zase problém

[brankar]

Ahoj ,tak jsem tady zase ,na myš musím více krát kliknout než se něco otevře .
prosím za pomoc


tady je log combo fix


ComboFix 10-10-26.03 - user 27.10.2010 11:31:51.53.1 - x86 MINIMAL
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.511.361 [GMT 2:00]
SpuÜtýnř z: c:\documents and settings\user\Plocha\ComboFix.exe
AV: AVG *On-access scanning disabled* (Outdated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
AV: COMODO Antivirus *On-access scanning disabled* (Updated) {043803A5-4F86-4ef7-AFC5-F6E02A79969B}
AV: Microsoft Security Essentials *On-access scanning enabled* (Updated) {BCF43643-A118-4432-AEDE-D861FCBCFCDF}
FW: Kerio WinRoute Firewall *enabled* {916dafda-8250-4a1d-9095-000da68ac4da}
.

((((((((((((((((((((((((((((((((((((((( OstatnÝ vřmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\system32\Version.dll . . . je infikovßn!!

.
((((((((((((((((((((((((( Soubory vytvo°enÚ od 2010-09-27 do 2010-10-27 )))))))))))))))))))))))))))))))
.

2010-10-27 09:19 . 2010-10-27 09:19 -------- d-sh--w- c:\documents and settings\Administrator\IECompatCache
2010-10-27 09:18 . 2010-10-27 09:18 -------- d-sh--w- c:\documents and settings\Administrator\PrivacIE
2010-10-24 09:47 . 1995-10-23 14:14 282624 ----a-w- c:\windows\uninst.exe
2010-10-23 15:15 . 2010-10-24 09:05 -------- d-----w- c:\program files\Duke Nukem - Manhattan Project (DEMO)
2010-10-23 15:15 . 2010-10-23 15:15 -------- d-----w- C:\Shortcuts
2010-10-19 15:07 . 2010-10-19 15:07 -------- d-----w- c:\program files\XP Codec Pack
2010-10-19 15:02 . 2010-10-19 15:02 -------- d-----w- c:\program files\JockerSoft
2010-10-19 14:40 . 2010-10-19 14:40 -------- d-----w- c:\documents and settings\All Users\Data aplikacÝ\Codemasters
2010-10-19 14:27 . 2010-07-28 17:10 1380352 ----a-w- c:\windows\system32\rapture3d_oal.dll
2010-10-19 14:27 . 2010-03-01 18:51 17686528 ----a-w- c:\windows\system32\mkl_blueripple.dll
2010-10-19 14:27 . 2010-10-19 14:27 -------- d-----w- c:\program files\BRS
2010-10-19 14:27 . 2010-10-19 14:27 -------- d-----w- c:\program files\OpenAL
2010-10-19 14:27 . 2010-08-18 15:10 809560 ----a-r- c:\windows\system32\tmp35A.tmp
2010-10-19 14:27 . 2010-08-18 15:10 809560 ----a-r- c:\windows\system32\tmp359.tmp
2010-10-19 14:19 . 2010-10-19 14:19 -------- d-----w- c:\windows\system32\xlive
2010-10-19 13:56 . 2010-10-19 13:56 -------- d-----w- c:\program files\Codemasters
2010-10-17 14:48 . 2001-11-19 17:05 3972 ----a-w- c:\windows\system32\drivers\PciBus.sys
2010-10-17 14:45 . 2010-10-17 14:45 -------- d-----w- c:\program files\Futuremark
2010-10-17 13:43 . 2005-02-22 19:05 516096 ------w- c:\windows\system32\ati2sgag.exe
2010-10-17 13:42 . 2010-10-17 13:44 -------- d-----w- c:\program files\ATI Technologies
2010-10-17 12:51 . 2010-10-17 12:54 -------- d-----w- c:\program files\ATITool
2010-10-10 16:21 . 2010-10-10 16:21 -------- d--h--w- c:\documents and settings\user\InstallAnywhere
2010-09-30 12:49 . 2009-06-07 14:16 819200 ----a-w- c:\windows\system32\xvidcore.dll
2010-09-30 12:49 . 2010-09-30 12:49 -------- d-----w- c:\program files\Xvid
2010-09-30 12:49 . 2009-06-07 14:24 180224 ----a-w- c:\windows\system32\xvidvfw.dll
2010-09-28 15:17 . 2010-10-02 06:07 -------- d-----w- c:\documents and settings\user\Data aplikacÝ\QuickStoresToolbar
2010-09-27 15:52 . 2010-09-27 15:53 -------- d-----w- c:\documents and settings\user\Local Settings\Data aplikacÝ\AskToolbar
2010-09-27 15:17 . 2010-09-27 15:17 -------- d-----w- c:\documents and settings\user\Local Settings\Data aplikacÝ\ATI
2010-09-27 15:17 . 2010-09-27 15:17 -------- d-----w- c:\documents and settings\user\Data aplikacÝ\ATI
2010-09-27 10:04 . 2010-09-27 10:04 -------- d-----w- c:\program files\HD Tune

.
(((((((((((((((((((((((((((((((((((((((( Find3M vřpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-10-19 14:27 . 2010-01-29 09:38 445016 ----a-w- c:\windows\system32\wrap_oal.dll
2010-10-19 14:27 . 2010-01-29 09:38 109144 ----a-w- c:\windows\system32\OpenAL32.dll
2010-09-24 12:05 . 2010-02-02 12:16 451072 ----a-w- c:\windows\Radeon Omega Drivers v2.6.87 Uninstall.exe
2010-09-15 10:33 . 2008-10-17 21:30 27904 ----a-w- c:\windows\system32\drivers\VIAAGP1.SYS
2010-09-15 10:32 . 2010-09-15 10:32 73728 ----a-w- c:\windows\system32\RtNicProp32.dll
2010-09-15 10:32 . 2010-09-15 10:32 130432 ----a-w- c:\windows\system32\drivers\Rtnicxp.sys
2010-09-15 10:32 . 2009-04-21 09:49 577536 ----a-w- c:\windows\SOUNDMAN.EXE
2010-09-15 10:32 . 2008-10-17 21:33 10528768 ----a-w- c:\windows\system32\RTLCPL.EXE
2010-09-15 10:32 . 2008-10-17 21:33 147456 ----a-w- c:\windows\system32\RTLCPAPI.dll
2010-09-15 10:32 . 2008-10-17 21:33 18804736 ----a-w- c:\windows\system32\ALSNDMGR.CPL
2010-09-15 10:32 . 2008-10-17 21:33 4122368 ----a-w- c:\windows\system32\drivers\ALCXWDM.SYS
2010-09-15 10:32 . 2008-10-17 21:33 217088 ----a-w- c:\windows\Alcrmv.exe
2010-09-07 05:53 . 2010-09-02 16:22 16968 ----a-w- c:\windows\system32\drivers\hitmanpro35.sys
2010-09-02 17:12 . 2010-09-02 17:12 12872 ----a-w- c:\windows\system32\bootdelete.exe
2009-11-20 18:01 . 2009-11-20 18:01 832296 ----a-w- c:\program files\opera.exe
2009-11-20 18:01 . 2009-11-20 18:01 4450088 ----a-w- c:\program files\opera.dll
2009-11-20 18:00 . 2009-11-20 18:00 653419 ----a-w- c:\program files\encoding.bin
.

(((((((((((((((((((((((((((((((((( SpouÜtýcÝ body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznßmka* prßzdnÚ zßznamy a legitimnÝ vřchozÝ ˙daje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2010-09-10 2424560]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2010-10-27 39408]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-06-20 35760]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-21 932288]
"COMODO Internet Security"="c:\program files\COMODO\COMODO Internet Security\cfp.exe" [2010-06-01 2039240]
"SoundMan"="SOUNDMAN.EXE" [2010-09-15 577536]
"ATIPTA"="c:\program files\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-02-22 339968]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoResolveTrack"= 1 (0x1)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoResolveTrack"= 1 (0x1)

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2009-09-03 22:21 548352 ----a-w- c:\program files\SUPERAntiSpyware\SASWINLO.DLL

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\system32\guard32.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CLPSLS]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@=""

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"c:\\WINDOWS\\system32\\sessmgr.exe"=
"c:\\Program Files\\Ares\\Ares.exe"=
"c:\\Program Files\\Sports Interactive\\Football Manager 2010\\fm.exe"=
"c:\\Program Files\\Microsoft Games\\Flight Simulator 9\\fs9.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\WINDOWS\\system32\\dpnsvr.exe"=
"c:\\Program Files\\opera.exe"=
"c:\\Program Files\\KONAMI\\Pro Evolution Soccer 2009\\pes2009.exe"=
"c:\\Program Files\\Codemasters\\F1 2010\\F1_2010_game.exe"=

R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [27.1.2009 11:14 64160]
R1 cmderd;COMODO Internet Security Eradication Driver;c:\windows\system32\drivers\cmderd.sys [1.6.2010 19:00 15464]
R1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\system32\drivers\cmdGuard.sys [4.6.2010 11:55 229312]
R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [17.2.2010 20:25 12872]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [10.5.2010 20:41 67656]
R2 CLPSLS;COMODO livePCsupport Service;c:\program files\COMODO\COMODO livePCsupport\CLPSLS.exe [19.2.2010 17:00 148744]
R2 ousbehci;OrangeWare USB Enhanced Host Controller Service;c:\windows\system32\drivers\ousbehci.sys [3.2.2010 21:50 45696]
R3 ousb2hub;OrangeWare USB 2.0 Root Hub Support;c:\windows\system32\drivers\ousb2hub.sys [3.2.2010 21:50 56960]
S1 atitray;atitray;\??\c:\program files\Radeon Omega Drivers\v2.6.87\ATI Tray Tools\atitray.sys --> c:\program files\Radeon Omega Drivers\v2.6.87\ATI Tray Tools\atitray.sys [?]
S2 gupdate;Slu×ba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [27.10.2010 10:52 136176]
S3 kvpndev;Kerio VPN adapter;c:\windows\system32\drivers\kvpndrv.sys [24.6.2008 10:36 65024]
S3 kwflower;Kerio WinRoute Firewall Driver - Lower Layer;c:\windows\system32\DRIVERS\kwflower.sys --> c:\windows\system32\DRIVERS\kwflower.sys [?]
S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [18.2.2010 13:21 38224]
S3 pbfilter;pbfilter; [x]
S4 sptd;sptd;c:\windows\system32\drivers\sptd.sys [10.10.2009 19:15 721904]
.
Obsah adresß°e 'NaplßnovanÚ ˙lohy'

2010-10-27 c:\windows\Tasks\GoogleUpdateTaskMachineCore1cb75b46a7239e8.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-10-27 08:52]
.
.
------- Dopl˛kovř sken -------
.
uDefault_Search_URL = hxxp://www.google.com
uStart Page = about:
mStart Page =
uInternet Connection Wizard,ShellNext = iexplore
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
TCP: {7E1B775D-FB9F-4945-8B6B-60D8BA4F52C7} = 10.1.1.1
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-10-27 11:42
Windows 5.1.2600 Service Pack 3 NTFS

skenovßnÝ skrytřch proces¨ ...

skenovßnÝ skrytřch polo×ek 'Po spuÜtýnÝ' ...

skenovßnÝ skrytřch soubor¨ ...

sken byl ˙speÜný dokonŔen
skrytÚ soubory: 0

**************************************************************************
.
--------------------- ZAMKNUT╔ KL═╚E V REGISTRU ---------------------

[HKEY_USERS\S-1-5-21-1409082233-1580818891-839522115-1004\Software\Microsoft\SystemCertificates\AddressBook*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)

[HKEY_USERS\S-1-5-21-1409082233-1580818891-839522115-1004\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:b7,4a,67,15,5b,a9,6a,5b,cd,e9,29,0d,e8,6d,03,26,ab,ed,d4,03,b1,05,91,
9e,12,18,64,cd,52,6a,9b,30,35,dd,39,6d,c6,2c,07,28,e0,cc,4d,3d,fe,d3,a7,b4,\
"??"=hex:8a,95,0c,91,36,dd,90,2c,2c,e3,05,7a,7a,8f,80,cc

[HKEY_USERS\S-1-5-21-1409082233-1580818891-839522115-1004\Software\SecuROM\License information*]
"datasecu"=hex:de,90,0c,4f,d9,bc,66,33,9d,ae,01,0d,3d,97,ef,b5,7a,cf,a1,b8,c3,
13,76,7f,a0,8f,08,30,ae,bd,5f,12,c0,9f,ab,06,a4,4f,68,b9,c0,30,15,fb,e7,16,\
"rkeysecu"=hex:d8,c7,23,48,1b,0a,78,31,e8,4d,f5,29,fb,69,de,ef

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System*]
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
.
--------------------- Knihovny navßzanÚ na bý×ÝcÝ procesy ---------------------

- - - - - - - > 'winlogon.exe'(800)
c:\program files\SUPERAntiSpyware\SASWINLO.DLL
c:\windows\system32\Ati2evxx.dll

- - - - - - - > 'explorer.exe'(2172)
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ JinÚ spuÜtenÚ procesy ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\program files\COMODO\COMODO Internet Security\cmdagent.exe
c:\windows\system32\Ati2evxx.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\windows\system32\PnkBstrA.exe
c:\windows\system32\PnkBstrB.exe
c:\windows\system32\locator.exe
c:\windows\SOUNDMAN.EXE
.
**************************************************************************
.
Celkovř Ŕas: 2010-10-27 11:50:05 - poŔÝtaŔ byl restartovßn
ComboFix-quarantined-files.txt 2010-10-27 09:49

P°ed spuÜtýnÝm: Volnřch bajt¨: 54á897á164á288
Po spuÜtýnÝ: Volnřch bajt¨: 54á816á563á200

Current=6 Default=6 Failed=1 LastKnownGood=7 Sets=1,2,3,4,5,6,7
- - End Of File - - FEC03FD0F8D3A75928B2E9FE2F4B2247

[earl]

Zdravim,

Proc hned pouzivate ComboFix,vsude piseme at se zacina napr. RSITem...

Mate v pc 3 antiviry - to je spatne.

Odinstalujte AVG a MSE a ponechte pouze Comodo IS.

:arrow:Otestujte na VIRUSTOTALu a JOTTISCANu

c:\windows\system32\Version.dll

(navod prosty: po nacteni stranky kliknete na tlacitko Prochazet , najdete cestu k vyse zminenemu souboru a kliknete na tlacitko Odeslat soubor; dejte skenerum nejakych deset minut; vysledky sem vlozte)

Pokud skener napíše, že soubor již byl testován, dejte otestovat znovu.

Pak budeme cistit.

[brankar]

Antivirák mám jen jeden a to Comodo ale ty dva jsem odinstaloval už před rokem a pořád je to někde nalezlý je na to nějaký program abych to dohledal

c:\windows\system32\Version.dll na testech vše v pořádku.

Jinak se omlouvám za ten scan z comba .

[earl]

Prece jenom bych rad videl link na ten vysledek z Virustotalu.

Pro odinstalaci AVG mrknete sem - http://www.viry.cz/forum/viewtopic.php?f=29&t=42886

U MSE (jelikoz je to soucast instalace Win) deaktivujte rezidentni stit.

Stahnete si OTM , spustte (pokud mate vistu spuste run as administrator) a
do leveho policka se zlutym hornim okrajem Paste Instructions for Items to be Moved zkopirujte toto:

Kód: Vybrat vše

:processes
explorer.exe
:files
c:\windows\system32\tmp35A.tmp
c:\windows\system32\tmp359.tmp
:commands
[emptytemp]
[createrestorepoint]
[resethosts]
[start explorer]
[reboot]

Kliknete na MoveIt, v okne se zelenym hornim okrajem Results se objevi vysledek,obsah okna zkopirujte sem. Kdyby OTMoveIt vyzadoval restart - povolit. Nasledujici log najdete v C:\_OTMoveIt\MovedFiles\xxxxx.log (x je zastupny znak) ktery otevrete v poznamkovem bloku.

A popiste chovani pc.

[brankar]

Tady je link http://www.virustotal.com/file-scan/rep ... 1288273150

[earl]

Ok,jeste log z OTM.

[brankar]

All processes killed
========== PROCESSES ==========
No active process named explorer.exe was found!
========== FILES ==========
c:\windows\system32\tmp35A.tmp moved successfully.
c:\windows\system32\tmp359.tmp moved successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 294871 bytes
->Opera cache emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: NetworkService
->Temp folder emptied: 7250 bytes
->Temporary Internet Files folder emptied: 32902 bytes

User: user
->Temp folder emptied: 436725 bytes
->Temporary Internet Files folder emptied: 206701 bytes
->Java cache emptied: 0 bytes
->Opera cache emptied: 0 bytes
->Flash cache emptied: 4657 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 19490 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 120165136 bytes

Total Files Cleaned = 116,00 mb

Restore point Set: OTM Restore Point (0)
C:\WINDOWS\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

OTM by OldTimer - Version 3.1.17.1 log created on 10282010_155158

Files moved on Reboot...

Registry entries deleted on Reboot...

[earl]

Jak se chova pc nyni?

[brankar]

PC se zdá lepší ale myš to pořád dělá skusím vyměnit a uvidíme ,zatím děkuji za pomoc .

[earl]

To asi skutecne bude spis tou mysi.

Pouzijte T-Cleaner na vycisteni pc po utilitach pouzitych pri odvirovani.

Postupujte dle instrukci na obrazovce.Pri detekci antivirem se jedna o falesny poplach.

Vycistete pc Ccleanerem.

Vzdy nejprve Analyzovat a pak Spustit Cleaner.2x po sobe.

Windows-odskrtnout historii a historii automatickeho vyplnovani formularu - prisel byste o historii navstivenych stranek a o ulozena hesla ve formularich

(je to sice z pohledu zabezpeceni spatne,ale aspon pak uzivatel nenadava,kam ze mu to zmizelo )

Aplikace-u prohlizecu internetu odskrtnout Historii internetu.

Registry-nechat vse zaskrtle,Hledej problemy,Opravit vybrane problemy

(nechat ho udelat zalohu-ta je ulozena v Dokumentech-DULEZITE).

Taktez 2x-3x po sobe.