Po 10 min. prestanefungovat pripojeni k netu

[maddd]

a sakra CC cleaner jsem vznechal..

[Reklama]

[Baron Prášil]

tak to s nim setři a vem to i RegCleanerem

[maddd]

vycisteno.., problem s padajicim netem stale trva

[Baron Prášil]

měl jsi udělat to čištění a potom novej sken mwavem v nouzovým režimu.

[maddd]

Mwav pada i v safe modu. Ten Log vypada stejne i stim bordelem dole

[Baron Prášil]

udělej log z combofixu
Stáhni si ComboFix (by sUBs) a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem klávesy 1
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log, který se ti zobrazí, jinak ho najdeš zde: C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah

[maddd]

tady to je

ComboFix 07-10-28.2 - Wasillus 2007-10-30 20:59:32.2 - NTFSx86
Running from: F:\ComboFix.exe
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\WINDOWS\regedit.com
C:\WINDOWS\system32\taskmgr.com

.
((((((((((((((((((((((((( Files Created from 2007-09-28 to 2007-10-30 )))))))))))))))))))))))))))))))
.

2007-10-30 00:02 <DIR> d-------- C:\Program Files\CCleaner
2007-10-29 23:14 <DIR> d-a------ C:\WINDOWS\zts2.exe
2007-10-29 23:14 <DIR> d-a------ C:\WINDOWS\system32\vcmgcd32.dll
2007-10-29 23:14 <DIR> d-a------ C:\WINDOWS\system32\systems.txt
2007-10-29 23:14 <DIR> d-a------ C:\WINDOWS\system32\iifgfgf.dll
2007-10-29 23:14 <DIR> d-a------ C:\WINDOWS\rundll16.exe
2007-10-29 23:14 <DIR> d-a------ C:\WINDOWS\rundl132.dll
2007-10-29 23:14 <DIR> d-a------ C:\WINDOWS\logo1_.exe
2007-10-29 23:05 146,432 --a------ C:\WINDOWS\R.COM
2007-10-29 23:05 135,680 --a------ C:\WINDOWS\system32\T.COM
2007-10-29 21:14 170,293 --a------ C:\WINDOWS\system32\drivers\IsDrv120.sys
2007-10-29 20:00 211,893 --a------ C:\WINDOWS\system32\drivers\IsDrv122.sys
2007-10-29 08:44 <DIR> d-------- C:\Documents and Settings\Wasillus\Application Data\Media Player Classic
2007-10-28 22:53 <DIR> d-------- C:\WINDOWS\ERUNT
2007-10-28 22:26 51,200 --a------ C:\WINDOWS\NirCmd.exe
2007-10-28 19:51 <DIR> d---s---- C:\Documents and Settings\Zbytek světa\UserData
2007-10-28 19:51 <DIR> d---s---- C:\Documents and Settings\Zbytek světa\UserData
2007-10-28 12:23 116,224 --a------ C:\WINDOWS\system32\dllcache\xrxwiadr.dll
2007-10-28 12:23 27,648 --a------ C:\WINDOWS\system32\dllcache\xrxftplt.exe
2007-10-28 12:23 23,040 --a------ C:\WINDOWS\system32\dllcache\xrxwbtmp.dll
2007-10-28 12:23 17,408 --a------ C:\WINDOWS\system32\dllcache\xrxscnui.dll
2007-10-28 12:22 154,624 --a------ C:\WINDOWS\system32\dllcache\wlluc48.sys
2007-10-28 12:22 99,865 --a------ C:\WINDOWS\system32\dllcache\xlog.exe
2007-10-28 12:22 19,455 --a------ C:\WINDOWS\system32\dllcache\wvchntxx.sys
2007-10-28 12:22 16,970 --a------ C:\WINDOWS\system32\dllcache\xem336n5.sys
2007-10-28 12:22 12,063 --a------ C:\WINDOWS\system32\dllcache\wsiintxx.sys
2007-10-28 12:22 8,832 --a------ C:\WINDOWS\system32\dllcache\wmiacpi.sys
2007-10-28 12:22 8,192 --a------ C:\WINDOWS\system32\dllcache\wshirda.dll
2007-10-28 12:22 4,608 --a------ C:\WINDOWS\system32\dllcache\xrxflnch.exe
2007-10-28 11:54 188,480 --a------ C:\WINDOWS\system32\dllcache\cfgwiz.exe
2007-10-28 11:54 20,540 --a------ C:\WINDOWS\system32\dllcache\author.dll
2007-10-28 11:54 20,540 --a------ C:\WINDOWS\system32\dllcache\admin.dll
2007-10-28 11:54 16,439 --a------ C:\WINDOWS\system32\dllcache\author.exe
2007-10-28 11:54 16,439 --a------ C:\WINDOWS\system32\dllcache\admin.exe
2007-10-28 11:33 <DIR> d-------- C:\Program Files\Yamicsoft
2007-10-27 19:50 <DIR> d-------- C:\Program Files\RFA Platinum
2007-10-27 18:40 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\RFA_Backups
2007-10-25 18:01 512 --a------ C:\ScanSectorLog.dat
2007-10-24 22:24 <DIR> d-------- C:\Documents and Settings\Wasillus\Application Data\MailFrontier
2007-10-24 22:19 4,840,224 --ahs---- C:\WINDOWS\system32\drivers\fidbox.dat
2007-10-24 22:19 49,440 --ahs---- C:\WINDOWS\system32\drivers\fidbox2.dat
2007-10-24 22:13 75,512 --a------ C:\WINDOWS\zllsputility.exe
2007-10-24 21:43 <DIR> d-------- C:\Program Files\Innovatools
2007-10-14 17:38 512,096 --a------ C:\WINDOWS\system32\drivers\amon.sys
2007-10-14 17:38 298,104 --a------ C:\WINDOWS\system32\imon.dll
2007-10-14 17:38 15,424 --a------ C:\WINDOWS\system32\drivers\nod32drv.sys
2007-10-14 16:57 422,504 --a------ C:\WINDOWS\system32\Incinerator.dll
2007-10-14 16:57 41,472 --a------ C:\WINDOWS\system32\iolobtdfg.exe
2007-10-14 16:57 38,912 --a------ C:\WINDOWS\system32\xpacket.sys
2007-10-14 16:57 25,264 --a------ C:\WINDOWS\system32\smrgdf.exe
2007-10-14 16:57 9,341 --a------ C:\WINDOWS\system32\drivers\filedisk.sys
2007-10-14 12:56 <DIR> d-------- C:\Program Files\iolo
2007-10-14 10:40 <DIR> d-------- C:\Program Files\Common Files\Authentium
2007-10-14 10:40 696,320 --a------ C:\WINDOWS\system32\libeay32.dll
2007-10-14 10:40 155,648 --a------ C:\WINDOWS\system32\ssleay32.dll
2007-10-14 09:32 <DIR> d-------- C:\Documents and Settings\LocalService\Application Data\iolo
2007-10-14 09:32 126,976 --a------ C:\WINDOWS\system32\iavlsp.dll
2007-10-13 10:16 <DIR> d-------- C:\Documents and Settings\Wasillus\Application Data\iolo
2007-10-13 10:16 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\iolo
2007-10-13 09:14 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\MailFrontier
2007-10-03 10:06 <DIR> d-------- C:\Program Files\iPod
2007-10-01 11:27 <DIR> d-------- C:\Program Files\Picasa2
2007-09-26 17:28 <DIR> d-------- C:\Program Files\iTunes
2007-09-26 17:26 <DIR> d-------- C:\Program Files\Apple Software Update
2007-09-26 17:25 <DIR> d-------- C:\Program Files\Common Files\Apple
2007-09-26 17:25 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Apple
2007-09-11 10:46 <DIR> d-------- C:\Program Files\Transparent
2007-09-11 10:46 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Transparent

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-10-30 18:08 --------- d-----w C:\Documents and Settings\Wasillus\Application Data\Skype
2007-10-29 23:22 65,612 --sha-w C:\WINDOWS\system32\drivers\fidbox.idx
2007-10-29 23:22 5,444 --sha-w C:\WINDOWS\system32\drivers\fidbox2.idx
2007-10-29 07:42 --------- d-----w C:\Documents and Settings\Wasillus\Application Data\Vso
2007-10-28 20:19 --------- d--h--w C:\Program Files\InstallShield Installation Information
2007-10-28 20:18 --------- d-----w C:\Program Files\Broadcom
2007-10-26 16:45 --------- d-----w C:\Program Files\eMule
2007-10-04 19:41 --------- d-----w C:\Program Files\K-Lite Codec Pack
2007-09-26 16:27 --------- d-----w C:\Program Files\QuickTime
2007-09-26 16:27 --------- d-----w C:\Documents and Settings\All Users\Application Data\Apple Computer
2007-09-25 10:00 46,792 ----a-w C:\Documents and Settings\Wasillus\Application Data\GDIPFONTCACHEV1.DAT
2007-09-23 08:45 --------- d-----w C:\Documents and Settings\Wasillus\Application Data\ppstream
2007-08-22 12:55 96,256 ----a-w C:\WINDOWS\system32\dllcache\inseng.dll
2007-08-22 12:55 665,600 ----a-w C:\WINDOWS\system32\dllcache\wininet.dll
2007-08-22 12:55 617,984 ----a-w C:\WINDOWS\system32\dllcache\urlmon.dll
2007-08-22 12:55 55,808 ----a-w C:\WINDOWS\system32\dllcache\extmgr.dll
2007-08-22 12:55 532,480 ----a-w C:\WINDOWS\system32\dllcache\mstime.dll
2007-08-22 12:55 474,112 ----a-w C:\WINDOWS\system32\dllcache\shlwapi.dll
2007-08-22 12:55 449,024 ----a-w C:\WINDOWS\system32\dllcache\mshtmled.dll
2007-08-22 12:55 39,424 ----a-w C:\WINDOWS\system32\dllcache\pngfilt.dll
2007-08-22 12:55 357,888 ----a-w C:\WINDOWS\system32\dllcache\dxtmsft.dll
2007-08-22 12:55 3,064,832 ----a-w C:\WINDOWS\system32\dllcache\mshtml.dll
2007-08-22 12:55 251,904 ----a-w C:\WINDOWS\system32\dllcache\iepeers.dll
2007-08-22 12:55 205,824 ----a-w C:\WINDOWS\system32\dllcache\dxtrans.dll
2007-08-22 12:55 16,384 ----a-w C:\WINDOWS\system32\dllcache\jsproxy.dll
2007-08-22 12:55 151,040 ----a-w C:\WINDOWS\system32\dllcache\cdfview.dll
2007-08-22 12:55 146,432 ----a-w C:\WINDOWS\system32\dllcache\msrating.dll
2007-08-22 12:55 1,498,112 ----a-w C:\WINDOWS\system32\dllcache\shdocvw.dll
2007-08-22 12:55 1,054,208 ----a-w C:\WINDOWS\system32\dllcache\danim.dll
2007-08-22 12:55 1,022,976 ----a-w C:\WINDOWS\system32\dllcache\browseui.dll
2007-08-21 10:19 18,432 ----a-w C:\WINDOWS\system32\dllcache\iedw.exe
2007-08-21 06:15 683,520 ----a-w C:\WINDOWS\system32\inetcomm.dll
2007-08-21 06:15 683,520 ----a-w C:\WINDOWS\system32\dllcache\inetcomm.dll
2007-08-20 10:04 63,488 ------w C:\WINDOWS\system32\dllcache\icardie.dll
2007-08-20 10:04 6,058,496 ------w C:\WINDOWS\system32\dllcache\ieframe.dll
2007-08-20 10:04 52,224 ------w C:\WINDOWS\system32\dllcache\msfeedsbs.dll
2007-08-20 10:04 459,264 ------w C:\WINDOWS\system32\dllcache\msfeeds.dll
2007-08-20 10:04 383,488 ------w C:\WINDOWS\system32\dllcache\ieapfltr.dll
2007-08-20 10:04 267,776 ------w C:\WINDOWS\system32\dllcache\iertutil.dll
2007-08-18 13:01 737,280 ----a-w C:\WINDOWS\iun6002.exe
2007-08-17 10:20 13,824 ------w C:\WINDOWS\system32\dllcache\ieudinit.exe
2007-08-09 11:26 20,480 ----a-w C:\WINDOWS\system32\ac3config.exe
2007-07-30 17:19 92,504 ----a-w C:\WINDOWS\system32\dllcache\cdm.dll
2007-07-30 17:19 92,504 ----a-w C:\WINDOWS\system32\cdm.dll
2007-07-30 17:19 549,720 ----a-w C:\WINDOWS\system32\wuapi.dll
2007-07-30 17:19 549,720 ----a-w C:\WINDOWS\system32\dllcache\wuapi.dll
2007-07-30 17:19 53,080 ----a-w C:\WINDOWS\system32\wuauclt.exe
2007-07-30 17:19 53,080 ----a-w C:\WINDOWS\system32\dllcache\wuauclt.exe
2007-07-30 17:19 43,352 ----a-w C:\WINDOWS\system32\wups2.dll
2007-07-30 17:19 325,976 ----a-w C:\WINDOWS\system32\wucltui.dll
2007-07-30 17:19 325,976 ----a-w C:\WINDOWS\system32\dllcache\wucltui.dll
2007-07-30 17:19 271,224 ----a-w C:\WINDOWS\system32\mucltui.dll
2007-07-30 17:19 207,736 ----a-w C:\WINDOWS\system32\muweb.dll
2007-07-30 17:19 203,096 ----a-w C:\WINDOWS\system32\wuweb.dll
2007-07-30 17:19 203,096 ----a-w C:\WINDOWS\system32\dllcache\wuweb.dll
2007-07-30 17:19 1,712,984 ----a-w C:\WINDOWS\system32\wuaueng.dll
2007-07-30 17:19 1,712,984 ----a-w C:\WINDOWS\system32\dllcache\wuaueng.dll
2007-07-30 17:18 33,624 ----a-w C:\WINDOWS\system32\wups.dll
2007-07-30 17:18 33,624 ----a-w C:\WINDOWS\system32\dllcache\wups.dll
2007-07-29 15:51 7,680 ----a-w C:\WINDOWS\system32\ff_vfw.dll
2007-07-25 13:24 1,559,040 ----a-w C:\WINDOWS\system32\xvidcore.dll
2007-07-23 18:54 86,016 ----a-w C:\WINDOWS\system32\OpenAL32.dll
2007-07-23 18:54 409,600 ----a-w C:\WINDOWS\system32\wrap_oal.dll
2007-07-09 13:16 582,656 ----a-w C:\WINDOWS\system32\rpcrt4.dll
2007-07-09 13:16 582,656 ----a-w C:\WINDOWS\system32\dllcache\rpcrt4.dll
2007-03-12 22:19 81,920 ----a-w C:\Documents and Settings\Wasillus\Application Data\ezpinst.exe
2007-03-12 22:19 47,360 ----a-w C:\Documents and Settings\Wasillus\Application Data\pcouffin.sys
2006-05-04 09:37 173 ---ha-w C:\Documents and Settings\dddddd\textlang.dat
2005-10-10 10:46:50 56 --sh--r C:\WINDOWS\system32\6EE17503EF.sys
2005-10-10 10:46:50 1,890 --sha-w C:\WINDOWS\system32\KGyGaAvL.sys
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"rfagent"="C:\Program Files\RFA Platinum\rfagent.exe" [2007-04-14 15:40]
"nwiz"="nwiz.exe" [2006-03-22 23:32 C:\WINDOWS\system32\nwiz.exe]
"NvMediaCenter"="NvMCTray.dll" [2006-03-22 23:32 C:\WINDOWS\system32\nvmctray.dll]
"NVHotkey"="nvHotkey.dll" [2006-03-22 23:32 C:\WINDOWS\system32\nvhotkey.dll]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2006-03-22 23:32]
"nod32kui"="C:\Program Files\Eset\nod32kui.exe" [2007-10-14 17:37]
"IntelZeroConfig"="C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe" [2006-04-14 18:51]
"dla"="C:\WINDOWS\system32\dla\tfswctrl.exe" [2005-05-31 04:33]
"CTxfiHlp"="CTXFIHLP.EXE" [2006-08-11 13:56 C:\WINDOWS\system32\CTXFIHLP.EXE]
"CTHelper"="CTHELPER.EXE" [2006-08-11 13:56 C:\WINDOWS\CTHELPER.EXE]
"Apoint"="C:\Program Files\Apoint\Apoint.exe" [2005-10-07 14:13]
"Dell QuickSet"="C:\Program Files\Dell\QuickSet\Quickset.exe" [2005-03-04 17:26]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-06-29 05:24]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 11:00]

[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"Picasa Media Detector"=C:\Program Files\Picasa2\PicasaMediaDetector.exe

C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
Digital Line Detect.lnk - C:\Program Files\Digital Line Detect\DLG.exe [2005-08-17 16:15:34]


R0 XPacket;iolo Personal Firewall Driver;C:\WINDOWS\system32\xpacket.sys
R1 SSHDRV65;SSHDRV65;\??\C:\WINDOWS\system32\drivers\SSHDRV65.sys
R3 ctmmfilt;Audio Filter Driver;C:\WINDOWS\system32\drivers\ctmmfilt.sys
R3 PSched;QoS Packet Scheduler;C:\WINDOWS\system32\DRIVERS\psched.sys
S3 akshasp;Aladdin HASP Key;C:\WINDOWS\system32\DRIVERS\akshasp.sys
S3 C-Dilla;C-Dilla;\??\C:\WINDOWS\system32\drivers\CDANT.SYS
S3 CTMSFSYN;Creative SoundFont Synth;C:\WINDOWS\system32\drivers\ctmsfsyn.sys
S3 nhcAcpi_driver;Notebook Hardware Control ACPI Driver;\??\C:\WINDOWS\system32\drivers\nhcAcpi.sys
S3 nhcNT_driver;Notebook Hardware Control NT Driver;\??\C:\WINDOWS\system32\drivers\nhcNT.sys
S3 V0250Dev;Live! Cam Notebook Pro;C:\WINDOWS\system32\DRIVERS\V0250Dev.sys

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\E]
AutoRun\command - E:\autorun.exe
directx\command - E:\DirectX9\dxsetup.exe
setup\command - E:\setup.exe

.
Contents of the 'Scheduled Tasks' folder
"2007-10-25 17:46:13 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
"2007-10-30 19:50:45 C:\WINDOWS\Tasks\Symantec NetDetect.job"
.
**************************************************************************

catchme 0.3.1239 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-10-30 21:02:20
Windows 5.1.2600 Service Pack 2 NTFS

detected NTDLL code modification:
ZwQuerySystemInformation

scanning hidden processes ...

C:\Program Files\iolo\Common\Lib\ioloDMVSvc.exe [892] 0x87155570

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2007-10-30 21:03:38
C:\ComboFix2.txt ... 2007-10-28 22:32
.
--- E O F ---

[Baron Prášil]

toto najdi a smaž
C:\WINDOWS\iun6002.exe

toto
C:\WINDOWS\system32\6EE17503EF.sys
nech tady zkontrolovat http://www.virustotal.com/flash/index_en.html

[maddd]

ten prvni jsem smazal

ten druhy vidim v Commanderu a ma nejake divoke atributy r-hs

pri uploadovani na net neni videt ani kdyz mam zapnuto zobrazeni neviditelnych slozek

[Baron Prášil]

nepoužívej "Procházet",do okna zkopíruj celou cestu k souboru,tedy
C:\WINDOWS\system32\6EE17503EF.sys

[maddd]

Antivirus Verze Poslední aktualizace Výsledek
AhnLab-V3 2007.11.1.0 2007.10.31 -
AntiVir 7.6.0.30 2007.10.31 -
Authentium 4.93.8 2007.10.31 -
Avast 4.7.1074.0 2007.10.31 -
AVG 7.5.0.503 2007.10.31 -
BitDefender 7.2 2007.10.31 -
CAT-QuickHeal 9.00 2007.10.31 -
ClamAV 0.91.2 2007.10.31 -
DrWeb 4.44.0.09170 2007.10.31 -
eSafe 7.0.15.0 2007.10.28 -
eTrust-Vet 31.2.5256 2007.10.31 -
Ewido 4.0 2007.10.31 -
FileAdvisor 1 2007.10.31 -
Fortinet 3.11.0.0 2007.10.19 -
F-Prot 4.3.2.48 2007.10.31 -
F-Secure 6.70.13030.0 2007.10.31 -
Ikarus T3.1.1.12 2007.10.31 -
Kaspersky 7.0.0.125 2007.10.31 -
McAfee 5152 2007.10.30 -
Microsoft 1.2908 2007.10.31 -
NOD32v2 2630 2007.10.31 -
Norman 5.80.02 2007.10.31 -
Panda 9.0.0.4 2007.10.31 -
Prevx1 V2 2007.10.31 -
Rising 19.47.21.00 2007.10.31 -
Sophos 4.23.0 2007.10.31 -
Sunbelt 2.2.907.0 2007.10.31 -
Symantec 10 2007.10.31 -
TheHacker 6.2.9.110 2007.10.27 -
VBA32 3.12.2.4 2007.10.31 -
VirusBuster 4.3.26:9 2007.10.31 -
Webwasher-Gateway 6.6.1 2007.10.31 -
Rozšiřující informace
File size: 56 bytes
MD5: 03ad8752bd976bcc0d8419033bf9c6ff
SHA1: c535690fce0ff12bfba64b02635ee8a662c03d73

[maddd]

problem s Innternetem nijak nezlepsuje. Dost dlouho trve nez se prvni pozadovana stranky zobrazi. Potom uz jde net normalne a cca 10 minutach prestane pripojeni fungovat. ICQ je normalne pripojeno.

Co ted?