PC-HELP.CZ

České diskuzní fórum o počítačích
https://pc-help.cnews.cz/

Kontrola Hijackthis logu

https://pc-help.cnews.cz/viewtopic.php?f=70&t=41031

Stránka 1 z 1

Kontrola Hijackthis logu

Napsal: 31 kvě 2009 12:31
od dejwoo
Dobry den, poprosim o kontrolu tohto logu, nejde mi vyhladavanie stranok cez google... a mam spomaleny pocitac... vopred dakujem....
C:\WINDOWS\system32\svchost.exe
D:\hry\Mozzila\firefox.exe
D:\hry\HJT\HijackThis.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://stats.garena.com/clientinstall.php
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O2 - BHO: Podpora odkazu pre aplikáciu Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: XML module - {500BCA15-57A7-4eaf-8143-8C619470B13D} - C:\WINDOWS\system32\msxml71.dll (file missing)
O2 - BHO: (no name) - {F82445FD-65F6-4E36-ACE1-87567B29217B} - C:\WINDOWS\system32\audiosr.dll (file missing)
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [WinampAgent] D:\hry\Winamp\winampa.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SsAAD.exe] D:\hry\SONICS~1\nove\SsAAD.exe
O4 - HKLM\..\Run: [Ehama] rundll32.exe "C:\WINDOWS\Yreceyifegiz.dll",e
O4 - HKLM\..\Run: [svchost.exe] C:\WINDOWS\system32\svcnost.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [Steam] "d:\hry\steam\steam.exe" -silent
O4 - HKCU\..\Run: [Boris] C:\Documents and Settings\Boris\Boris.exe /i
O4 - HKCU\..\Run: [A00F2B0E18.exe] C:\DOCUME~1\Boris\LOCALS~1\Temp\_A00F2B0E18.exe
O4 - HKCU\..\Run: [ICQ] "D:\hry\ICQ\ICQ6.5\ICQ.exe" silent
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Zdroje informácií - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - D:\hry\ICQ\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - D:\hry\ICQ\ICQ6.5\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://icq.oberon-media.com/Gameshell/G ... meHost.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O20 - Winlogon Notify: __c001103F - C:\WINDOWS\system32\__c001103F.dat (file missing)
O20 - Winlogon Notify: __c00307DE - C:\WINDOWS\system32\__c00307DE.dat (file missing)
O20 - Winlogon Notify: __c0042442 - C:\WINDOWS\system32\__c0042442.dat (file missing)
O20 - Winlogon Notify: __c008623C - C:\WINDOWS\system32\__c008623C.dat (file missing)
O20 - Winlogon Notify: __c009BB60 - C:\WINDOWS\system32\__c009BB60.dat (file missing)
O20 - Winlogon Notify: __c00BBF79 - C:\WINDOWS\system32\__c00BBF79.dat (file missing)
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: SeekappSrch Service - Unknown owner - C:\Documents and Settings\All Users\Data aplikací\SeekappSrch\seekapp139.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe

--
End of file - 7579 bytes

Re: Kontrola Hijackthis logu

Napsal: 31 kvě 2009 14:41
od Damned
Ten log z HJT není celý. Já ho ale celý potřebuju.
Odinstaluj si ICQ 6 Toolbar
Spusť znovu HJT a fixni (zatrhnout políčko před hodnotou a zmáčknout "Fix checked")

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://stats.garena.com/clientinstall.php
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O2 - BHO: XML module - {500BCA15-57A7-4eaf-8143-8C619470B13D} - C:\WINDOWS\system32\msxml71.dll (file missing)
O2 - BHO: (no name) - {F82445FD-65F6-4E36-ACE1-87567B29217B} - C:\WINDOWS\system32\audiosr.dll (file missing)
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [Ehama] rundll32.exe "C:\WINDOWS\Yreceyifegiz.dll",e
O4 - HKLM\..\Run: [svchost.exe] C:\WINDOWS\system32\svcnost.exe
O4 - HKCU\..\Run: [A00F2B0E18.exe] C:\DOCUME~1\Boris\LOCALS~1\Temp\_A00F2B0E18.exe
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O20 - Winlogon Notify: __c001103F - C:\WINDOWS\system32\__c001103F.dat (file missing)
O20 - Winlogon Notify: __c00307DE - C:\WINDOWS\system32\__c00307DE.dat (file missing)
O20 - Winlogon Notify: __c0042442 - C:\WINDOWS\system32\__c0042442.dat (file missing)
O20 - Winlogon Notify: __c008623C - C:\WINDOWS\system32\__c008623C.dat (file missing)
O20 - Winlogon Notify: __c009BB60 - C:\WINDOWS\system32\__c009BB60.dat (file missing)
O20 - Winlogon Notify: __c00BBF79 - C:\WINDOWS\system32\__c00BBF79.dat (file missing)
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe

Až uděláš, dej sem znova log z HJT.

Re: Kontrola Hijackthis logu

Napsal: 31 kvě 2009 15:38
od dejwoo
DIky moc, takze tu to je uz opravene, toolbar som vymazal, a ten log hadam teraz bude cely...
inac nevies preco mi nejde vyhladavat tie stranky cez google? vzdycky dostanem error

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:30:56, on 31.5.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svcnost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\WgaTray.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Eset\nod32kui.exe
D:\hry\Winamp\winampa.exe
D:\hry\SONICS~1\nove\SsAAD.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Documents and Settings\All Users\Data aplikací\SeekappSrch\seekapp139.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\SeekappSrch\seekapp.exe
D:\hry\ICQ\ICQ6.5\ICQ.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\svchost.exe
D:\hry\HJT\HijackThis.exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: Podpora odkazu pre aplikáciu Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [WinampAgent] D:\hry\Winamp\winampa.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SsAAD.exe] D:\hry\SONICS~1\nove\SsAAD.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [Steam] "d:\hry\steam\steam.exe" -silent
O4 - HKCU\..\Run: [Boris] C:\Documents and Settings\Boris\Boris.exe /i
O4 - HKCU\..\Run: [ICQ] "D:\hry\ICQ\ICQ6.5\ICQ.exe" silent
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Zdroje informácií - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - D:\hry\ICQ\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - D:\hry\ICQ\ICQ6.5\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://icq.oberon-media.com/Gameshell/G ... meHost.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: SeekappSrch Service - Unknown owner - C:\Documents and Settings\All Users\Data aplikací\SeekappSrch\seekapp139.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe

--
End of file - 5758 bytes

Re: Kontrola Hijackthis logu

Napsal: 31 kvě 2009 15:44
od Damned
Vím, nepustí tě ten Seek vyhledávač. Odinstaluj ještě ten Seek.

Potom:
Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Provést rychlý sken a klikni na tlačítko Skenovat
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Zobrazit výsledky
- pak zvol možnost uložit log a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).
Vlož sem pak obsah toho logu.

Re: Kontrola Hijackthis logu

Napsal: 31 kvě 2009 17:56
od dejwoo
Takze tu je ten log z toho programu, aj som odinstaloval ten Seek ale ten google ne a ne ist...

Malwarebytes' Anti-Malware 1.37
Verzia databázy: 2201
Windows 5.1.2600 Service Pack 3

31.5.2009 17:19:29
log

Typ kontroly: Rýchla
Objektov kontrolovaných: 93425
Uplynutý cas: 13 minute(s), 22 second(s)

Infikovaných procesov pamäte: 1
Infikovaných modulov pamäte: 1
Infikovaných registracných klúcov: 10
Infikovaných registracných hodnôt: 4
Infikovaných registracných údajov položiek: 2
Infikovaných priecinkov: 1
Infikovaných súborov: 54

Infikovaných procesov pamäte:
C:\WINDOWS\system32\svcnost.exe (Trojan.FakeAlert) -> No action taken.

Infikovaných modulov pamäte:
C:\Documents and Settings\All Users\Data aplikací\Microsoft\ipdll.dll (Trojan.Agent) -> No action taken.

Infikovaných registracných klúcov:
HKEY_CLASSES_ROOT\xml.xml (Trojan.FakeAlert) -> No action taken.
HKEY_CLASSES_ROOT\xml.xml.1 (Trojan.FakeAlert) -> No action taken.
HKEY_CLASSES_ROOT\Typelib\{5d2631e5-8696-7543-50b2-f674cd4308eb} (Trojan.Fakealert) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{500bca15-57a7-4eaf-8143-8c619470b13d} (Trojan.FakeAlert) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Cognac (Rogue.Multiple) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\MSFox (Trojan.Agent) -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ksi32sk (Rootkit.Agent) -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\port135sik (Rootkit.Agent) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\XML (Trojan.FakeAlert) -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\netsik (Rootkit.Agent) -> No action taken.

Infikovaných registracných hodnôt:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Settings\bf (Trojan.Agent) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Settings\bk (Trojan.Agent) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Settings\iu (Trojan.Agent) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Settings\mu (Trojan.Agent) -> No action taken.

Infikovaných registracných údajov položiek:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SecurityProviders (Trojan.Agent) -> Data: digeste.dll -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\System (Trojan.FakeAlert) -> Data: c:\windows\system32\svcnost.exe -> No action taken.

Infikovaných priecinkov:
c:\documents and settings\All Users\Data aplikací\Seekapp (Adware.Seekapp) -> No action taken.

Infikovaných súborov:
c:\WINDOWS\system32\__c009102.exe (Trojan.Vundo.V) -> No action taken.
c:\WINDOWS\system32\__c007B2D2.exe (Trojan.Vundo.V) -> No action taken.
c:\documents and settings\Boris\local settings\temporary internet files\Content.IE5\6HB4PGVA\last[1].exe (Trojan.Vundo.V) -> No action taken.
c:\WINDOWS\system32\wpv941235222220.cpx (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\digeste.dll (Trojan.Agent) -> No action taken.
c:\documents and settings\All Users\Data aplikací\Microsoft\bits.dll (Trojan.Agent) -> No action taken.
c:\documents and settings\All Users\Data aplikací\Microsoft\ipdll.dll (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\svcnost.exe (Trojan.FakeAlert) -> No action taken.
c:\documents and settings\Boris\local settings\Temp\~tmpa.exe (Trojan.FakeAlert) -> No action taken.
c:\documents and settings\Boris\local settings\Temp\~tmpd.exe (Trojan.FakeAlert) -> No action taken.
c:\WINDOWS\system32\__c0012051.exe (Trojan.Vundo) -> No action taken.
c:\WINDOWS\system32\__c001A0D9.exe (Trojan.Vundo) -> No action taken.
c:\WINDOWS\system32\__c001D32F.exe (Trojan.Vundo) -> No action taken.
c:\WINDOWS\system32\__c002B311.exe (Trojan.Vundo) -> No action taken.
c:\WINDOWS\system32\__c0030292.exe (Trojan.Vundo) -> No action taken.
c:\WINDOWS\system32\__c0036CC6.exe (Trojan.Vundo) -> No action taken.
c:\WINDOWS\system32\__c003C338.exe (Trojan.Vundo) -> No action taken.
c:\WINDOWS\system32\__c00400A8.exe (Trojan.Vundo) -> No action taken.
c:\WINDOWS\system32\__c0040F8A.exe (Trojan.Vundo) -> No action taken.
c:\WINDOWS\system32\__c0044364.exe (Trojan.Vundo) -> No action taken.
c:\WINDOWS\system32\__c0045985.exe (Trojan.Vundo) -> No action taken.
c:\WINDOWS\system32\__c004654.exe (Trojan.Vundo) -> No action taken.
c:\WINDOWS\system32\__c004706.exe (Trojan.Vundo) -> No action taken.
c:\WINDOWS\system32\__c004A381.exe (Trojan.Vundo) -> No action taken.
c:\WINDOWS\system32\__c004B2D0.exe (Trojan.Vundo) -> No action taken.
c:\WINDOWS\system32\__c0067072.exe (Trojan.Vundo) -> No action taken.
c:\WINDOWS\system32\__c0074C5E.exe (Trojan.Vundo) -> No action taken.
c:\WINDOWS\system32\__c0075457.exe (Trojan.Vundo) -> No action taken.
c:\WINDOWS\system32\__c0075D14.exe (Trojan.Vundo) -> No action taken.
c:\WINDOWS\system32\__c0076379.exe (Trojan.Vundo) -> No action taken.
c:\WINDOWS\system32\__c0077D90.exe (Trojan.Vundo) -> No action taken.
c:\WINDOWS\system32\__c007DE8.exe (Trojan.Vundo) -> No action taken.
c:\WINDOWS\system32\__c0080574.exe (Trojan.Vundo) -> No action taken.
c:\WINDOWS\system32\__c0082209.exe (Trojan.Vundo) -> No action taken.
c:\WINDOWS\system32\__c0086C04.exe (Trojan.Vundo) -> No action taken.
c:\WINDOWS\system32\__c0087D49.exe (Trojan.Vundo) -> No action taken.
c:\WINDOWS\system32\__c0088F01.exe (Trojan.Vundo) -> No action taken.
c:\WINDOWS\system32\__c008B601.exe (Trojan.Vundo) -> No action taken.
c:\WINDOWS\system32\__c008D82C.exe (Trojan.Vundo) -> No action taken.
c:\WINDOWS\system32\__c0090D69.exe (Trojan.Vundo) -> No action taken.
c:\WINDOWS\system32\__c009BC40.exe (Trojan.Vundo) -> No action taken.
c:\WINDOWS\system32\__c009BC9F.exe (Trojan.Vundo) -> No action taken.
c:\WINDOWS\system32\__c00A814F.exe (Trojan.Vundo) -> No action taken.
c:\WINDOWS\system32\__c00AAAD4.exe (Trojan.Vundo) -> No action taken.
c:\WINDOWS\system32\__c00B1790.exe (Trojan.Vundo) -> No action taken.
c:\WINDOWS\system32\__c00B1CBC.exe (Trojan.Vundo) -> No action taken.
c:\WINDOWS\system32\__c00B6749.exe (Trojan.Vundo) -> No action taken.
c:\WINDOWS\system32\__c00BEA8E.exe (Trojan.Vundo) -> No action taken.
c:\WINDOWS\system32\__c00C3487.exe (Trojan.Vundo) -> No action taken.
c:\WINDOWS\system32\__c00D06C1.exe (Trojan.Vundo) -> No action taken.
c:\WINDOWS\system32\__c00DC67A.exe (Trojan.Vundo) -> No action taken.
c:\WINDOWS\system32\__c00E8950.exe (Trojan.Vundo) -> No action taken.
c:\WINDOWS\system32\__c00F3A6C.exe (Trojan.Vundo) -> No action taken.
c:\WINDOWS\system32\__c00FFD0C.exe (Trojan.Vundo) -> No action taken.

Re: Kontrola Hijackthis logu

Napsal: 31 kvě 2009 18:11
od Damned
Hééééézkýýýýýý :shock: :roll:

Takže spusť znovu MbAM a dej Scan
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Show Results
- ujistit se že máš zatrhnuté všechny vypsané nálezy a klikni na tlačítko Remove Selected
- bude-li vyžadován restart, restartuj
- když skončí odstraňování tak se ti zobrazí log, tak ho sem dej.
- pak zvol v programu OK a pak program ukonči přes Exit


Potom:

Vypni rezidentní štít antiviru i SUPERAntiSpyware.
Stáhni si ComboFix (by sUBs)
nebo ComboFix (subs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Časové pásmo: UTC+02:00
Stránka 1 z 1
Powered by phpBB® Forum Software © phpBB Limited
https://www.phpbb.com/