Problem s windows

[Kofola]

Čau hej mám velký problem....prostě jsem nainstaloval windows a vše v pohodě pak ovladače a antivirus a v pohodě pořád pak jsem resetl pc a začál jsem instalovat hry a další věci.....chvili něco hraji a zachvili mě začnou vyskakovat viry....pak nemůžu už nic spustit tak resetnu pc a nechce se to načíst...načte se to jen po plochu a pak počítač zamrzne a mam jen plochu se šipkou od myši a nic víc nenačte se.....prostě nevim co s tim poradíte mě....byl bych rad

[Reklama]

[ReCall]

Zkus najet do nouzového režimu. Vyčisti komp antivirem, antispyware aj. a vlož sem log z HJT.

[Kofola]

Čau mě poradil kamoš pár věcí.....a zatím mě to jede dobře:-)a snad na pořád

[Kofola]

Tady je ta výsledná kontrola:-)

Logfile of Spyware Terminator v2.2.1.433 (db:2.006.006.000)
Scan Time: 8.6.2008 12:34:20 length: 48 s
Platform: WXP (5.1.0.2600)
User: Admin
Boot Mode: Normal
Scan type: Fast_Spyware_Scan
Scanned Objects: 30412 (Critical:0)
Filter: No System items, No Safe items, No Invalid items

Running Processes
Ati2evxx.exe [ATI Technologies Inc.] : C:\WINDOWS\system32\Ati2evxx.exe
Ati2evxx.exe [ATI Technologies Inc.] : C:\WINDOWS\system32\Ati2evxx.exe
nod32krn.exe [Eset ] : C:\Program Files\Eset\nod32krn.exe
CTSysVol.exe [Creative Technology Ltd] : C:\Program Files\Creative\SBAudigy\Surround Mixer\CTSysVol.exe
Centre.exe [Gemfor s.r.o., Czech Republic] : C:\Program Files\T-Mobile Communication Centre\Centre.exe
NGSpawner.exe : C:\Program Files\GPRSpeed Plus\GPRSpeed Plus Client\NGSpawner.exe
GPRSpeed_c.exe [Flash Networks] : C:\Program Files\GPRSpeed Plus\GPRSpeed Plus Client\GPRSpeed_c.exe
Centre.exe [Gemfor s.r.o., Czech Republic] : C:\Program Files\T-Mobile Communication Centre\Centre.exe

Internet Settings
R - HKCU\Software\Microsoft\Internet Explorer\Main, Search Bar = http://www.crawler.com/search/dispatche ... p=aus&qkw=%s&tbid=60076
R - HKLM\Software\Microsoft\Internet Explorer\Main, SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60076
R - HKLM\Software\Microsoft\Internet Explorer\Main, CustomizeSearch = http://dnl.crawler.com/support/sa_custo ... TbId=60076
R - HKLM\Software\Microsoft\Internet Explorer\Main, Start Page = http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home
R - HKLM\Software\Microsoft\Internet Explorer\Search, SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60076
R - HKLM\Software\Microsoft\Internet Explorer\Search, CustomizeSearch = http://dnl.crawler.com/support/sa_custo ... TbId=60076
R - HKLM\System\CurrentControlSet\Services\Tcpip\Parameters, Domain =
R - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Telephony, DomainName =

StartUps
04 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, T-Mobile Communication Centre : [Gemfor s.r.o., Czech Republic] : C:\Program Files\T-Mobile Communication Centre\Centre.exe
04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, StartCCC : [Advanced Micro Devices, Inc.] : C:\Program Files\ATI TECHNOLOGIES\ATI.ACE\CORE-STATIC\CLISTART.EXE
04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, CTSysVol : [Creative Technology Ltd] : C:\Program Files\Creative\SBAudigy\Surround Mixer\CTSysVol.exe
04 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run, P17Helper : : C:\WINDOWS\system32\P17.dll
04 - Startup: %STARTUPALL%\GPRSpeed Plus Client.lnk : C:\Program Files\GPRSpeed Plus\GPRSpeed Plus Client\NGSpawner.exe

Shell Extensions
NOD32 Context Menu Shell Extension - {B089FE88-FB52-11D3-BDF1-0050DA34150D} - : C:\Program Files\Eset\nodshex.dll
SimpleShlExt Class - {5E2121EE-0300-11D4-8D3B-444553540000} - : C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\atiacmxx.dll
MCLiteShellExt Class - {73B24247-042E-4EF5-ADC2-42F62E6FD654} - : C:\Program Files\ICQLite\ICQLiteShell.dll
WinRAR - {B41DB860-8EE4-11D2-9906-E49FADC173CA} - : C:\Program Files\WinRAR\rarext.dll

Services
23 - [Eset] : C:\WINDOWS\system32\drivers\amon.sys
23 - [ATI Technologies Inc.] : C:\WINDOWS\system32\Ati2evxx.exe
23 - [Creative Technology Ltd] : C:\WINDOWS\system32\DRIVERS\ctsfm2k.sys
23 - [Gemfor s.r.o.] : C:\WINDOWS\system32\DRIVERS\ethpdrv.sys
23 - [MCCI] : C:\WINDOWS\system32\DRIVERS\ipw_bus.sys
23 - [MCCI] : C:\WINDOWS\system32\DRIVERS\ipw_mdfl.sys
23 - [MCCI] : C:\WINDOWS\system32\DRIVERS\ipw_mdm.sys
23 - [Eset] : C:\Program Files\Eset\nod32krn.exe
23 - [Creative Technology Ltd.] : C:\WINDOWS\system32\DRIVERS\ctoss2k.sys
23 - [Creative Technology Ltd.] : C:\WINDOWS\system32\drivers\P17.sys

Winlogon Notify
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent, DLLName : [ATI Technologies Inc.] : C:\WINDOWS\system32\Ati2evxx.dll

Advanced Files Report
%SYSDIR%\Ati2evxx.dll [ATI Technologies Inc.] [ATI External Event Utility for Windows] MD5=1E239942FF355BAC7AC83470DF4B452B SIZE=139264
%SYSDIR%\imon.dll [Eset] [NOD32 Antivirus System] MD5=E2156ABD4AEF12C2BE3A921CE95949AD SIZE=274432
%PROGRAMFILES%\Eset\pr_imon.dll MD5=F6F1CE7863AEE5F2FE26EC6320CDADD3 SIZE=49152
%SYSDIR%\Ati2evxx.exe [ATI Technologies Inc.] [ATI External Event Utility for Windows] MD5=5CEDA44447A28DB469DE28AFC0950650 SIZE=540672
%SYSDIR%\Ati2edxx.dll [ATI Technologies, Inc.] [ATI External Device Utility] MD5=92C5AE67DAB3D24302C5B831C1A12A17 SIZE=43520
%SYSDIR%\atipdlxx.dll [ATI Technologies, Inc.] [ATI Desktop Component] MD5=C73914A3E54AB32B0A672C6399332848 SIZE=180224
%PROGRAMFILES%\Eset\nod32krn.exe [Eset] [NOD32 Antivirus System] MD5=11E98F9B6FD6870A3D9446AEC8D2F816 SIZE=507904
%PROGRAMFILES%\Eset\nod32krr.dll [Eset] [NOD32 Antivirus System] MD5=1C115EB995020DC1F0397DE308D31DCC SIZE=49152
%PROGRAMFILES%\Eset\ps_amon.dll [Eset] [NOD32 Antivirus System] MD5=B403CEDEC5D6435189A9BF83D5C506C1 SIZE=188416
%PROGRAMFILES%\Eset\pr_amon.dll [Eset] [NOD32 Antivirus System] MD5=4E44F252CB1D439242C7C5DD30C61997 SIZE=32768
%PROGRAMFILES%\Eset\ps_dmon.dll [Eset] [NOD32 Antivirus System] MD5=CB7F878F0ABA7BC44674A45868226B6B SIZE=147456
%PROGRAMFILES%\Eset\pr_dmon.dll MD5=781BB5457162388FA2DB22AD33CAFBCD SIZE=16384
%PROGRAMFILES%\Eset\ps_emon.dll [Eset] [NOD32 Antivirus System] MD5=5DABC55C5DCCC43D8B54705F6F509C8C SIZE=184320
%PROGRAMFILES%\Eset\pr_emon.dll MD5=83A92D2ECD1F6C458A87A4DB75B3606B SIZE=53248
%PROGRAMFILES%\Eset\ps_nod32.dll [Eset] [NOD32 Antivirus System] MD5=C343D9DFBB1AFE3F7E0A99E7FF4D78FE SIZE=167936
%PROGRAMFILES%\Eset\pr_nod32.dll [Eset] [NOD32 Antivirus System] MD5=9F88B839835DCD065073DF73169447DB SIZE=20480
%PROGRAMFILES%\Eset\ps_upd.dll [Eset] [NOD32 Antivirus System] MD5=AE08A65969E7BD0F12D6C5487FF91B3F SIZE=315392
%PROGRAMFILES%\Eset\pr_upd.dll MD5=B52560DD550300C893E48A799F1AA232 SIZE=45056
%PROGRAMFILES%\Eset\nod32rui.dll MD5=0B546A5DEFA18267941333036BFD0044 SIZE=94208
%PROGRAMFILES%\Eset\pu_amon.dll [Eset] [NOD32 Antivirus System] MD5=758AC56FEC7A0CA13552FA13FC426221 SIZE=131072
%PROGRAMFILES%\Eset\pu_dmon.dll [Eset] [NOD32 Antivirus System] MD5=F8466C1CE3C81A8EB1118E04B6126AE0 SIZE=167936
%PROGRAMFILES%\Eset\pu_emon.dll [Eset] [NOD32 Antivirus System] MD5=F23257AB539C3C4893494D716B9AAE34 SIZE=143360
%PROGRAMFILES%\Eset\pu_imon.dll [Eset] [NOD32 Antivirus System] MD5=32F0F491052DF46AD7BB9570F05C10A1 SIZE=184320
%PROGRAMFILES%\Eset\pu_nod32.dll [Eset] [NOD32 Antivirus System] MD5=DC40B45E0B681C9A588B4B918618D826 SIZE=90112
%PROGRAMFILES%\Eset\pu_upd.dll [Eset] [NOD32 Antivirus System] MD5=514DA752B98735F51F1F7958D00BD644 SIZE=180224
%PROGRAMFILES%\ICQLite\ICQRT.dll MD5=DA7C90EA3BFAB4669A6711C50D63EBA3 SIZE=32855
%PROGRAMFILES%\ICQLite\LiteSkinUtils.dll [SkinUtils Dynamic Link Library] MD5=913E9B6C31B6F4D4C90CB8909E157D39 SIZE=63595
%PROGRAMFILES%\ICQLite\ICQLSRP.dll [ICQ Ltd] [ICQ Ltd ICQLSRP] MD5=A0205C00DF5459DC519910E6DB523E6A SIZE=102487
%PROGRAMFILES%\ICQLite\EmoExtractAsset.dll MD5=CB989C722C37AE441AEE35E738CDEE6D SIZE=424572
%PROGRAMFILES%\ICQLite\LiteRes.dll [ICQ Ltd.] [ICQLite] MD5=5B7F2FABAB8FF13B7A10DB3B35F1FFCD SIZE=860266
%PROGRAMFILES%\ICQLite\MISB.dll [MISB Module] MD5=596643157012EC808D599A3FCEDD5376 SIZE=368211
%PROGRAMFILES%\ICQLite\actskin4.ocx [ActiveSkin Module] MD5=B1E097EB3A084C4E3FF1D31F2D93B4C1 SIZE=389120
%PROGRAMFILES%\ICQLite\LiteUtil.dll [ICQ Ltd.] [ICQLite] MD5=CE334E9D43502A6F95554659C37685B6 SIZE=1785439
%PROGRAMFILES%\Creative\SBAudigy\Surround Mixer\CTSysVol.crl [Creative Technology Ltd] [Creative Volume Control Resource] MD5=3C00BD646731B478BF3D2B267E6FBD9D SIZE=16384
%PROGRAMFILES%\Creative\Shared Files\CTTheme.dll [Creative Technology Ltd] [Creative Theme Engine] MD5=28296742DA636800BA2CABD00990502F SIZE=155648
%PROGRAMFILES%\Creative\Shared Files\CtrlSrc.dll [Creative Technology Ltd] [Creative Theme Engine] MD5=8B29A4110CDA0DDA453815094D5E993E SIZE=40960
%PROGRAMFILES%\Creative\Shared Files\CTIniF.dll [Creative Technology Ltd] [CTIniF] MD5=8084668D40E5EB157839C5519E533541 SIZE=53248
%PROGRAMFILES%\Creative\Shared Files\GDICtrl.skc [Creative Technology Ltd] [Creative Theme Engine] MD5=FB0D37334FBC98E8065A8DFB8571D762 SIZE=327680
%PROGRAMFILES%\Creative\Shared Files\GDICtrl2.skc [Creative Technology Ltd] [Creative Theme Engine] MD5=ECAF233EA2F9E47C2C4B4FD00351C3DC SIZE=163840
%PROGRAMFILES%\Creative\Shared Files\GDICtrl3.skc [Creative Technology Ltd] [Creative Theme Engine] MD5=B499C4B7FE828B7004ACA72B459949E9 SIZE=94208
%PROGRAMFILES%\Creative\Shared Files\RtxCtrl.skc [Creative Technology Ltd] [Creative Theme Engine] MD5=C980128486EC670D16E7534CFEFA2361 SIZE=110592
%PROGRAMFILES%\Creative\Shared Files\mxlib.dll [Creative Technology Ltd.] [Creative Mixer Library] MD5=B5D3F04B0EE2A1D903E9B3B9A40B054C SIZE=77824
%PROGRAMFILES%\GPRSpeed Plus\GPRSpeed Plus Client\NGSpawner.exe MD5=008CB52E02F41FF97CA8B20DAC7FFFA5 SIZE=45056
%PROGRAMFILES%\GPRSpeed Plus\GPRSpeed Plus Client\params.dll [flash] [flash params] MD5=7D068D9FE48CA989015DB71C7AC4F154 SIZE=28672
%PROGRAMFILES%\GPRSpeed Plus\GPRSpeed Plus Client\DLIB.dll MD5=BDE37F4069C73DBC3338434AF3A25270 SIZE=81920
%PROGRAMFILES%\GPRSpeed Plus\GPRSpeed Plus Client\GPRSpeed_c.exe [Flash Networks] [Flash Networks NettGain1100_C] MD5=748B2B3394AA510B3B3104BFF2622360 SIZE=655360
%PROGRAMFILES%\GPRSpeed Plus\GPRSpeed Plus Client\GUINettGain.dll [GUINettGain Dynamic Link Library] MD5=132AEF0CEFAE577A9BD33909C1D0BE45 SIZE=212992
%PROGRAMFILES%\GPRSpeed Plus\GPRSpeed Plus Client\WinApplicationAPI.dll [WinApplicationAPI Dynamic Link Library] MD5=4C1A7E7A34C3B7F9F48A865182DB2793 SIZE=86016
%PROGRAMFILES%\GPRSpeed Plus\GPRSpeed Plus Client\regkey.dll [Flash Networks] [Flash regkey] MD5=2D60FA89B75F2DEBCCC7DE488A43191D SIZE=24576
%PROGRAMFILES%\GPRSpeed Plus\GPRSpeed Plus Client\PICN20.dll [Pegasus Imaging Corp.] [PEGASUS] MD5=191BB64EB36CED2F4FBDF9F1658B5FC0 SIZE=41472
%PROGRAMFILES%\GPRSpeed Plus\GPRSpeed Plus Client\UIDGENERATOR.dll [Flash Networks] [Flash UIDGenerator] MD5=2AE0BE7496B9E5583B2F7E850C2FA595 SIZE=24576
deskpan.dll
%PROGRAMFILES%\Eset\nodshex.dll MD5=4278EB4224C1E1A9E76963FEFC89EE70 SIZE=57344
%PROGRAMFILES%\ATI Technologies\ATI.ACE\Core-Static\atiacmxx.dll [ACE Context Menu] MD5=70F168522361476EDEF1FB2EFE8E438A SIZE=688128
%PROGRAMFILES%\ICQLite\ICQLiteShell.dll [ICQLiteShell Module] MD5=273DDC2DA10A9FBAF59B4F0446B00246 SIZE=57451
%PROGRAMFILES%\WinRAR\rarext.dll MD5=023707D932BA31314210E6844D33D500 SIZE=129024
%SYSDIR%\drivers\amon.sys [Eset] [NOD32 Antivirus System] MD5=5A50C245E1F02B9F4128C972AF0BC1FD SIZE=502368
%SYSDIR%\svchost.exe -k netsvcs
%SYSDIR%\DRIVERS\ctsfm2k.sys [Creative Technology Ltd] [Creative Audio Product] MD5=8DB84DE3AAB34A8B4C2F644EFF41CD76 SIZE=138752
%SYSDIR%\svchost -k DcomLaunch
%SYSDIR%\svchost.exe -k NetworkService
%SYSDIR%\DRIVERS\ethpdrv.sys [Gemfor s.r.o.] [GPRS Explorer] MD5=076B1A923259F7A10998FA234A01D629 SIZE=9728
%SYSDIR%\DRIVERS\ipw_bus.sys [MCCI] [IPWireless 3G USB Composite Device] MD5=64B449FD93D0D5FBD52E4FB389386AF4 SIZE=58320
%SYSDIR%\DRIVERS\ipw_mdfl.sys [MCCI] [IPWireless 3G Modem Filter] MD5=3FF9C1EEB937815BAFB721645500060B SIZE=8272
%SYSDIR%\DRIVERS\ipw_mdm.sys [MCCI] [IPWireless 3G Modem] MD5=99185676893C72DFCC60B3054F08A98E SIZE=95440
%SYSDIR%\svchost.exe -k LocalService
%SYSDIR%\DRIVERS\ctoss2k.sys [Creative Technology Ltd.] [Creative Audio Product] MD5=103A9B117A7D9903111955CDAFE65AC6 SIZE=106496
%SYSDIR%\drivers\P17.sys [Creative Technology Ltd.] MD5=1DB419CB76493F6292CCFBDC3466F5FF SIZE=1389056
%SYSDIR%\svchost -k rpcss

[Kofola]

Už vím čím to je mám zavirovaný flashdisk.....poradí mě někdo jak ho mám odvirovat?:-)

[matko]

format flash disku ne ?

[erty123456]

V poslední době se celkem začal šířit nový virus Ctfmon, který se vyznačuje tím, že dokáže znepříjemnit práci s přenosnými disky. Nemá sice žádné destrukční účinky - takové tedy alespoň dosud nebyli zjištěny - ale způsobuje zobrazení chybového hlášení při pokusu o přístup na zavirovaný flashdisk.

Hlášení informuje o nefunkčnosti disku a někteří uživatelů kvůli tomu formátují. Toto ale opravdu není třeba - pro odstranění stačí ze Správce úloh (Ctrl - Alt - Delete) odstranit proces Ctfmon.exe (velikost přiližně 1MB) a následně smazat v kořenovém adresáři všech infikovaných disků soubor Autorun.inf a adresář Recycled, standardní ikona koše, která na flashce opravdu nemá co dělat. Pokud máte ve složce "Po spuštění" také odkaz na Ctfmon - smažte jej také. Po odebrání a opětovném přidání disku do systému by již mělo být vše v pořádku.

Pozn: Nejjednodušší způsob jak se dostat na zavirovaný disk je kliknout na něj pravým tlačítkem myši a ze zobrazené nabídky vybrat příkaz Prozkoumat.