POMOC so svinstvom... Win32/Adware.ErrorRepairPro

[martinerik]

All processes killed
========== OTL ==========
Starting removal of ActiveX control {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\ not found.
C:\Documents and Settings\Hopino\Local Settings\Application Data\Temp folder moved successfully.
C:\WINDOWS\NV1508700.TMP\nvcplara.chm deleted successfully.
C:\WINDOWS\NV1508700.TMP\nvcplchs.chm deleted successfully.
C:\WINDOWS\NV1508700.TMP\nvcplcht.chm deleted successfully.
C:\WINDOWS\NV1508700.TMP\nvcplcsy.chm deleted successfully.
C:\WINDOWS\NV1508700.TMP\nvcpldan.chm deleted successfully.
C:\WINDOWS\NV1508700.TMP\nvcpldeu.chm deleted successfully.
C:\WINDOWS\NV1508700.TMP\nvcplell.chm deleted successfully.
C:\WINDOWS\NV1508700.TMP\nvcpleng.chm deleted successfully.
C:\WINDOWS\NV1508700.TMP\nvcplesm.chm deleted successfully.
C:\WINDOWS\NV1508700.TMP\nvcplesn.chm deleted successfully.
C:\WINDOWS\NV1508700.TMP\nvcplfin.chm deleted successfully.
C:\WINDOWS\NV1508700.TMP\nvcplfra.chm deleted successfully.
C:\WINDOWS\NV1508700.TMP\nvcplheb.chm deleted successfully.
C:\WINDOWS\NV1508700.TMP\nvcplhun.chm deleted successfully.
C:\WINDOWS\NV1508700.TMP\nvcplita.chm deleted successfully.
C:\WINDOWS\NV1508700.TMP\nvcpljpn.chm deleted successfully.
C:\WINDOWS\NV1508700.TMP\nvcplkor.chm deleted successfully.
C:\WINDOWS\NV1508700.TMP\nvcplnld.chm deleted successfully.
C:\WINDOWS\NV1508700.TMP\nvcplnor.chm deleted successfully.
C:\WINDOWS\NV1508700.TMP\nvcplplk.chm deleted successfully.
C:\WINDOWS\NV1508700.TMP\nvcplptb.chm deleted successfully.
C:\WINDOWS\NV1508700.TMP\nvcplptg.chm deleted successfully.
C:\WINDOWS\NV1508700.TMP\nvcplrus.chm deleted successfully.
C:\WINDOWS\NV1508700.TMP\nvcplsky.chm deleted successfully.
C:\WINDOWS\NV1508700.TMP\nvcplslv.chm deleted successfully.
C:\WINDOWS\NV1508700.TMP\nvcplsve.chm deleted successfully.
C:\WINDOWS\NV1508700.TMP\nvcpltha.chm deleted successfully.
C:\WINDOWS\NV1508700.TMP\nvcpltrk.chm deleted successfully.
C:\WINDOWS\NV1508700.TMP folder deleted successfully.
C:\WINDOWS\NV38963884.TMP\nvcplara.chm deleted successfully.
C:\WINDOWS\NV38963884.TMP\nvcplchs.chm deleted successfully.
C:\WINDOWS\NV38963884.TMP\nvcplcht.chm deleted successfully.
C:\WINDOWS\NV38963884.TMP\nvcplcsy.chm deleted successfully.
C:\WINDOWS\NV38963884.TMP\nvcpldan.chm deleted successfully.
C:\WINDOWS\NV38963884.TMP\nvcpldeu.chm deleted successfully.
C:\WINDOWS\NV38963884.TMP\nvcplell.chm deleted successfully.
C:\WINDOWS\NV38963884.TMP\nvcpleng.chm deleted successfully.
C:\WINDOWS\NV38963884.TMP\nvcplesm.chm deleted successfully.
C:\WINDOWS\NV38963884.TMP\nvcplesn.chm deleted successfully.
C:\WINDOWS\NV38963884.TMP\nvcplfin.chm deleted successfully.
C:\WINDOWS\NV38963884.TMP\nvcplfra.chm deleted successfully.
C:\WINDOWS\NV38963884.TMP\nvcplheb.chm deleted successfully.
C:\WINDOWS\NV38963884.TMP\nvcplhun.chm deleted successfully.
C:\WINDOWS\NV38963884.TMP\nvcplita.chm deleted successfully.
C:\WINDOWS\NV38963884.TMP\nvcpljpn.chm deleted successfully.
C:\WINDOWS\NV38963884.TMP\nvcplkor.chm deleted successfully.
C:\WINDOWS\NV38963884.TMP\nvcplnld.chm deleted successfully.
C:\WINDOWS\NV38963884.TMP\nvcplnor.chm deleted successfully.
C:\WINDOWS\NV38963884.TMP\nvcplplk.chm deleted successfully.
C:\WINDOWS\NV38963884.TMP\nvcplptb.chm deleted successfully.
C:\WINDOWS\NV38963884.TMP\nvcplptg.chm deleted successfully.
C:\WINDOWS\NV38963884.TMP\nvcplrus.chm deleted successfully.
C:\WINDOWS\NV38963884.TMP\nvcplsky.chm deleted successfully.
C:\WINDOWS\NV38963884.TMP\nvcplslv.chm deleted successfully.
C:\WINDOWS\NV38963884.TMP\nvcplsve.chm deleted successfully.
C:\WINDOWS\NV38963884.TMP\nvcpltha.chm deleted successfully.
C:\WINDOWS\NV38963884.TMP\nvcpltrk.chm deleted successfully.
C:\WINDOWS\NV38963884.TMP folder deleted successfully.
C:\WINDOWS\SET3.tmp deleted successfully.
C:\WINDOWS\SET4.tmp deleted successfully.
C:\WINDOWS\SET8.tmp deleted successfully.
C:\Documents and Settings\All Users\Application Data\xmlEAE.tmp deleted successfully.
C:\Documents and Settings\All Users\Application Data\xmlEB0.tmp deleted successfully.
C:\Documents and Settings\All Users\Application Data\xmlEB2.tmp deleted successfully.
C:\WINDOWS\System32\CONFIG.TMP deleted successfully.
ADS C:\Documents and Settings\Hopino\Desktop\secreeeet.txt:SummaryInformation deleted successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: Hopino
->Temp folder emptied: 876387 bytes
->Temporary Internet Files folder emptied: 206690 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 43308790 bytes
->Flash cache emptied: 5328 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 330266 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 16867 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 43,00 mb


[EMPTYFLASH]

User: All Users

User: Default User

User: Hopino
->Flash cache emptied: 0 bytes

User: LocalService

User: NetworkService

Total Flash Files Cleaned = 0,00 mb

Restore points cleared and new OTL Restore Point set!

OTL by OldTimer - Version 3.2.6.0 log created on 06192010_183932

Files\Folders moved on Reboot...

Registry entries deleted on Reboot...

[Caroprd111]

Jak se chová PC

[martinerik]

Idem poskusat na 5 min...

[martinerik]

No nic moc... skusal som akurat hru a seka viac ako pred pol hodinou... nedalo by sa este nieco ? Alebo ostane uz len ostara s nanovo davanim win ?

[Caroprd111]

Stáhněte MBAM http://www.viry.cz/forum/viewtopic.php?f=29&t=67229

• Podle návodu v odkazu nainstalujte, poté dejte úplný sken.
• Nic nemažte MBAM má občas falešné detekce a mohl by smazat např. systémové soubory.
• Log vložte sem.

[martinerik]

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Verzia databázy: 4216

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

19.6.2010 20:01:14
mbam-log-2010-06-19 (20-01-14).txt

Typ kontroly: Úplná kontrola (C:\|D:\|)
Objektov kontrolovaných: 177398
Uplynulý čas: 24 min, 55 sek

Infikované služby pamäte: 0
Infikované moduly pamäte: 0
Infikované registračné kľúče: 0
Infikované registračné hodnoty: 0
Infikované položky registračných dát: 0
Infikované priečinky: 0
Infikované súbory: 0

Infikované služby pamäte:
(Škodlivé položky neboli zistené)

Infikované moduly pamäte:
(Škodlivé položky neboli zistené)

Infikované registračné kľúče:
(Škodlivé položky neboli zistené)

Infikované registračné hodnoty:
(Škodlivé položky neboli zistené)

Infikované položky registračných dát:
(Škodlivé položky neboli zistené)

Infikované priečinky:
(Škodlivé položky neboli zistené)

Infikované súbory:
(Škodlivé položky neboli zistené)

[Caroprd111]

Pokračujte podle návodu http://www.viry.cz/forum/viewtopic.php?f=29&t=58179

[martinerik]

No skenuje uz hodinu skenuje....nejake svinstvo naslo a vymazal som ho... hmm divne ze doteraz nic nenaslo.

[Caroprd111]

[martinerik]

Autoscan: completed 33 minutes ago (events: 6, objects: 352693, time: 02:09:18)
19.6.2010 20:30:03 Task started
19.6.2010 20:46:29 Detected: Backdoor.Win32.Poison.bmll C:\WINDOWS\ie8\iexplore.exe
19.6.2010 20:51:33 Deleted: Backdoor.Win32.Poison.bmll C:\WINDOWS\ie8\iexplore.exe
19.6.2010 22:13:54 Detected: Backdoor.Win32.Poison.bmll C:\System Volume Information\_restore{1EF23DDF-EC51-4F3B-BBC5-DD475DA023E1}\RP0\A0000032.exe
19.6.2010 22:31:07 Deleted: Backdoor.Win32.Poison.bmll C:\System Volume Information\_restore{1EF23DDF-EC51-4F3B-BBC5-DD475DA023E1}\RP0\A0000032.exe
19.6.2010 22:39:21 Task completed

[Caroprd111]

Jak to vypadá s PC

[martinerik]

No idem poskusat trosku a dam vediet

[Caroprd111]

OK

[martinerik]

No ziadne zmeny...hmmm kde moze byt este problem ? V najkrajsnesom pripade budem musiet dat win na novo... len disk je cely zaplneny

[Caroprd111]

Zkuste přeinstalovat ovladače grafické karty a odinstalovat programy, které nepoužíváte.