PC-HELP.CZ

Tato hláška se mi zobrazuje startu PC.Odklikávám ji asi půl minuty.Poprvé se objevila po upgradu na IE7 a aktualizaci Windows. V Outlook Express(6) mi nejde tisknutí zpráv. Místo toho se objeví zase tato hláška.Jinak je plocha hlášky prázdná: řádek:-,znak:-,chyba:-,kod:-,URL:- atd.Chcete na této stránce i nadále spouštět skripty?Může někdo poradit?Win XP Pro SP2. Přeinstaloval jsem IE7 a nic.Jak odinstalovat a znovu nainstalovat OE6?

Možná tam máš nějakého parazita. Projeď počítač antivirem. Log z HJT s MWAV také nebude k zahození. Návody, instalačky najdeš na tomto foru v kategorii "HijackThis"

Zkoušel jsem NOD32, AD-AWARE, Spyware terminator. Přidávám hijackthis, nebo to má dát jinam?
Logfile of HijackThis v1.99.1
Scan saved at 18:34:39, on 16.10.2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)

Running processes:
C:\windows\System32\smss.exe
C:\windows\system32\winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\svchost.exe
C:\windows\System32\svchost.exe
C:\WINDOWS\system32\brsvc01a.exe
C:\windows\system32\spoolsv.exe
C:\WINDOWS\system32\brss01a.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\ATKKBService.exe
C:\WINDOWS\system32\CTSvcCDA.EXE
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Eset\nod32krn.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
C:\windows\system32\nvsvc32.exe
C:\Program Files\CyberLink\Shared files\RichVideo.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\windows\system32\svchost.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\windows\Explorer.EXE
C:\Program Files\ASUS\AI Nap\AiNap.exe
C:\Program Files\ASUS\AI Gear\GearHelp.exe
C:\Program Files\ASUS\GamerOSD\GamerOSD.exe
C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe
C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE
C:\windows\CTHELPER.EXE
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
C:\Program Files\Brother\ControlCenter2\brctrcen.exe
C:\windows\system32\RUNDLL32.EXE
C:\Program Files\Eset\nod32kui.exe
C:\windows\system32\ctfmon.exe
C:\Program Files\ASUS\SmartDoctor\SmartDoctor.exe
C:\Program Files\Creative\MediaSource\RemoteControl\RCMan.EXE
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\DAEMON Tools Pro\DTProAgent.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Schmaili84\schmaili.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\ADSL\ADSL USB MODEM\dslmon.exe
C:\Program Files\TechniSat DVB\bin\Server4PC.exe
C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\ts_winlirc.exe
C:\Program Files\TechniSat DVB\bin\Server4PC.exe
C:\Program Files\Opera\Opera.exe
C:\Documents and Settings\-----------\Dokumenty\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O3 - Toolbar: &Crawler lišta - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O4 - HKLM\..\Run: [AsusStartupHelp] C:\Program Files\ASUS\AASP\1.00.15\AsRunHelp.exe
O4 - HKLM\..\Run: [Launch Ai Booster] "C:\Program Files\ASUS\AI Booster\OverClk.exe"
O4 - HKLM\..\Run: [Ai Nap] "C:\Program Files\ASUS\AI Nap\AiNap.exe"
O4 - HKLM\..\Run: [Ai Gear Help] "C:\Program Files\ASUS\AI Gear\GearHelp.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [GamerOSD] C:\Program Files\ASUS\GamerOSD\GamerOSD.exe
O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe /r
O4 - HKLM\..\Run: [CTDVDDET] C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.EXE
O4 - HKLM\..\Run: [SBDrvDet] C:\Program Files\Creative\SB Drive Det\SBDrvDet.exe /r
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [ISUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [PaperPort PTD] C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
O4 - HKLM\..\Run: [IndexSearch] C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe
O4 - HKLM\..\Run: [SetDefPrt] C:\Program Files\Brother\Brmfl05a\BrStDvPt.exe
O4 - HKLM\..\Run: [ControlCenter2.0] C:\Program Files\Brother\ControlCenter2\brctrcen.exe /autorun
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\windows\system32\ctfmon.exe
O4 - HKCU\..\Run: [ASUS SmartDoctor] C:\Program Files\ASUS\SmartDoctor\SmartDoctor.exe /start
O4 - HKCU\..\Run: [RemoteCenter] C:\Program Files\Creative\MediaSource\RemoteControl\RCMan.EXE
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [XPRepairPro2007] C:\Program Files\XP Repair Pro 2007\XPRepairPro.exe /r
O4 - HKCU\..\Run: [DAEMON Tools Pro Agent] "C:\Program Files\DAEMON Tools Pro\DTProAgent.exe"
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [Schmaili] C:\Program Files\Schmaili84\schmaili.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O4 - Global Startup: DSLMON.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Server4PC.lnk = C:\Program Files\TechniSat DVB\bin\Server4PC.exe
O4 - Global Startup: Status Monitor.lnk = C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
O4 - Global Startup: ts_winlirc.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Sportplus - {198E5FDC-8422-4DAF-BB9C-D02DC0B56C36} - http://sportplus.centrum.cz (file missing) (HKCU)
O9 - Extra button: Počasí - {2B2AF957-A7A4-4C7F-BD5C-646AB62B9EE8} - http://pocasi.centrum.cz (file missing) (HKCU)
O9 - Extra button: Centrum.cz - {2EF7E0D5-599B-4A12-8597-E5237384DB7F} - http://www.centrum.cz (file missing) (HKCU)
O9 - Extra button: Slovníky - {53EF887A-23A2-4429-88E5-2F9861974C88} - http://slovniky.centrum.cz (file missing) (HKCU)
O9 - Extra button: Supermapy - {55B93F40-971D-40D2-8C3F-C8B977AA652F} - http://www.supermapy.cz (file missing) (HKCU)
O9 - Extra button: Aktuálně - {675F40CB-AA53-4AB5-ACC5-AF14125FDD2F} - http://aktualne.centrum.cz (file missing) (HKCU)
O9 - Extra button: Fotoalba - {BB036D6D-BD19-46B8-9157-79DBA796A18F} - http://www.fotoalba.cz (file missing) (HKCU)
O9 - Extra button: Xchat.cz - {D899EF26-E79E-4783-B5DA-066191E9FFEF} - http://www.xchat.cz (file missing) (HKCU)
O9 - Extra button: Žena.cz - {E5B42DED-8388-4C77-AF70-B611906FE3DA} - http://www.zena.cz (file missing) (HKCU)
O9 - Extra button: Bleskově - {F9778BA8-57B6-478A-BA16-9A8738297251} - http://www.bleskove.cz (file missing) (HKCU)
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nvappfilter.dll
O11 - Options group: [INTERNATIONAL] International*
O17 - HKLM\System\CCS\Services\Tcpip\..\{FA037D4B-DA87-403E-94C7-291D3B09CB02}: NameServer = 194.228.41.65 194.228.41.113
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTSvcCDA.EXE
O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe" -k runservice (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: IviRegMgr - InterVideo - C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\windows\system32\nvsvc32.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe

Log z HTJ je v pořádku. Zkus co najde MWAV.

nevím co je MVAW.

Návod je zde na foru : http://www.pc-help.cz/viewtopic.php?t=5125

Už jsem to našel, nejde mi to vložit a odelat: nebyl vložen typ odeslání.

Tue Oct 16 19:48:17 2007 => Objekt "antivirgear Corrupted Adware/Spyware" nalezen v souborovém systému! Provedené akce: Nic
Tue Oct 16 19:48:18 2007 => Objekt "mediaadvantage Spyware/Adware" nalezen v souborovém systému! Provedené akce: Nic nebylo
Tue Oct 16 19:48:20 2007 => Objekt "whenu.savenow Spyware/Adware" nalezen v souborovém systému! Provedené akce: Nic nebylo
Tue Oct 16 19:48:21 2007 => Objekt "titanshield antispyware Corrupted Adware/Spyware" nalezen v souborovém systému! Provedené
Tue Oct 16 19:48:30 2007 => System found infected with clearstream accelerator Spyware/Adware (csa.dll)! Action taken: Nic
Tue Oct 16 19:48:33 2007 => System found infected with clipgenie Spyware/Adware (scroller.swf)! Action taken: Nic nebylo
Tue Oct 16 19:48:33 2007 => System found infected with clearstream accelerator Spyware/Adware (csa.dll)! Action taken: Nic
Tue Oct 16 19:48:33 2007 => System found infected with clearstream accelerator Spyware/Adware (csa.dll)! Action taken: Nic
Tue Oct 16 19:48:34 2007 => System found infected with savingbot shopper Spyware/Adware (foxuser.dbf)! Action taken: Nic
Tue Oct 16 19:48:37 2007 => System found infected with elite toolbar Spyware/Adware (toolbar.exe)! Action taken: Nic nebylo
Tue Oct 16 19:48:37 2007 => System found infected with elite toolbar Spyware/Adware (toolbar.exe)! Action taken: Nic nebylo
Tue Oct 16 19:48:37 2007 => System found infected with uplink Adware (installoptions.dll)! Action taken: Nic nebylo
Tue Oct 16 19:48:56 2007 => System found infected with clearstream accelerator Spyware/Adware (csa.dll)! Action taken: Nic
Tue Oct 16 19:48:57 2007 => System found infected with clipgenie Spyware/Adware (scroller.swf)! Action taken: Nic nebylo
Tue Oct 16 19:48:57 2007 => System found infected with clearstream accelerator Spyware/Adware (csa.dll)! Action taken: Nic
Tue Oct 16 19:48:57 2007 => System found infected with clearstream accelerator Spyware/Adware (csa.dll)! Action taken: Nic
Tue Oct 16 19:48:57 2007 => System found infected with savingbot shopper Spyware/Adware (foxuser.dbf)! Action taken: Nic
Tue Oct 16 19:58:40 2007 => Testování souboru C:\DOCUME~1\JAROSL~1\LOCALS~1\Temp\Spyware.sdb
Tue Oct 16 19:58:42 2007 => Testování souboru C:\DOCUME~1\JAROSL~1\LOCALS~1\Temp\virus.avi
Tue Oct 16 19:48:17 2007 => Objekt "antivirgear Corrupted Adware/Spyware" nalezen v souborovém systému! Provedené akce: Nic
Tue Oct 16 19:47:51 2007 => Testování souboru C:\PROGRA~1\COMMON~1\INTERV~1\RegMgr\IVIREG~1.EXE
Tue Oct 16 19:46:09 2007 => Testování souboru C:\DOCUME~1\JAROSL~1\LOCALS~1\Temp\virus.avi
Tue Oct 16 19:48:17 2007 => Objekt "zlob Trojan" nalezen v souborovém systému! Provedené akce: Nic nebylo provedeno.
Tue Oct 16 19:48:17 2007 => Objekt "zlob Trojan" nalezen v souborovém systému! Provedené akce: Nic nebylo provedeno.
Tue Oct 16 19:48:20 2007 => Objekt "video activex access Trojan" nalezen v souborovém systému! Provedené akce: Nic nebylo
Tue Oct 16 19:48:57 2007 => System found infected with image activex access Trojan
Tue Oct 16 19:48:57 2007 => System found infected with syginre Trojan (C:\svchost.exe)! Action taken: Nic nebylo provedeno.
Tue Oct 16 19:48:57 2007 => System found infected with image activex access Trojan
Tue Oct 16 19:48:57 2007 => System found infected with image activex access Trojan

Zkoušel jsem Kaspersky-smazal 2 treaty a jinak nic. Co s tím?

Máš tam Trojany. Zkus sehnat Barona Prášila nebo Fredika. Pomohou ti vyčistit počítač od virů.

Zkusil jsem kontaktovat barona prášila, díky

sorry,našel sem až dneska.

najdi a smaž C:\svchost.exe