prosím o kontrolu logu Vyřešeno

[mafian]

https://www.virustotal.com/cs/file/0903 ... 476350051/


aswMBR version 1.0.1.2290 Copyright(c) 2014 AVAST Software
Run date: 2016-10-13 11:14:45
-----------------------------
11:14:45.953 OS Version: Windows 5.1.2600 Service Pack 3
11:14:45.953 Number of processors: 4 586 0x402
11:14:45.953 ComputerName: ADMIN UserName:
11:14:49.656 Initialize success
11:14:50.000 VM: initialized successfully
11:14:50.000 VM: Amd CPU BiosDisabled
11:14:53.484 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-4
11:14:53.500 Disk 0 Vendor: WDC_WD5000AADS-00S9B0 01.00A01 Size: 476938MB BusType: 3
11:14:53.578 Disk 0 MBR read successfully
11:14:53.578 Disk 0 MBR scan
11:14:53.578 Disk 0 Windows XP default MBR code
11:14:53.578 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 70001 MB offset 63
11:14:53.578 Disk 0 Boot: NTFS code=1
11:14:53.578 Disk 0 Partition - 00 0F Extended LBA 61059 MB offset 143364060
11:14:53.609 Disk 0 Partition 2 00 07 HPFS/NTFS NTFS 345875 MB offset 268414020
11:14:53.625 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 61059 MB offset 143364123
11:14:53.625 Disk 0 scanning sectors +976768065
11:14:53.671 Disk 0 scanning C:\WINDOWS\system32\drivers
11:15:27.109 Service scanning
11:15:33.796 Service sptd C:\WINDOWS\System32\Drivers\sptd.sys **LOCKED** 32
11:15:35.703 Modules scanning
11:15:35.703 \Driver\atapi DriverInit @ 0x8b213298 suspicious
11:15:35.703 \Driver\dmio MajorFunction[ IRP_MJ_CREATE ] @ 0x8b2891f8 suspicious
11:15:35.703 \Driver\dmio MajorFunction[ IRP_MJ_CLOSE ] @ 0x8b2891f8 suspicious
11:15:35.703 \Driver\dmio MajorFunction[ IRP_MJ_READ ] @ 0x8b2891f8 suspicious
11:15:35.703 \Driver\dmio MajorFunction[ IRP_MJ_WRITE ] @ 0x8b2891f8 suspicious
11:15:35.703 \Driver\dmio MajorFunction[ IRP_MJ_FLUSH_BUFFERS ] @ 0x8b2891f8 suspicious
11:15:35.703 \Driver\dmio MajorFunction[ IRP_MJ_DEVICE_CONTROL ] @ 0x8b2891f8 suspicious
11:15:35.703 \Driver\dmio MajorFunction[ IRP_MJ_INTERNAL_DEVICE_CONTROL ] @ 0x8b2891f8 suspicious
11:15:35.718 \Driver\dmio MajorFunction[ IRP_MJ_SHUTDOWN ] @ 0x8b2891f8 suspicious
11:15:35.718 \Driver\dmio MajorFunction[ IRP_MJ_POWER ] @ 0x8b2891f8 suspicious
11:15:35.718 \Driver\dmio MajorFunction[ IRP_MJ_SYSTEM_CONTROL ] @ 0x8b2891f8 suspicious
11:15:35.718 \Driver\usbohci MajorFunction[ IRP_MJ_CREATE ] @ 0x8aff51f8 suspicious
11:15:35.718 \Driver\usbohci MajorFunction[ IRP_MJ_CLOSE ] @ 0x8aff51f8 suspicious
11:15:35.718 \Driver\usbohci MajorFunction[ IRP_MJ_DEVICE_CONTROL ] @ 0x8aff51f8 suspicious
11:15:35.718 \Driver\usbohci MajorFunction[ IRP_MJ_INTERNAL_DEVICE_CONTROL ] @ 0x8aff51f8 suspicious
11:15:35.718 \Driver\usbohci MajorFunction[ IRP_MJ_POWER ] @ 0x8aff51f8 suspicious
11:15:35.718 \Driver\usbohci MajorFunction[ IRP_MJ_SYSTEM_CONTROL ] @ 0x8aff51f8 suspicious
11:15:35.718 \Driver\Ftdisk MajorFunction[ IRP_MJ_CREATE ] @ 0x8b2141f8 suspicious
11:15:35.718 \Driver\Ftdisk MajorFunction[ IRP_MJ_READ ] @ 0x8b2141f8 suspicious
11:15:35.718 \Driver\Ftdisk MajorFunction[ IRP_MJ_WRITE ] @ 0x8b2141f8 suspicious
11:15:35.718 \Driver\Ftdisk MajorFunction[ IRP_MJ_FLUSH_BUFFERS ] @ 0x8b2141f8 suspicious
11:15:35.718 \Driver\Ftdisk MajorFunction[ IRP_MJ_DEVICE_CONTROL ] @ 0x8b2141f8 suspicious
11:15:35.718 \Driver\Ftdisk MajorFunction[ IRP_MJ_INTERNAL_DEVICE_CONTROL ] @ 0x8b2141f8 suspicious
11:15:35.718 \Driver\Ftdisk MajorFunction[ IRP_MJ_SHUTDOWN ] @ 0x8b2141f8 suspicious
11:15:35.718 \Driver\Ftdisk MajorFunction[ IRP_MJ_CLEANUP ] @ 0x8b2141f8 suspicious
11:15:35.718 \Driver\Ftdisk MajorFunction[ IRP_MJ_POWER ] @ 0x8b2141f8 suspicious
11:15:35.718 \Driver\Ftdisk MajorFunction[ IRP_MJ_SYSTEM_CONTROL ] @ 0x8b2141f8 suspicious
11:15:35.718 \Driver\NetBT MajorFunction[ IRP_MJ_CREATE ] @ 0x8aef91f8 suspicious
11:15:35.718 \Driver\NetBT MajorFunction[ IRP_MJ_CLOSE ] @ 0x8aef91f8 suspicious
11:15:35.718 \Driver\NetBT MajorFunction[ IRP_MJ_DEVICE_CONTROL ] @ 0x8aef91f8 suspicious
11:15:35.718 \Driver\NetBT MajorFunction[ IRP_MJ_INTERNAL_DEVICE_CONTROL ] @ 0x8aef91f8 suspicious
11:15:35.718 \Driver\NetBT MajorFunction[ IRP_MJ_CLEANUP ] @ 0x8aef91f8 suspicious
11:15:35.718 \Driver\Cdrom MajorFunction[ IRP_MJ_CREATE ] @ 0x8affb1f8 suspicious
11:15:35.718 \Driver\Cdrom MajorFunction[ IRP_MJ_CLOSE ] @ 0x8affb1f8 suspicious
11:15:35.718 \Driver\Cdrom MajorFunction[ IRP_MJ_READ ] @ 0x8affb1f8 suspicious
11:15:35.718 \Driver\Cdrom MajorFunction[ IRP_MJ_WRITE ] @ 0x8affb1f8 suspicious
11:15:35.718 \Driver\Cdrom MajorFunction[ IRP_MJ_FLUSH_BUFFERS ] @ 0x8affb1f8 suspicious
11:15:35.718 \Driver\Cdrom MajorFunction[ IRP_MJ_DEVICE_CONTROL ] @ 0x8affb1f8 suspicious
11:15:35.718 \Driver\Cdrom MajorFunction[ IRP_MJ_INTERNAL_DEVICE_CONTROL ] @ 0x8affb1f8 suspicious
11:15:35.718 \Driver\Cdrom MajorFunction[ IRP_MJ_SHUTDOWN ] @ 0x8affb1f8 suspicious
11:15:35.718 \Driver\Cdrom MajorFunction[ IRP_MJ_POWER ] @ 0x8affb1f8 suspicious
11:15:35.718 \Driver\Cdrom MajorFunction[ IRP_MJ_SYSTEM_CONTROL ] @ 0x8affb1f8 suspicious
11:15:35.718 \Driver\usbehci MajorFunction[ IRP_MJ_CREATE ] @ 0x8afd71f8 suspicious
11:15:35.718 \Driver\usbehci MajorFunction[ IRP_MJ_CLOSE ] @ 0x8afd71f8 suspicious
11:15:35.718 \Driver\usbehci MajorFunction[ IRP_MJ_DEVICE_CONTROL ] @ 0x8afd71f8 suspicious
11:15:35.718 \Driver\usbehci MajorFunction[ IRP_MJ_INTERNAL_DEVICE_CONTROL ] @ 0x8afd71f8 suspicious
11:15:35.718 \Driver\usbehci MajorFunction[ IRP_MJ_POWER ] @ 0x8afd71f8 suspicious
11:15:35.718 \Driver\usbehci MajorFunction[ IRP_MJ_SYSTEM_CONTROL ] @ 0x8afd71f8 suspicious
11:15:35.718 \Driver\dtsoftbus01 MajorFunction[ IRP_MJ_CREATE ] @ 0x8aeea1f8 suspicious
11:15:35.718 \Driver\dtsoftbus01 MajorFunction[ IRP_MJ_CLOSE ] @ 0x8aeea1f8 suspicious
11:15:35.718 \Driver\dtsoftbus01 MajorFunction[ IRP_MJ_DEVICE_CONTROL ] @ 0x8aeea1f8 suspicious
11:15:35.718 \Driver\dtsoftbus01 MajorFunction[ IRP_MJ_INTERNAL_DEVICE_CONTROL ] @ 0x8aeea1f8 suspicious
11:15:35.718 \Driver\dtsoftbus01 MajorFunction[ IRP_MJ_POWER ] @ 0x8aeea1f8 suspicious
11:15:35.718 \Driver\dtsoftbus01 MajorFunction[ IRP_MJ_SYSTEM_CONTROL ] @ 0x8aeea1f8 suspicious
11:15:35.718 Disk 0 trace - called modules:
11:15:35.734 ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys sppy.sys >>UNKNOWN [0x8b234938]<<
11:15:35.734 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x8b1daab8]
11:15:35.734 3 CLASSPNP.SYS[ba108fd7] -> nt!IofCallDriver -> \Device\00000076[0x8b258170]
11:15:35.734 5 ACPI.sys[b9e74620] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-4[0x8b1ddd98]
11:15:35.734 Disk 0 statistics 71452/0/0 @ 4,31 MB/s
11:15:35.734 Scan finished successfully
11:16:13.000 Disk 0 MBR has been saved successfully to "C:\Documents and Settings\uživatel\Plocha\MBR.dat"
11:16:13.015 The log file has been saved successfully to "C:\Documents and Settings\uživatel\Plocha\aswMBR.txt"

[Reklama]

[mafian]

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:06:49, on 13.10.2016
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
c:\PROGRA~1\AVG\Av\avgrsx.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\AVG\Av\avgidsagent.exe
C:\Program Files\AVG\Framework\Common\avgsvcx.exe
C:\Program Files\AVG\Av\avgwdsvcx.exe
C:\Program Files\BlueStacks\HD-LogRotatorService.exe
C:\Program Files\BlueStacks\HD-UpdaterService.exe
C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
C:\Program Files\OO Software\Defrag\oodag.exe
C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Acronis\DiskDirector\OSS\reinstall_svc.exe
C:\Program Files\AVG\Av\avgui.exe
C:\Program Files\OO Software\Defrag\oodtray.exe
C:\Program Files\AVG\Framework\Common\avguix.exe
C:\Program Files\AVG\Av\avgnsx.exe
C:\Program Files\AVG\Av\avgcsrvx.exe
C:\Program Files\Opera\36.0.2130.80_0\opera.exe
C:\Program Files\Opera\36.0.2130.80_0\opera_crashreporter.exe
C:\Program Files\Opera\36.0.2130.80_0\opera.exe
C:\Program Files\Opera\36.0.2130.80_0\opera.exe
C:\Program Files\Opera\36.0.2130.80_0\opera.exe
C:\Program Files\Opera\36.0.2130.80_0\opera.exe
C:\Program Files\Opera\36.0.2130.80_0\opera.exe
C:\Program Files\Opera\36.0.2130.80_0\opera.exe
C:\Program Files\Opera\36.0.2130.80_0\opera.exe
C:\Program Files\Opera\36.0.2130.80_0\opera.exe
C:\Program Files\Opera\36.0.2130.80_0\opera.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Opera\36.0.2130.80_0\opera.exe
C:\Documents and Settings\uživatel\Dokumenty\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.8.0_51\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_51\bin\jp2ssv.dll
O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files\AVG\Framework\Common\avguirnx.exe" /lps=av
O4 - HKLM\..\Run: [AvgUi] "C:\Program Files\AVG\Framework\Common\avguirnx.exe" /lps=fmw
O4 - HKLM\..\Run: [OODefragTray] C:\Program Files\OO Software\Defrag\oodtray.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Add to VideoGet - {88CFA58B-A63F-4A94-9C54-0C7A58E3333E} - C:\PROGRA~1\NUCLEA~1\VideoGet\Plugins\VIDEOG~1.DLL
O9 - Extra 'Tools' menuitem: Add to &VideoGet - {88CFA58B-A63F-4A94-9C54-0C7A58E3333E} - C:\PROGRA~1\NUCLEA~1\VideoGet\Plugins\VIDEOG~1.DLL
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\Av\avgidsagent.exe
O23 - Service: AVG Service (avgsvc) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\Framework\Common\avgsvcx.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\Av\avgwdsvcx.exe
O23 - Service: BlueStacks Android Service (BstHdAndroidSvc) - BlueStack Systems, Inc. - C:\Program Files\BlueStacks\HD-Service.exe
O23 - Service: BlueStacks Log Rotator Service (BstHdLogRotatorSvc) - BlueStack Systems, Inc. - C:\Program Files\BlueStacks\HD-LogRotatorService.exe
O23 - Service: BlueStacks Updater Service (BstHdUpdaterSvc) - BlueStack Systems, Inc. - C:\Program Files\BlueStacks\HD-UpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: O&O Defrag Agent (OODefragAgent) - O&O Software GmbH - C:\Program Files\OO Software\Defrag\oodag.exe
O23 - Service: Aktivátor Správce výběru OS Acronis (Správce výběru OS) - Unknown owner - C:\Program Files\Acronis\DiskDirector\OSS\reinstall_svc.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - StarWind Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe

--
End of file - 6285 bytes



Problém asi už žádný avg mlší a RK stále udělá scan kliknu na log a zamrzne.

[Orcus]

A Sophos Virus Removal Tool dopadnul jak?

[mafian]

omlouvám se Sophos Virus Removal Tool našel jeden objekt a smazal,ale žádný log mi neukázal

[jaro3]

ComboFix se odinstaluje takto:
Start-Spustit a zadej ComboFix /Uninstall

Vyčisti systém CCleanerem

Stáhni si OTC

na plochu. Poklepej na něj. Potom klikni na Clean up!.
Restartuj PC , pokud Ti bude doporučeno.

Stáhni si zde DelFix
https://toolslib.net/downloads/viewdownload/2-delfix/

ulož si soubor na plochu.
Poklepáním na ikonu spusť nástroj Delfix.exe
( Ve Windows Vista, Windows 7 a 8, musíš spustit soubor pravým tlačítkem myši -> Spustit jako správce .
V hlavním menu, zkontroluj tyto možnosti - Odstranění dezinfekce nástrojů (Remove desinfection tools) – Vyčistit body obnovy (Purge System Restore)
Poté klikněte na tlačítko Spustit (Run) a nech nástroj dělat svoji práci

Poté se zpráva se otevře (DelFix.txt). Vlož celý obsah zprávy sem.Jinak je zpráva zde:
v C: \ DelFix.txt

Pokud nejsou problémy , je to vše a můžeš dát vyřešeno , zelenou fajfku.

[mafian]

# DelFix v1.013 - Logfile created 26/10/2016 at 10:33:53
# Updated 17/04/2016 by Xplode
# Username : uživatel - ADMIN
# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)

~ Removing disinfection tools ...

Deleted : C:\zoek_backup
Deleted : C:\AdwCleaner
Deleted : C:\ComboFix.txt
Deleted : C:\zoek-results.log
Deleted : C:\zoek-results2016-05-29-115501.log
Deleted : C:\Documents and Settings\uživatel\Plocha\aswMBR.txt
Deleted : C:\Documents and Settings\uživatel\Plocha\MBR.dat
Deleted : HKLM\SOFTWARE\OldTimer Tools
Deleted : HKLM\SOFTWARE\AdwCleaner
Deleted : HKLM\SOFTWARE\Swearware
Deleted : HKLM\SOFTWARE\TrendMicro\Hijackthis
Deleted : HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ASWMBR

########## - EOF - ##########



děkuji zatím vše ok