prosím o kontrolu logu

[jaro3]

Tak sem vlož ještě nový log z HJT.
A ty adresy znáš?
O15 - Trusted Zone: *.iframedollars.biz (HKLM)
O16 - DPF: {0E8C12E2-5329-7ED2-1881-13296992E442} - http://213.159.117.150/1/rdgCZ10.exe
O16 - DPF: {1230CB21-C88D-11CF-0000-000000000000} - http://www.browserupdate.co.uk/cabs/cus ... iq0107.cab
O16 - DPF: {17403C87-B807-522F-03B1-5C8718D0ADAD} - http://213.159.117.150/1/rdgCZ10.exe
O16 - DPF: {2E5583D0-9080-1F05-9A45-58A279C2660F} - http://213.159.117.150/1/rdgCZ10.exe
O16 - DPF: {3DC6F52B-DB47-2503-66B4-41670D26AC9D} - http://213.159.117.150/1/rdgCZ10.exe
O16 - DPF: {4583D395-934D-455E-3CD2-30C144F294DB} - http://213.159.117.150/1/rdgCZ10.exe
O16 - DPF: {4BC54967-CD56-4191-9DD7-086CA61F2691} - http://advnt01.com/dialer/czeck1_ver3.CAB
O16 - DPF: {75E305ED-D351-5BCE-EB5D-2B0E59DE0817} - http://213.159.117.150/1/rdgCZ10.exe
O16 - DPF: {76C20F22-42B6-5DE3-835D-36CB47C6069F} - http://213.159.117.150/1/rdgCZ10.exe
O16 - DPF: {7B066B63-807A-7AE9-7920-0DF1692FAFCE} - http://213.159.117.150/1/rdgCZ10.exe

[Reklama]

[ChrisS]

Ne, nic mi to neříká.

HJT log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:58:08, on 4.1.2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\windows\System32\smss.exe
C:\windows\system32\winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\svchost.exe
C:\windows\System32\svchost.exe
C:\WINDOWS\system32\brsvc01a.exe
C:\WINDOWS\system32\brss01a.exe
C:\windows\system32\spoolsv.exe
C:\windows\Explorer.EXE
C:\windows\AGRSMMSG.exe
C:\windows\Logi_MwX.Exe
C:\windows\system32\rundll32.exe
C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\Microsoft IntelliType Pro\itype.exe
C:\windows\system32\ctfmon.exe
C:\Program Files\RocketDock\RocketDock.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Microsoft IntelliType Pro\dpupdchk.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\windows\system32\nvsvc32.exe
C:\WINDOWS\system32\oodag.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\Program Files\Common Files\Logitech\KHAL\KHALMNPR.EXE
C:\windows\System32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Jarda\Dokumenty\SOUBORY\Kryštof\Viry\HiJackThis\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: WebTransBHO Class - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - C:\TRANSLAT\WEBIE.DLL
O3 - Toolbar: WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\TRANSLAT\WEBIE.DLL
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [anvshell] anvshell.exe
O4 - HKLM\..\Run: [LiveNote] livenote.exe
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] "rundll32.exe" bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [itype] "C:\Program Files\Microsoft IntelliType Pro\itype.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [ctfmon.exe] C:\windows\system32\ctfmon.exe
O4 - HKCU\..\Run: [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe"
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll
O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - C:\TRANSLAT\WEBIE.DLL
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\TRANSLAT\WEBIE.DLL
O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748450} - C:\TRANSLAT\WEBIE.DLL
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\TRANSLAT\WEBIE.DLL
O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - C:\TRANSLAT\WEBIE.DLL
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\TRANSLAT\WEBIE.DLL
O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - C:\TRANSLAT\WEBIE.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O10 - Unknown file in Winsock LSP: xfire_lsp_10650.dll
O10 - Unknown file in Winsock LSP: xfire_lsp_10650.dll
O10 - Unknown file in Winsock LSP: xfire_lsp_10650.dll
O10 - Unknown file in Winsock LSP: xfire_lsp_10650.dll
O10 - Unknown file in Winsock LSP: xfire_lsp_10650.dll
O10 - Unknown file in Winsock LSP: xfire_lsp_10650.dll
O16 - DPF: {17403C87-B807-522F-03B1-5C8718D0ADAD} - http://213.159.117.150/1/rdgCZ10.exe
O16 - DPF: {2E5583D0-9080-1F05-9A45-58A279C2660F} - http://213.159.117.150/1/rdgCZ10.exe
O16 - DPF: {3DC6F52B-DB47-2503-66B4-41670D26AC9D} - http://213.159.117.150/1/rdgCZ10.exe
O16 - DPF: {4583D395-934D-455E-3CD2-30C144F294DB} - http://213.159.117.150/1/rdgCZ10.exe
O16 - DPF: {4BC54967-CD56-4191-9DD7-086CA61F2691} - http://advnt01.com/dialer/czeck1_ver3.CAB
O16 - DPF: {75E305ED-D351-5BCE-EB5D-2B0E59DE0817} - http://213.159.117.150/1/rdgCZ10.exe
O16 - DPF: {76C20F22-42B6-5DE3-835D-36CB47C6069F} - http://213.159.117.150/1/rdgCZ10.exe
O16 - DPF: {7B066B63-807A-7AE9-7920-0DF1692FAFCE} - http://213.159.117.150/1/rdgCZ10.exe
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe
O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\windows\system32\nvsvc32.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: Network Security Service (NSS) (Ź%AF夶Ŕ¨) - Unknown owner - C:\WINDOWS\ieam.exe (file missing)

--
End of file - 7600 bytes

[jaro3]

Ještě fix v HJT:

Kód: Vybrat vše

O16 - DPF: {17403C87-B807-522F-03B1-5C8718D0ADAD} - http://213.159.117.150/1/rdgCZ10.exe
O16 - DPF: {2E5583D0-9080-1F05-9A45-58A279C2660F} - http://213.159.117.150/1/rdgCZ10.exe
O16 - DPF: {3DC6F52B-DB47-2503-66B4-41670D26AC9D} - http://213.159.117.150/1/rdgCZ10.exe
O16 - DPF: {4583D395-934D-455E-3CD2-30C144F294DB} - http://213.159.117.150/1/rdgCZ10.exe
O16 - DPF: {4BC54967-CD56-4191-9DD7-086CA61F2691} - http://advnt01.com/dialer/czeck1_ver3.CAB
O16 - DPF: {75E305ED-D351-5BCE-EB5D-2B0E59DE0817} - http://213.159.117.150/1/rdgCZ10.exe
O16 - DPF: {76C20F22-42B6-5DE3-835D-36CB47C6069F} - http://213.159.117.150/1/rdgCZ10.exe
O16 - DPF: {7B066B63-807A-7AE9-7920-0DF1692FAFCE} - http://213.159.117.150/1/rdgCZ10.exe
O23 - Service: Network Security Service (NSS) (Ź %AFĺ   ¤Ŕ¨) - Unknown owner - C:\WINDOWS\ieam.exe (file missing)


ComboFix se odinstaluje takto:
Start-Spustit a zadej ComboFix[mezera]/u

vyčisti systém CCleanerem
a RegCleanerem
a použij i T-Cleaner
smaže vše po Combu,SDFixu,Avengeru,MWAVu atd.-stáhneš>spustíš
Aktualizuj javu:
Java SE Runtime Environment 6u11
Vyber OS ( předpokládám Windows), zatržítko agree-continue
Vyber:
Windows Offline Installation
jre-6u11-windows-i586-p.exe
Ostatní javy odeber v přidat/odebrat programy.
Napiš jak se chová comp a nejso-li problémy s winsock-sí't. připojení.

[ChrisS]

Tak všechno provedeno dle návodu, registry jsou vyčištěny a JAVA je aktualizovaná.
Komp se chová zatím normálně, žádné problémy nejsou ani s připojením.
Díky moc za účinnou pomoc.