prosim o kontrolu logu ComboFix (stahuje sam havet)

[petrkrovak]

tak tady je
Logfile of random's system information tool 1.06 (written by random/random)
Run by pc at 2010-04-14 22:07:36
Systém Microsoft Windows XP Professional Service Pack 2
System drive C: has 6 GB (34%) free of 18 GB
Total RAM: 767 MB (52% free)

HijackThis download failed

======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\Symantec NetDetect.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6f74-2d53-2644-206d7942484f}]
Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2009-01-26 1879896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9ECB9560-04F9-4bbc-943D-298DDF1699E1}]
CNisExtBho Class

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{aa58ed58-01dd-4d91-8333-cf10577473f7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2010-02-03 279664]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{af69de43-7d58-4638-b6fa-ce66b5ad205d}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll [2010-02-03 812528]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BDF3E430-B101-42AD-A544-FADC6B084872}]
CNavExtBho Class - C:\Program Files\Norton AntiVirus\NavShExt.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{c84d72fe-e17d-4195-bb24-76c02e2e7c4e}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - Norton AntiVirus - C:\Program Files\Norton AntiVirus\NavShExt.dll []
{0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - []
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2010-02-03 279664]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2003-08-15 57344]
"ATIPTA"=C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe [2003-11-25 335872]
"WinampAgent"=C:\Program Files\Winamp\winampa.exe [2003-12-13 33792]
"Symantec NetDriver Monitor"=C:\PROGRA~1\SYMNET~1\SNDMon.exe [2005-04-29 100056]
"HP Component Manager"=C:\Program Files\HP\hpcoretech\hpcmpmgr.exe [2005-01-12 241664]
"HP Software Update"=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [2005-02-16 49152]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2007-06-11 282624]
"gemstrmw"=C:\WINDOWS\system32\gemstrmw.exe [2003-08-30 24576]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-27 35696]
"avast5"=C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe [2010-03-09 2769336]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"pdfSaver3"=C:\Program Files\PDF\pdfSaver\pdfSaver3.exe [2004-05-19 385024]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2008-04-23 68856]
"SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-03-05 2260480]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2004-08-17 15360]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
CAPI Tray.lnk - C:\Program Files\Microcom ISDN utility\ccmon.exe
FlashPath Monitor.lnk - C:\Program Files\SmartDisk\FlashPath\sdstat.exe
HP Digital Imaging Monitor.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE
Rychlé spuštění aplikace HP Image Zone.lnk - C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2003-12-02 86016]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\HP\HP Software Update\HPWUCli.exe"="C:\Program Files\HP\HP Software Update\HPWUCli.exe:*:Enabled:HP Software Update Client"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Documents and Settings\All Users\Data aplikací\Google\vmmonitor.exe"="C:\Documents and Settings\All Users\Data aplikací\Google\vmmonitor.exe:*:Enabled:SAM"

======File associations======

.scr - open - C:\WINDOWS\system32\notepad.exe "%1"
.scr - install -
.scr - config -

======List of files/folders created in the last 1 months======

2010-04-14 22:07:37 ----D---- C:\Program Files\trend micro
2010-04-14 22:07:36 ----D---- C:\rsit
2010-04-14 22:01:07 ----A---- C:\WINDOWS\system32\aswBoot.exe
2010-04-14 20:30:48 ----SHD---- C:\RECYCLER
2010-04-14 20:23:26 ----A---- C:\mbam-log-2010-04-13 (20-05-30).txt
2010-04-14 19:26:06 ----D---- C:\WINDOWS\temp
2010-04-14 19:26:02 ----A---- C:\ComboFix.txt
2010-04-14 19:12:23 ----A---- C:\Boot.bak
2010-04-14 19:12:19 ----RASHD---- C:\cmdcons
2010-04-14 15:17:05 ----A---- C:\WINDOWS\zip.exe
2010-04-14 15:17:05 ----A---- C:\WINDOWS\SWXCACLS.exe
2010-04-14 15:17:05 ----A---- C:\WINDOWS\SWSC.exe
2010-04-14 15:17:05 ----A---- C:\WINDOWS\SWREG.exe
2010-04-14 15:17:05 ----A---- C:\WINDOWS\sed.exe
2010-04-14 15:17:05 ----A---- C:\WINDOWS\PEV.exe
2010-04-14 15:17:05 ----A---- C:\WINDOWS\NIRCMD.exe
2010-04-14 15:17:05 ----A---- C:\WINDOWS\MBR.exe
2010-04-14 15:17:05 ----A---- C:\WINDOWS\grep.exe
2010-04-14 15:16:58 ----D---- C:\WINDOWS\ERDNT
2010-04-14 15:14:48 ----D---- C:\Qoobox
2010-04-13 22:57:45 ----D---- C:\Program Files\Alwil Software
2010-04-13 22:57:45 ----D---- C:\Documents and Settings\All Users\Data aplikací\Alwil Software
2010-04-13 19:32:08 ----D---- C:\Documents and Settings\pc\Data aplikací\Malwarebytes
2010-04-13 19:32:00 ----D---- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2010-04-13 19:31:43 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-04-13 12:54:57 ----D---- C:\Malwarebytes' Anti-Malware
2010-04-13 11:24:06 ----A---- C:\Program Files\avg_avwt_stb_all_9_114.exe
2010-04-07 14:21:46 ----A---- C:\Program Files\Firefox Setup 3.6.exe
2010-03-31 15:09:51 ----D---- C:\Program Files\Seznam.cz
2010-03-31 15:09:50 ----HD---- C:\WINDOWS\msdownld.tmp
2010-03-31 15:09:35 ----D---- C:\WINDOWS\WBEM
2010-03-31 15:08:15 ----HDC---- C:\WINDOWS\ie8
2010-03-31 15:08:15 ----D---- C:\WINDOWS\system32\cs-CZ
2010-03-31 15:05:12 ----A---- C:\Program Files\IE8-Setup-XP-v3.exe
2010-03-26 11:08:44 ----D---- C:\KnihaJizd3_0

======List of files/folders modified in the last 1 months======

2010-04-14 22:07:37 ----AD---- C:\Program Files
2010-04-14 22:06:27 ----D---- C:\WINDOWS\Prefetch
2010-04-14 22:01:47 ----D---- C:\WINDOWS\system32\CatRoot2
2010-04-14 22:01:27 ----D---- C:\WINDOWS\system32\drivers
2010-04-14 22:01:16 ----D---- C:\WINDOWS\WinSxS
2010-04-14 22:01:14 ----SHD---- C:\WINDOWS\Installer
2010-04-14 22:01:07 ----D---- C:\WINDOWS\system32
2010-04-14 22:00:01 ----A---- C:\WINDOWS\wincmd.ini
2010-04-14 21:56:13 ----D---- C:\WINDOWS
2010-04-14 21:55:45 ----D---- C:\Program Files\Common Files
2010-04-14 20:52:13 ----A---- C:\WINDOWS\ntbtlog.txt
2010-04-14 20:48:14 ----D---- C:\WINDOWS\Minidump
2010-04-14 20:33:36 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-04-14 20:12:08 ----D---- C:\Program Files\Ahead
2010-04-14 19:43:50 ----HD---- C:\WINDOWS\inf
2010-04-14 19:40:57 ----HD---- C:\WINDOWS\$hf_mig$
2010-04-14 19:23:30 ----D---- C:\WINDOWS\Help
2010-04-14 19:19:44 ----A---- C:\WINDOWS\system.ini
2010-04-14 19:17:38 ----D---- C:\WINDOWS\system32\config
2010-04-14 19:15:55 ----D---- C:\WINDOWS\AppPatch
2010-04-14 19:12:23 ----RASH---- C:\boot.ini
2010-04-14 18:47:13 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-04-14 17:41:31 ----D---- C:\WINDOWS\ehome
2010-04-14 15:23:08 ----SD---- C:\WINDOWS\Downloaded Program Files
2010-04-14 15:17:05 ----SHD---- C:\System Volume Information
2010-04-14 15:17:05 ----D---- C:\WINDOWS\system32\Restore
2010-04-13 23:01:17 ----AC---- C:\WINDOWS\system32\LuResult.txt
2010-04-13 21:52:52 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2010-04-13 21:25:57 ----HDC---- C:\WINDOWS\$NtUninstallKB953838$
2010-04-13 20:06:55 ----HDC---- C:\WINDOWS\$NtUninstallKB926436$
2010-04-13 19:34:06 ----HDC---- C:\WINDOWS\$NtUninstallKB956841$
2010-04-13 10:39:36 ----RD---- C:\Program Files\Skype
2010-03-31 15:13:27 ----D---- C:\Program Files\Internet Explorer
2010-03-31 15:09:27 ----D---- C:\WINDOWS\Media
2010-03-29 06:39:31 ----AC---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-03-22 11:04:39 ----A---- C:\WINDOWS\winamp.ini

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2010-03-09 28880]
R1 AmdK7;Ovladač procesoru AMD K7; C:\WINDOWS\System32\DRIVERS\amdk7.sys [2004-08-17 41216]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2010-03-09 162640]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2010-03-09 46672]
R1 SYMTDI;SYMTDI; C:\WINDOWS\System32\Drivers\SYMTDI.SYS [2005-04-05 267192]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2010-03-09 19024]
R2 aswMon2;aswMon2; C:\WINDOWS\system32\drivers\aswMon2.sys [2010-03-09 100432]
R2 CAPI;CAPI 2.0 Service; C:\WINDOWS\System32\DRIVERS\capi.sys [2003-10-23 27699]
R2 Fallback;Fallback; C:\WINDOWS\System32\DRIVERS\HSF_FALL.sys [2001-08-17 289887]
R2 FlashNT;FlashNT; C:\WINDOWS\system32\drivers\FlashNT.sys [2000-11-14 72784]
R2 Fsks;Fsks; C:\WINDOWS\System32\DRIVERS\HSF_FSKS.sys [2001-08-17 115807]
R2 K56;K56; C:\WINDOWS\System32\DRIVERS\HSF_K56K.sys [2001-08-17 391199]
R2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2004-08-03 11868]
R2 NDISCAPI;NDIS CAPI Service; C:\WINDOWS\System32\DRIVERS\ndiscapi.sys [2003-10-23 26684]
R2 Sdselect;Sdselect; C:\WINDOWS\system32\drivers\Sdselect.sys [2000-11-14 73296]
R2 SoftFax;SoftFax; C:\WINDOWS\System32\DRIVERS\HSF_FAXX.sys [2001-08-17 199711]
R2 Tones;Tones; C:\WINDOWS\System32\DRIVERS\HSF_TONE.sys [2001-08-17 50751]
R2 V124;V124; C:\WINDOWS\System32\DRIVERS\HSF_V124.sys [2001-08-17 488383]
R3 ALCXSENS;Service for WDM 3D Audio Driver; C:\WINDOWS\system32\drivers\ALCXSENS.SYS [2003-08-14 404736]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2003-08-15 462684]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2010-03-09 23376]
R3 ati2mtag;ati2mtag; C:\WINDOWS\System32\DRIVERS\ati2mtag.sys [2003-12-02 641536]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-08-17 9600]
R3 HSF_DP;HSF_DP; C:\WINDOWS\system32\DRIVERS\HSFDPSP2.sys [2004-08-03 1041536]
R3 HSFHWBS2;HSFHWBS2; C:\WINDOWS\system32\DRIVERS\HSFBS2S2.sys [2004-08-03 220032]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\System32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 ms_mpu401;Microsoft MPU-401 MIDI UART Driver; C:\WINDOWS\system32\drivers\msmpu401.sys [2001-08-18 2944]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINDOWS\System32\Drivers\RootMdm.sys [2001-10-25 5888]
R3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-03 20992]
R3 SymEvent;SymEvent; \??\C:\Program Files\Symantec\SYMEVENT.SYS []
R3 usb2mpa;Microcom ISDN USB Travel C NDISWAN Miniport Driver; C:\WINDOWS\System32\DRIVERS\usb2mpa.sys [2003-12-02 336440]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\System32\DRIVERS\usbehci.sys [2004-08-04 26624]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\System32\DRIVERS\usbhub.sys [2004-08-04 57600]
R3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2004-08-04 26496]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\System32\DRIVERS\usbuhci.sys [2004-08-04 20480]
R3 vmdmc;Microcom VComm+ Port Driver; C:\WINDOWS\System32\DRIVERS\vmdmc.sys [2004-01-15 355921]
R3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSFCXTS2.sys [2004-08-03 685056]
S3 basic2;basic2; C:\WINDOWS\System32\DRIVERS\HSF_BSC2.sys [2001-08-17 67167]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\System32\Ati2evxx.exe [2003-12-02 385024]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-03-09 40384]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe [2001-02-23 270336]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-03-09 40384]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-03-09 40384]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2003-12-02 516096]
S2 gupdate1c9ced42b7493fe;Služba Google Update (gupdate1c9ced42b7493fe); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-05-07 133104]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2007-10-24 33800]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2007-10-24 70144]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe [2006-10-20 36864]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-05-04 182768]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2006-10-30 741376]
S3 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [2004-03-18 65536]
S3 SNDSrvc;Symantec Network Drivers Service; C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe [2005-04-05 206552]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2006-10-30 122880]
S4 NProtectService;Norton Unerase Protection; C:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE []
S4 SAVScan;SAVScan; C:\Program Files\Norton AntiVirus\SAVScan.exe [2004-07-23 197864]

-----------------EOF-----------------

[Caroprd111]

Použijte odinstalátor na Norton http://www.viry.cz/forum/viewtopic.php?f=29&t=42886


Stáhněte MBAM http://www.viry.cz/forum/viewtopic.php?f=29&t=67229

• Podle návodu v odkazu nainstalujte, poté dejte úplný sken.
• Nic nemažte MBAM má občas falešné detekce a mohl by smazat např. systémové soubory.
• Log vložte sem.

[petrkrovak]

ktery pouzit ? * I have a Norton product that was purchased from my service provider
* I have Norton 360 Version 4.0
* I have Norton 360 Version 3.0
* I have Norton Security Suite
* I have a Norton 2006 product or later version
* I have Norton SystemWorks 12.0
* I have a Norton 2005 or 2004 product
* I have a Norton 2003 product
* I have Norton Ghost or Norton Save & Restore
* I have pcAnywhere or WinFax

[Caroprd111]

Podle toho, jakou verzi jste v PC měl.

[petrkrovak]

tak zdravim konecne se tomu muzu zase venovat tady je log z anti malvare
Malwarebytes' Anti-Malware 1.45
www.malwarebytes.org

Verze databßze: 3985

Windows 5.1.2600 Service Pack 2
Internet Explorer 8.0.6001.18702

15.4.2010 18:20:00
mbam-log-2010-04-15 (18-20-00).txt

Typ skenu: ┌plnř sken (C:\|)
SkenovanÚ objekty: 165400
Uplynulř Ŕas: 1 hodina(y), 14 minuta(y), 16 sekunda(y)

InfikovanÚ procesy v pamýti: 0
InfikovanÚ moduly v pamýti: 0
InfikovanÚ klÝŔe registru: 0
InfikovanÚ hodnoty registru: 0
InfikovanÚ datovÚ polo×ky registru: 0
InfikovanÚ slo×ky: 0
InfikovanÚ soubory: 0

InfikovanÚ procesy v pamýti:
(ÄßdnÚ ÜkodlivÚ polo×ky nebyly zjiÜtýny)

InfikovanÚ moduly v pamýti:
(ÄßdnÚ ÜkodlivÚ polo×ky nebyly zjiÜtýny)

InfikovanÚ klÝŔe registru:
(ÄßdnÚ ÜkodlivÚ polo×ky nebyly zjiÜtýny)

InfikovanÚ hodnoty registru:
(ÄßdnÚ ÜkodlivÚ polo×ky nebyly zjiÜtýny)

InfikovanÚ datovÚ polo×ky registru:
(ÄßdnÚ ÜkodlivÚ polo×ky nebyly zjiÜtýny)

InfikovanÚ slo×ky:
(ÄßdnÚ ÜkodlivÚ polo×ky nebyly zjiÜtýny)

InfikovanÚ soubory:
(ÄßdnÚ ÜkodlivÚ polo×ky nebyly zjiÜtýny)

[petrkrovak]

jinak pocitac jede v poradku jen nabeh trva porat 5 minut normalne se prihlasim pak jede najedou na 5 min presipacky (nejde nic delat ani ctr +del) cca 5 minut najede vse a funguje...
sitova aktivita nula.

[Caroprd111]

Pokračujte podle návodu AVPTool http://www.viry.cz/forum/viewtopic.php?f=29&t=58179

[petrkrovak]

tady to je

Autoscan: completed 3 minutes ago (events: 88, objects: 155101, time: 01:01:35)
15.4.2010 18:59:35 Task started
15.4.2010 19:05:17 Detected: Trojan-Downloader.WMA.GetCodec.b C:\Documents and Settings\All Users\Dokumenty\Hudba\music.wma
15.4.2010 19:05:26 Disinfected: Trojan-Downloader.WMA.GetCodec.b C:\Documents and Settings\All Users\Dokumenty\Hudba\music.wma
15.4.2010 19:05:26 Disinfected: Trojan-Downloader.WMA.GetCodec.b C:\Documents and Settings\All Users\Dokumenty\Hudba\music.wma
15.4.2010 19:08:45 Detected: Trojan-Downloader.WMA.GetCodec.b C:\Documents and Settings\pc\Local Settings\Data aplikací\IM\Identities\{D87C0512-C0AF-4736-8AE4-0A2ED6242719}\Message Store\Attachments\KubA­k.wmv
15.4.2010 19:08:46 Disinfected: Trojan-Downloader.WMA.GetCodec.b C:\Documents and Settings\pc\Local Settings\Data aplikací\IM\Identities\{D87C0512-C0AF-4736-8AE4-0A2ED6242719}\Message Store\Attachments\KubA­k.wmv
15.4.2010 19:08:46 Disinfected: Trojan-Downloader.WMA.GetCodec.b C:\Documents and Settings\pc\Local Settings\Data aplikací\IM\Identities\{D87C0512-C0AF-4736-8AE4-0A2ED6242719}\Message Store\Attachments\KubA­k.wmv
15.4.2010 19:08:48 Detected: Trojan-Downloader.WMA.GetCodec.b C:\Documents and Settings\pc\Local Settings\Data aplikací\IM\Identities\{D87C0512-C0AF-4736-8AE4-0A2ED6242719}\Message Store\Attachments\pes.wmv
15.4.2010 19:08:49 Disinfected: Trojan-Downloader.WMA.GetCodec.b C:\Documents and Settings\pc\Local Settings\Data aplikací\IM\Identities\{D87C0512-C0AF-4736-8AE4-0A2ED6242719}\Message Store\Attachments\pes.wmv
15.4.2010 19:08:49 Disinfected: Trojan-Downloader.WMA.GetCodec.b C:\Documents and Settings\pc\Local Settings\Data aplikací\IM\Identities\{D87C0512-C0AF-4736-8AE4-0A2ED6242719}\Message Store\Attachments\pes.wmv
15.4.2010 19:08:51 Detected: Trojan-Downloader.Win32.Small.dwf C:\Documents and Settings\pc\Local Settings\Data aplikací\IM\Identities\{D87C0512-C0AF-4736-8AE4-0A2ED6242719}\Message Store\Attachments\Ucet.zip/Ucet.exe/FSG
15.4.2010 19:08:51 Deleted: Trojan-Downloader.Win32.Small.dwf C:\Documents and Settings\pc\Local Settings\Data aplikací\IM\Identities\{D87C0512-C0AF-4736-8AE4-0A2ED6242719}\Message Store\Attachments\Ucet.zip/Ucet.exe
15.4.2010 19:08:56 Detected: Trojan-Downloader.WMA.GetCodec.b C:\Documents and Settings\pc\Local Settings\Data aplikací\IM\Identities\{D87C0512-C0AF-4736-8AE4-0A2ED6242719}\Message Store\Attachments\{92C89849-C42D-44B0-88E3-560D0640B413}\KubA­k.wmv
15.4.2010 19:08:57 Disinfected: Trojan-Downloader.WMA.GetCodec.b C:\Documents and Settings\pc\Local Settings\Data aplikací\IM\Identities\{D87C0512-C0AF-4736-8AE4-0A2ED6242719}\Message Store\Attachments\{92C89849-C42D-44B0-88E3-560D0640B413}\KubA­k.wmv
15.4.2010 19:08:57 Disinfected: Trojan-Downloader.WMA.GetCodec.b C:\Documents and Settings\pc\Local Settings\Data aplikací\IM\Identities\{D87C0512-C0AF-4736-8AE4-0A2ED6242719}\Message Store\Attachments\{92C89849-C42D-44B0-88E3-560D0640B413}\KubA­k.wmv
15.4.2010 19:21:37 Detected: Trojan-Downloader.WMA.GetCodec.b C:\Program Files\Movie Maker\sample.asf
15.4.2010 19:21:38 Disinfected: Trojan-Downloader.WMA.GetCodec.b C:\Program Files\Movie Maker\sample.asf
15.4.2010 19:21:39 Detected: Trojan-Downloader.WMA.GetCodec.b C:\Program Files\Movie Maker\sample.asf
15.4.2010 19:21:39 Disinfected: Trojan-Downloader.WMA.GetCodec.b C:\Program Files\Movie Maker\sample.asf
15.4.2010 19:21:39 Disinfected: Trojan-Downloader.WMA.GetCodec.b C:\Program Files\Movie Maker\sample.asf
15.4.2010 19:23:04 Detected: Backdoor.Win32.NewRest.ru C:\Qoobox\Quarantine\C\WINDOWS\system32\drivers\_f9f59a6_.sys.zip/f9f59a6.sys
15.4.2010 19:23:05 Deleted: Backdoor.Win32.NewRest.ru C:\Qoobox\Quarantine\C\WINDOWS\system32\drivers\_f9f59a6_.sys.zip/f9f59a6.sys
15.4.2010 19:23:13 Detected: Trojan.Win32.Agent.bvsw C:\Qoobox\Quarantine\C\WINDOWS\system32\userinit.exe.vir
15.4.2010 19:23:13 Detected: Trojan.Win32.LowZones.p C:\System Volume Information\_restore{3D7D19DD-48E9-4C89-ABA1-D1D3C2DBA6C0}\RP209\A0034729.exe
15.4.2010 19:23:13 Detected: Email-Worm.Win32.Bagle.pac C:\System Volume Information\_restore{3D7D19DD-48E9-4C89-ABA1-D1D3C2DBA6C0}\RP209\A0034730.exe
15.4.2010 19:23:47 Deleted: Trojan.Win32.Agent.bvsw C:\Qoobox\Quarantine\C\WINDOWS\system32\userinit.exe.vir
15.4.2010 19:23:47 Detected: Email-Worm.Win32.Bagle.pac C:\System Volume Information\_restore{3D7D19DD-48E9-4C89-ABA1-D1D3C2DBA6C0}\RP209\A0034731.exe
15.4.2010 19:23:48 Deleted: Trojan.Win32.LowZones.p C:\System Volume Information\_restore{3D7D19DD-48E9-4C89-ABA1-D1D3C2DBA6C0}\RP209\A0034729.exe
15.4.2010 19:23:48 Detected: Email-Worm.Win32.Bagle.pac C:\System Volume Information\_restore{3D7D19DD-48E9-4C89-ABA1-D1D3C2DBA6C0}\RP209\A0034732.exe
15.4.2010 19:23:48 Deleted: Email-Worm.Win32.Bagle.pac C:\System Volume Information\_restore{3D7D19DD-48E9-4C89-ABA1-D1D3C2DBA6C0}\RP209\A0034730.exe
15.4.2010 19:23:49 Detected: Email-Worm.Win32.Bagle.pac C:\System Volume Information\_restore{3D7D19DD-48E9-4C89-ABA1-D1D3C2DBA6C0}\RP209\A0034733.exe
15.4.2010 19:23:49 Deleted: Email-Worm.Win32.Bagle.pac C:\System Volume Information\_restore{3D7D19DD-48E9-4C89-ABA1-D1D3C2DBA6C0}\RP209\A0034731.exe
15.4.2010 19:23:49 Detected: Email-Worm.Win32.Bagle.pac C:\System Volume Information\_restore{3D7D19DD-48E9-4C89-ABA1-D1D3C2DBA6C0}\RP209\A0034734.exe
15.4.2010 19:23:49 Deleted: Email-Worm.Win32.Bagle.pac C:\System Volume Information\_restore{3D7D19DD-48E9-4C89-ABA1-D1D3C2DBA6C0}\RP209\A0034733.exe
15.4.2010 19:23:49 Detected: Email-Worm.Win32.Bagle.pac C:\System Volume Information\_restore{3D7D19DD-48E9-4C89-ABA1-D1D3C2DBA6C0}\RP209\A0034735.exe
15.4.2010 19:23:49 Deleted: Email-Worm.Win32.Bagle.pac C:\System Volume Information\_restore{3D7D19DD-48E9-4C89-ABA1-D1D3C2DBA6C0}\RP209\A0034732.exe
15.4.2010 19:23:49 Detected: Email-Worm.Win32.Bagle.pac C:\System Volume Information\_restore{3D7D19DD-48E9-4C89-ABA1-D1D3C2DBA6C0}\RP209\A0034736.exe
15.4.2010 19:23:49 Deleted: Email-Worm.Win32.Bagle.pac C:\System Volume Information\_restore{3D7D19DD-48E9-4C89-ABA1-D1D3C2DBA6C0}\RP209\A0034735.exe
15.4.2010 19:23:49 Detected: Email-Worm.Win32.Bagle.pac C:\System Volume Information\_restore{3D7D19DD-48E9-4C89-ABA1-D1D3C2DBA6C0}\RP209\A0034737.exe
15.4.2010 19:23:49 Deleted: Email-Worm.Win32.Bagle.pac C:\System Volume Information\_restore{3D7D19DD-48E9-4C89-ABA1-D1D3C2DBA6C0}\RP209\A0034734.exe
15.4.2010 19:23:50 Deleted: Email-Worm.Win32.Bagle.pac C:\System Volume Information\_restore{3D7D19DD-48E9-4C89-ABA1-D1D3C2DBA6C0}\RP209\A0034736.exe
15.4.2010 19:23:50 Detected: Backdoor.Win32.Rbot.aeu C:\System Volume Information\_restore{3D7D19DD-48E9-4C89-ABA1-D1D3C2DBA6C0}\RP209\A0034738.exe/CryptFF/PE_Patch.Morphine/Morphine/FSG
15.4.2010 19:23:50 Deleted: Email-Worm.Win32.Bagle.pac C:\System Volume Information\_restore{3D7D19DD-48E9-4C89-ABA1-D1D3C2DBA6C0}\RP209\A0034737.exe
15.4.2010 19:23:50 Detected: Backdoor.Win32.Wootbot.gen C:\System Volume Information\_restore{3D7D19DD-48E9-4C89-ABA1-D1D3C2DBA6C0}\RP209\A0034739.exe/CryptFF/Pex/PE-Pack
15.4.2010 19:23:50 Detected: Trojan-Dropper.Win32.Delf.z C:\System Volume Information\_restore{3D7D19DD-48E9-4C89-ABA1-D1D3C2DBA6C0}\RP209\A0034740.exe/CryptFF/UPX
15.4.2010 19:23:50 Deleted: Backdoor.Win32.Rbot.aeu C:\System Volume Information\_restore{3D7D19DD-48E9-4C89-ABA1-D1D3C2DBA6C0}\RP209\A0034738.exe
15.4.2010 19:23:51 Deleted: Backdoor.Win32.Wootbot.gen C:\System Volume Information\_restore{3D7D19DD-48E9-4C89-ABA1-D1D3C2DBA6C0}\RP209\A0034739.exe
15.4.2010 19:23:51 Detected: Trojan-Dropper.Win32.Delf.z C:\System Volume Information\_restore{3D7D19DD-48E9-4C89-ABA1-D1D3C2DBA6C0}\RP209\A0034741.exe/CryptFF/UPX
15.4.2010 19:23:52 Deleted: Trojan-Dropper.Win32.Delf.z C:\System Volume Information\_restore{3D7D19DD-48E9-4C89-ABA1-D1D3C2DBA6C0}\RP209\A0034740.exe
15.4.2010 19:23:52 Detected: Email-Worm.Win32.Bagle.bb C:\System Volume Information\_restore{3D7D19DD-48E9-4C89-ABA1-D1D3C2DBA6C0}\RP209\A0034743.exe
15.4.2010 19:23:52 Detected: Trojan-Dropper.Win32.Delf.z C:\System Volume Information\_restore{3D7D19DD-48E9-4C89-ABA1-D1D3C2DBA6C0}\RP209\A0034742.exe/CryptFF/UPX
15.4.2010 19:23:52 Deleted: Trojan-Dropper.Win32.Delf.z C:\System Volume Information\_restore{3D7D19DD-48E9-4C89-ABA1-D1D3C2DBA6C0}\RP209\A0034741.exe
15.4.2010 19:23:52 Detected: Email-Worm.Win32.Bagle.pac C:\System Volume Information\_restore{3D7D19DD-48E9-4C89-ABA1-D1D3C2DBA6C0}\RP209\A0034744.exe
15.4.2010 19:23:52 Deleted: Trojan-Dropper.Win32.Delf.z C:\System Volume Information\_restore{3D7D19DD-48E9-4C89-ABA1-D1D3C2DBA6C0}\RP209\A0034742.exe
15.4.2010 19:23:53 Detected: Trojan-Dropper.Win32.Juntador.c C:\System Volume Information\_restore{3D7D19DD-48E9-4C89-ABA1-D1D3C2DBA6C0}\RP209\A0034746.exe
15.4.2010 19:23:53 Deleted: Email-Worm.Win32.Bagle.bb C:\System Volume Information\_restore{3D7D19DD-48E9-4C89-ABA1-D1D3C2DBA6C0}\RP209\A0034743.exe
15.4.2010 19:23:53 Deleted: Trojan-Dropper.Win32.Juntador.c C:\System Volume Information\_restore{3D7D19DD-48E9-4C89-ABA1-D1D3C2DBA6C0}\RP209\A0034746.exe
15.4.2010 19:23:53 Deleted: Email-Worm.Win32.Bagle.pac C:\System Volume Information\_restore{3D7D19DD-48E9-4C89-ABA1-D1D3C2DBA6C0}\RP209\A0034744.exe
15.4.2010 19:24:15 Detected: Trojan.Win32.Agent.bvsw C:\System Volume Information\_restore{B25E6747-A848-48DE-8DFA-7B01ED91455D}\RP2\A0003347.exe
15.4.2010 19:24:17 Deleted: Trojan.Win32.Agent.bvsw C:\System Volume Information\_restore{B25E6747-A848-48DE-8DFA-7B01ED91455D}\RP2\A0003347.exe
15.4.2010 19:36:51 Detected: Trojan-Downloader.WMA.GetCodec.o C:\WINDOWS\SoftwareDistribution\Download\8fb85d68ee3649be8b622da7b69408ee\beethov9.wma
15.4.2010 19:36:52 Disinfected: Trojan-Downloader.WMA.GetCodec.o C:\WINDOWS\SoftwareDistribution\Download\8fb85d68ee3649be8b622da7b69408ee\beethov9.wma
15.4.2010 19:36:52 Disinfected: Trojan-Downloader.WMA.GetCodec.o C:\WINDOWS\SoftwareDistribution\Download\8fb85d68ee3649be8b622da7b69408ee\beethov9.wma
15.4.2010 19:36:59 Detected: Trojan-Downloader.WMA.GetCodec.o C:\WINDOWS\SoftwareDistribution\Download\8fb85d68ee3649be8b622da7b69408ee\copycd.wmv
15.4.2010 19:36:59 Disinfected: Trojan-Downloader.WMA.GetCodec.o C:\WINDOWS\SoftwareDistribution\Download\8fb85d68ee3649be8b622da7b69408ee\copycd.wmv
15.4.2010 19:36:59 Disinfected: Trojan-Downloader.WMA.GetCodec.o C:\WINDOWS\SoftwareDistribution\Download\8fb85d68ee3649be8b622da7b69408ee\copycd.wmv
15.4.2010 19:37:21 Detected: Trojan-Downloader.WMA.GetCodec.o C:\WINDOWS\SoftwareDistribution\Download\8fb85d68ee3649be8b622da7b69408ee\mdlib.wmv
15.4.2010 19:37:22 Disinfected: Trojan-Downloader.WMA.GetCodec.o C:\WINDOWS\SoftwareDistribution\Download\8fb85d68ee3649be8b622da7b69408ee\mdlib.wmv
15.4.2010 19:37:22 Disinfected: Trojan-Downloader.WMA.GetCodec.o C:\WINDOWS\SoftwareDistribution\Download\8fb85d68ee3649be8b622da7b69408ee\mdlib.wmv
15.4.2010 19:37:41 Detected: Trojan-Downloader.WMA.GetCodec.o C:\WINDOWS\SoftwareDistribution\Download\8fb85d68ee3649be8b622da7b69408ee\nuskin.wmv
15.4.2010 19:37:41 Disinfected: Trojan-Downloader.WMA.GetCodec.o C:\WINDOWS\SoftwareDistribution\Download\8fb85d68ee3649be8b622da7b69408ee\nuskin.wmv
15.4.2010 19:37:41 Disinfected: Trojan-Downloader.WMA.GetCodec.o C:\WINDOWS\SoftwareDistribution\Download\8fb85d68ee3649be8b622da7b69408ee\nuskin.wmv
15.4.2010 19:38:01 Detected: Trojan-Downloader.WMA.GetCodec.o C:\WINDOWS\SoftwareDistribution\Download\8fb85d68ee3649be8b622da7b69408ee\title.wma
15.4.2010 19:38:03 Disinfected: Trojan-Downloader.WMA.GetCodec.o C:\WINDOWS\SoftwareDistribution\Download\8fb85d68ee3649be8b622da7b69408ee\title.wma
15.4.2010 19:38:03 Disinfected: Trojan-Downloader.WMA.GetCodec.o C:\WINDOWS\SoftwareDistribution\Download\8fb85d68ee3649be8b622da7b69408ee\title.wma
15.4.2010 19:38:06 Detected: Trojan-Downloader.WMA.GetCodec.o C:\WINDOWS\SoftwareDistribution\Download\8fb85d68ee3649be8b622da7b69408ee\viz.wmv
15.4.2010 19:38:07 Disinfected: Trojan-Downloader.WMA.GetCodec.o C:\WINDOWS\SoftwareDistribution\Download\8fb85d68ee3649be8b622da7b69408ee\viz.wmv
15.4.2010 19:38:07 Disinfected: Trojan-Downloader.WMA.GetCodec.o C:\WINDOWS\SoftwareDistribution\Download\8fb85d68ee3649be8b622da7b69408ee\viz.wmv
15.4.2010 19:38:45 Detected: Trojan-Downloader.BAT.Ftp.c C:\WINDOWS\system32\c.bat
15.4.2010 19:39:41 Deleted: Trojan-Downloader.BAT.Ftp.c C:\WINDOWS\system32\c.bat
15.4.2010 19:39:54 Detected: Trojan-Banker.Win32.Bancos.gnv C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\SZIPWLAH\up[1].exe
15.4.2010 19:39:56 Deleted: Trojan-Banker.Win32.Bancos.gnv C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\SZIPWLAH\up[1].exe
15.4.2010 19:40:45 Detected: Trojan-Downloader.WMA.GetCodec.b C:\WINDOWS\system32\oobe\images\title.wma
15.4.2010 19:40:47 Disinfected: Trojan-Downloader.WMA.GetCodec.b C:\WINDOWS\system32\oobe\images\title.wma
15.4.2010 19:40:47 Disinfected: Trojan-Downloader.WMA.GetCodec.b C:\WINDOWS\system32\oobe\images\title.wma
15.4.2010 19:46:25 Detected: Backdoor.Win32.IRCBot.ksu F:\portable\Portable EZ Screen Recorder 4.07\EZ Screen Recorder.exe
15.4.2010 19:50:12 Deleted: Backdoor.Win32.IRCBot.ksu F:\portable\Portable EZ Screen Recorder 4.07\EZ Screen Recorder.exe
15.4.2010 20:01:11 Task completed

[Caroprd111]

Jak to vypadá s PC

[petrkrovak]

no ted jede mam restartovat?

[Caroprd111]

Ano, restartujte.

[petrkrovak]

Tak pri spousteni zmena 10 min a nenajel.

[petrkrovak]

sekl se i cas pred 10 minutama.

[Caroprd111]

Stáhni si MSDaRT pro svůj příslušný operační systém:

Windows XP -> http://www.mediafire.com/?ddsfd2xdndw
Windows Vista -> http://www.mediafire.com/?knvmygelfxy
Windows 7 -> http://www.mediafire.com/?5qmmdkzjeg3

Nainstaluj program dle pokynů staženého instalátoru.
Po dokončení instalace spusť tento soubor: C:\Program Files\Microsoft Diagnostics and Recovery Toolset\ERDC.exe
Klikej postupně na tlačítko Next, nech vytvořit .iso soubor a pomocí průvodce ho vypal na CD.

2) Restartuj počítač, na kterém máš problémy a vlož do jeho mechaniky vypálené CD. Předtím, než se Windows načtou, mačkej libovolnou klávesu a počítač začne bootovat z CD.
Po nabootování jdi přes menu Start - System Tools - System Files Repair.
Spustí se průvodce, který vyhledá virem narušené / poškozené systémové soubory. Všechny soubory, které najde, nech opravit.

Jdi přes menu Start - Log Off - Restart - OK a tvůj počítač se restartuje.

3) Po restartu počítače jdi v OS přes menu Start - Nastavení - Ovládací panely - Přidat nebo odebrat programy - vyber: Microsoft Diagnostics and Recovery Toolset - klikni na Odebrat. Tohle MSDaRT zase odinstaluje.

Napiš výsledky.

[petrkrovak]

to cd mam tvorit na tom spatnem pc?Tedy jedine v nouzaku....