prosím o kontrolu logů Hijackthis a MWAV - VYŘEŠENO

[Filter]

Zlobí mě doma Win.32/Blaster..restartování compu. Jednoúčelové antiviry mi hlásí že je vše v pořádku, oči mi ale hlásí že není...při pohledu na log z MWAV je mi jasné že toho bude potřeba hodně smazat, opravit atd.
MWAV jsem ukončil dřív než proscenovalo celý PC, ale bylo to těsně před koncem a bylo to na disku D, kde mám pouze a jen data, nic instalovanýho...hodinu to totiž nevykazovalo žádnou činnost a jelikož už bylo dost hodin a ráno vstávat do práce, tak mi došla trpělivost, snad to nevadí :-)

Logfile of HijackThis v1.99.1
Scan saved at 19:44:16, on 3.4.2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\VNICMon.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb08.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\WINDOWS\vsnpstd.exe
C:\Program Files\Common Files\{0084201A-089D-1029-0123-0304140301a4}\Update.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\WINDOWS\system32\svchosts.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
C:\Program Files\Skype\Plugin Manager\SkypePM.exe
C:\Program Files\totalcmd\TOTALCMD.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
D:\_Tomáš\antiviry\hijackthis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.centrum.cz/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O4 - HKLM\..\Run: [NIC Monitor] VNICMon.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O4 - HKLM\..\Run: [AVG7_RegCleaner] C:\PROGRA~1\Grisoft\AVG7\avgregcl.exe /BOOT
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb08.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
O4 - HKLM\..\Run: [DeviceDiscovery] C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [snpstd] C:\WINDOWS\vsnpstd.exe
O4 - HKLM\..\Run: [{0084201A-089D-1029-0123-0304140301a4}] "C:\Program Files\Common Files\{0084201A-089D-1029-0123-0304140301a4}\Update.exe" te-110-12-0000073
O4 - HKLM\..\Run: [{0084201A-089C-1029-0123-0304140301a4}] "C:\Program Files\Common Files\{0084201A-089C-1029-0123-0304140301a4}\Update.exe" te-110-12-0000073
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [IpWins] C:\Program Files\Ipwindows\ipwins.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Akcelerátor spuštění AutoCADu.lnk = C:\Program Files\Common Files\Autodesk Shared\acstart16.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftup ... 5619528218
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: winmfu32 - winmfu32.dll (file missing)
O23 - Service: Autodesk Licensing Service - Autodesk, Inc. - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: COM+ Messages - Unknown owner - C:\WINDOWS\system32\svchosts.exe" -e te-110-12-0000073 (file missing)
O23 - Service: Kerio Personal Firewall 4 (KPF4) - Kerio Technologies - C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe




a teď MWAV:

File C:\PROGRA~1\COMMON~1\{00842~1\Update.exe tagged as "not-a-virus:AdWare.Win32.Softomate.ac". Action Taken: No Action Taken.
File C:\PROGRA~1\COMMON~1\{00842~1\system.dll tagged as "not-a-virus:AdWare.Win32.Softomate.ac". Action Taken: No Action Taken.
File C:\WINDOWS\system32\svchosts.exe infected by "Trojan-Downloader.Win32.Agent.bca" Virus! Action Taken: No Action Taken.
File C:\PROGRA~1\COMMON~1\{00842~1\Update.exe tagged as "not-a-virus:AdWare.Win32.Softomate.ac". Action Taken: No Action Taken.
File C:\PROGRA~1\COMMON~1\{00842~1\Update.exe tagged as "not-a-virus:AdWare.Win32.Softomate.ac". Action Taken: No Action Taken.
File C:\PROGRA~1\COMMON~1\{00842~2\Update.exe tagged as "not-a-virus:AdWare.Win32.Softomate.ac". Action Taken: No Action Taken.
File C:\WINDOWS\system32\svchosts.exe infected by "Trojan-Downloader.Win32.Agent.bca" Virus! Action Taken: No Action Taken.
Object "toolbar888 Browser Hijacker" found in File System! Action Taken: No Action Taken.
Object "toolbar888 Browser Hijacker" found in File System! Action Taken: No Action Taken.
Object "grokster Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "grokster Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "proventactics Adware" found in File System! Action Taken: No Action Taken.
Object "spylax Corrupted Adware/Spyware" found in File System! Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINDOWS\system32\pxwma.dll". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINDOWS\system32\pxinsi64.exe". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINDOWS\system32\pxcpyi64.exe". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINDOWS\system32\MSXML3A.DLL". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINDOWS\system32\sysinfo.ocx". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINDOWS\system32\RICHTX32.OCX". Action Taken: No Action Taken.
File C:\WINDOWS\system32\install.exe infected by "Trojan-Clicker.Win32.Costrat.z" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\system32\svchosts.exe infected by "Trojan-Downloader.Win32.Agent.bca" Virus! Action Taken: No Action Taken.
File C:\DOCUME~1\JITULI~1\LOCALS~1\Temp\b122.exe//stream//data0004 tagged as "not-a-virus:AdWare.Win32.Softomate.u". Action Taken: No Action Taken.
File C:\DOCUME~1\JITULI~1\LOCALS~1\Temp\upd34.exe infected by "Trojan-Downloader.Win32.Agent.bdr" Virus! Action Taken: No Action Taken.
File C:\DOCUME~1\JITULI~1\LOCALS~1\TEMPOR~1\Content.IE5\3WMXHV3I\122[2].net//stream//data0004 tagged as "not-a-virus:AdWare.Win32.Softomate.u". Action Taken: No Action Taken.
File C:\DOCUME~1\JITULI~1\LOCALS~1\TEMPOR~1\Content.IE5\3WMXHV3I\upd[1].exe infected by "Trojan-Downloader.Win32.Agent.bdr" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\Jitulinka\Local Settings\Temp\b122.exe//stream//data0004 tagged as "not-a-virus:AdWare.Win32.Softomate.u". Action Taken: No Action Taken.
File C:\Documents and Settings\Jitulinka\Local Settings\Temp\upd34.exe infected by "Trojan-Downloader.Win32.Agent.bdr" Virus! Action Taken: No Action Taken.
File C:\Documents and Settings\Jitulinka\Local Settings\Temporary Internet Files\Content.IE5\3WMXHV3I\122[2].net//stream//data0004 tagged as "not-a-virus:AdWare.Win32.Softomate.u". Action Taken: No Action Taken.
File C:\Documents and Settings\Jitulinka\Local Settings\Temporary Internet Files\Content.IE5\3WMXHV3I\upd[1].exe infected by "Trojan-Downloader.Win32.Agent.bdr" Virus! Action Taken: No Action Taken.
File C:\Program Files\Common Files\{0084201A-089C-1029-0123-0304140301a4}\system.dll tagged as "not-a-virus:AdWare.Win32.Softomate.ac". Action Taken: No Action Taken.
File C:\Program Files\Common Files\{0084201A-089C-1029-0123-0304140301a4}\Update.exe tagged as "not-a-virus:AdWare.Win32.Softomate.ac". Action Taken: No Action Taken.
File C:\Program Files\Common Files\{0084201A-089D-1029-0123-0304140301a4}\system.dll tagged as "not-a-virus:AdWare.Win32.Softomate.ac". Action Taken: No Action Taken.
File C:\Program Files\Common Files\{0084201A-089D-1029-0123-0304140301a4}\Update.exe tagged as "not-a-virus:AdWare.Win32.Softomate.ac". Action Taken: No Action Taken.
File C:\Program Files\Common Files\{3084201A-089D-1029-0123-0304140301a4}\888Bar.dll tagged as "not-a-virus:AdWare.Win32.Softomate.u". Action Taken: No Action Taken.
File C:\qomdjjy.exe//FSG infected by "Trojan-Downloader.Win32.Small.ctf" Virus! Action Taken: No Action Taken.
File C:\System Volume Information\_restore{127EA510-9B4A-47A0-BE84-18459BF0F7F4}\RP251\A0033263.dll tagged as "not-a-virus:AdWare.Win32.Softomate.u". Action Taken: No Action Taken.
File C:\System Volume Information\_restore{127EA510-9B4A-47A0-BE84-18459BF0F7F4}\RP251\A0033264.exe//PE_Patch.UPX//UPX tagged as "not-a-virus:AdWare.Win32.Softomate.u". Action Taken: No Action Taken.
File C:\System Volume Information\_restore{127EA510-9B4A-47A0-BE84-18459BF0F7F4}\RP251\A0035455.exe//stream//data0002 tagged as "not-a-virus:RiskTool.Win32.PsKill.q". Action Taken: No Action Taken.
File C:\System Volume Information\_restore{127EA510-9B4A-47A0-BE84-18459BF0F7F4}\RP251\A0035475.exe tagged as "not-a-virus:AdWare.Win32.Maxifiles.ab". Action Taken: No Action Taken.
File C:\System Volume Information\_restore{127EA510-9B4A-47A0-BE84-18459BF0F7F4}\RP277\A0044119.dll tagged as "not-a-virus:AdWare.Win32.Softomate.ac". Action Taken: No Action Taken.
File C:\System Volume Information\_restore{127EA510-9B4A-47A0-BE84-18459BF0F7F4}\RP277\A0044120.exe tagged as "not-a-virus:AdWare.Win32.Softomate.ac". Action Taken: No Action Taken.
File C:\WINDOWS\system32\install.exe infected by "Trojan-Clicker.Win32.Costrat.z" Virus! Action Taken: No Action Taken.
File C:\WINDOWS\system32\svchosts.exe infected by "Trojan-Downloader.Win32.Agent.bca" Virus! Action Taken: No Action Taken.

[Reklama]

[Baron Prášil]

Microworld se rozhodl uvolnit Mwav do 15.feb plně funkční.

New Year Bonanza - MicroWorld is offering this FREE MWAV Toolkit to help you to "Scan and Clean" your PC/Computer for FREE up to 15th Feb. 2007.

aktuálně do konce května
http://www.mwti.com/products/mwav/mwav.asp

[Damned]

Tak až se vrátíš z práce, tak znovu spusť MWAV a nech ho to odstranit.

[Filter]

OK, pak napíšu jak sem dopadnul

[Filter]

No nevím, projel sem to teda znovu, napsalo mi to 16 kritických objektů, objektů smazáno 16....což vypadá dobře, ale proč mi to teda včera psalo, že kritických objektů je 37??

[Baron Prášil]

ukaž pro sichr ještě hájdžeka

[Filter]

Logfile of HijackThis v1.99.1
Scan saved at 20:19:22, on 4.4.2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\VNICMon.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb08.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\WINDOWS\vsnpstd.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Ipwindows\ipwins.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Skype\Plugin Manager\SkypePM.exe
C:\Program Files\QIP\qip.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\totalcmd\TOTALCMD.EXE
D:\_Tomáš\antiviry\hijackthis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O4 - HKLM\..\Run: [NIC Monitor] VNICMon.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O4 - HKLM\..\Run: [AVG7_RegCleaner] C:\PROGRA~1\Grisoft\AVG7\avgregcl.exe /BOOT
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb08.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
O4 - HKLM\..\Run: [DeviceDiscovery] C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [snpstd] C:\WINDOWS\vsnpstd.exe
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [IpWins] C:\Program Files\Ipwindows\ipwins.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Akcelerátor spuštění AutoCADu.lnk = C:\Program Files\Common Files\Autodesk Shared\acstart16.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftup ... 5619528218
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Autodesk Licensing Service - Autodesk, Inc. - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: Kerio Personal Firewall 4 (KPF4) - Kerio Technologies - C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe

[Baron Prášil]

ukonči v taskmanageru
ipwins.exe

fixni
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
O4 - HKCU\..\Run: [IpWins] C:\Program Files\Ipwindows\ipwins.exe

smaž celou složku
C:\Program Files\Ipwindows\ipwins.exe

a ještě log

[Filter]

jojo, ipwins sem mazal už asi stokrát a furt a furt se objevuje..v KPF mám veškerou komunikaci ipwins zakázanou
Logfile of HijackThis v1.99.1
Scan saved at 20:37:46, on 4.4.2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\VNICMon.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb08.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\WINDOWS\vsnpstd.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Skype\Plugin Manager\SkypePM.exe
C:\Program Files\QIP\qip.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\totalcmd\TOTALCMD.EXE
D:\_Tomáš\antiviry\hijackthis.exe

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O4 - HKLM\..\Run: [NIC Monitor] VNICMon.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O4 - HKLM\..\Run: [AVG7_RegCleaner] C:\PROGRA~1\Grisoft\AVG7\avgregcl.exe /BOOT
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb08.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
O4 - HKLM\..\Run: [DeviceDiscovery] C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [snpstd] C:\WINDOWS\vsnpstd.exe
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Akcelerátor spuštění AutoCADu.lnk = C:\Program Files\Common Files\Autodesk Shared\acstart16.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftup ... 5619528218
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Autodesk Licensing Service - Autodesk, Inc. - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: Kerio Personal Firewall 4 (KPF4) - Kerio Technologies - C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe

[Baron Prášil]

je to čistý.

u Spybotu zapni TeaTimer
Režim>Pro pokročilé>Nástroje>Rezidentní

jo,sorry,máš terminátora(už na to blbě vidim )

[Filter]

??eee, já nemám Spybot..mám SpywareTerminator....pokud mě paměť neklame :-)
ještě dva problémy, myslel sem že by se to mohlo tímto vyřešit, ale nevyřešilo....
1)nefungujou mi aktualizace..ani automatický ani přímo z windowsupdate...včera mi ta stránka házela jakousi hlášku že v mým pc už není nějakej soubor registrován a když sem dal znovu registrovat, tak mi ta stránka stejně naskakovala znovu a znovu...dnes se mi windowsupdate ani nenačte..
2)když dám Ovládací panely->brána firewall sys. win tak se mi jen zobrazí hláška že tohle nastavení nemůže systém windows z důvodu neznámého problému zobrazit...

[Filter]

jen pro upřesnění