prosim o kontrolu logu , podozrenie na virus

[janyf]

All processes killed
========== REGISTRY ==========
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{02478D38-C3F9-4efb-9B51-7695ECA05670}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\eRecoveryService deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\SpywareTerminator deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Adobe Reader Speed Launcher deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\QuickTime Task deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\Google Update deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\Steam deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\SpywareTerminatorUpdate deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\WMPNSCFG deleted successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\ICQ deleted successfully.
========== SERVICES/DRIVERS ==========
Error: No service named ovfsthxffthnqlvibpvmkweeiexhtpsgtbnqbp was found to stop!
Service\Driver key ovfsthxffthnqlvibpvmkweeiexhtpsgtbnqbp not found.
========== FILES ==========
C:\Windows\System32\ovfsthxffthnqlvibpvmkweeiexhtpsgtbnqbp.dat moved successfully.
C:\Windows\tasks\Google Software Updater.job moved successfully.
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job moved successfully.
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job moved successfully.
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3690851227-2635793869-1137812997-1003Core.job moved successfully.
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3690851227-2635793869-1137812997-1003UA.job moved successfully.
File/Folder C:\Windows\system32\*.tmp.dll not found.
File/Folder C:\Windows\system32\SET*.tmp not found.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP21E1.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP2DF2.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP5C42.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAP81A.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPE0CE.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPE752.tmp folder moved successfully.
C:\Windows\assembly\NativeImages_v2.0.50727_32\Temp\ZAPEEF0.tmp folder moved successfully.
C:\Windows\Installer\MSI1391.tmp moved successfully.
C:\Windows\Installer\MSI17E5.tmp moved successfully.
C:\Windows\Installer\MSI61EE.tmp moved successfully.
C:\Windows\Installer\MSI6F2.tmp moved successfully.
C:\Windows\SoftwareDistribution\Download\c49b8a8996a4e0453b8c8c262e42bd2b\BITD48E.tmp moved successfully.
========== COMMANDS ==========
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Jan Farkas
->Temp folder emptied: 247066 bytes
->Temporary Internet Files folder emptied: 2568627 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 0 bytes
->Google Chrome cache emptied: 19753946 bytes
->Flash cache emptied: 619 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 542444 bytes
%systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 33170 bytes
%systemroot%\system32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment folder emptied: 0 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 22,00 mb


Restore point Set: OTM Restore Point

OTM by OldTimer - Version 3.1.17.2 log created on 11112010_223106

Files moved on Reboot...
File C:\Windows\temp\TMP00000001D0E40D75020BD2C0 not found!

Registry entries deleted on Reboot...

toto by malo by ono

[vyosek]

Provedte to zakazani slubzy - viz PMka

Jak se chova PC

[janyf]

vsetky 3 su disabled , neviem vyzera ze normalne minimalne internet beží

[vyosek]

OTC http://oldtimer.geekstogo.com/OTC.exe

• Stahnete a spustte
• Kliknete na CleanUp a potvrdte YES
• Program uklidi a restartuje PC

TFC http://oldtimer.geekstogo.com/TFC.exe

• Stahnete a spustte
• Kliknete na Start a potvrdte OK
• Program uklidi a restartuje pc
• Po pouziti utilitu smazte

Stahnete Ccleaner (viz muj podpis), pri instalaci dejte fajfku pryc u google toolbaru
Panel čistič

• Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

• dejte Hledej problémy
• nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
• postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

• Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za 14 dni

A pokud nejsou problemy a ani dotazy, je to z me strany vse

[janyf]

bolo tam niečo co mohlo sposobit zablokovanie internetu , či to bola náhoda ? ( zablokovanie windowsovych služieb )

[vyosek]

Bylo tam toho hooodne od trojanu az po rootkit...

[janyf]

hmm tak vyzera ze je to v pohode , dakujem za pomoc , este ale otazka preco sme zablokovali rezidentný štít spyware terminatoru ?

[vyosek]

Jelikoz by byl v kolizi s rezidentnim stitem ESETu - mohlo by dochazet ke zpomalovani az padum systemu...Clanek o tom je zde http://viry.cz/forum/viewtopic.php?f=29&t=2780

[janyf]

hmm ale eset je uz prec tak nebude vhodne to opäť zapnúť ? , či sa to týka aj aviry ? , (ten konflikt )

[vyosek]

Pokud jste cetl ten clanek, tak byste se docetl ze nesmi byt v systemu dva rezindetni stity, takze jej taktez nechte vypnuty...

[janyf]

clanok som cital ale je fakt ze az potom ako som postol odpoved ,
v každom prípade sa chcem podakovat za korektný prístup a za pomoc , napísal by som dovidenia ale dúfam že ma vírusy budú opat aspon 1 a pol roka obchádzat , takže len poprajem vela štastia a trpezlivosti s dalšími problémami a vela úspechov pri odstranovaní háveďe

[vyosek]

Nemate zac, rad jsem pomohl Muzete sem zajit klidne i jen na preventivku Zase nekdy