Stránka 1 z 2

Stáhnutí škodlivého viru z MediaFile

Napsal: 30 led 2013 18:01
od Doda
Dobrý den, včera mi kamarád poslal odkaz a já jsem na něj ihned naivně kliknul. Samozřejmě že to byl vir. Ihned mi vyskočila poplašná zpráva od microsoft essential, že je vhodné restartovat počítač. Tak jsem tak učinil, ale počítač už znova nenaběhnul. Mám Windows 7 Home a vždycky, jakmile proběhnou startovací obrazovky (Bios atd.) a začně nabíhat Windows tak se počítač hned restartuje. I když jsem zapnul Opravu, tak mi to napsalo, že windows nedokáže tuto chybu opravit.

Předem děkuji za rady.

Re: Stáhnutí škodlivého viru z MediaFile

Napsal: 30 led 2013 18:20
od Rudy

Re: Stáhnutí škodlivého viru z MediaFile

Napsal: 30 led 2013 18:28
od Doda
Nevím jak dát log RSIT, když mi ani nenaběhne windows...

Re: Stáhnutí škodlivého viru z MediaFile

Napsal: 30 led 2013 19:09
od Rudy
Doda píše:Nevím jak dát log RSIT, když mi ani nenaběhne windows...
Ani nouz. režim?

Re: Stáhnutí škodlivého viru z MediaFile

Napsal: 30 led 2013 19:33
od Doda
Bohužel ani nouzový režim nejde, také se počítač restartuje...

Re: Stáhnutí škodlivého viru z MediaFile

Napsal: 30 led 2013 19:42
od Doda
Nevím jestli vám to pomůže, ale při načítání nouzového režimu se to vždy zastaví u : " Načteno: \windows\system32\DRIVERS\AtiPcie.sys "

Re: Stáhnutí škodlivého viru z MediaFile

Napsal: 30 led 2013 19:44
od Rudy
Pak bude nutná oprava systému z instal. media, pokud se nezdaří, pak reinstal.

Re: Stáhnutí škodlivého viru z MediaFile

Napsal: 30 led 2013 20:19
od Doda
Nějakým zázračným způsobem jsem se dostal do počítače a mám log RSIT. Ale myslím si, že to bude k ničemu, jelikož jako primarní disk mám E a ne C, takže tyto údaje jsou asi k ničemu, jelikož nevím jak mám spustit RSIT pro druhou jednotku (E).

Logfile of random's system information tool 1.09 (written by random/random)
Run by aaa at 2013-01-30 19:10:28
WIN_7 Service Pack 1
System drive C: has 18 GB (4%) free of 477 GB
Total RAM: 3326 MB (73% free)

HijackThis download failed

======Scheduled tasks folder======

C:\Windows\tasks\1-Click Maintenance.job
C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-378153884-3640493154-341954162-1000Core.job
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-378153884-3640493154-341954162-1000UA.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\Norton Security Scan for Admin.job
C:\Windows\tasks\Norton Security Scan for Mamka.job
C:\Windows\tasks\User_Feed_Synchronization-{2835C3AF-82F3-446D-8AA7-6AE38DEC82E8}.job
C:\Windows\tasks\User_Feed_Synchronization-{59BFCE0D-80C2-400E-9ABD-B40C3F0071F0}.job
C:\Windows\tasks\User_Feed_Synchronization-{AEA151A5-F09F-4F87-908D-B8679D05AE6C}.job
C:\Windows\tasks\User_Feed_Synchronization-{D5C84636-2992-4543-99A4-D14395248611}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1631550F-191D-4826-B069-D9439253D926}]
PriceGongBHO Class - C:\Program Files\PriceGong\2.1.0\PriceGongIE.dll [2010-08-18 353656]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-04-04 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{28387537-e3f9-4ed7-860c-11e69af4a8a0}]
MediaBar - C:\PROGRA~1\IMESHA~1\MediaBar\ToolBar\imeshdtxmltbpi.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll [2012-05-29 425680]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{336D0C35-8A85-403a-B9D2-65C292C39087}]
Web Assistant - C:\Program Files\Web Assistant\Extension32.dll [2012-05-08 162816]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{669163c1-c4b9-46de-ad62-a0271d3a0a75}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{66DA2BEF-827C-41DD-DCD7-D1A08417D5E1}]
ADDICT-THING Class - C:\ProgramData\ADDICT-THING\bhoclass.dll [2012-07-03 140800]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99}]
Incredibar.com Helper Object - C:\Program Files\Incredibar.com\incredibar\1.5.11.14\bh\incredibar.dll [2012-01-21 261632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7}]
Funmoods Helper Object - C:\Program Files\Funmoods\funmoods\1.5.11.16\bh\funmoods.dll [2012-01-25 241888]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll [2012-07-05 453544]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 441216]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9421DD08-935F-4701-A9CA-22DF90AC4EA6}]
Easy Photo Print - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll [2008-03-29 266240]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{99079a25-328f-4bd4-be04-00955acaa0a7}]
Searchqu Toolbar - C:\PROGRA~1\WIA6EB~1\ToolBar\searchqudtx.dll [2011-03-02 88976]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9FDDE16B-836F-4806-AB1F-1455CBEFF289}]
Windows Live Messenger Companion Helper - C:\Program Files\Windows Live\Companion\companioncore.dll [2012-03-08 393600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A40DC6C5-79D0-4ca8-A185-8FF989AF1115}]
UrlHelper Class - C:\PROGRA~1\WIA6EB~1\Datamngr\IEBHO.dll [2011-03-02 722840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe PDF Conversion Toolbar Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2012-03-26 349640]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll [2012-07-05 157616]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}]
SmartSelect Class - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2012-03-26 349640]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
{9421DD08-935F-4701-A9CA-22DF90AC4EA6} - Easy Photo Print - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll [2008-03-29 266240]
{99079a25-328f-4bd4-be04-00955acaa0a7} - Searchqu Toolbar - C:\PROGRA~1\WIA6EB~1\ToolBar\searchqudtx.dll [2011-03-02 88976]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2012-03-26 349640]
{28387537-e3f9-4ed7-860c-11e69af4a8a0} - MediaBar - C:\PROGRA~1\IMESHA~1\MediaBar\ToolBar\imeshdtxmltbpi.dll []
{F9639E4A-801B-4843-AEE3-03D9DA199E77} - Incredibar Toolbar - C:\Program Files\Incredibar.com\incredibar\1.5.11.14\incredibarTlbr.dll [2012-01-21 270336]
{A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3} - Funmoods Toolbar - C:\Program Files\Funmoods\funmoods\1.5.11.16\funmoodsTlbr.dll [2012-01-25 251856]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2008-12-11 6703648]
"Monitor"=C:\Windows\PixArt\PAC7311\Monitor.exe [2006-11-03 319488]
"EEventManager"=C:\Program Files\Epson Software\Event Manager\EEventManager.exe [2009-12-03 976320]
"AppleSyncNotifier"=C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [2011-10-06 59240]
"PWRISOVM.EXE"=C:\Program Files\PowerISO\PWRISOVM.EXE [2009-11-09 180224]
""= []
"APSDaemon"=C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [2012-02-20 59240]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2012-03-26 931200]
"LogMeIn Hamachi Ui"=C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe [2011-08-15 1955208]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2012-06-11 641704]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2012-01-17 252296]
"WinampAgent"=C:\Program Files\Winamp\winampa.exe [2009-07-01 37888]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-01-03 843712]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe [2008-02-28 1828136]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OM2_Monitor]
C:\Program Files\OLYMPUS\OLYMPUS Master 2\FirstStart.exe /OM []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Orb]
C:\Program Files\Winamp Remote\bin\OrbTray.exe [2008-04-01 507904]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files\QuickTime\qttask.exe [2012-04-18 421888]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]
C:\Program Files\Winamp\winampa.exe [2009-07-01 37888]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Admin^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.1.lnk]
C:\PROGRA~1\OPENOF~1.ORG\program\QUICKS~1.EXE [2009-05-14 384512]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
GamersFirst LIVE!.lnk - C:\Program Files\GamersFirst\LIVE!\Live.exe
Wireless N-lite USB Adapter Utility.lnk - C:\Program Files\ZyXEL\NWD-270N\Common\NWD-270N.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="c:\progra~1\wia6eb~1\datamngr\datamngr.dll c:\progra~1\wia6eb~1\datamngr\iebho.dll "

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"LogonHoursAction"=2
"DontDisplayLogonHoursWarnings"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"legalnoticetext"=

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"msacm.avis"=ff_acm.acm
"msacm.siren"=sirenacm.dll
"vidc.ffds"=ff_vfw.dll
"vidc.VP60"=C:\Windows\system32\vp6vfw.dll
"vidc.VP61"=C:\Windows\system32\vp6vfw.dll
"vidc.yv12"=yv12vfw.dll
"vidc.XVID"=xvidvfw.dll
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux4"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"aux5"=wdmaud.drv
"VIDC.FMVC"=fmcodec.dll
"vidc.VP62"=vp6vfw.dll
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"aux6"=wdmaud.drv
"vidc.dvsd"=pdvcodec.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-01-30 19:10:28 ----D---- C:\rsit
2013-01-30 19:10:28 ----D---- C:\Program Files\trend micro

======List of files/folders modified in the last 1 month======

2013-01-30 19:10:28 ----D---- C:\Program Files
2013-01-30 19:10:22 ----D---- C:\Windows\Temp
2013-01-30 19:09:53 ----D---- C:\Windows\System32
2013-01-30 19:09:53 ----D---- C:\Windows\inf
2013-01-30 19:09:53 ----A---- C:\Windows\system32\PerfStringBackup.INI

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2012-03-20 171064]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R1 SCDEmu;SCDEmu; C:\Windows\system32\drivers\SCDEmu.sys [2009-11-09 59388]
R1 VBoxDrv;VirtualBox Service; C:\Windows\system32\DRIVERS\VBoxDrv.sys [2010-12-22 158736]
R1 VBoxUSBMon;VirtualBox USB Monitor Driver; C:\Windows\system32\DRIVERS\VBoxUSBMon.sys [2010-12-22 42960]
R1 VD_FileDisk;VD_FileDisk; C:\Windows\system32\drivers\VD_FileDisk.sys [2006-01-13 15872]
R2 AODDriver4.01;AODDriver4.01; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\i386\AODDriver2.sys [2012-03-05 45184]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2010-10-27 25888]
R2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
R2 WinFLdrv;WinFLdrv; C:\Windows\system32\WinFLdrv.sys [2010-09-29 17984]
R3 Afc;PPdus ASPI Shell; C:\Windows\system32\drivers\Afc.sys [2005-02-23 11776]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW73.sys [2012-02-23 86544]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2009-05-18 26600]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2008-12-11 2250272]
R3 PAC7311;VGA USB Camera; C:\Windows\system32\DRIVERS\PA707UCM.SYS [2006-11-08 530304]
S0 prohlp02;StarForce Protection Helper Driver v2; C:\Windows\System32\drivers\prohlp02.sys [2004-05-13 111808]
S0 prosync1;StarForce Protection Synchronization Driver v1; C:\Windows\System32\drivers\prosync1.sys [2003-09-06 6944]
S0 sfhlp01;StarForce Protection Helper Driver; C:\Windows\System32\drivers\sfhlp01.sys [2003-12-01 4832]
S0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2011-01-04 436792]
S1 MpKsl0253bed9;MpKsl0253bed9; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{DCEFE2BC-B861-450F-A063-8F75C4B9B827}\MpKsl0253bed9.sys [2012-08-22 29904]
S1 MpKsl95f32134;MpKsl95f32134; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{DCEFE2BC-B861-450F-A063-8F75C4B9B827}\MpKsl95f32134.sys [2012-08-07 29904]
S1 MpKsla6907a22;MpKsla6907a22; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{DCEFE2BC-B861-450F-A063-8F75C4B9B827}\MpKsla6907a22.sys [2012-08-07 29904]
S1 MpKslb1ffcf18;MpKslb1ffcf18; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{DCEFE2BC-B861-450F-A063-8F75C4B9B827}\MpKslb1ffcf18.sys [2012-08-20 29904]
S1 MpKsldeb4533d;MpKsldeb4533d; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{DCEFE2BC-B861-450F-A063-8F75C4B9B827}\MpKsldeb4533d.sys [2012-08-21 29904]
S1 prodrv06;StarForce Protection Environment Driver v6; C:\Windows\System32\drivers\prodrv06.sys [2004-05-13 79488]
S2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2010-10-27 278984]
S3 3xHybrid;3xHybrid service; C:\Windows\system32\DRIVERS\3xHybrid.sys [2007-04-20 674048]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;Ovladač filtru AMD portu AGP; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 amdiox86;AMD IO Driver; C:\Windows\system32\DRIVERS\amdiox86.sys [2010-02-18 37944]
S3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-04-06 9334784]
S3 AmdLLD;AMD Low Level Device Driver; C:\Windows\system32\DRIVERS\AmdLLD.sys [2007-06-29 34304]
S3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2012-04-06 9334784]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 EagleNT;EagleNT; \??\C:\Windows\system32\drivers\EagleNT.sys []
S3 EagleXNt;EagleXNt; \??\C:\Windows\system32\drivers\EagleXNt.sys []
S3 ENTECH;ENTECH; \??\C:\Windows\system32\DRIVERS\ENTECH.sys [2004-10-25 21664]
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2012-03-08 39272]
S3 ggflt;SEMC USB Flash Driver Filter; C:\Windows\system32\DRIVERS\ggflt.sys [2011-11-03 13224]
S3 ggsemc;SEMC USB Flash Driver; C:\Windows\system32\DRIVERS\ggsemc.sys [2011-11-03 25512]
S3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-03-18 26176]
S3 injectDLL;injectDLL; \??\C:\Users\Admin\Desktop\M2Fish 3.0.8\injectDLL.sys []
S3 ivusb;Initio Driver for USB Default Controller; C:\Windows\system32\DRIVERS\ivusb.sys [2010-07-28 25112]
S3 MonitorFunction;Driver for Monitor; C:\Windows\system32\DRIVERS\TVMonitor.sys [2012-03-14 13304]
S3 netr28u;RT2870 USB Wireless LAN Card Driver pro systém Windows Vista; C:\Windows\system32\DRIVERS\netr28u.sys [2009-07-13 657408]
S3 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2012-03-20 74112]
S3 nmwcdnsu;Nokia USB Flashing Phone Parent; C:\Windows\system32\drivers\nmwcdnsu.sys [2011-08-17 137472]
S3 pcouffin;VSO Software pcouffin; C:\Windows\System32\Drivers\pcouffin.sys [2010-01-19 47360]
S3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt86win7.sys [2009-03-01 139776]
S3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2008-10-04 133120]
S3 s1029bus;Sony Ericsson Device 1029 driver (WDM); C:\Windows\system32\DRIVERS\s1029bus.sys [2009-05-25 90280]
S3 s1029mdfl;Sony Ericsson Device 1029 USB WMC Modem Filter; C:\Windows\system32\DRIVERS\s1029mdfl.sys [2009-05-25 15016]
S3 s1029mdm;Sony Ericsson Device 1029 USB WMC Modem Driver; C:\Windows\system32\DRIVERS\s1029mdm.sys [2009-05-25 122280]
S3 s1029mgmt;Sony Ericsson Device 1029 USB WMC Device Management Drivers (WDM); C:\Windows\system32\DRIVERS\s1029mgmt.sys [2009-05-25 115880]
S3 s1029nd5;Sony Ericsson Device 1029 USB Ethernet Emulation (NDIS); C:\Windows\system32\DRIVERS\s1029nd5.sys [2009-05-25 26024]
S3 s1029obex;Sony Ericsson Device 1029 USB WMC OBEX Interface; C:\Windows\system32\DRIVERS\s1029obex.sys [2009-05-25 111912]
S3 s1029unic;Sony Ericsson Device 1029 USB Ethernet Emulation (WDM); C:\Windows\system32\DRIVERS\s1029unic.sys [2009-05-25 116904]
S3 s1039bus;Sony Ericsson Device 1039 driver (WDM); C:\Windows\system32\DRIVERS\s1039bus.sys [2010-03-15 98672]
S3 s1039mdfl;Sony Ericsson Device 1039 USB WMC Modem Filter; C:\Windows\system32\DRIVERS\s1039mdfl.sys [2010-03-15 14960]
S3 s1039mdm;Sony Ericsson Device 1039 USB WMC Modem Driver; C:\Windows\system32\DRIVERS\s1039mdm.sys [2010-03-15 124016]
S3 s1039mgmt;Sony Ericsson Device 1039 USB WMC Device Management Drivers (WDM); C:\Windows\system32\DRIVERS\s1039mgmt.sys [2010-03-15 117872]
S3 s1039nd5;Sony Ericsson Device 1039 USB Ethernet Emulation (NDIS); C:\Windows\system32\DRIVERS\s1039nd5.sys [2010-03-15 25456]
S3 s1039obex;Sony Ericsson Device 1039 USB WMC OBEX Interface; C:\Windows\system32\DRIVERS\s1039obex.sys [2010-03-15 113904]
S3 s1039unic;Sony Ericsson Device 1039 USB Ethernet Emulation (WDM); C:\Windows\system32\DRIVERS\s1039unic.sys [2010-03-15 123504]
S3 SCREAMINGBDRIVER;Screaming Bee Audio; C:\Windows\system32\drivers\screamingbdriver.sys []
S3 sisagp;Filtr SIS sběrnice AGP; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter; C:\Windows\system32\DRIVERS\VBoxNetAdp.sys [2010-12-22 109328]
S3 VBoxNetFlt;VBoxNetFlt Service; C:\Windows\system32\DRIVERS\VBoxNetFlt.sys [2010-12-22 120208]
S3 viaagp;Filtr VIA sběrnice AGP; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ABBYY.Licensing.FineReader.Sprint.9.0;ABBYY FineReader 9.0 Sprint Licensing Service; C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [2009-05-14 759048]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-01-03 63928]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2012-04-06 217600]
R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2012-06-11 291840]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 390504]
R2 EpsonBidirectionalService;EpsonBidirectionalService; C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe [2006-12-19 94208]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2008-02-26 73728]
R2 OMSI download service;Sony Ericsson OMSI download service; C:\Program Files\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe [2009-04-30 90112]
R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2012-01-09 75136]
R2 RalinkRegistryWriter;Ralink Registry Writer; C:\Program Files\ZyXEL\NWD-270N\Common\RaRegistry.exe [2009-07-14 185632]
R2 RelevantKnowledge;RelevantKnowledge; C:\Program Files\RelevantKnowledge\rlservice.exe [2012-02-22 111632]
R2 TomTomHOMEService;TomTomHOMEService; C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe [2012-06-21 92632]
S2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2012-02-26 55144]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate1c9d7e0e2571dc0;Služba Google Update (gupdate1c9d7e0e2571dc0); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-05-18 133104]
S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; C:\Program Files\LogMeIn Hamachi\hamachi-2.exe [2011-08-15 1361288]
S2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2012-03-26 11552]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2012-06-07 160944]
S2 TeamViewer7;TeamViewer 7; C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe [2012-07-16 2673064]
S2 Web Assistant Updater;Web Assistant Updater; C:\Program Files\Web Assistant\ExtensionUpdaterService.exe [2012-05-08 185856]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-08-03 250056]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2009-06-10 31064]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2011-03-29 651720]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2012-03-08 1492840]
S3 getPlusHelper;getPlus(R) Helper; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-05-18 133104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2012-03-27 821608]
S3 NisSrv;NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [2012-03-26 214952]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe [2008-02-28 529704]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2012-06-20 529232]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-06-28 1343400]

-----------------EOF-----------------

Re: Stáhnutí škodlivého viru z MediaFile

Napsal: 30 led 2013 20:31
od Rudy
Udělejte kompletní sken MBAM: http://www.malwarebytes.org/mbam.php a dejte log. Předem nic nemažte.

Re: Stáhnutí škodlivého viru z MediaFile

Napsal: 31 led 2013 06:18
od Doda
Podle vaši rady jsem projel celý počítač MBAM. A tady je log:


Malwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware.) 1.70.0.1100
www.malwarebytes.org

Verze: v2012.12.14.11

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 9.0.8112.16421
aaa :: ADMIN-PC [administrátor]

Ochrana: Povolena

30.1.2013 19:52:11
MBAM-log-2013-01-31 (05-10-04).txt

Typ: Kompletní kontrola (C:\|E:\|)
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 1471376
Uplynulý čas: 5 hodin, 13 minut, 15 sekund

Nalezené procesy v paměti: 1
C:\Program Files\RelevantKnowledge\rlservice.exe (PUP.Adware.RelevantKnowledge) -> 1984 -> Nebyla provedena žádná instrukce.

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 48
HKLM\SYSTEM\CurrentControlSet\Services\RelevantKnowledge (PUP.Adware.RelevantKnowledge) -> Nebyla provedena žádná instrukce.
HKCR\CLSID\{75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7} (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
HKCR\TypeLib\{09C554C3-109B-483C-A06B-F14172F1A947} (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
HKCR\Interface\{A9379648-F6EB-4F65-A624-1C10411A15D0} (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
HKCR\funmoods.funmoodsHlpr.1 (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
HKCR\funmoods.funmoodsHlpr (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7} (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
HKCR\CLSID\{66DA2BEF-827C-41DD-DCD7-D1A08417D5E1} (PUP.DownloadnSave) -> Nebyla provedena žádná instrukce.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{66DA2BEF-827C-41DD-DCD7-D1A08417D5E1} (PUP.DownloadnSave) -> Nebyla provedena žádná instrukce.
HKCR\TypeLib\{C2CF0D01-7657-48AA-98C9-AE5E64757FCC} (PUP.DownloadnSave) -> Nebyla provedena žádná instrukce.
HKCR\Interface\{BBA74401-6D6F-4BBD-9F65-E8623814F3BB} (PUP.DownloadnSave) -> Nebyla provedena žádná instrukce.
HKCR\CLSID\{147A976F-EEE1-4377-8EA7-4716E4CDD239} (PUP.MyWebSearch) -> Nebyla provedena žádná instrukce.
HKCR\CLSID\{75A4D144-506D-4BE5-81DB-EC7DA1E7F840} (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
HKCR\TypeLib\{960DF771-CFCB-4E53-A5B5-6EF2BBE6E706} (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
HKCR\esrv.funmoodsESrvc.1 (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
HKCR\esrv.funmoodsESrvc (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
HKCR\CLSID\{965B9DBE-B104-44AC-950A-8A5F97AFF439} (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
HKCR\escort.escortIEPane.1 (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
HKCR\escort.escortIEPane (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
HKCR\CLSID\{A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3} (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
HKCR\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921} (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
HKCR\funmoods.dskBnd.1 (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
HKCR\funmoods.dskBnd (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3} (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
HKCR\CLSID\{A9DB719C-7156-415E-B49D-BAD039DE4F13} (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
HKCR\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800} (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
HKCR\funmoodsApp.appCore.1 (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
HKCR\funmoodsApp.appCore (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
HKCR\CLSID\{F03FD9D0-4F2B-497C-8A71-DD41D70B07D9} (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
HKCR\f (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
HKCR\Typelib\{1D085C0A-E4F4-4F66-BDBF-4BE51015BFC3} (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
HKCR\Interface\{0D80F1C5-D17B-4177-AC68-955F3EF9F191} (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{59C7FC09-1C83-4648-B3E6-003D2BBC7481} (PUP.MyWebSearch) -> Nebyla provedena žádná instrukce.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68AF847F-6E91-45dd-9B68-D6A12C30E5D7} (PUP.MyWebSearch) -> Nebyla provedena žádná instrukce.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9170B96C-28D4-4626-8358-27E6CAEEF907} (PUP.MyWebSearch) -> Nebyla provedena žádná instrukce.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C87FC351-A80D-43E9-9A86-CF1E29DC443A} (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D1A71FA0-FF48-48dd-9B6D-7A13A3E42127} (PUP.MyWebSearch) -> Nebyla provedena žádná instrukce.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DDB1968E-EAD6-40fd-8DAE-FF14757F60C7} (PUP.MyWebSearch) -> Nebyla provedena žádná instrukce.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F138D901-86F0-4383-99B6-9CDD406036DA} (PUP.MyWebSearch) -> Nebyla provedena žádná instrukce.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0} (Trojan.Vundo) -> Nebyla provedena žádná instrukce.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\funmoods (PUP.FunMoods) -> Nebyla provedena žádná instrukce.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{d08d9f98-1c78-4704-87e6-368b0023d831} (PUP.Adware.RelevantKnowledge) -> Nebyla provedena žádná instrukce.
HKLM\SOFTWARE\FocusInteractive (PUP.MyWebSearch) -> Nebyla provedena žádná instrukce.
HKLM\SOFTWARE\Fun Web Products (PUP.MyWebSearch) -> Nebyla provedena žádná instrukce.
HKLM\SOFTWARE\MyWebSearch (PUP.MyWebSearch) -> Nebyla provedena žádná instrukce.
HKLM\SOFTWARE\Google\chrome\Extensions\fdloijijlkoblmigdofommgnheckmaki (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\RunDll32Policy\f3ScrCtr.dll (PUP.MyWebSearch) -> Nebyla provedena žádná instrukce.
HKLM\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (PUP.MyWebSearch) -> Nebyla provedena žádná instrukce.

Nalezené hodnoty v registru: 3
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar|{A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3} (PUP.Funmoods) -> Data: Funmoods Toolbar -> Nebyla provedena žádná instrukce.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3} (PUP.Funmoods) -> Data: -> Nebyla provedena žádná instrukce.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\funmoods|UninstallString (PUP.Funmoods) -> Data: "C:\Program Files\Funmoods\funmoods\1.5.11.16\uninstall.exe" -> Nebyla provedena žádná instrukce.

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 13
C:\Program Files\FunWebProducts (PUP.MyWebSearch) -> Nebyla provedena žádná instrukce.
C:\Program Files\FunWebProducts\ScreenSaver (PUP.MyWebSearch) -> Nebyla provedena žádná instrukce.
C:\Program Files\FunWebProducts\ScreenSaver\Images (PUP.MyWebSearch) -> Nebyla provedena žádná instrukce.
C:\Program Files\MyWebSearch (PUP.MyWebSearch) -> Nebyla provedena žádná instrukce.
C:\Program Files\MyWebSearch\bar (PUP.MyWebSearch) -> Nebyla provedena žádná instrukce.
C:\Program Files\MyWebSearch\bar\History (PUP.MyWebSearch) -> Nebyla provedena žádná instrukce.
C:\Program Files\MyWebSearch\bar\Settings (PUP.MyWebSearch) -> Nebyla provedena žádná instrukce.
C:\Program Files\RelevantKnowledge (PUP.Spyware.MarketScore) -> Nebyla provedena žádná instrukce.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RelevantKnowledge (PUP.Spyware.MarketScore) -> Nebyla provedena žádná instrukce.
C:\Program Files\Funmoods (PUP.FunMoods) -> Nebyla provedena žádná instrukce.
C:\Program Files\Funmoods\funmoods (PUP.FunMoods) -> Nebyla provedena žádná instrukce.
C:\Program Files\Funmoods\funmoods\1.5.11.16 (PUP.FunMoods) -> Nebyla provedena žádná instrukce.
C:\Program Files\Funmoods\funmoods\1.5.11.16\bh (PUP.FunMoods) -> Nebyla provedena žádná instrukce.

Nalezené soubory: 63
C:\Program Files\RelevantKnowledge\rlservice.exe (PUP.Adware.RelevantKnowledge) -> Nebyla provedena žádná instrukce.
C:\Program Files\Funmoods\funmoods\1.5.11.16\bh\funmoods.dll (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
C:\ProgramData\ADDICT-THING\bhoclass.dll (PUP.DownloadnSave) -> Nebyla provedena žádná instrukce.
C:\Program Files\Funmoods\funmoods\1.5.11.16\funmoodssrv.exe (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
C:\Program Files\Funmoods\funmoods\1.5.11.16\funmoodsTlbr.dll (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
C:\Program Files\Funmoods\funmoods\1.5.11.16\funmoodsApp.dll (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
C:\Program Files\Funmoods\funmoods\1.5.11.16\funmoodsEng.dll (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
C:\Program Files\Abdio\Abdio PSP Video Converter\AbdioConverter\myutil.dll (Spyware.Passwords) -> Nebyla provedena žádná instrukce.
C:\Program Files\Activision\Call of Duty 2\mint-cod2t.exe (Malware.NSPack) -> Nebyla provedena žádná instrukce.
C:\Program Files\Funmoods\funmoods\1.5.11.16\uninstall.exe (PUP.FunMoods) -> Nebyla provedena žádná instrukce.
C:\Program Files\RelevantKnowledge\rlls.dll (PUP.Adware.RelevantKnowledge) -> Nebyla provedena žádná instrukce.
C:\Program Files\RelevantKnowledge\rlls64.dll (PUP.Adware.RelevantKnowledge) -> Nebyla provedena žádná instrukce.
C:\Program Files\RelevantKnowledge\rlvknlg.exe (PUP.Adware.RelevantKnowledge) -> Nebyla provedena žádná instrukce.
C:\Program Files\RelevantKnowledge\rlvknlg64.exe (PUP.Adware.RelevantKnowledge) -> Nebyla provedena žádná instrukce.
C:\Program Files\Sindicate\sindicate\client.bin (RiskWare.Tool.CK) -> Nebyla provedena žádná instrukce.
C:\ProgramData\OptimizerPro\ix_updater.exe (Trojan.Dropper.H) -> Nebyla provedena žádná instrukce.
C:\Users\Admin\AppData\Local\TempImages\CleanTempsAll.exe (Trojan.Agent) -> Nebyla provedena žádná instrukce.
C:\Users\Admin\AppData\Local\TempImages\USARadioNow.exe (Trojan.BHO) -> Nebyla provedena žádná instrukce.
C:\Users\Admin\AppData\LocalLow\MyWebSearch\bar\setups\mwsautSp.exe (PUP.MyWebSearch) -> Nebyla provedena žádná instrukce.
C:\Users\Admin\Documents\Downloads\WebfettiSetup2.3.67.1.ZKman000.exe (PUP.MyWebSearch) -> Nebyla provedena žádná instrukce.
C:\Users\Filda\FILDA\USDownloader\Plugins\DataCodRu.plg (Trojan.Downloader) -> Nebyla provedena žádná instrukce.
C:\Users\Filda\FILDA\USDownloader\Plugins\PhotoCodRu.plg (Trojan.Downloader) -> Nebyla provedena žádná instrukce.
C:\Users\Filda\FILDA\Counter Strike\GTA-navod\crack\LaunchGTAIV.exe (Packer.ModifiedUPX) -> Nebyla provedena žádná instrukce.
C:\Users\Filda\FILDA\Sindicate\client.bin (RiskWare.Tool.CK) -> Nebyla provedena žádná instrukce.
C:\Users\Filda\FILDA\SKIDROW\ubiorbitapi_r2.dll (Trojan.Agent.CK) -> Nebyla provedena žádná instrukce.
E:\!Stare\Windows.old\Program Files\Abdio\Abdio PSP Video Converter\AbdioConverter\myutil.dll (Spyware.Passwords) -> Nebyla provedena žádná instrukce.
E:\!Stare\Windows.old\Program Files\Activision\Call of Duty 2\mint-cod2t.exe (Malware.NSPack) -> Nebyla provedena žádná instrukce.
E:\!Stare\Windows.old\Program Files\Funmoods\funmoods\1.5.11.16\funmoodsApp.dll (PUP.FunMoods) -> Nebyla provedena žádná instrukce.
E:\!Stare\Windows.old\Program Files\Funmoods\funmoods\1.5.11.16\funmoodsEng.dll (PUP.FunMoods) -> Nebyla provedena žádná instrukce.
E:\!Stare\Windows.old\Program Files\Funmoods\funmoods\1.5.11.16\funmoodssrv.exe (PUP.FunMoods) -> Nebyla provedena žádná instrukce.
E:\!Stare\Windows.old\Program Files\Funmoods\funmoods\1.5.11.16\funmoodsTlbr.dll (PUP.FunMoods) -> Nebyla provedena žádná instrukce.
E:\!Stare\Windows.old\Program Files\Funmoods\funmoods\1.5.11.16\uninstall.exe (PUP.FunMoods) -> Nebyla provedena žádná instrukce.
E:\!Stare\Windows.old\Program Files\Funmoods\funmoods\1.5.11.16\bh\funmoods.dll (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
E:\!Stare\Windows.old\Program Files\RelevantKnowledge\rlls.dll (PUP.Adware.RelevantKnowledge) -> Nebyla provedena žádná instrukce.
E:\!Stare\Windows.old\Program Files\RelevantKnowledge\rlls64.dll (PUP.Adware.RelevantKnowledge) -> Nebyla provedena žádná instrukce.
E:\!Stare\Windows.old\Program Files\RelevantKnowledge\rlservice.exe (PUP.Adware.RelevantKnowledge) -> Nebyla provedena žádná instrukce.
E:\!Stare\Windows.old\Program Files\RelevantKnowledge\rlvknlg.exe (PUP.Adware.RelevantKnowledge) -> Nebyla provedena žádná instrukce.
E:\!Stare\Windows.old\Program Files\RelevantKnowledge\rlvknlg64.exe (PUP.Adware.RelevantKnowledge) -> Nebyla provedena žádná instrukce.
E:\!Stare\Windows.old\Program Files\Sindicate\sindicate\client.bin (RiskWare.Tool.CK) -> Nebyla provedena žádná instrukce.
E:\!Stare\Windows.old\ProgramData\ADDICT-THING\bhoclass.dll (PUP.DownloadnSave) -> Nebyla provedena žádná instrukce.
E:\!Stare\Windows.old\ProgramData\OptimizerPro\ix_updater.exe (Trojan.Dropper.H) -> Nebyla provedena žádná instrukce.
E:\!Stare\Windows.old\Users\Admin\AppData\Local\TempImages\CleanTempsAll.exe (Trojan.Agent) -> Nebyla provedena žádná instrukce.
E:\!Stare\Windows.old\Users\Admin\AppData\Local\TempImages\USARadioNow.exe (Trojan.BHO) -> Nebyla provedena žádná instrukce.
E:\!Stare\Windows.old\Users\Admin\AppData\LocalLow\MyWebSearch\bar\setups\mwsautSp.exe (PUP.MyWebSearch) -> Nebyla provedena žádná instrukce.
E:\!Stare\Windows.old\Users\Admin\Documents\Downloads\WebfettiSetup2.3.67.1.ZKman000.exe (PUP.MyWebSearch) -> Nebyla provedena žádná instrukce.
E:\!Stare\Windows.old\Users\Filda\FILDA\USDownloader\Plugins\DataCodRu.plg (Trojan.Downloader) -> Nebyla provedena žádná instrukce.
E:\!Stare\Windows.old\Users\Filda\FILDA\USDownloader\Plugins\PhotoCodRu.plg (Trojan.Downloader) -> Nebyla provedena žádná instrukce.
E:\!Stare\Windows.old\Users\Filda\FILDA\Counter Strike\GTA-navod\crack\LaunchGTAIV.exe (Packer.ModifiedUPX) -> Nebyla provedena žádná instrukce.
E:\!Stare\Windows.old\Users\Filda\FILDA\Sindicate\client.bin (RiskWare.Tool.CK) -> Nebyla provedena žádná instrukce.
E:\!Stare\Windows.old\Users\Filda\FILDA\SKIDROW\ubiorbitapi_r2.dll (Trojan.Agent.CK) -> Nebyla provedena žádná instrukce.
E:\Users\aaa\AppData\Local\Temp\ekipmbcvl.exe (PUP.BitMiner) -> Nebyla provedena žádná instrukce.
E:\Users\aaa\Desktop\Patch_Vegas.Movie.Studio.HD.Platinum.10.0.exe (PUP.Hacktool.Patcher) -> Nebyla provedena žádná instrukce.
C:\Users\Public\Desktop\MP3 Downloader.lnk (Rogue.Link) -> Nebyla provedena žádná instrukce.
C:\Program Files\MyWebSearch\bar\Settings\s_pid.dat (PUP.MyWebSearch) -> Nebyla provedena žádná instrukce.
C:\Program Files\RelevantKnowledge\ncncf.dat (PUP.Spyware.MarketScore) -> Nebyla provedena žádná instrukce.
C:\Program Files\RelevantKnowledge\nscf.dat (PUP.Spyware.MarketScore) -> Nebyla provedena žádná instrukce.
C:\Program Files\RelevantKnowledge\rloci.bin (PUP.Spyware.MarketScore) -> Nebyla provedena žádná instrukce.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RelevantKnowledge\About RelevantKnowledge.lnk (PUP.Spyware.MarketScore) -> Nebyla provedena žádná instrukce.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RelevantKnowledge\Member of GRID - Goodware Repository Information Database.lnk (PUP.Spyware.MarketScore) -> Nebyla provedena žádná instrukce.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RelevantKnowledge\Privacy Policy and User License Agreement.lnk (PUP.Spyware.MarketScore) -> Nebyla provedena žádná instrukce.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RelevantKnowledge\Support.lnk (PUP.Spyware.MarketScore) -> Nebyla provedena žádná instrukce.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RelevantKnowledge\Uninstall Instructions.lnk (PUP.Spyware.MarketScore) -> Nebyla provedena žádná instrukce.
C:\Program Files\Funmoods\funmoods\1.5.11.16\funmoodsOEM.crx (PUP.FunMoods) -> Nebyla provedena žádná instrukce.

(konec)

Re: Stáhnutí škodlivého viru z MediaFile

Napsal: 31 led 2013 06:19
od Doda
Podle vaši rady jsem projel celý počítač MBAM. A tady je ten log:


Malwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware.) 1.70.0.1100
http://www.malwarebytes.org

Verze: v2012.12.14.11

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 9.0.8112.16421
aaa :: ADMIN-PC [administrátor]

Ochrana: Povolena

30.1.2013 19:52:11
MBAM-log-2013-01-31 (05-10-04).txt

Typ: Kompletní kontrola (C:\|E:\|)
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 1471376
Uplynulý čas: 5 hodin, 13 minut, 15 sekund

Nalezené procesy v paměti: 1
C:\Program Files\RelevantKnowledge\rlservice.exe (PUP.Adware.RelevantKnowledge) -> 1984 -> Nebyla provedena žádná instrukce.

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 48
HKLM\SYSTEM\CurrentControlSet\Services\RelevantKnowledge (PUP.Adware.RelevantKnowledge) -> Nebyla provedena žádná instrukce.
HKCR\CLSID\{75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7} (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
HKCR\TypeLib\{09C554C3-109B-483C-A06B-F14172F1A947} (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
HKCR\Interface\{A9379648-F6EB-4F65-A624-1C10411A15D0} (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
HKCR\funmoods.funmoodsHlpr.1 (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
HKCR\funmoods.funmoodsHlpr (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7} (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
HKCR\CLSID\{66DA2BEF-827C-41DD-DCD7-D1A08417D5E1} (PUP.DownloadnSave) -> Nebyla provedena žádná instrukce.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{66DA2BEF-827C-41DD-DCD7-D1A08417D5E1} (PUP.DownloadnSave) -> Nebyla provedena žádná instrukce.
HKCR\TypeLib\{C2CF0D01-7657-48AA-98C9-AE5E64757FCC} (PUP.DownloadnSave) -> Nebyla provedena žádná instrukce.
HKCR\Interface\{BBA74401-6D6F-4BBD-9F65-E8623814F3BB} (PUP.DownloadnSave) -> Nebyla provedena žádná instrukce.
HKCR\CLSID\{147A976F-EEE1-4377-8EA7-4716E4CDD239} (PUP.MyWebSearch) -> Nebyla provedena žádná instrukce.
HKCR\CLSID\{75A4D144-506D-4BE5-81DB-EC7DA1E7F840} (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
HKCR\TypeLib\{960DF771-CFCB-4E53-A5B5-6EF2BBE6E706} (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
HKCR\esrv.funmoodsESrvc.1 (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
HKCR\esrv.funmoodsESrvc (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
HKCR\CLSID\{965B9DBE-B104-44AC-950A-8A5F97AFF439} (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
HKCR\escort.escortIEPane.1 (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
HKCR\escort.escortIEPane (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
HKCR\CLSID\{A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3} (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
HKCR\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921} (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
HKCR\funmoods.dskBnd.1 (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
HKCR\funmoods.dskBnd (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3} (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
HKCR\CLSID\{A9DB719C-7156-415E-B49D-BAD039DE4F13} (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
HKCR\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800} (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
HKCR\funmoodsApp.appCore.1 (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
HKCR\funmoodsApp.appCore (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
HKCR\CLSID\{F03FD9D0-4F2B-497C-8A71-DD41D70B07D9} (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
HKCR\f (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
HKCR\Typelib\{1D085C0A-E4F4-4F66-BDBF-4BE51015BFC3} (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
HKCR\Interface\{0D80F1C5-D17B-4177-AC68-955F3EF9F191} (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{59C7FC09-1C83-4648-B3E6-003D2BBC7481} (PUP.MyWebSearch) -> Nebyla provedena žádná instrukce.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68AF847F-6E91-45dd-9B68-D6A12C30E5D7} (PUP.MyWebSearch) -> Nebyla provedena žádná instrukce.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9170B96C-28D4-4626-8358-27E6CAEEF907} (PUP.MyWebSearch) -> Nebyla provedena žádná instrukce.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C87FC351-A80D-43E9-9A86-CF1E29DC443A} (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D1A71FA0-FF48-48dd-9B6D-7A13A3E42127} (PUP.MyWebSearch) -> Nebyla provedena žádná instrukce.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DDB1968E-EAD6-40fd-8DAE-FF14757F60C7} (PUP.MyWebSearch) -> Nebyla provedena žádná instrukce.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F138D901-86F0-4383-99B6-9CDD406036DA} (PUP.MyWebSearch) -> Nebyla provedena žádná instrukce.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0} (Trojan.Vundo) -> Nebyla provedena žádná instrukce.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\funmoods (PUP.FunMoods) -> Nebyla provedena žádná instrukce.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{d08d9f98-1c78-4704-87e6-368b0023d831} (PUP.Adware.RelevantKnowledge) -> Nebyla provedena žádná instrukce.
HKLM\SOFTWARE\FocusInteractive (PUP.MyWebSearch) -> Nebyla provedena žádná instrukce.
HKLM\SOFTWARE\Fun Web Products (PUP.MyWebSearch) -> Nebyla provedena žádná instrukce.
HKLM\SOFTWARE\MyWebSearch (PUP.MyWebSearch) -> Nebyla provedena žádná instrukce.
HKLM\SOFTWARE\Google\chrome\Extensions\fdloijijlkoblmigdofommgnheckmaki (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\RunDll32Policy\f3ScrCtr.dll (PUP.MyWebSearch) -> Nebyla provedena žádná instrukce.
HKLM\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (PUP.MyWebSearch) -> Nebyla provedena žádná instrukce.

Nalezené hodnoty v registru: 3
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar|{A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3} (PUP.Funmoods) -> Data: Funmoods Toolbar -> Nebyla provedena žádná instrukce.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3} (PUP.Funmoods) -> Data: -> Nebyla provedena žádná instrukce.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\funmoods|UninstallString (PUP.Funmoods) -> Data: "C:\Program Files\Funmoods\funmoods\1.5.11.16\uninstall.exe" -> Nebyla provedena žádná instrukce.

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 13
C:\Program Files\FunWebProducts (PUP.MyWebSearch) -> Nebyla provedena žádná instrukce.
C:\Program Files\FunWebProducts\ScreenSaver (PUP.MyWebSearch) -> Nebyla provedena žádná instrukce.
C:\Program Files\FunWebProducts\ScreenSaver\Images (PUP.MyWebSearch) -> Nebyla provedena žádná instrukce.
C:\Program Files\MyWebSearch (PUP.MyWebSearch) -> Nebyla provedena žádná instrukce.
C:\Program Files\MyWebSearch\bar (PUP.MyWebSearch) -> Nebyla provedena žádná instrukce.
C:\Program Files\MyWebSearch\bar\History (PUP.MyWebSearch) -> Nebyla provedena žádná instrukce.
C:\Program Files\MyWebSearch\bar\Settings (PUP.MyWebSearch) -> Nebyla provedena žádná instrukce.
C:\Program Files\RelevantKnowledge (PUP.Spyware.MarketScore) -> Nebyla provedena žádná instrukce.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RelevantKnowledge (PUP.Spyware.MarketScore) -> Nebyla provedena žádná instrukce.
C:\Program Files\Funmoods (PUP.FunMoods) -> Nebyla provedena žádná instrukce.
C:\Program Files\Funmoods\funmoods (PUP.FunMoods) -> Nebyla provedena žádná instrukce.
C:\Program Files\Funmoods\funmoods\1.5.11.16 (PUP.FunMoods) -> Nebyla provedena žádná instrukce.
C:\Program Files\Funmoods\funmoods\1.5.11.16\bh (PUP.FunMoods) -> Nebyla provedena žádná instrukce.

Nalezené soubory: 63
C:\Program Files\RelevantKnowledge\rlservice.exe (PUP.Adware.RelevantKnowledge) -> Nebyla provedena žádná instrukce.
C:\Program Files\Funmoods\funmoods\1.5.11.16\bh\funmoods.dll (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
C:\ProgramData\ADDICT-THING\bhoclass.dll (PUP.DownloadnSave) -> Nebyla provedena žádná instrukce.
C:\Program Files\Funmoods\funmoods\1.5.11.16\funmoodssrv.exe (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
C:\Program Files\Funmoods\funmoods\1.5.11.16\funmoodsTlbr.dll (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
C:\Program Files\Funmoods\funmoods\1.5.11.16\funmoodsApp.dll (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
C:\Program Files\Funmoods\funmoods\1.5.11.16\funmoodsEng.dll (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
C:\Program Files\Abdio\Abdio PSP Video Converter\AbdioConverter\myutil.dll (Spyware.Passwords) -> Nebyla provedena žádná instrukce.
C:\Program Files\Activision\Call of Duty 2\mint-cod2t.exe (Malware.NSPack) -> Nebyla provedena žádná instrukce.
C:\Program Files\Funmoods\funmoods\1.5.11.16\uninstall.exe (PUP.FunMoods) -> Nebyla provedena žádná instrukce.
C:\Program Files\RelevantKnowledge\rlls.dll (PUP.Adware.RelevantKnowledge) -> Nebyla provedena žádná instrukce.
C:\Program Files\RelevantKnowledge\rlls64.dll (PUP.Adware.RelevantKnowledge) -> Nebyla provedena žádná instrukce.
C:\Program Files\RelevantKnowledge\rlvknlg.exe (PUP.Adware.RelevantKnowledge) -> Nebyla provedena žádná instrukce.
C:\Program Files\RelevantKnowledge\rlvknlg64.exe (PUP.Adware.RelevantKnowledge) -> Nebyla provedena žádná instrukce.
C:\Program Files\Sindicate\sindicate\client.bin (RiskWare.Tool.CK) -> Nebyla provedena žádná instrukce.
C:\ProgramData\OptimizerPro\ix_updater.exe (Trojan.Dropper.H) -> Nebyla provedena žádná instrukce.
C:\Users\Admin\AppData\Local\TempImages\CleanTempsAll.exe (Trojan.Agent) -> Nebyla provedena žádná instrukce.
C:\Users\Admin\AppData\Local\TempImages\USARadioNow.exe (Trojan.BHO) -> Nebyla provedena žádná instrukce.
C:\Users\Admin\AppData\LocalLow\MyWebSearch\bar\setups\mwsautSp.exe (PUP.MyWebSearch) -> Nebyla provedena žádná instrukce.
C:\Users\Admin\Documents\Downloads\WebfettiSetup2.3.67.1.ZKman000.exe (PUP.MyWebSearch) -> Nebyla provedena žádná instrukce.
C:\Users\Filda\FILDA\USDownloader\Plugins\DataCodRu.plg (Trojan.Downloader) -> Nebyla provedena žádná instrukce.
C:\Users\Filda\FILDA\USDownloader\Plugins\PhotoCodRu.plg (Trojan.Downloader) -> Nebyla provedena žádná instrukce.
C:\Users\Filda\FILDA\Counter Strike\GTA-navod\crack\LaunchGTAIV.exe (Packer.ModifiedUPX) -> Nebyla provedena žádná instrukce.
C:\Users\Filda\FILDA\Sindicate\client.bin (RiskWare.Tool.CK) -> Nebyla provedena žádná instrukce.
C:\Users\Filda\FILDA\SKIDROW\ubiorbitapi_r2.dll (Trojan.Agent.CK) -> Nebyla provedena žádná instrukce.
E:\!Stare\Windows.old\Program Files\Abdio\Abdio PSP Video Converter\AbdioConverter\myutil.dll (Spyware.Passwords) -> Nebyla provedena žádná instrukce.
E:\!Stare\Windows.old\Program Files\Activision\Call of Duty 2\mint-cod2t.exe (Malware.NSPack) -> Nebyla provedena žádná instrukce.
E:\!Stare\Windows.old\Program Files\Funmoods\funmoods\1.5.11.16\funmoodsApp.dll (PUP.FunMoods) -> Nebyla provedena žádná instrukce.
E:\!Stare\Windows.old\Program Files\Funmoods\funmoods\1.5.11.16\funmoodsEng.dll (PUP.FunMoods) -> Nebyla provedena žádná instrukce.
E:\!Stare\Windows.old\Program Files\Funmoods\funmoods\1.5.11.16\funmoodssrv.exe (PUP.FunMoods) -> Nebyla provedena žádná instrukce.
E:\!Stare\Windows.old\Program Files\Funmoods\funmoods\1.5.11.16\funmoodsTlbr.dll (PUP.FunMoods) -> Nebyla provedena žádná instrukce.
E:\!Stare\Windows.old\Program Files\Funmoods\funmoods\1.5.11.16\uninstall.exe (PUP.FunMoods) -> Nebyla provedena žádná instrukce.
E:\!Stare\Windows.old\Program Files\Funmoods\funmoods\1.5.11.16\bh\funmoods.dll (PUP.Funmoods) -> Nebyla provedena žádná instrukce.
E:\!Stare\Windows.old\Program Files\RelevantKnowledge\rlls.dll (PUP.Adware.RelevantKnowledge) -> Nebyla provedena žádná instrukce.
E:\!Stare\Windows.old\Program Files\RelevantKnowledge\rlls64.dll (PUP.Adware.RelevantKnowledge) -> Nebyla provedena žádná instrukce.
E:\!Stare\Windows.old\Program Files\RelevantKnowledge\rlservice.exe (PUP.Adware.RelevantKnowledge) -> Nebyla provedena žádná instrukce.
E:\!Stare\Windows.old\Program Files\RelevantKnowledge\rlvknlg.exe (PUP.Adware.RelevantKnowledge) -> Nebyla provedena žádná instrukce.
E:\!Stare\Windows.old\Program Files\RelevantKnowledge\rlvknlg64.exe (PUP.Adware.RelevantKnowledge) -> Nebyla provedena žádná instrukce.
E:\!Stare\Windows.old\Program Files\Sindicate\sindicate\client.bin (RiskWare.Tool.CK) -> Nebyla provedena žádná instrukce.
E:\!Stare\Windows.old\ProgramData\ADDICT-THING\bhoclass.dll (PUP.DownloadnSave) -> Nebyla provedena žádná instrukce.
E:\!Stare\Windows.old\ProgramData\OptimizerPro\ix_updater.exe (Trojan.Dropper.H) -> Nebyla provedena žádná instrukce.
E:\!Stare\Windows.old\Users\Admin\AppData\Local\TempImages\CleanTempsAll.exe (Trojan.Agent) -> Nebyla provedena žádná instrukce.
E:\!Stare\Windows.old\Users\Admin\AppData\Local\TempImages\USARadioNow.exe (Trojan.BHO) -> Nebyla provedena žádná instrukce.
E:\!Stare\Windows.old\Users\Admin\AppData\LocalLow\MyWebSearch\bar\setups\mwsautSp.exe (PUP.MyWebSearch) -> Nebyla provedena žádná instrukce.
E:\!Stare\Windows.old\Users\Admin\Documents\Downloads\WebfettiSetup2.3.67.1.ZKman000.exe (PUP.MyWebSearch) -> Nebyla provedena žádná instrukce.
E:\!Stare\Windows.old\Users\Filda\FILDA\USDownloader\Plugins\DataCodRu.plg (Trojan.Downloader) -> Nebyla provedena žádná instrukce.
E:\!Stare\Windows.old\Users\Filda\FILDA\USDownloader\Plugins\PhotoCodRu.plg (Trojan.Downloader) -> Nebyla provedena žádná instrukce.
E:\!Stare\Windows.old\Users\Filda\FILDA\Counter Strike\GTA-navod\crack\LaunchGTAIV.exe (Packer.ModifiedUPX) -> Nebyla provedena žádná instrukce.
E:\!Stare\Windows.old\Users\Filda\FILDA\Sindicate\client.bin (RiskWare.Tool.CK) -> Nebyla provedena žádná instrukce.
E:\!Stare\Windows.old\Users\Filda\FILDA\SKIDROW\ubiorbitapi_r2.dll (Trojan.Agent.CK) -> Nebyla provedena žádná instrukce.
E:\Users\aaa\AppData\Local\Temp\ekipmbcvl.exe (PUP.BitMiner) -> Nebyla provedena žádná instrukce.
E:\Users\aaa\Desktop\Patch_Vegas.Movie.Studio.HD.Platinum.10.0.exe (PUP.Hacktool.Patcher) -> Nebyla provedena žádná instrukce.
C:\Users\Public\Desktop\MP3 Downloader.lnk (Rogue.Link) -> Nebyla provedena žádná instrukce.
C:\Program Files\MyWebSearch\bar\Settings\s_pid.dat (PUP.MyWebSearch) -> Nebyla provedena žádná instrukce.
C:\Program Files\RelevantKnowledge\ncncf.dat (PUP.Spyware.MarketScore) -> Nebyla provedena žádná instrukce.
C:\Program Files\RelevantKnowledge\nscf.dat (PUP.Spyware.MarketScore) -> Nebyla provedena žádná instrukce.
C:\Program Files\RelevantKnowledge\rloci.bin (PUP.Spyware.MarketScore) -> Nebyla provedena žádná instrukce.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RelevantKnowledge\About RelevantKnowledge.lnk (PUP.Spyware.MarketScore) -> Nebyla provedena žádná instrukce.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RelevantKnowledge\Member of GRID - Goodware Repository Information Database.lnk (PUP.Spyware.MarketScore) -> Nebyla provedena žádná instrukce.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RelevantKnowledge\Privacy Policy and User License Agreement.lnk (PUP.Spyware.MarketScore) -> Nebyla provedena žádná instrukce.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RelevantKnowledge\Support.lnk (PUP.Spyware.MarketScore) -> Nebyla provedena žádná instrukce.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RelevantKnowledge\Uninstall Instructions.lnk (PUP.Spyware.MarketScore) -> Nebyla provedena žádná instrukce.
C:\Program Files\Funmoods\funmoods\1.5.11.16\funmoodsOEM.crx (PUP.FunMoods) -> Nebyla provedena žádná instrukce.

(konec)

Re: Stáhnutí škodlivého viru z MediaFile

Napsal: 31 led 2013 14:47
od Doda
Zkontoluje mi to někdo prosím ?? A případně poradíte další postup ?

Re: Stáhnutí škodlivého viru z MediaFile

Napsal: 31 led 2013 18:36
od Rudy
Vše, co MBAM nalezl, smažte.

Re: Stáhnutí škodlivého viru z MediaFile

Napsal: 04 úno 2013 16:59
od Doda
Vše jsem smazal, ale stále nic...

Re: Stáhnutí škodlivého viru z MediaFile

Napsal: 04 úno 2013 19:20
od Rudy
Dejte log ComboFix:
Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware