .DEFAULTsoftwareavenue media
obj[74]=Regkey : S-1-5-18softwareavenue media
obj[75]=Regkey : S-1-5-21-57989841-113007714-1343024091-1005softwareavenue media
obj[76]=Regkey : softwaremicrosoftwindowscurrentversionuninstalldyfuca
obj[92]=Regkey : softwaremicrosoftwindowscurrentversionuninstallInternet Optimizer
obj[93]=RegValue : softwaremicrosoftwindowscurrentversionuninstallInternet Optimizer "DisplayIcon"
obj[94]=RegValue : softwaremicrosoftwindowscurrentversionuninstallInternet Optimizer "DisplayName"
obj[95]=RegValue : softwaremicrosoftwindowscurrentversionuninstallInternet Optimizer "UninstallString"
obj[96]=Regkey : softwaremicrosoftwindowscurrentversionuninstallInternet Optimizer Active Alert
obj[97]=RegValue : softwaremicrosoftwindowscurrentversionuninstallInternet Optimizer Active Alert "DisplayIcon"
obj[98]=RegValue : softwaremicrosoftwindowscurrentversionuninstallInternet Optimizer Active Alert "DisplayName"
obj[99]=RegValue : softwaremicrosoftwindowscurrentversionuninstallInternet Optimizer Active Alert "UninstallString"
obj[100]=Regkey : softwareavenue mediainternet optimizer
obj[101]=RegValue : softwareavenue mediainternet optimizer "TargetDir"
obj[102]=RegValue : softwareavenue mediainternet optimizer "CLS"
obj[103]=RegValue : softwareavenue mediainternet optimizer "RID"
obj[104]=RegValue : softwareavenue mediainternet optimizer "Version"
obj[105]=RegValue : softwareavenue mediainternet optimizer "TAC"
obj[106]=RegValue : softwareavenue mediainternet optimizer "ServerVisited"
obj[107]=RegValue : softwareavenue mediainternet optimizer "UpdateInterval"
obj[108]=RegValue : softwareavenue mediainternet optimizer "ID"
obj[109]=RegValue : softwareavenue mediainternet optimizer "InstallT"
obj[110]=RegValue : softwareavenue mediainternet optimizer "remember[LLT]"
obj[111]=RegValue : softwareavenue mediainternet optimizer "Conn"
obj[112]=RegValue : softwareavenue mediainternet optimizer "403"
obj[113]=RegValue : softwareavenue mediainternet optimizer "404"
obj[114]=RegValue : softwareavenue mediainternet optimizer "410"
obj[115]=RegValue : softwareavenue mediainternet optimizer "500"
obj[116]=RegValue : softwareavenue mediainternet optimizer "PendingRemoval"
obj[117]=Regkey : softwareavenue media
obj[385]=RegValue : softwaremicrosoftwindowscurrentversionrun "Internet Optimizer"
obj[445]=Folder : C:Program FilesInternet Optimizer
obj[593]=File : C:WINDOWSnem220.dll
obj[594]=File : C:Program Filesinternet optimizerupdateactalert.exe
obj[595]=File : C:Program Filesinternet optimizeroptimize.exe
obj[596]=File : C:Program Filesinternet optimizeractalert.exe

ELITUM.ELITEBARBHO
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
obj[118]=Regkey : clsid{825cf5bd-8862-4430-b771-0c15c5ca8def}
obj[119]=RegValue : clsid{825cf5bd-8862-4430-b771-0c15c5ca8def} ""
obj[120]=Regkey : clsid{28caeff3-0f18-4036-b504-51d73bd81abc}
obj[121]=RegValue : clsid{28caeff3-0f18-4036-b504-51d73bd81abc} ""
obj[122]=Regkey : cgband.uicgbandobj.1
obj[123]=RegValue : cgband.uicgbandobj.1 ""
obj[124]=Regkey : clsid{be8d0059-d24d-4919-b76f-99f4a2203647}
obj[125]=RegValue : clsid{be8d0059-d24d-4919-b76f-99f4a2203647} ""
obj[126]=Regkey : clsid{ed103d9f-3070-4580-ab1e-e5c179c1ae41}
obj[127]=RegValue : clsid{ed103d9f-3070-4580-ab1e-e5c179c1ae41} ""
obj[128]=Regkey : cgband.bho.1
obj[129]=RegValue : cgband.bho.1 ""
obj[130]=Regkey : interface{ed646219-20bf-41e5-80fd-ee49021da599}
obj[131]=RegValue : interface{ed646219-20bf-41e5-80fd-ee49021da599} ""
obj[132]=Regkey : interface{4aff987a-773b-48e4-aee8-08ebddbdadf8}
obj[133]=RegValue : interface{4aff987a-773b-48e4-aee8-08ebddbdadf8} ""
obj[134]=Regkey : typelib{8aa59e15-6e81-415c-b299-1adfb50c8e1a}
obj[135]=Regkey : cgband.uicgbandobj
obj[136]=RegValue : cgband.uicgbandobj ""
obj[137]=Regkey : interface{276b0903-eb4b-46ff-8304-f093def69de7}
obj[138]=RegValue : interface{276b0903-eb4b-46ff-8304-f093def69de7} ""
obj[139]=Regkey : cgband.bho
obj[140]=RegValue : cgband.bho ""
obj[141]=Regkey : cgband.cgbandobj
obj[142]=RegValue : cgband.cgbandobj ""
obj[143]=Regkey : cgband.cgbandobj.1
obj[144]=RegValue : cgband.cgbandobj.1 ""
obj[145]=Regkey : interface{caab3b3f-e815-47d9-94fd-8bb9143c0077}
obj[146]=RegValue : interface{caab3b3f-e815-47d9-94fd-8bb9143c0077} ""
obj[147]=Regkey : clsid{0a1d22c3-37be-470c-9c29-e3074ee0574b}
obj[148]=RegValue : clsid{0a1d22c3-37be-470c-9c29-e3074ee0574b} ""
obj[149]=Regkey : typelib{8aa59e15-6e81-415c-b299-1adfb50c8e1a}1.0
obj[150]=RegValue : typelib{8aa59e15-6e81-415c-b299-1adfb50c8e1a}1.0 ""
obj[151]=Regkey : softwaremicrosoftwindowscurrentversionuninstallelitebar internet explorer toolbar
obj[152]=RegValue : softwaremicrosoftwindowscurrentversionuninstallelitebar internet explorer toolbar "UninstallString"
obj[153]=RegValue : softwaremicrosoftwindowscurrentversionuninstallelitebar internet explorer toolbar "DisplayName"
obj[154]=RegValue : softwaremicrosoftwindowscurrentversionuninstallelitebar internet explorer toolbar "DisplayIcon"
obj[155]=Regkey : softwaremicrosoftwindowscurrentversionexplorerbrowser helper objects{28caeff3-0f18-4036-b504-51d73bd81abc}
obj[156]=RegValue : softwaremicrosoftwindowscurrentversionexplorerbrowser helper objects{28caeff3-0f18-4036-b504-51d73bd81abc} ""
obj[157]=Regkey : softwareelitumelitetoolbar
obj[158]=RegValue : softwareelitumelitetoolbar "AccountNumber"
obj[159]=RegValue : softwareelitumelitetoolbar "uninstalled"
obj[160]=RegValue : softwareelitumelitetoolbar "_show"
obj[161]=RegValue : softwareelitumelitetoolbar "FirstTimeStarted"
obj[162]=RegValue : softwareelitumelitetoolbar "SearchIndex"
obj[163]=RegValue : softwareelitumelitetoolbar "AutoComplete"
obj[164]=RegValue : softwareelitumelitetoolbar "ac1"
obj[165]=RegValue : softwareelitumelitetoolbar "adult.tbr"
obj[166]=RegValue : softwareelitumelitetoolbar "popupblocker"
obj[167]=RegValue : softwareelitumelitetoolbar "default.tbr"
obj[168]=RegValue : softwareelitumelitetoolbar "search.mnu"
obj[169]=RegValue : softwareelitumelitetoolbar "version"
obj[170]=RegValue : softwareelitumelitetoolbar "path"
obj[171]=RegValue : softwareelitumelitetoolbar "UpdateDate"
obj[172]=RegValue : softwareelitumelitetoolbar "guid"
obj[173]=RegValue : softwareelitumelitetoolbar "searchkeys"
obj[174]=RegValue : softwareelitumelitetoolbar "errorreport"
obj[175]=RegValue : softwareelitumelitetoolbar "excluded"
obj[176]=RegValue : softwareelitumelitetoolbar "keywords"
obj[177]=RegValue : softwareelitumelitetoolbar "city"
obj[178]=RegValue : softwareelitumelitetoolbar "state"
obj[179]=RegValue : softwareelitumelitetoolbar "country"
obj[180]=RegValue : softwareelitumelitetoolbar "Activated"
obj[181]=RegValue : softwareelitumelitetoolbar "axparam"
obj[387]=RegValue : S-1-5-21-57989841-113007714-1343024091-1005softwaremicrosoftinternet explorertoolbarwebbrowser "{825CF5BD-8862-4430-B771-0C15C5CA8DEF}"
obj[388]=RegValue : softwaremicrosoftinternet explorertoolbar "{825CF5BD-8862-4430-B771-0C15C5CA8DEF}"
obj[446]=Regkey : softwarelq
obj[447]=RegValue : softwarelq "TM"
obj[448]=RegValue : softwarelq "U"
obj[449]=RegValue : softwarelq "AD"
obj[450]=RegValue : softwarelq "AC"
obj[451]=RegValue : softwarelq "ohb_ie_plugin"
obj[452]=RegValue : softwarelq "I"
obj[453]=RegValue : softwarelq "AT"
obj[454]=RegValue : softwarelq "AM"
obj[455]=RegValue : softwarelq "TR"
obj[456]=RegValue : softwarelq "country"
obj[457]=RegValue : softwarelq "city"
obj[458]=RegValue : softwarelq "state"
obj[459]=RegValue : softwarelq "RX"
obj[460]=RegValue : softwarelq "RX2.8"
obj[461]=RegValue : softwarelq "RX2.9"
obj[462]=RegValue : softwarelq "RX3.0"
obj[463]=Regkey : softwareelitum
obj[464]=Folder : C:WINDOWSEliteToolBar
obj[554]=File : C:WINDOWSSystem32doolsav.dat
obj[597]=File : C:WINDOWSelitetoolbarEliteToolBar version 58.dll

ISTBAR.DOTCOMTOOLBAR
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
obj[182]=Regkey : softwareclassesclsid{5f1abcdb-a875-46c1-8345-b72a4567e486}
obj[183]=RegValue : softwareclassesclsid{5f1abcdb-a875-46c1-8345-b72a4567e486} ""
obj[184]=Regkey : softwareclassespugi.pugiobj.1
obj[185]=RegValue : softwareclassespugi.pugiobj.1 ""
obj[186]=Regkey : softwareclassespugi.pugiobj
obj[187]=RegValue : softwareclassespugi.pugiobj ""
obj[188]=Regkey : softwareclassesinterface{7b9a715e-9d87-4c21-bf9e-f914f2fa953f}
obj[189]=RegValue : softwareclassesinterface{7b9a715e-9d87-4c21-bf9e-f914f2fa953f} ""
obj[465]=Regkey : softwareist
obj[466]=RegValue : softwareist "Recover"
obj[467]=RegValue : softwareist "InstallDate"
obj[468]=RegValue : softwareist "account_id"
obj[469]=RegValue : softwareist "config"

ISTBAR
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
obj[190]=Regkey : clsid{5f1abcdb-a875-46c1-8345-b72a4567e486}
obj[191]=RegValue : clsid{5f1abcdb-a875-46c1-8345-b72a4567e486} ""
obj[192]=Regkey : interface{7b9a715e-9d87-4c21-bf9e-f914f2fa953f}
obj[193]=RegValue : interface{7b9a715e-9d87-4c21-bf9e-f914f2fa953f} ""
obj[194]=Regkey : pugi.pugiobj
obj[195]=RegValue : pugi.pugiobj ""
obj[196]=Regkey : pugi.pugiobj.1
obj[197]=RegValue : pugi.pugiobj.1 ""
obj[198]=Regkey : typelib{6d3f5de4-e980-4407-a10f-9ac771abaae6}
obj[199]=Regkey : .DEFAULTsoftwareist
obj[200]=RegValue : .DEFAULTsoftwareist "InstallDate"
obj[201]=RegValue : .DEFAULTsoftwareist "account_id"
obj[202]=RegValue : .DEFAULTsoftwareist "config"
obj[203]=RegValue : .DEFAULTsoftwareist "Recover"
obj[204]=Regkey : S-1-5-18softwareist
obj[205]=RegValue : S-1-5-18softwareist "InstallDate"
obj[206]=RegValue : S-1-5-18softwareist "account_id"
obj[207]=RegValue : S-1-5-18softwareist "config"
obj[208]=RegValue : S-1-5-18softwareist "Recover"
obj[209]=Regkey : S-1-5-21-57989841-113007714-1343024091-1005softwareist
obj[210]=RegValue : S-1-5-21-57989841-113007714-1343024091-1005softwareist "Recover"
obj[211]=RegValue : S-1-5-21-57989841-113007714-1343024091-1005softwareist "InstallDate"
obj[212]=RegValue : S-1-5-21-57989841-113007714-1343024091-1005softwareist "account_id"
obj[213]=RegValue : S-1-5-21-57989841-113007714-1343024091-1005softwareist "config"
obj[214]=Regkey : .DEFAULTsoftwareistbar
obj[215]=Regkey : S-1-5-18softwareistbar
obj[216]=Regkey : S-1-5-21-57989841-113007714-1343024091-1005softwareistbar
obj[217]=Regkey : softwareistsvc
obj[218]=RegValue : softwareistsvc "version"
obj[219]=RegValue : softwareistsvc "app_name"
obj[220]=RegValue : softwareistsvc "popup_url"
obj[221]=RegValue : softwareistsvc "update_url"
obj[222]=RegValue : softwareistsvc "config_url"
obj[223]=RegValue : softwareistsvc "popup_initial_delay"
obj[224]=RegValue : softwareistsvc "popup_count"
obj[225]=RegValue : softwareistsvc "update_count"
obj[226]=RegValue : softwareistsvc "update_version"
obj[227]=RegValue : softwareistsvc "config_count"
obj[228]=RegValue : softwareistsvc "account_id"
obj[229]=RegValue : softwareistsvc "app_date"
obj[230]=RegValue : softwareistsvc "popup_interval"
obj[231]=RegValue : softwareistsvc "popup_last"
obj[232]=RegValue : softwareistsvc "update_interval"
obj[233]=RegValue : softwareistsvc "update_last"
obj[234]=RegValue : softwareistsvc "config_interval"
obj[235]=RegValue : softwareistsvc "config_last"
obj[236]=Regkey : softwaremicrosoftwindowscurrentversionuninstallistbaristbar
obj[237]=RegValue : softwaremicrosoftwindowscurrentversionuninstallistbaristbar "DisplayName"
obj[238]=RegValue : softwaremicrosoftwindowscurrentversionuninstallistbaristbar "UninstallString"
obj[239]=Regkey : softwaremicrosoftwindowscurrentversionuninstallistsvc
obj[240]=RegValue : softwaremicrosoftwindowscurrentversionuninstallistsvc "DisplayName"
obj[241]=RegValue : softwaremicrosoftwindowscurrentversionuninstallistsvc "UninstallString"
obj[242]=RegValue : softwaremicrosoftwindowscurrentversionuninstallistsvc "NoModify"
obj[389]=RegValue : .DEFAULTsoftwaremicrosoftinternet explorertoolbarwebbrowser "{5F1ABCDB-A875-46C1-8345-B72A4567E486}"
obj[390]=RegValue : S-1-5-18softwaremicrosoftinternet explorertoolbarwebbrowser "{5F1ABCDB-A875-46C1-8345-B72A4567E486}"
obj[391]=RegValue : S-1-5-21-57989841-113007714-1343024091-1005softwaremicrosoftinternet explorertoolbarwebbrowser "{5F1ABCDB-A875-46C1-8345-B72A4567E486}"
obj[392]=RegValue : softwaremicrosoftwindowscurrentversionrun "IST Service"
obj[470]=Folder : C:Documents and SettingsJuusoSuosikitAdult Sites
obj[471]=Folder : C:Documents and SettingsJuusoSuosikitFree Adult Content
obj[472]=Folder : C:Program Files180Solutions
obj[473]=Folder : C:Program FilesISTbar
obj[474]=Folder : C:Program FilesISTsvc
obj[598]=File : C:Program Files180solutionssais.exe
obj[599]=File : C:Program Files180solutionssais.log
obj[600]=File : C:Program Filesistbaristbar.dll
obj[601]=File : C:Program Filesistbarnavmain.bmp
obj[602]=File : C:Program Filesistbarsearch.bmp
obj[603]=File : C:Program Filesistbarxml_istbar.php
obj[604]=File : C:Program Filesistsvcistsvc.exe

SAHAGENT
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
obj[243]=Regkey : clsid{30402ff4-3e71-4a1c-9b4b-1cd3486a9fb2}
obj[244]=RegValue : clsid{30402ff4-3e71-4a1c-9b4b-1cd3486a9fb2} ""
obj[245]=Regkey : interface{4828c95f-c5db-4ab6-a945-8d8ec44b98a8}
obj[246]=RegValue : interface{4828c95f-c5db-4ab6-a945-8d8ec44b98a8} ""
obj[247]=Regkey : interface{4e570f74-deee-4fcf-b960-feefa4b8c6fc}
obj[248]=RegValue : interface{4e570f74-deee-4fcf-b960-feefa4b8c6fc} ""
obj[249]=Regkey : typelib{cde442a3-dc2c-467e-a311-b4bc775d86c5}
obj[250]=Regkey : webinstaller.execute
obj[251]=RegValue : webinstaller.execute ""
obj[252]=Regkey : webinstaller.execute.1
obj[253]=RegValue : webinstaller.execute.1 ""
obj[254]=Regkey : softwaremicrosoftwindowscurrentversionuninstallshopathomeselect agent
obj[255]=RegValue : softwaremicrosoftwindowscurrentversionuninstallshopathomeselect agent "DisplayName"
obj[256]=RegValue : softwaremicrosoftwindowscurrentversionuninstallshopathomeselect agent "UninstallString"
obj[257]=Regkey : softwarevgroup
obj[258]=Regkey : softwarewinsock2layered provider sample
obj[400]=RegValue : softwaremicrosoftwindowscurrentversionrun "SAHAGENT"
obj[585]=File : C:DOCUME~1JuusoLOCALS~1Temptemp.frECF1
obj[605]=File : C:WINDOWSSystem32vg.dat
obj[606]=File : C:WINDOWSdownloaded program filessetup.inf
obj[607]=File : C:WINDOWSdownloaded program filesWEBInstaller.dll
obj[608]=File : C:WINDOWSdownloaded program filesxmlparse_.dll
obj[609]=File : C:WINDOWSdownloaded program filesxmltok_.dll
obj[610]=File : C:WINDOWSSAHUninstall.exe
obj[611]=File : c:SahAgent.log
obj[612]=File : C:WINDOWSSystem32SahAgent.exe
obj[613]=File : C:WINDOWSSystem32v.dat

SEARCH RELEVANCY
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
obj[259]=Regkey : clsid{1d7e3b41-23ce-469b-be1b-a64b877923e1}
obj[260]=RegValue : clsid{1d7e3b41-23ce-469b-be1b-a64b877923e1} ""
obj[261]=Regkey : searchrelevancy
obj[262]=RegValue : searchrelevancy ""
obj[263]=Regkey : softwaremicrosoftwindowscurrentversionuninstallsearch relevancy
obj[264]=RegValue : softwaremicrosoftwindowscurrentversionuninstallsearch relevancy "DisplayName"
obj[265]=RegValue : softwaremicrosoftwindowscurrentversionuninstallsearch relevancy "UninstallString"
obj[475]=Folder : C:Program FilesSearchRelevancy
obj[614]=File : C:Program FilessearchrelevancySearchRelevancy.dll
obj[615]=File : C:Program FilessearchrelevancySearchRelevancy.xml
obj[616]=File : C:Program FilessearchrelevancySearchRelevancy1.dll
obj[617]=File : C:Program Filessearchrelevancyuninstall.exe

SIDEFIND
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
obj[266]=Regkey : softwaremicrosoftinternet explorerextensions{10e42047-deb9-4535-a118-b3f6ec39b807}
obj[267]=RegValue : softwaremicrosoftinternet explorerextensions{10e42047-deb9-4535-a118-b3f6ec39b807} "Default Visible"
obj[268]=RegValue : softwaremicrosoftinternet explorerextensions{10e42047-deb9-4535-a118-b3f6ec39b807} "ButtonText"
obj[269]=RegValue : softwaremicrosoftinternet explorerextensions{10e42047-deb9-4535-a118-b3f6ec39b807} "HotIcon"
obj[270]=RegValue : softwaremicrosoftinternet explorerextensions{10e42047-deb9-4535-a118-b3f6ec39b807} "Icon"
obj[271]=RegValue : softwaremicrosoftinternet explorerextensions{10e42047-deb9-4535-a118-b3f6ec39b807} "CLSID"
obj[272]=RegValue : softwaremicrosoftinternet explorerextensions{10e42047-deb9-4535-a118-b3f6ec39b807} "BandCLSID"
obj[273]=Regkey : browserhelperobject.bahelper
obj[274]=RegValue : browserhelperobject.bahelper ""
obj[275]=Regkey : browserhelperobject.bahelper.1
obj[276]=RegValue : browserhelperobject.bahelper.1 ""
obj[277]=Regkey : clsid{8cba1b49-8144-4721-a7b1-64c578c9eed7}
obj[278]=RegValue : clsid{8cba1b49-8144-4721-a7b1-64c578c9eed7} ""
obj[279]=Regkey : clsid{a3fdd654-a057-4971-9844-4ed8e67dbbb8}
obj[280]=RegValue : clsid{a3fdd654-a057-4971-9844-4ed8e67dbbb8} ""
obj[281]=Regkey : sidefind.finder
obj[282]=RegValue : sidefind.finder ""
obj[283]=Regkey : sidefind.finder.1
obj[284]=RegValue : sidefind.finder.1 ""
obj[285]=Regkey : typelib{58634367-d62b-4c2c-86be-5aac45cdb671}
obj[286]=Regkey : typelib{d0288a41-9855-4a9b-8316-babe243648da}
obj[287]=Regkey : softwaremicrosoftsidefind
obj[288]=RegValue : softwaremicrosoftsidefind "webautosearch"
obj[289]=RegValue : softwaremicrosoftsidefind "shoppingautosearch"
obj[290]=Regkey : softwaremicrosoftwindowscurrentversionuninstallsidefind
obj[291]=RegValue : softwaremicrosoftwindowscurrentversionuninstallsidefind "DisplayName"
obj[292]=RegValue : softwaremicrosoftwindowscurrentversionuninstallsidefind "UninstallString"
obj[293]=Regkey : softwaresidefind
obj[294]=RegValue : softwaresidefind "account_id"
obj[295]=RegValue : softwaresidefind "PathBHO"
obj[296]=RegValue : softwaresidefind "PathDLL"
obj[297]=RegValue : softwaresidefind "PathXML"
obj[298]=RegValue : softwaresidefind "PathEXE"
obj[299]=RegValue : softwaresidefind "InstallDate"
obj[300]=RegValue : softwaresidefind "SearchSite"
obj[301]=RegValue : softwaresidefind "update"
obj[302]=RegValue : softwaresidefind "ver"
obj[303]=RegValue : softwaresidefind "IntervalBetweenShows"
obj[304]=RegValue : softwaresidefind "show"
obj[305]=RegValue : softwaresidefind "NextShow"
obj[476]=Regkey : interface{339d8aff-0b42-4260-ad82-78ce605a9543}
obj[477]=RegValue : interface{339d8aff-0b42-4260-ad82-78ce605a9543} ""
obj[478]=Regkey : interface{a36a5936-cfd9-4b41-86bd-319a1931887f}
obj[479]=RegValue : interface{a36a5936-cfd9-4b41-86bd-319a1931887f} ""
obj[480]=Folder : C:Program FilesSideFind
obj[618]=File : C:Program Filessidefindsfbho.dll
obj[619]=File : C:Program Filessidefindsfexd001
obj[620]=File : C:Program Filessidefindsidefind.dll

TOPMOXIE
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
obj[306]=Regkey : .DEFAULTsoftwaremicrosoftinternet explorermenuextweb rebates
obj[307]=RegValue : .DEFAULTsoftwaremicrosoftinternet explorermenuextweb rebates ""
obj[308]=RegValue : .DEFAULTsoftwaremicrosoftinternet explorermenuextweb rebates "Contexts"
obj[309]=Regkey : S-1-5-18softwaremicrosoftinternet explorermenuextweb rebates
obj[310]=RegValue : S-1-5-18softwaremicrosoftinternet explorermenuextweb rebates ""
obj[311]=RegValue : S-1-5-18softwaremicrosoftinternet explorermenuextweb rebates "Contexts"
obj[312]=Regkey : S-1-5-21-57989841-113007714-1343024091-1005softwaremicrosoftinternet explorermenuextweb rebates
obj[313]=RegValue : S-1-5-21-57989841-113007714-1343024091-1005softwaremicrosoftinternet explorermenuextweb rebates ""
obj[314]=RegValue : S-1-5-21-57989841-113007714-1343024091-1005softwaremicrosoftinternet explorermenuextweb rebates "Contexts"
obj[315]=Regkey : softwaremicrosoftwindowscurrentversionuninstalluntopr1150
obj[316]=RegValue : softwaremicrosoftwindowscurrentversionuninstalluntopr1150 ""
obj[317]=RegValue : softwaremicrosoftwindowscurrentversionuninstalluntopr1150 "DisplayName"
obj[318]=RegValue : softwaremicrosoftwindowscurrentversionuninstalluntopr1150 "UninstallString"
obj[403]=RegValue : softwaremicrosoftwindowscurrentversionrun "WebRebates0"
obj[481]=RegValue : softwaremicrosoftinternet explorermainins "1150"
obj[482]=Folder : C:Program FilesWeb_Rebates
obj[621]=File : C:Program Filesweb_rebatesdisp1150.exe
obj[622]=File : C:Program Filesweb_rebatesREADME.txt
obj[623]=File : C:Program Filesweb_rebatesWebRebates0.exe
obj[624]=File : C:Program Filesweb_rebatesWebRebates1.exe

WHENU
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
obj[319]=Regkey : wusn.1
obj[320]=RegValue : wusn.1 "WUSN_Id"
obj[321]=Regkey : S-1-5-21-57989841-113007714-1343024091-1005softwarewhenu
obj[322]=Regkey : softwaremicrosoftwindowscurrentversionuninstallweathercast
obj[323]=RegValue : softwaremicrosoftwindowscurrentversionuninstallweathercast "DisplayIcon"
obj[324]=RegValue : softwaremicrosoftwindowscurrentversionuninstallweathercast "DisplayName"
obj[325]=RegValue : softwaremicrosoftwindowscurrentversionuninstallweathercast "DisplayVersion"
obj[326]=RegValue : softwaremicrosoftwindowscurrentversionuninstallweathercast "HelpLink"
obj[327]=RegValue : softwaremicrosoftwindowscurrentversionuninstallweathercast "Publisher"
obj[328]=RegValue : softwaremicrosoftwindowscurrentversionuninstallweathercast "UninstallString"
obj[329]=RegValue : softwaremicrosoftwindowscurrentversionuninstallweathercast "UrlInfoAbout"
obj[330]=Regkey : softwarewhenusave
obj[331]=RegValue : softwarewhenusave "db_script_update"
obj[332]=RegValue : softwarewhenusave "InstallDir"
obj[333]=RegValue : softwarewhenusave "pats_url"
obj[334]=RegValue : softwarewhenusave "pat_chunks_url"
obj[335]=RegValue : softwarewhenusave "script_url"
obj[336]=RegValue : softwarewhenusave "update_url"
obj[337]=RegValue : softwarewhenusave "ver_url"
obj[338]=RegValue : softwarewhenusave "Version"
obj[339]=RegValue : softwarewhenusave "extra_url"
obj[340]=RegValue : softwarewhenusave "extraver_url"
obj[341]=RegValue : softwarewhenusave "ziptomsa_url"
obj[342]=RegValue : softwarewhenusave "InstallTime"
obj[343]=RegValue : softwarewhenusave "LastPartner"
obj[344]=RegValue : softwarewhenusave "TotalPartner"
obj[345]=RegValue : softwarewhenusave "newuser_rs"
obj[346]=RegValue : softwarewhenusave "Partner"
obj[347]=RegValue : softwarewhenusave "PartnerB"
obj[348]=RegValue : softwarewhenusave "PartnerDesc"
obj[349]=RegValue : softwarewhenusave "FullDBTime"
obj[350]=RegValue : softwarewhenusave "HeartbeatTime"
obj[351]=RegValue : softwarewhenusave "brandskin_url"
obj[352]=RegValue : softwarewhenusave "brandstrip_rs"
obj[353]=RegValue : softwarewhenusave "brandstrip_url"
obj[354]=RegValue : softwarewhenusave "himp_url"
obj[355]=RegValue : softwarewhenusave "iptomsa_url"
obj[356]=RegValue : softwarewhenusave "maxPopups_rs"
obj[357]=RegValue : softwarewhenusave "timedDBUpdate_rs"
obj[358]=RegValue : softwarewhenusave "uninstalltag_rs"
obj[359]=RegValue : softwarewhenusave "db_stamp_rs"
obj[360]=RegValue : softwarewhenusave "db_server_update"
obj[361]=RegValue : softwarewhenusave "city"
obj[362]=RegValue : softwarewhenusave "country"
obj[363]=RegValue : softwarewhenusave "MSA"
obj[364]=RegValue : softwarewhenusave "TotalPopup"
obj[365]=RegValue : softwarewhenusave "IPToMsaTime_rs"
obj[366]=RegValue : softwarewhenusave "country_old_rs"
obj[367]=RegValue : softwarewhenusave "city_old_rs"
obj[368]=RegValue : softwarewhenusave "UrlChangeCount"
obj[404]=RegValue : S-1-5-21-57989841-113007714-1343024091-1005softwaremicrosoftwindowscurrentversionrun "WeatherCast"
obj[405]=RegValue : softwaremicrosoftwindowscurrentversionrun "WhenUSave"
obj[483]=Regkey : softwarewhenu
obj[484]=Folder : C:Program FilesSave
obj[485]=Folder : C:Program FilesWeatherCast
obj[486]=Folder : C:Documents and SettingsJuusoKäynnistä-valikkoOhjelmatWeatherCast
obj[625]=File : C:Program FilessaveReadMe.txt
obj[626]=File : C:Program Filessavesave.db
obj[627]=File : C:Program FilessaveSave.exe
obj[628]=File : C:Program Filessavesave.htm
obj[629]=File : C:Program FilessaveSaveUninst.exe
obj[630]=File : C:Program Filessavestore.db
obj[631]=File : C:Program FilesweathercastUninst.exe
obj[632]=File : C:Program FilesweathercastWeather.exe
obj[633]=File : C:DOCUME~1JuusoLOCALS~1TempGLFCGLFC.EXE
obj[661]=File : C:Documents and SettingsJuusoKäynnistä-valikkoOhjelmatWeatherCastWeatherCast.lnk

180SOLUTIONS
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
obj[369]=RegValue : .DEFAULTsoftwaresalm "Retry"
obj[370]=RegValue : S-1-5-18softwaresalm "Retry"
obj[371]=RegValue : softwaresalm "partner_id"
obj[416]=RegValue : SoftwareMicrosoftWindowsCurrentVersionRun "salm"
obj[417]=RegValue : SoftwareMicrosoftWindowsCurrentVersionRun "mpcfmdwh"
obj[487]=Regkey : softwaresalm
obj[488]=RegValue : softwaresalm "last_conn_h"
obj[489]=RegValue : softwaresalm "last_conn_l"
obj[490]=RegValue : softwaresalm "we"
obj[491]=RegValue : softwaresalm "cdata"
obj[492]=RegValue : softwaresalm "TimeOffset"
obj[493]=RegValue : softwaresalm "geourl_last_full_version"
obj[494]=RegValue : softwaresalm "geourl_current_version"
obj[495]=RegValue : softwaresalm "actionurl_last_full_version"
obj[496]=RegValue : softwaresalm "actionurl_current_version"
obj[497]=RegValue : softwaresalm "keyword_last_full_version"
obj[498]=RegValue : softwaresalm "keyword_current_version"
obj[499]=RegValue : softwaresalm "recent_shown"
obj[500]=RegValue : softwaresalm "key_int_high"
obj[501]=RegValue : softwaresalm "key_int_low"
obj[502]=Regkey : softwaresalm
obj[503]=RegValue : softwaresalm "mt1"
obj[504]=RegValue : softwaresalm "mt2"
obj[505]=RegValue : softwaresalm "mt3"
obj[506]=RegValue : softwaresalm "gma"
obj[507]=RegValue : softwaresalm "gvi"
obj[508]=RegValue : softwaresalm "gpi"
obj[509]=RegValue : softwaresalm "did"
obj[510]=RegValue : softwaresalm "duid"
obj[511]=RegValue : softwaresalm "product_id"
obj[512]=RegValue : softwaresalm "umt"
obj[513]=RegValue : softwaresalm "boom"
obj[514]=RegValue : softwaresalm "boom_ver"
obj[515]=Regkey : softwaremicrosoftwindowscurrentversionuninstallsalm
obj[516]=RegValue : softwaremicrosoftwindowscurrentversionuninstallsalm "DisplayName"
obj[517]=RegValue : softwaremicrosoftwindowscurrentversionuninstallsalm "UninstallString"
obj[518]=RegValue : softwaremicrosoftwindowscurrentversionuninstallsalm "DisplayIcon"
obj[550]=File : c:tempsalm.exe
obj[551]=File : c:windowsmpcfmdwh.exe
obj[634]=File : c:tempsalm.log

COOLWEBSEARCH
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
obj[384]=RegValue : softwaretsa "UID"
obj[415]=RegValue : SoftwareMicrosoftWindowsCurrentVersionRun "Tsa2"
obj[519]=Regkey : protocolsfiltertext/html
obj[520]=RegValue : protocolsfiltertext/html "CLSID"
obj[521]=Regkey : softwaretsa
obj[522]=RegValue : softwaretsa "TslHWND"
obj[523]=RegValue : softwaretsa "Tsm2HWND"
obj[524]=RegValue : softwaretsa "Ts2HWND"
obj[525]=RegValue : softwaretsa "Tsl2HWND"
obj[526]=Regkey : softwaretsa
obj[527]=RegValue : softwaretsa ""
obj[528]=RegValue : softwaretsa "NewInstall"
obj[529]=RegValue : softwaretsa "PAPP"
obj[530]=RegValue : softwaretsa "Path"
obj[531]=RegValue : softwaretsa "CODE"
obj[532]=RegValue : softwaretsa "CountryCode"
obj[533]=RegValue : softwaretsa "RegionCode"
obj[534]=RegValue : softwaretsa "CityCode"
obj[535]=RegValue : softwaretsa "MetroCode"
obj[536]=RegValue : softwaretsa "ContinentCode"
obj[537]=RegValue : softwaremicrosoftinternet explorersearch "SearchAssistant"
obj[538]=RegValue : softwaremicrosoftinternet explorermain "Search Bar"
obj[539]=RegValue : softwareclassesprotocolsfiltertext/html "CLSID"
obj[540]=RegValue : softwaremicrosoftwindowscurrentversioninternet settingsuser agentpost platform "iebar"
obj[549]=File : c:progra~1common~1tsatsm2.exe

EBATES MONEYMAKER
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
obj[386]=RegValue : S-1-5-21-57989841-113007714-1343024091-1005softwarelq "AC"

POWERSCAN
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
obj[393]=RegValue : .DEFAULTsoftwarepowerscan "account_id"
obj[394]=RegValue : S-1-5-18softwarepowerscan "account_id"
obj[395]=RegValue : S-1-5-21-57989841-113007714-1343024091-1005softwarepowerscan "account_id"
obj[396]=RegValue : softwarepowerscan "LoadNum"
obj[397]=RegValue : .DEFAULT\softwarepowerscan "account_id"
obj[398]=RegValue : S-1-5-18\softwarepowerscan "account_id"
obj[399]=RegValue : S-1-5-21-57989841-113007714-1343024091-1005\softwarepowerscan "account_id"
obj[541]=Regkey : softwarepowerscan
obj[542]=RegValue : softwarepowerscan "account_id"
obj[543]=Regkey : softwarepowerscan
obj[544]=Regkey : .defaultsoftwarepowerscan
obj[545]=Folder : C:Documents and SettingsJuusoKäynnistä-valikkoOhjelmatPower Scan
obj[584]=File : C:DOCUME~1JuusoLOCALS~1Temppowerscan.exe
obj[635]=File : C:Documents and SettingsJuusoKäynnistä-valikkoOhjelmatpower scanPower Scan.lnk

SEARCH MIRACLE
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
obj[401]=RegValue : softwaremicrosoftwindowscurrentversionrun "kalvsys"
obj[562]=File : C:WINDOWSSystem32kalvbgs32.exe
obj[563]=File : C:WINDOWSSystem32kalvduy32.exe
obj[564]=File : C:WINDOWSSystem32kalvgje32.exe
obj[565]=File : C:WINDOWSSystem32kalvhom32.exe
obj[566]=File : C:WINDOWSSystem32kalvjwj32.exe
obj[567]=File : C:WINDOWSSystem32kalvkeh32.exe
obj[568]=File : C:WINDOWSSystem32kalvlgc32.exe
obj[569]=File : C:WINDOWSSystem32kalvlgy32.exe
obj[570]=File : C:WINDOWSSystem32kalvlje32.exe
obj[571]=File : C:WINDOWSSystem32kalvlvx32.exe
obj[572]=File : C:WINDOWSSystem32kalvlyz32.exe
obj[573]=File : C:WINDOWSSystem32kalvmiv32.exe
obj[574]=File : C:WINDOWSSystem32kalvnri32.exe
obj[575]=File : C:WINDOWSSystem32kalvohv32.exe
obj[576]=File : C:WINDOWSSystem32kalvved32.exe
obj[577]=File : C:WINDOWSSystem32kalvwgf32.exe
obj[578]=File : C:WINDOWSSystem32kalvxie32.exe
obj[636]=File : c:silent53.exe
obj[637]=File : C:DOCUME~1JuusoLOCALS~1Temptmp1.tmp
obj[638]=File : C:DOCUME~1JuusoLOCALS~1Temptmp2.tmp
obj[639]=File : C:DOCUME~1JuusoLOCALS~1Temptmp3.tmp
obj[640]=File : C:DOCUME~1JuusoLOCALS~1Temptmp4.tmp
obj[641]=File : C:DOCUME~1JuusoLOCALS~1Temptmp5.tmp
obj[642]=File : C:DOCUME~1JuusoLOCALS~1Temptmp6.tmp
obj[643]=File : C:DOCUME~1JuusoLOCALS~1Temptmp7.tmp
obj[644]=File : C:DOCUME~1JuusoLOCALS~1Temptmp8.tmp
obj[645]=File : C:DOCUME~1JuusoLOCALS~1Temptmp9.tmp
obj[646]=File : C:DOCUME~1JuusoLOCALS~1TemptmpA.tmp
obj[647]=File : C:DOCUME~1JuusoLOCALS~1TemptmpB.tmp

TARGETSAVERS
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
obj[402]=RegValue : softwaretsa "AffiliateID"
obj[546]=Regkey : softwaremicrosoftwindowscurrentversionuninstalltsl installer
obj[547]=RegValue : softwaremicrosoftwindowscurrentversionuninstalltsl installer "NoRemove"
obj[548]=Folder : C:Program Filescommon filestsa
obj[648]=File : C:Program Filescommon filestsahistory
obj[649]=File : C:Program Filescommon filestsainst.dat
obj[650]=File : C:Program Filescommon filestsats2.exe
obj[651]=File : C:Program Filescommon filestsats2lock
obj[652]=File : C:Program Filescommon filestsatsl.exe
obj[653]=File : C:Program Filescommon filestsatsl2.exe
obj[654]=File : C:Program Filescommon filestsatsl2lock
obj[655]=File : C:Program Filescommon filestsatsllock
obj[656]=File : C:Program Filescommon filestsatsm2.exe
obj[657]=File : C:Program Filescommon filestsatsm2lock
obj[658]=File : C:Program Filescommon filestsatsp2.exe
obj[659]=File : C:Program Filescommon filestsatsuninst.exe
obj[660]=File : C:Program Filescommon filestsawu

POSSIBLE BROWSER HIJACK ATTEMPT
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
obj[406]=RegData : .DEFAULTSoftwareMicrosoftInternet ExplorerMain "Search Page"
obj[407]=RegData : .DEFAULTSoftwareMicrosoftInternet ExplorerMain "Search Bar"
obj[408]=RegData : .DEFAULTSoftwareMicrosoftInternet ExplorerSearch "SearchAssistant"
obj[409]=RegData : S-1-5-18SoftwareMicrosoftInternet ExplorerMain "Search Page"
obj[410]=RegData : S-1-5-18SoftwareMicrosoftInternet ExplorerMain "Search Bar"
obj[411]=RegData : S-1-5-18SoftwareMicrosoftInternet ExplorerSearch "SearchAssistant"
obj[412]=RegData : S-1-5-21-57989841-113007714-1343024091-1005SoftwareMicrosoftInternet ExplorerMain "Search Page"
obj[413]=RegData : S-1-5-21-57989841-113007714-1343024091-1005SoftwareMicrosoftInternet ExplorerMain "Search Bar"
obj[414]=RegData : S-1-5-21-57989841-113007714-1343024091-1005SoftwareMicrosoftInternet ExplorerSearch "SearchAssistant"

TRACKING COOKIE
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
obj[418]=IECache Entry : Cookie:juuso@as1.falkag.de/
obj[419]=IECache Entry : Cookie:juuso@partners.webmasterplan.com/
obj[420]=IECache Entry : Cookie:juuso@doubleclick.net/
obj[421]=IECache Entry : Cookie:juuso@servedby.netshelter.net/
obj[422]=IECache Entry : Cookie:juuso@advertising.com/
obj[423]=IECache Entry : Cookie:juuso@www.slotch.com/
obj[424]=IECache Entry : Cookie:juuso@casalemedia.com/
obj[425]=IECache Entry : Cookie:juuso@mediaplex.com/
obj[426]=IECache Entry : Cookie:juuso@adtech.de/
obj[427]=IECache Entry : Cookie:juuso@bfast.com/
obj[428]=IECache Entry : Cookie:juuso@revenue.net/
obj[429]=IECache Entry : Cookie:juuso@imrworldwide.com/cgi-bin
obj[430]=IECache Entry : Cookie:juuso@tribalfusion.com/
obj[431]=IECache Entry : Cookie:juuso@servedby.advertising.com/
obj[432]=IECache Entry : Cookie:juuso@www.shopathomeselect.com/
obj[433]=IECache Entry : Cookie:juuso@versiontracker.com/
obj[434]=IECache Entry : Cookie:juuso@realmedia.com/
obj[435]=IECache Entry : Cookie:juuso@xxxtoolbar.com/
obj[436]=IECache Entry : Cookie:juuso@casalemedia.com/
obj[437]=IECache Entry : Cookie:juuso@linksynergy.com/
obj[438]=IECache Entry : Cookie:juuso@atdmt.com/
obj[439]=IECache Entry : Cookie:juuso@fastclick.net/
obj[440]=IECache Entry : Cookie:juuso@gator.com/

RADS01.QUADROGRAM
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
obj[581]=File : C:WINDOWSSystem32msexreg.exe

WINPUP32
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
obj[582]=File : C:WINDOWSSystem32trkgif.exe

YOURSITEBAR
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
obj[583]=File : C:DOCUME~1JuusoLOCALS~1Tempf0vEEPk.exe

OTHER
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
obj[662]=File : C:WINDOWSprefetchTSM2.EXE-0D2DE8A6.pf
obj[663]=File : C:WINDOWSprefetchSALM.EXE-39D18152.pf
obj[664]=File : C:WINDOWSprefetchZETA.EXE-22FCCB8A.pf
obj[665]=File : C:WINDOWSprefetchEXDL1.EXE-03ADA40F.pf
obj[666]=File : C:WINDOWSprefetchEXUL1.EXE-0DA91456.pf
obj[667]=File : C:WINDOWSprefetchKALVBGS32.EXE-2F32537B.pf
obj[668]=File : C:WINDOWSprefetchKALVDUY32.EXE-05AA82CF.pf
obj[669]=File : C:WINDOWSprefetchKALVGJE32.EXE-327A6FFC.pf
obj[670]=File : C:WINDOWSprefetchKALVHOM32.EXE-077F13DD.pf
obj[671]=File : C:WINDOWSprefetchKALVLJE32.EXE-302A55FF.pf
obj[672]=File : C:WINDOWSprefetchKALVLVX32.EXE-17A0E30A.pf
obj[673]=File : C:WINDOWSprefetchKALVLYZ32.EXE-29355DD3.pf
obj[674]=File : C:WINDOWSprefetchKALVNRI32.EXE-1398D228.pf
obj[675]=File : C:WINDOWSprefetchKALVOHV32.EXE-0019A3FD.pf
obj[676]=File : C:WINDOWSprefetchKALVVED32.EXE-2C5CB073.pf
obj[677]=File : C:WINDOWSprefetchKALVWGF32.EXE-0591F7E5.pf
obj[678]=File : C:WINDOWSprefetchKALVXIE32.EXE-361C5AE5.pf
obj[679]=File : C:WINDOWSprefetchMSEXREG.EXE-07E9A9AF.pf
obj[680]=File : C:WINDOWSprefetchF0VEEPK.EXE-0F1385FE.pf
obj[681]=File : C:WINDOWSprefetchBARGAINS.EXE-22A28734.pf
obj[682]=File : C:WINDOWSprefetchACTALERT.EXE-0F7D82FB.pf
obj[683]=File : C:WINDOWSprefetchOPTIMIZE.EXE-01F38553.pf
obj[684]=File : C:WINDOWSprefetchACTALERT.EXE-0F7D82FB.pf
obj[685]=File : C:WINDOWSprefetchSAIS.EXE-25D5D1DE.pf
obj[686]=File : C:WINDOWSprefetchISTSVC.EXE-0B9CA3A6.pf
obj[687]=File : C:WINDOWSprefetchWEBREBATES0.EXE-2658D007.pf
obj[688]=File : C:WINDOWSprefetchWEBREBATES1.EXE-28A60DAB.pf
obj[689]=File : C:WINDOWSprefetchSAVE.EXE-010B9488.pf
obj[690]=File : C:WINDOWSprefetchWEATHER.EXE-0E97DC24.pf
obj[691]=File : C:WINDOWSprefetchGLFCGLFC.EXE-1A74B3C5.pf
obj[692]=File : C:WINDOWSprefetchSILENT53.EXE-020A07A7.pf
obj[693]=File : C:WINDOWSprefetchTS2.EXE-3820E46A.pf
obj[694]=File : C:WINDOWSprefetchTSL.EXE-2485DBA0.pf
obj[695]=File : C:WINDOWSprefetchTSL2.EXE-01450AF0.pf
obj[696]=File : C:WINDOWSprefetchTSM2.EXE-0D2DE8A6.pf
obj[697]=File : C:WINDOWSprefetchWUAUCLT.EXE-399A8E72.pf

Aikas pitkä on mut jos tost on jotain apuu nii sit on hyvä.

JOOOOO! onko jotain tuosta listasta unohtunu.
Siinä on nimittäin kaikki mitä koneella ei tarttis olla ootko unohtanu että tämä versio vaatii manuaalisen päivityksen ku se on ilmainen klikkaa näppylää joka lataa uusimmat niin ehkä toi lista vähän lyhenee

Aivan, ja jos kielitaito ei riitä, käy ihmeessä hakemassa se suomenkielinen 'language pack'.

* Päivitä nuuskija-ajurit. Etsi sillä kustomi moodilla, tarkista kaikki host-filestä alkaen. Karanteeraa löydökset. Tuhoa löydökset (kriittiset). Aja varmuuden vuoksi ohjelma uudestaan.

* Lataa Firefox tai Opera. Älä käytä Internet Exploreria.

Mene kuvakkeeseen jossa on lukon kuva ja palauta karanteenissa olevat tiedostot ja kokeile pelaako koneesi sen jälkeen, minulla ainakin kysyy välistä päivityksistä vaikka onkin ilmainen versio.

Lainaus:05.01.2005 loti kirjoitti:
Mene kuvakkeeseen jossa on lukon kuva ja palauta karanteenissa olevat tiedostot ja kokeile pelaako koneesi sen jälkeen, minulla ainakin kysyy välistä päivityksistä vaikka onkin ilmainen versio.

Niin 10 päivän välein tai jotain sinne päin, tosin enpä minä sitä useammin ajakaan joten aika sama...