HTML/ScrInject.B.Gen vírus

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz


Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Odpovědět
Zpráva
Autor
Royksopp
Návštěvník
Návštěvník
Příspěvky: 209
Registrován: 02 Črv 2008 19:53
Kontaktovat uživatele:

HTML/ScrInject.B.Gen vírus

#1 Příspěvek od Royksopp »

Este hlásil 2krát tento vírus, tak sa chcem uistiť či je PC čistý.

Logfile of random's system information tool 1.09 (written by random/random)
Run by peter1 at 2012-01-19 17:48:39
Systém Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 36 GB (71%) free of 51 GB
Total RAM: 1023 MB (31% free)

HijackThis download failed

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\peter1\Application Data\Mozilla\Firefox\Profiles\3b6bt19t.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "www.google.sk"
prefs.js - "keyword.URL" - "http://www.searchqu.com/web?src=ffb&app ... 06&sr=0&q="

"{20a82645-c095-46ed-80e3-08825760534b}"=C:\WINDOWS1\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"jqs@sun.com"=C:\Program Files\Java\jre6\lib\deploy\jqs\ff


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\WINDOWS1\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\WINDOWS1\system32\Adobe\Director\np32dsw.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@google.com/npPicasa3,version=3.0.0]
"Description"=Picasa3 plugin
"Path"=C:\Program Files\Google\Picasa3\npPicasa3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=C:\WINDOWS1\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files\Mozilla Firefox\plugins\
npdeployJava1.dll
NPOFF12.DLL
nppdf32.dll

C:\Program Files\Mozilla Firefox\searchplugins\
atlas-sk.xml
azet-sk.xml
dunaj-sk.xml
eBay.xml
google.xml
SearchResults.xml
slovnik-sk.xml
wikipedia-sk.xml
zoznam-sk.xml

C:\Documents and Settings\peter1\Application Data\Mozilla\Firefox\Profiles\3b6bt19t.default\extensions\
{ACAA314B-EEBA-48e4-AD47-84E31C44796C}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-01-03 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2011-11-10 325408]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-11-10 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2011-11-10 79648]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2011-09-22 3080264]
"NvCplDaemon"=C:\WINDOWS1\system32\NvCpl.dll [2011-10-08 16744256]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-01-03 843712]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
C:\WINDOWS1\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
C:\WINDOWS1\system32\NvCpl.dll [2011-10-08 16744256]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
NvMCTray.dll,NvTaskbarInit -login []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
C:\Program Files\NVIDIA Corporation\nview\nwiz.exe [2011-10-08 1632360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files\Common Files\Java\Java Update\jusched.exe [2011-06-09 254696]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS1\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"=C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [2009-05-24 304128]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\Apache.exe"="C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\Apache.exe:*:Enabled:Apache HTTP Server"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Winamp\winamp.exe"="C:\Program Files\Winamp\winamp.exe:*:Enabled:Winamp"
"C:\WINDOWS1\system32\muzapp.exe"="C:\WINDOWS1\system32\muzapp.exe:*:Enabled:MUZ AOD APP player"
"C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe"="C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe:*:Enabled:Daemonu.exe"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"midi"=wdmaud.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS1\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS1\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer"=wdmaud.drv
"wave5"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave6"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer6"=wdmaud.drv
"VIDC.XVID"=xvidvfw.dll
"VIDC.YV12"=xvidvfw.dll
"msacm.ac3acm"=ac3acm.acm
"msacm.lameacm"=lameACM.acm
"VIDC.FFDS"=ff_vfw.dll
"wave1"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer4"=wdmaud.drv

======List of files/folders created in the last 1 month======

2012-01-19 17:48:39 ----D---- C:\rsit
2012-01-19 17:48:39 ----D---- C:\Program Files\trend micro
2012-01-13 23:21:32 ----A---- C:\WINDOWS1\system32\nvhdagenco3220102.dll
2012-01-13 19:05:05 ----D---- C:\Documents and Settings\peter1\Application Data\Windows Search
2012-01-11 17:17:14 ----HDC---- C:\WINDOWS1\$NtUninstallKB2646524$
2012-01-11 17:17:08 ----HDC---- C:\WINDOWS1\$NtUninstallKB2598479$
2012-01-11 17:17:03 ----HDC---- C:\WINDOWS1\$NtUninstallKB2603381$
2012-01-11 17:16:58 ----HDC---- C:\WINDOWS1\$NtUninstallKB2585542$
2012-01-11 17:16:51 ----HDC---- C:\WINDOWS1\$NtUninstallKB2631813$
2012-01-11 17:16:43 ----HDC---- C:\WINDOWS1\$NtUninstallKB2584146$
2012-01-07 00:01:49 ----D---- C:\WINDOWS1\Sun
2012-01-07 00:01:36 ----D---- C:\Documents and Settings\All Users.WINDOWS1\Application Data\Sun
2012-01-07 00:01:19 ----A---- C:\WINDOWS1\system32\javaws.exe
2012-01-07 00:01:19 ----A---- C:\WINDOWS1\system32\javaw.exe
2012-01-07 00:01:19 ----A---- C:\WINDOWS1\system32\java.exe
2012-01-07 00:01:19 ----A---- C:\WINDOWS1\system32\deployJava1.dll
2012-01-07 00:00:48 ----D---- C:\Program Files\Java
2012-01-06 23:57:32 ----D---- C:\Documents and Settings\peter1\Application Data\Sun
2012-01-04 02:07:10 ----A---- C:\Documents and Settings\peter1\Application Data\AutoGK.ini
2012-01-04 00:16:18 ----D---- C:\Program Files\AviSynth 2.5
2012-01-03 23:50:48 ----A---- C:\WINDOWS1\system32\SysDVDtoAVI.dat
2011-12-30 20:23:18 ----D---- C:\Program Files\CCleaner
2011-12-30 18:11:42 ----D---- C:\Documents and Settings\All Users.WINDOWS1\Application Data\ESET
2011-12-30 14:12:34 ----HDC---- C:\WINDOWS1\$NtUninstallKB963093$
2011-12-30 14:01:23 ----HDC---- C:\WINDOWS1\$NtUninstallKB2492386$
2011-12-30 14:00:51 ----D---- C:\WINDOWS1\system32\winrm
2011-12-30 14:00:45 ----HDC---- C:\WINDOWS1\$968930Uinstall_KB968930$
2011-12-30 14:00:41 ----D---- C:\WINDOWS1\$NtUninstallKB968930$
2011-12-30 13:59:48 ----HDC---- C:\WINDOWS1\$NtUninstallbasecsp$
2011-12-30 13:59:47 ----D---- C:\Documents and Settings\peter1\Application Data\Windows Desktop Search
2011-12-30 13:59:13 ----D---- C:\WINDOWS1\system32\GroupPolicy
2011-12-30 13:59:13 ----D---- C:\Program Files\Windows Desktop Search
2011-12-30 13:59:04 ----HDC---- C:\WINDOWS1\$NtUninstallKB940157$
2011-12-30 13:58:49 ----HDC---- C:\WINDOWS1\$NtUninstallKB915800-v4$
2011-12-30 13:57:26 ----D---- C:\WINDOWS1\system32\URTTEMP
2011-12-27 15:40:23 ----D---- C:\Program Files\Nero
2011-12-27 15:37:04 ----D---- C:\Program Files\DVDVideoSoft
2011-12-27 15:02:02 ----D---- C:\Documents and Settings\All Users.WINDOWS1\Application Data\Nero
2011-12-27 14:56:27 ----D---- C:\Program Files\Microsoft.NET
2011-12-27 14:55:13 ----A---- C:\WINDOWS1\system32\D3DCompiler_42.dll
2011-12-27 14:55:09 ----A---- C:\WINDOWS1\system32\D3DX9_40.dll
2011-12-27 14:55:06 ----A---- C:\WINDOWS1\system32\d3dx9_35.dll
2011-12-27 14:55:02 ----A---- C:\WINDOWS1\system32\d3dx9_34.dll
2011-12-27 14:54:59 ----A---- C:\WINDOWS1\system32\d3dx9_30.dll
2011-12-27 14:54:33 ----HDC---- C:\WINDOWS1\$NtUninstallKB942288-v3$
2011-12-27 01:24:36 ----D---- C:\Documents and Settings\All Users.WINDOWS1\Application Data\Google
2011-12-24 10:37:31 ----D---- C:\D
2011-12-24 10:34:09 ----D---- C:\Documents and Settings\peter1\Application Data\DVDVideoSoft
2011-12-24 10:34:03 ----D---- C:\Documents and Settings\peter1\Application Data\DVDVideoSoftIEHelpers

======List of files/folders modified in the last 1 month======

2012-01-19 17:48:39 ----D---- C:\Program Files
2012-01-19 17:21:43 ----D---- C:\WINDOWS1\temp
2012-01-18 21:52:18 ----A---- C:\WINDOWS1\SchedLgU.Txt
2012-01-18 21:11:54 ----D---- C:\WINDOWS1\Prefetch
2012-01-18 17:31:05 ----D---- C:\Program Files\The KMPlayer
2012-01-13 23:26:24 ----ASH---- C:\boot.ini
2012-01-13 23:26:24 ----A---- C:\WINDOWS1\win.ini
2012-01-13 23:26:24 ----A---- C:\WINDOWS1\system.ini
2012-01-13 23:25:51 ----D---- C:\WINDOWS1
2012-01-13 23:25:19 ----D---- C:\WINDOWS1\system32
2012-01-13 23:23:58 ----D---- C:\WINDOWS1\Help
2012-01-13 23:23:41 ----SHD---- C:\WINDOWS1\Installer
2012-01-13 23:22:58 ----RSHDC---- C:\WINDOWS1\system32\dllcache
2012-01-13 23:22:53 ----D---- C:\WINDOWS1\system32\drivers
2012-01-13 23:22:24 ----HD---- C:\WINDOWS1\inf
2012-01-13 23:22:24 ----D---- C:\WINDOWS1\system32\CatRoot
2012-01-13 23:21:48 ----D---- C:\Program Files\NVIDIA Corporation
2012-01-13 23:21:40 ----D---- C:\WINDOWS1\system32\ReinstallBackups
2012-01-13 22:55:01 ----D---- C:\WINDOWS1\system32\CatRoot2
2012-01-13 18:51:35 ----D---- C:\WINDOWS1\system32\Restore
2012-01-13 18:51:22 ----SHD---- C:\System Volume Information
2012-01-12 20:12:06 ----D---- C:\Documents and Settings\peter1\Application Data\Winamp
2012-01-11 17:40:21 ----D---- C:\WINDOWS1\Debug
2012-01-11 17:32:07 ----D---- C:\WINDOWS1\ie8updates
2012-01-11 17:32:01 ----HD---- C:\WINDOWS1\$hf_mig$
2012-01-11 17:17:52 ----A---- C:\WINDOWS1\system32\MRT.exe
2012-01-11 17:17:44 ----D---- C:\Documents and Settings\All Users.WINDOWS1\Application Data\Microsoft Help
2012-01-05 15:03:49 ----SD---- C:\Documents and Settings\peter1\Application Data\Microsoft
2011-12-30 20:24:55 ----D---- C:\WINDOWS1\Logs
2011-12-30 20:24:55 ----D---- C:\Documents and Settings\peter1\Application Data\Media Player Classic
2011-12-30 17:23:24 ----SD---- C:\WINDOWS1\Tasks
2011-12-30 17:22:04 ----D---- C:\WINDOWS1\system32\drivers\etc
2011-12-30 15:36:57 ----D---- C:\WINDOWS1\Microsoft.NET
2011-12-30 14:11:40 ----D---- C:\WINDOWS1\Registration
2011-12-30 14:11:23 ----A---- C:\WINDOWS1\system32\PerfStringBackup.INI
2011-12-30 14:06:43 ----D---- C:\WINDOWS1\pss
2011-12-30 14:05:31 ----D---- C:\WINDOWS1\system32\config
2011-12-30 14:05:29 ----D---- C:\WINDOWS1\AppPatch
2011-12-30 14:04:50 ----D---- C:\WINDOWS1\security
2011-12-30 14:02:48 ----RSD---- C:\WINDOWS1\assembly
2011-12-30 14:01:35 ----D---- C:\Program Files\Internet Explorer
2011-12-30 14:00:51 ----D---- C:\WINDOWS1\system32\wbem
2011-12-30 13:59:31 ----SD---- C:\Documents and Settings\All Users.WINDOWS1\Application Data\Microsoft
2011-12-30 13:59:20 ----D---- C:\WINDOWS1\system32\en-US
2011-12-30 00:43:36 ----D---- C:\WINDOWS1\WinSxS
2011-12-27 15:38:32 ----D---- C:\Program Files\Common Files\DVDVideoSoft
2011-12-27 14:55:13 ----D---- C:\WINDOWS1\system32\DirectX
2011-12-27 14:54:42 ----D---- C:\WINDOWS1\system32\mui
2011-12-27 01:34:31 ----D---- C:\Program Files\Google
2011-12-27 01:24:34 ----D---- C:\Documents and Settings\peter1\Application Data\Google
2011-12-23 00:46:42 ----D---- C:\Program Files\Mozilla Firefox
2011-12-20 15:55:00 ----D---- C:\Program Files\Winamp
2011-12-20 15:52:54 ----D---- C:\Documents and Settings\peter1\Application Data\YoWindow

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 nvata;nvata; C:\WINDOWS1\system32\DRIVERS\nvata.sys [2005-05-17 92800]
R0 PxHelp20;PxHelp20; C:\WINDOWS1\System32\Drivers\PxHelp20.sys [2011-03-04 45648]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS1\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
R1 AmdPPM;AMD HwPState Processor Driver; C:\WINDOWS1\system32\DRIVERS\AmdPPM.sys [2007-04-16 33792]
R1 ehdrv;ehdrv; C:\WINDOWS1\system32\DRIVERS\ehdrv.sys [2011-08-04 118104]
R1 epfwtdi;epfwtdi; C:\WINDOWS1\system32\DRIVERS\epfwtdi.sys [2011-08-04 61936]
R1 WS2IFSL;Prostredie podpory poskytovateľa služby Windows Socket 2.0 Non-IFS Service; C:\WINDOWS1\System32\drivers\ws2ifsl.sys [2004-08-04 12032]
R2 eamon;eamon; C:\WINDOWS1\system32\DRIVERS\eamon.sys [2011-08-09 154136]
R2 epfw;epfw; C:\WINDOWS1\system32\DRIVERS\epfw.sys [2011-08-04 147480]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS1\system32\drivers\ALCXWDM.SYS [2005-04-19 2317504]
R3 BTKRNL;Bluetooth Bus Enumerator; C:\WINDOWS1\system32\DRIVERS\btkrnl.sys [2005-05-31 1341466]
R3 Epfwndis;Eset Personal Firewall; C:\WINDOWS1\system32\DRIVERS\Epfwndis.sys [2011-08-09 39824]
R3 HDAudBus;Microsoft UAA Bus Driver for High Definition Audio; C:\WINDOWS1\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Microsoft HID Class Driver; C:\WINDOWS1\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 mouhid;Mouse HID Driver; C:\WINDOWS1\system32\DRIVERS\mouhid.sys [2004-08-04 12160]
R3 ms_mpu401;Microsoft MPU-401 MIDI UART Driver; C:\WINDOWS1\system32\drivers\msmpu401.sys [2001-08-17 2944]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\WINDOWS1\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]
R3 nv;nv; C:\WINDOWS1\system32\DRIVERS\nv4_mini.sys [2011-10-08 12791488]
R3 NVENETFD;NVIDIA nForce 10/100/1000 Mbps Ethernet ; C:\WINDOWS1\system32\DRIVERS\NVENETFD.sys [2008-08-01 54784]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\WINDOWS1\system32\drivers\nvhda32.sys [2011-07-08 119656]
R3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS1\system32\DRIVERS\nvnetbus.sys [2008-08-01 22016]
S2 BTSERIAL;Bluetooth Serial Driver; \??\C:\WINDOWS1\system32\drivers\btserial.sys []
S2 BTSLBCSP;Bluetooth Port Client Driver; \??\C:\WINDOWS1\system32\drivers\btslbcsp.sys []
S3 btaudio;Bluetooth Audio Device; C:\WINDOWS1\system32\drivers\btaudio.sys [2005-05-31 401152]
S3 BTDriver;Bluetooth Virtual Communications Driver; C:\WINDOWS1\system32\DRIVERS\btport.sys [2005-05-31 30363]
S3 BthEnum;Bluetooth Request Block Driver; C:\WINDOWS1\system32\DRIVERS\BthEnum.sys [2008-04-13 17024]
S3 BTHMODEM;Bluetooth Serial Communications Driver; C:\WINDOWS1\system32\DRIVERS\bthmodem.sys [2008-04-13 37888]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\WINDOWS1\system32\DRIVERS\bthpan.sys [2008-04-13 101120]
S3 BTHPORT;Bluetooth Port Driver; C:\WINDOWS1\System32\Drivers\BTHport.sys [2008-06-13 272128]
S3 BTHUSB;Bluetooth Radio USB Driver; C:\WINDOWS1\System32\Drivers\BTHUSB.sys [2008-04-13 18944]
S3 BTWDNDIS;Bluetooth LAN Access Server; C:\WINDOWS1\system32\DRIVERS\btwdndis.sys [2005-05-31 148040]
S3 BTWUSB;WIDCOMM USB Bluetooth Driver; C:\WINDOWS1\System32\Drivers\btwusb.sys [2005-05-31 56648]
S3 GMSIPCI;GMSIPCI; \??\E:\INSTALL\GMSIPCI.SYS []
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\WINDOWS1\system32\DRIVERS\ewusbmdm.sys [2006-10-30 88960]
S3 MSICPL;MSICPL; \??\E:\install4\MSICPL.sys []
S3 n558;N558 Bluetooth USB Filter Driver; C:\WINDOWS1\System32\Drivers\n558.sys [2007-08-15 9600]
S3 NTACCESS;NTACCESS; \??\E:\NTACCESS.sys []
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\WINDOWS1\system32\DRIVERS\rfcomm.sys [2008-04-13 59136]
S3 SetupNTGLM7X;SetupNTGLM7X; \??\E:\NTGLM7X.sys []
S3 usbccgp;Microsoft USB Generic Parent Driver; C:\WINDOWS1\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 usbprint;Microsoft USB PRINTER Class; C:\WINDOWS1\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;USB Scanner Driver; C:\WINDOWS1\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS1\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WpdUsb;WpdUsb; C:\WINDOWS1\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS1\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2011-09-22 974944]
R2 ForceWare Intelligent Application Manager (IAM);ForceWare Intelligent Application Manager (IAM); C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe [2005-04-29 139264]
R2 ForcewareWebInterface;Forceware Web Interface; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe [2004-11-30 20543]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2011-11-10 153376]
R2 nSvcIp;ForceWare IP service; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe [2005-04-29 131136]
R2 nSvcLog;ForceWare user log service; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe [2005-04-29 57412]
R2 NVSvc;NVIDIA Driver Helper Service; C:\WINDOWS1\system32\nvsvc32.exe [2011-10-08 298304]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-10-08 2253120]
R2 WSearch;Windows Search; C:\WINDOWS1\system32\SearchIndexer.exe [2008-05-26 439808]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS1\system32\svchost.exe [2008-04-14 14336]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS1\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 BthServ;Bluetooth Support Service; C:\WINDOWS1\system32\svchost.exe [2008-04-14 14336]
S3 btwdins;Bluetooth Service; C:\Program Files\MSI\BToes Bluetooth Software\bin\btwdins.exe [2005-05-31 258103]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS1\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS1\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; C:\WINDOWS1\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WinRM;Windows Remote Management (WS-Management); C:\WINDOWS1\system32\svchost.exe [2008-04-14 14336]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS1\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: HTML/ScrInject.B.Gen vírus

#2 Příspěvek od vyosek »

Zdravim :)

Jake mate cislo virove databaze pro ESET :???:

Pouzivate programek AdBlock jako doplnek k Firefoxu? SLouzi na blokovani reklam
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

Royksopp
Návštěvník
Návštěvník
Příspěvky: 209
Registrován: 02 Črv 2008 19:53
Kontaktovat uživatele:

Re: HTML/ScrInject.B.Gen vírus

#3 Příspěvek od Royksopp »

6810

Nie nepoužívam

Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: HTML/ScrInject.B.Gen vírus

#4 Příspěvek od vyosek »

:arrow: Stahnete Malwarebytes' Anti-Malware (zkracene MBAM) (viz muj podpis)
  • Provedte aktualizaci
  • Provedte uplny sken - nic nemazte :!:
  • MBAM miva obcas falesne detekce, proto vlozte log do prispevku a pockejte na posouzeni
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

Royksopp
Návštěvník
Návštěvník
Příspěvky: 209
Registrován: 02 Črv 2008 19:53
Kontaktovat uživatele:

Re: HTML/ScrInject.B.Gen vírus

#5 Příspěvek od Royksopp »

Malwarebytes Anti-Malware (Skúšobná verzia) 1.60.0.1800
www.malwarebytes.org

Verzia databázy: v2012.01.19.03

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
peter1 :: PETER [administrátor]

Ochrana: Vypnuté

19.1.2012 18:01:33
mbam-log-2012-01-19 (18-01-33).txt

Typ kontroly: Úplná kontrola
Možnosti kontroly zapnuté: Pamäť | Po spustení | Registre | Systémové súbory | Heuristika/Extra | Heuristika/Shuriken | PUP | PUM
Možnosti kontroly vypnuté: P2P
Objektov kontrolovaných: 354729
Uplynutý čas: 33 min, 44 sek

Detegované služby pamäte: 0
(Škodlivé položky neboli zistené)

Detegované moduly pamäte: 0
(Škodlivé položky neboli zistené)

Detegované registračné kľúče: 0
(Škodlivé položky neboli zistené)

Detegované registračné hodnoty: 0
(Škodlivé položky neboli zistené)

Detegované položky registračných dát: 0
(Škodlivé položky neboli zistené)

Detegované priečinky: 0
(Škodlivé položky neboli zistené)

Detegované súbory: 0
(Škodlivé položky neboli zistené)

(koniec)

Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: HTML/ScrInject.B.Gen vírus

#6 Příspěvek od vyosek »

Dle meho slo o falesnou detecki, podobnou mel ESET tedka prave nedavno...Ale je jiz opravena
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

Royksopp
Návštěvník
Návštěvník
Příspěvky: 209
Registrován: 02 Črv 2008 19:53
Kontaktovat uživatele:

Re: HTML/ScrInject.B.Gen vírus

#7 Příspěvek od Royksopp »

A je inak pc čistý podľa logu?

Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: HTML/ScrInject.B.Gen vírus

#8 Příspěvek od vyosek »

Ano, log vypada na havet cisty
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

Royksopp
Návštěvník
Návštěvník
Příspěvky: 209
Registrován: 02 Črv 2008 19:53
Kontaktovat uživatele:

Re: HTML/ScrInject.B.Gen vírus

#9 Příspěvek od Royksopp »

Tak ďakujem a prajem pekný víkend :)

Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: HTML/ScrInject.B.Gen vírus

#10 Příspěvek od vyosek »

Neni zac, pekny vikend i vam :)
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

Odpovědět