zacalo to smtp

pechytce · Příspěvekod **pechytce** » 19 lis 2009 19:26

Dobrý večer , potřeboval bych poradit ...Mam v pc nejakeho hajzlika .Zacalo to tim , ze mi UPC zablokoval SMTP server , ze z me meilovky se odesila spam , tak jsem si prosel pc Online scanerem od ESETU a on mi nasel cervika tusim ze Kryptik nebo tak neco , takze jsem jej vyhodil , ale nutno dodat , ze jsem mel antivir bez aktualizace takze brana do pekel byla otevrena :twisted:

Takze jsem chtel odinstalovat ten muj antivir, a nainstaovat nejaky jiny ... to se mi nepodarilo , hlaska co vyskakuje , je ze na cecku ve slozce esetu data je neco s cim nelze hnout , nepomohlo ani odinstalovani v nouzaku , no a tim moje zkusenosti konci , jeste mi tam obcas vyskoci nejake vtipne okno od exploreru a to pouzivam firefox... prosim o radu a pomoc ...dekuji zdvorile :wink:

Reklama

Příspěvekod **memphisto** » 19 lis 2009 19:28

Vlož sem log z programu HijackThis (návod v podpise). Přesunu to pak do správné sekce

pechytce · Příspěvekod **pechytce** » 19 lis 2009 19:34

Dekuji za bleskovou odpoved ... zde je tabulka

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:33, on 19.11.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\SOUNDMAN.EXE
C:\WINDOWS\system32\soundman.exe
C:\WINDOWS\system32\soundman .exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\WINDOWS\system32\idkaun.exe
C:\Program Files\Adobe\acrotray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\soundman .exe
C:\Program Files\Microsoft ActiveSync\wcescomm .exe
C:\Program Files\Skype\Phone\Skype.exe
C:\WINDOWS\system32\idkaun.exe
C:\WINDOWS\system32\idkaun .exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\Program Files\VIA\RAID\raid_tool.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Adobe\acrotray.exe
C:\Program Files\Skype\Phone\skype.exe
C:\Program Files\Microsoft ActiveSync\wcescomm .exe
C:\Program Files\Skype\Phone\skype .exe
C:\Program Files\Adobe\acrotray .exe
C:\WINDOWS\system32\idkaun .exe
C:\Program Files\Microsoft ActiveSync\wcescomm .exe
C:\Program Files\Adobe\acrotray .exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\PROGRA~1\MICROS~4\rapimgr.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Mozilla Firefox 3.5 Preview\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Program Files\Skype\Toolbars\Shared\SkypeNames.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe
O2 - BHO: XTTBPos00 Class - {055FD26D-3A88-4e15-963D-DC8493744B1D} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: (no name) - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - (no file)
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
O4 - HKLM\..\Run: [idkaun] C:\WINDOWS\system32\idkaun.exe \u
O4 - HKLM\..\Run: [Adobe_Reader] C:\Program Files\Adobe\acrotray.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm .exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: hpoddt01.exe.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: VIA RAID TOOL.lnk = C:\Program Files\VIA\RAID\raid_tool.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra 'Tools' menuitem: Vytvořit mobilní oblíbenou položku… - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll
O9 - Extra button: (no name) - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: ESET HTTP Server (EhttpSrv) - Unknown owner - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: NMIndexingService - Unknown owner - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe (file missing)

--
End of file - 7629 bytes

Příspěvekod **jaro3** » 19 lis 2009 21:15

Stáhni si Malwarebytes' Anti-Malware
Nainstaluj a spusť ho
- na konci instalace se ujisti že máš zvoleny/zatrhnuty obě možnosti:
Aktualizace Malwarebytes' Anti-Malware a Spustit aplikaci Malwarebytes' Anti-Malware, pokud jo tak klikni na tlačítko konec
- pokud bude nalezena aktualizace, tak se stáhne a nainstaluje
- program se po té spustí a nech vybranou možnost Provést rychlý sken a klikni na tlačítko Skenovat
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Zobrazit výsledky
- pak zvol možnost uložit log a ulož si log na plochu
- po té klikni na tlačítko Exit, objeví se ti hláška tak zvol Ano
(zatím nic nemaž!).
Vlož sem pak obsah toho logu.

Pokud budou problémy , spustit v nouz. režimu.

pechytce · Příspěvekod **pechytce** » 19 lis 2009 21:49

mnoooo je tam toho , ze jsem malem upad...tfuj...log:
Malwarebytes' Anti-Malware 1.41
Verze databáze: 3198
Windows 5.1.2600 Service Pack 3

19.11.2009 21:48:35
mbam-log-2009-11-19 (21-48-19).txt

Typ kontroly: Rychlá kontrola
Zkontrolované objekty: 111158
Uplynulý čas: 10 minute(s), 29 second(s)

Infikované procesy v paměti: 9
Infikované moduly v paměti: 0
Infikované klíče registru: 19
Infikované hodnoty registru: 6
Infikované datové položky registru: 0
Infikované adresáře: 0
Infikované soubory: 16

Infikované procesy v paměti:
C:\Program Files\Microsoft ActiveSync\wcescomm .exe (Trojan.Downloader) -> No action taken.
C:\Program Files\Adobe\acrotray.exe (Trojan.Downloader) -> No action taken.
C:\Program Files\Adobe\acrotray .exe (Trojan.Downloader) -> No action taken.
C:\Program Files\Adobe\acrotray .exe (Trojan.Downloader) -> No action taken.
C:\Program Files\Microsoft ActiveSync\wcescomm .exe (Trojan.Downloader) -> No action taken.
C:\Program Files\Microsoft ActiveSync\wcescomm .exe (Trojan.Downloader) -> No action taken.
C:\Program Files\Microsoft ActiveSync\wcescomm .exe (Trojan.Downloader) -> No action taken.
C:\Program Files\Microsoft ActiveSync\wcescomm .exe (Trojan.Downloader) -> No action taken.
C:\Program Files\Adobe\acrotray.exe (Trojan.Downloader) -> No action taken.

Infikované moduly v paměti:
(Nebyly nalezeny žádné škodlivé položky)

Infikované klíče registru:
HKEY_CLASSES_ROOT\TypeLib\{218cb45f-20b6-11d2-8e17-0000f803a446} (Trojan.Downloader) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{06f6ea9d-88b0-45a9-9f26-ce0898d9ea1c} (Trojan.Downloader) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{218cb451-20b6-11d2-8e17-0000f803a446} (Trojan.Downloader) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{218cb453-20b6-11d2-8e17-0000f803a446} (Trojan.Downloader) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{218cb454-20b6-11d2-8e17-0000f803a446} (Trojan.Downloader) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{218cb455-20b6-11d2-8e17-0000f803a446} (Trojan.Downloader) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{218cb456-20b6-11d2-8e17-0000f803a446} (Trojan.Downloader) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{28e28123-7dc5-45d3-860e-8ee1c3681bd5} (Trojan.Downloader) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{35edd1cc-1a8c-11d2-b49d-00c04fb90376} (Trojan.Downloader) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{35edd1cd-1a8c-11d2-b49d-00c04fb90376} (Trojan.Downloader) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{659ecad8-a5c0-11d2-a440-00c04f795683} (Trojan.Downloader) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{659ecad9-a5c0-11d2-a440-00c04f795683} (Trojan.Downloader) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{6fd143e6-20a5-11d2-91ad-0000f81fefc9} (Trojan.Downloader) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{82e11592-20f5-11d2-91ad-0000f81fefc9} (Trojan.Downloader) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{97c3808a-eca1-4ca6-8d09-122a3cc54b3b} (Trojan.Downloader) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{c9a6a6b6-9bc1-43a5-b06b-e58874eebc96} (Trojan.Downloader) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{cb643558-61cd-42b2-a9a5-496a7884ad61} (Trojan.Downloader) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{f3a614dd-abe0-11d2-a441-00c04f795683} (Trojan.Downloader) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{ff55d627-cf5b-40de-850f-62d20bc241c8} (Trojan.Downloader) -> No action taken.

Infikované hodnoty registru:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\adobe_reader (Trojan.Downloader) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\h/pc connection agent (Trojan.Downloader) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\msmsgs (Trojan.Downloader) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\skype (Trojan.Downloader) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\idkaun (Trojan.Downloader) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\kr_done1 (Malware.Trace) -> No action taken.

Infikované datové položky registru:
(Nebyly nalezeny žádné škodlivé položky)

Infikované adresáře:
(Nebyly nalezeny žádné škodlivé položky)

Infikované soubory:
C:\Program Files\Microsoft ActiveSync\wcescomm .exe (Trojan.Downloader) -> No action taken.
C:\Program Files\Adobe\acrotray.exe (Trojan.Downloader) -> No action taken.
C:\Program Files\Adobe\acrotray .exe (Trojan.Downloader) -> No action taken.
C:\Program Files\Microsoft ActiveSync\wcescomm .exe (Trojan.Downloader) -> No action taken.
C:\Program Files\Microsoft ActiveSync\wcescomm .exe (Trojan.Downloader) -> No action taken.
C:\Program Files\Messenger\msmsgs.exe (Trojan.Downloader) -> No action taken.
C:\Program Files\Skype\Phone\skype.exe (Trojan.Downloader) -> No action taken.
C:\WINDOWS\system32\soundman.exe (Trojan.Downloader) -> No action taken.
C:\WINDOWS\system32\idkaun.exe (Trojan.Downloader) -> No action taken.
C:\WINDOWS\system32\idkaun .exe (Trojan.Downloader) -> No action taken.
C:\Documents and Settings\DP\Local Settings\Temp\ctv15387.exe (Trojan.Downloader) -> No action taken.
C:\Documents and Settings\DP\Local Settings\Temp\ctv1572.exe (Trojan.Downloader) -> No action taken.
C:\Documents and Settings\DP\Local Settings\Temp\ctv2125.exe (Trojan.Downloader) -> No action taken.
C:\Documents and Settings\DP\Local Settings\Temp\ctv3217.exe (Trojan.Downloader) -> No action taken.
C:\Documents and Settings\DP\soundman.exe (Trojan.Downloader) -> No action taken.
C:\WINDOWS\system32\kr_done1 (Malware.Trace) -> No action taken.

Příspěvekod **jaro3** » 19 lis 2009 22:42

MbAM asi udělal pár chyb...

. Takže spusť znovu MbAM a dej Scan
- po proběhnutí programu se ti objeví hláška tak klikni na OK a pak na tlačítko Ukaž výsledky
Nech zatržítka pouze u:

Kód: Vybrat vše

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\kr_done1 (Malware.Trace) -> No action taken.

C:\WINDOWS\system32\idkaun.exe (Trojan.Downloader) -> No action taken.
C:\WINDOWS\system32\idkaun .exe (Trojan.Downloader) -> No action taken.
C:\Documents and Settings\DP\Local Settings\Temp\ctv15387.exe (Trojan.Downloader) -> No action taken.
C:\Documents and Settings\DP\Local Settings\Temp\ctv1572.exe (Trojan.Downloader) -> No action taken.
C:\Documents and Settings\DP\Local Settings\Temp\ctv2125.exe (Trojan.Downloader) -> No action taken.
C:\Documents and Settings\DP\Local Settings\Temp\ctv3217.exe (Trojan.Downloader) -> No action taken.
C:\WINDOWS\system32\kr_done1 (Malware.Trace) -> No action taken.

a klikni na tlačítko Odstranit označené
- když skončí odstraňování tak se ti zobrazí log, tak ho sem dej.
- pak zvol v programu OK a pak program ukonči přes Exit

Můžeš sem pak vložit log z MbAM.

Vypni rez. ochrany+firewall u ESET Smart Security

Stáhni si ComboFix (by sUBs)
a ulož si ho na plochu.
Ukonči všechna aktivní okna a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah

Podívám se zítra.

pechytce · Příspěvekod **pechytce** » 20 lis 2009 08:15

Tak , tady je ten mbam

Malwarebytes' Anti-Malware 1.41
Verze databáze: 3201
Windows 5.1.2600 Service Pack 3

20.11.2009 8:14:22
mbam-log-2009-11-20 (08-14-22).txt

Typ kontroly: Rychlá kontrola
Zkontrolované objekty: 112421
Uplynulý čas: 15 minute(s), 2 second(s)

Infikované procesy v paměti: 17
Infikované moduly v paměti: 0
Infikované klíče registru: 19
Infikované hodnoty registru: 6
Infikované datové položky registru: 0
Infikované adresáře: 0
Infikované soubory: 16

Infikované procesy v paměti:
C:\Program Files\Adobe\acrotray .exe (Trojan.Downloader) -> Not selected for removal.
C:\Program Files\Adobe\acrotray .exe (Trojan.Downloader) -> Not selected for removal.
C:\Program Files\Adobe\acrotray.exe (Trojan.Downloader) -> Not selected for removal.
C:\Program Files\Adobe\acrotray.exe (Trojan.Downloader) -> Not selected for removal.
C:\Program Files\Messenger\msmsgs.exe (Trojan.Downloader) -> Not selected for removal.
C:\Program Files\Messenger\msmsgs.exe (Trojan.Downloader) -> Not selected for removal.
C:\Program Files\Microsoft ActiveSync\wcescomm .exe (Trojan.Downloader) -> Not selected for removal.
C:\Program Files\Microsoft ActiveSync\wcescomm .exe (Trojan.Downloader) -> Not selected for removal.
C:\Program Files\Microsoft ActiveSync\wcescomm .exe (Trojan.Downloader) -> Not selected for removal.
C:\Program Files\Skype\Phone\skype.exe (Trojan.Downloader) -> Not selected for removal.
C:\Program Files\Skype\Phone\skype.exe (Trojan.Downloader) -> Not selected for removal.
C:\WINDOWS\system32\idkaun .exe (Trojan.Downloader) -> Unloaded process successfully.
C:\WINDOWS\system32\idkaun .exe (Trojan.Downloader) -> Not selected for removal.
C:\WINDOWS\system32\idkaun.exe (Trojan.Downloader) -> Not selected for removal.
C:\WINDOWS\system32\idkaun.exe (Trojan.Downloader) -> Not selected for removal.
C:\WINDOWS\system32\soundman.exe (Trojan.Downloader) -> Not selected for removal.
C:\WINDOWS\system32\soundman.exe (Trojan.Downloader) -> Not selected for removal.

Infikované moduly v paměti:
(Nebyly nalezeny žádné škodlivé položky)

Infikované klíče registru:
HKEY_CLASSES_ROOT\Interface\{06f6ea9d-88b0-45a9-9f26-ce0898d9ea1c} (Trojan.Downloader) -> Not selected for removal.
HKEY_CLASSES_ROOT\Interface\{218cb451-20b6-11d2-8e17-0000f803a446} (Trojan.Downloader) -> Not selected for removal.
HKEY_CLASSES_ROOT\Interface\{218cb453-20b6-11d2-8e17-0000f803a446} (Trojan.Downloader) -> Not selected for removal.
HKEY_CLASSES_ROOT\Interface\{218cb454-20b6-11d2-8e17-0000f803a446} (Trojan.Downloader) -> Not selected for removal.
HKEY_CLASSES_ROOT\Interface\{218cb455-20b6-11d2-8e17-0000f803a446} (Trojan.Downloader) -> Not selected for removal.
HKEY_CLASSES_ROOT\Interface\{218cb456-20b6-11d2-8e17-0000f803a446} (Trojan.Downloader) -> Not selected for removal.
HKEY_CLASSES_ROOT\Interface\{28e28123-7dc5-45d3-860e-8ee1c3681bd5} (Trojan.Downloader) -> Not selected for removal.
HKEY_CLASSES_ROOT\Interface\{35edd1cc-1a8c-11d2-b49d-00c04fb90376} (Trojan.Downloader) -> Not selected for removal.
HKEY_CLASSES_ROOT\Interface\{35edd1cd-1a8c-11d2-b49d-00c04fb90376} (Trojan.Downloader) -> Not selected for removal.
HKEY_CLASSES_ROOT\Interface\{659ecad8-a5c0-11d2-a440-00c04f795683} (Trojan.Downloader) -> Not selected for removal.
HKEY_CLASSES_ROOT\Interface\{659ecad9-a5c0-11d2-a440-00c04f795683} (Trojan.Downloader) -> Not selected for removal.
HKEY_CLASSES_ROOT\Interface\{6fd143e6-20a5-11d2-91ad-0000f81fefc9} (Trojan.Downloader) -> Not selected for removal.
HKEY_CLASSES_ROOT\Interface\{82e11592-20f5-11d2-91ad-0000f81fefc9} (Trojan.Downloader) -> Not selected for removal.
HKEY_CLASSES_ROOT\Interface\{97c3808a-eca1-4ca6-8d09-122a3cc54b3b} (Trojan.Downloader) -> Not selected for removal.
HKEY_CLASSES_ROOT\Interface\{c9a6a6b6-9bc1-43a5-b06b-e58874eebc96} (Trojan.Downloader) -> Not selected for removal.
HKEY_CLASSES_ROOT\Interface\{cb643558-61cd-42b2-a9a5-496a7884ad61} (Trojan.Downloader) -> Not selected for removal.
HKEY_CLASSES_ROOT\Interface\{f3a614dd-abe0-11d2-a441-00c04f795683} (Trojan.Downloader) -> Not selected for removal.
HKEY_CLASSES_ROOT\Interface\{ff55d627-cf5b-40de-850f-62d20bc241c8} (Trojan.Downloader) -> Not selected for removal.
HKEY_CLASSES_ROOT\TypeLib\{218cb45f-20b6-11d2-8e17-0000f803a446} (Trojan.Downloader) -> Not selected for removal.

Infikované hodnoty registru:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\h/pc connection agent (Trojan.Downloader) -> Not selected for removal.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\msmsgs (Trojan.Downloader) -> Not selected for removal.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\skype (Trojan.Downloader) -> Not selected for removal.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\adobe_reader (Trojan.Downloader) -> Not selected for removal.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\idkaun (Trojan.Downloader) -> Not selected for removal.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\kr_done1 (Malware.Trace) -> Quarantined and deleted successfully.

Infikované datové položky registru:
(Nebyly nalezeny žádné škodlivé položky)

Infikované adresáře:
(Nebyly nalezeny žádné škodlivé položky)

Infikované soubory:
C:\Documents and Settings\DP\Local Settings\Temp\ctv15387.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Documents and Settings\DP\Local Settings\Temp\ctv1572.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Documents and Settings\DP\Local Settings\Temp\ctv2125.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Documents and Settings\DP\Local Settings\Temp\ctv3217.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Program Files\Adobe\acrotray .exe (Trojan.Downloader) -> Not selected for removal.
C:\Program Files\Adobe\acrotray.exe (Trojan.Downloader) -> Not selected for removal.
C:\Program Files\Messenger\msmsgs.exe (Trojan.Downloader) -> Not selected for removal.
C:\Program Files\Microsoft ActiveSync\wcescomm .exe (Trojan.Downloader) -> Not selected for removal.
C:\Program Files\Microsoft ActiveSync\wcescomm .exe (Trojan.Downloader) -> Not selected for removal.
C:\Program Files\Skype\Phone\skype.exe (Trojan.Downloader) -> Not selected for removal.
C:\WINDOWS\system32\idkaun .exe (Trojan.Downloader) -> Delete on reboot.
C:\WINDOWS\system32\idkaun.exe (Trojan.Downloader) -> Not selected for removal.
C:\WINDOWS\system32\idkaun.exe.delme53 (Trojan.Downloader) -> Not selected for removal.
C:\WINDOWS\system32\idkaun.exe.delme863 (Trojan.Downloader) -> Not selected for removal.
C:\WINDOWS\system32\kr_done1 (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\soundman.exe (Trojan.Downloader) -> Not selected for removal.

Příspěvekod **jaro3** » 20 lis 2009 08:25

Toto otestuj na Virustotal
C:\WINDOWS\system32\soundman.exe
C:\Program Files\Adobe\acrotray .exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Microsoft ActiveSync\wcescomm .exe
C:\Program Files\Skype\Phone\skype.exe
Vlož sem pak odkazy výsledků.

Pak ten Combofix, jak je napsáno výše.

pechytce · Příspěvekod **pechytce** » 20 lis 2009 08:38

testuji prvni soubor a je 30ti ze 70ti odhalen vir , mam sem nejak poslat treba screen nebo jen takhle psat ??? diky

pechytce · Příspěvekod **pechytce** » 20 lis 2009 08:41

aha uz to vidim , zkopirovat do okna a dat sem , uz to vidim ...sorry

pechytce · Příspěvekod **pechytce** » 20 lis 2009 08:42

Soubor acrotray.exe přijatý 2009.11.20 07:39:13 (UTC)
Antivirus Verze Poslední aktualizace Výsledek
a-squared 4.5.0.41 2009.11.20 Trojan-Downloader.Win32.Unruy!IK
AhnLab-V3 5.0.0.2 2009.11.19 -
AntiVir 7.9.1.72 2009.11.19 TR/Click.Cycler.gq
Antiy-AVL 2.0.3.7 2009.11.20 Trojan/Win32.Cycler.gen
Authentium 5.2.0.5 2009.11.19 W32/Unruy.A.gen!Eldorado
Avast 4.8.1351.0 2009.11.19 Win32:Trojan-gen
AVG 8.5.0.425 2009.11.19 Generic15.AYOP
BitDefender 7.2 2009.11.20 Trojan.Generic.2674086
CAT-QuickHeal 10.00 2009.11.19 Win32.Trojan-Clicker.Cycler.gq.3
ClamAV 0.94.1 2009.11.20 -
Comodo 2983 2009.11.19 TrojWare.Win32.TrojanDownloader.Agent.~EDZ
DrWeb 5.0.0.12182 2009.11.19 -
eSafe 7.0.17.0 2009.11.19 -
eTrust-Vet 35.1.7132 2009.11.20 Win32/Cycler.A
F-Prot 4.5.1.85 2009.11.19 W32/Unruy.A.gen!Eldorado
F-Secure 9.0.15370.0 2009.11.17 -
Fortinet 3.120.0.0 2009.11.20 W32/Cycler.GQ!tr
GData 19 2009.11.20 Trojan.Generic.2674086
Ikarus T3.1.1.74.0 2009.11.20 Trojan-Downloader.Win32.Unruy
Jiangmin 11.0.800 2009.11.20 TrojanClicker.Cycler.d
K7AntiVirus 7.10.900 2009.11.19 Trojan.Win32.Malware.4
Kaspersky 7.0.0.125 2009.11.20 Trojan-Clicker.Win32.Cycler.gq
McAfee 5807 2009.11.19 Downloader-BPA.b
McAfee+Artemis 5807 2009.11.19 Downloader-BPA.b
McAfee-GW-Edition 6.8.5 2009.11.20 Heuristic.LooksLike.Win32.Trojan.L
Microsoft 1.5302 2009.11.20 TrojanDownloader:Win32/Unruy.C
NOD32 4623 2009.11.19 Win32/TrojanDownloader.Unruy.AT
Norman 6.03.02 2009.11.19 W32/DLoader.ABNJN
nProtect 2009.1.8.0 2009.11.20 -
Panda 10.0.2.2 2009.11.20 -
PCTools 7.0.3.5 2009.11.20 Downloader.Generic
Prevx 3.0 2009.11.20 -
Rising 22.22.04.03 2009.11.20 Trojan.DL.Win32.Unruy.b
Sophos 4.47.0 2009.11.20 Troj/Clickr-N
Sunbelt 3.2.1858.2 2009.11.19 Trojan.Win32.Generic!BT
Symantec 1.4.4.12 2009.11.20 Downloader
TheHacker 6.5.0.2.074 2009.11.19 -
TrendMicro 9.0.0.1003 2009.11.20 -
VBA32 3.12.12.0 2009.11.20 Trojan-Clicker.Win32.Cycler.gq
ViRobot 2009.11.20.2046 2009.11.20 Trojan.Win32.Clicker.39446
VirusBuster 5.0.21.0 2009.11.19 Trojan.CL.Cycler.A
Rozšiřující informace
File size: 125734 bytes
MD5...: 6a25556474a430de42862a05fad2ce2f
SHA1..: a8b2085b7ba781b29d4008bf8646f3c0d60ff785
SHA256: 9bfcc15caa191335deb603cdf2c0927591e76d19f4b179cf07d760d608b8b59b
ssdeep: 3072:o77/KSRNddvzL+nlAuRDDWTqRJ80EbYspbt/w15urCNRqk1avDlK4wwdVX: caQbtI15urCf18BAMZ 
PEiD..: -
PEInfo: PE Structure information ( base data ) entrypointaddress.: 0x3793 timedatestamp.....: 0x4afca942 (Fri Nov 13 00:33:06 2009) machinetype.......: 0x14c (I386) ( 3 sections ) name viradd virsiz rawdsiz ntrpy md5 .text 0x1000 0x2872 0x2a00 5.72 af005d893cedae30383258880ff35aa3 .rdata 0x4000 0x2d2 0x400 3.67 6f8be490d6654fa2ecd8dad5eeae3552 .data 0x5000 0x15534 0x6800 6.86 4bb2c299f7d93f8ca890edd9cf3978b0 ( 2 imports ) > KERNEL32.dll: GetFileAttributesExA, HeapDestroy, HeapFree, HeapCreate, Sleep, HeapAlloc, GetProcessHeap, CloseHandle, ReadFile, SetFilePointer, QueryPerformanceCounter, CreateFileA, ExitProcess, GetModuleFileNameA, GetProcAddress, LoadLibraryA, VirtualAlloc, VirtualFree, IsBadReadPtr, lstrcmpiA, FreeLibrary, GetStartupInfoA, GetModuleHandleA, HeapReAlloc, GetCommandLineA > USER32.dll: wvsprintfA ( 0 exports ) 
RDS...: NSRL Reference Data Set -
pdfid.: -
trid..: Win32 Executable Generic (42.3%) Win32 Dynamic Link Library (generic) (37.6%) Generic Win/DOS Executable (9.9%) DOS Executable Generic (9.9%) Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%)
sigcheck: publisher....: n/a copyright....: n/a product......: n/a description..: n/a original name: n/a internal name: n/a file version.: n/a comments.....: n/a signers......: - signing date.: - verified.....: Unsigned

pechytce · Příspěvekod **pechytce** » 20 lis 2009 08:43

Soubor soundman.exe přijatý 2009.11.20 07:33:19 (UTC)
Antivirus Verze Poslední aktualizace Výsledek
a-squared 4.5.0.41 2009.11.20 Trojan-Downloader.Win32.Unruy!IK
AhnLab-V3 5.0.0.2 2009.11.19 -
AntiVir 7.9.1.72 2009.11.19 TR/Click.Cycler.gq
Antiy-AVL 2.0.3.7 2009.11.20 Trojan/Win32.Cycler.gen
Authentium 5.2.0.5 2009.11.19 W32/Unruy.A.gen!Eldorado
Avast 4.8.1351.0 2009.11.19 Win32:Trojan-gen
AVG 8.5.0.425 2009.11.19 Generic15.AYOP
BitDefender 7.2 2009.11.20 Trojan.Generic.2674086
CAT-QuickHeal 10.00 2009.11.19 Win32.Trojan-Clicker.Cycler.gq.3
ClamAV 0.94.1 2009.11.20 -
Comodo 2983 2009.11.19 TrojWare.Win32.TrojanDownloader.Agent.~EDZ
DrWeb 5.0.0.12182 2009.11.19 -
eSafe 7.0.17.0 2009.11.19 -
eTrust-Vet 35.1.7132 2009.11.20 Win32/Cycler.A
F-Prot 4.5.1.85 2009.11.19 W32/Unruy.A.gen!Eldorado
F-Secure 9.0.15370.0 2009.11.17 -
Fortinet 3.120.0.0 2009.11.20 W32/Cycler.GQ!tr
GData 19 2009.11.20 Trojan.Generic.2674086
Ikarus T3.1.1.74.0 2009.11.20 Trojan-Downloader.Win32.Unruy
Jiangmin 11.0.800 2009.11.20 TrojanClicker.Cycler.d
K7AntiVirus 7.10.900 2009.11.19 Trojan.Win32.Malware.4
Kaspersky 7.0.0.125 2009.11.20 Trojan-Clicker.Win32.Cycler.gq
McAfee 5807 2009.11.19 Downloader-BPA.b
McAfee+Artemis 5807 2009.11.19 Downloader-BPA.b
McAfee-GW-Edition 6.8.5 2009.11.20 Heuristic.BehavesLike.Win32.Suspicious.L
Microsoft 1.5302 2009.11.20 TrojanDownloader:Win32/Unruy.C
NOD32 4623 2009.11.19 Win32/TrojanDownloader.Unruy.AT
Norman 6.03.02 2009.11.19 W32/DLoader.ABNJN
nProtect 2009.1.8.0 2009.11.20 -
Panda 10.0.2.2 2009.11.20 -
PCTools 7.0.3.5 2009.11.20 Downloader.Generic
Prevx 3.0 2009.11.20 -
Rising 22.22.04.03 2009.11.20 Trojan.DL.Win32.Unruy.b
Sophos 4.47.0 2009.11.20 Troj/Clickr-N
Sunbelt 3.2.1858.2 2009.11.19 -
Symantec 1.4.4.12 2009.11.20 Downloader
TheHacker 6.5.0.2.074 2009.11.19 -
TrendMicro 9.0.0.1003 2009.11.20 -
VBA32 3.12.12.0 2009.11.20 Trojan-Clicker.Win32.Cycler.gq
ViRobot 2009.11.20.2046 2009.11.20 Trojan.Win32.Clicker.39446
VirusBuster 5.0.21.0 2009.11.19 Trojan.CL.Cycler.A
Rozšiřující informace
File size: 96938 bytes
MD5   : edcd120cc5e18988a720fbabd6044837
SHA1  : 7dffc7362d917eb7e5ec7cffd319e781db7d4a9f
SHA256: e0d5d4b5cdd00aca6f11282ba32e4106be7da4941d98dcc75a479019a7871754
PEInfo: PE Structure information ( base data ) entrypointaddress.: 0x3793 timedatestamp.....: 0x4AFCA942 (Fri Nov 13 01:33:06 2009) machinetype.......: 0x14C (Intel I386) ( 3 sections ) name viradd virsiz rawdsiz ntrpy md5 .text 0x1000 0x2872 0x2A00 5.72 af005d893cedae30383258880ff35aa3 .rdata 0x4000 0x2D2 0x400 3.67 6f8be490d6654fa2ecd8dad5eeae3552 .data 0x5000 0x15534 0x6800 6.86 4bb2c299f7d93f8ca890edd9cf3978b0 ( 2 imports ) > kernel32.dll: GetFileAttributesExA, HeapDestroy, HeapFree, HeapCreate, Sleep, HeapAlloc, GetProcessHeap, CloseHandle, ReadFile, SetFilePointer, QueryPerformanceCounter, CreateFileA, ExitProcess, GetModuleFileNameA, GetProcAddress, LoadLibraryA, VirtualAlloc, VirtualFree, IsBadReadPtr, lstrcmpiA, FreeLibrary, GetStartupInfoA, GetModuleHandleA, HeapReAlloc, GetCommandLineA > user32.dll: wvsprintfA ( 0 exports ) 
TrID  : File type identification Win32 Executable Generic (42.3%) Win32 Dynamic Link Library (generic) (37.6%) Generic Win/DOS Executable (9.9%) DOS Executable Generic (9.9%) Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%)
ssdeep: 1536:o77/KSRNddvzL+nlAuRDDWTqRJWx02X0yYD4uM/BS2GI/TkU4tnurTuBcKgIRnSt:o77/KSRNddvzL+nlAuRDDWTqRJ80EbYQ
PEiD  : -
RDS   : NSRL Reference Data Set -

Antivirus;Verze;Poslední aktualizace;Výsledek
a-squared;4.5.0.41;2009.11.20;Trojan-Downloader.Win32.Unruy!IK
AhnLab-V3;5.0.0.2;2009.11.19;-
AntiVir;7.9.1.72;2009.11.19;TR/Click.Cycler.gq
Antiy-AVL;2.0.3.7;2009.11.20;Trojan/Win32.Cycler.gen
Authentium;5.2.0.5;2009.11.19;W32/Unruy.A.gen!Eldorado
Avast;4.8.1351.0;2009.11.19;Win32:Trojan-gen
AVG;8.5.0.425;2009.11.19;Generic15.AYOP
BitDefender;7.2;2009.11.20;Trojan.Generic.2674086
CAT-QuickHeal;10.00;2009.11.19;Win32.Trojan-Clicker.Cycler.gq.3
ClamAV;0.94.1;2009.11.20;-
Comodo;2983;2009.11.19;TrojWare.Win32.TrojanDownloader.Agent.~EDZ
DrWeb;5.0.0.12182;2009.11.19;-
eSafe;7.0.17.0;2009.11.19;-
eTrust-Vet;35.1.7132;2009.11.20;Win32/Cycler.A
F-Prot;4.5.1.85;2009.11.19;W32/Unruy.A.gen!Eldorado
F-Secure;9.0.15370.0;2009.11.17;-
Fortinet;3.120.0.0;2009.11.20;W32/Cycler.GQ!tr
GData;19;2009.11.20;Trojan.Generic.2674086
Ikarus;T3.1.1.74.0;2009.11.20;Trojan-Downloader.Win32.Unruy
Jiangmin;11.0.800;2009.11.20;TrojanClicker.Cycler.d
K7AntiVirus;7.10.900;2009.11.19;Trojan.Win32.Malware.4
Kaspersky;7.0.0.125;2009.11.20;Trojan-Clicker.Win32.Cycler.gq
McAfee;5807;2009.11.19;Downloader-BPA.b
McAfee+Artemis;5807;2009.11.19;Downloader-BPA.b
McAfee-GW-Edition;6.8.5;2009.11.20;Heuristic.BehavesLike.Win32.Suspicious.L
Microsoft;1.5302;2009.11.20;TrojanDownloader:Win32/Unruy.C
NOD32;4623;2009.11.19;Win32/TrojanDownloader.Unruy.AT
Norman;6.03.02;2009.11.19;W32/DLoader.ABNJN
nProtect;2009.1.8.0;2009.11.20;-
Panda;10.0.2.2;2009.11.20;-
PCTools;7.0.3.5;2009.11.20;Downloader.Generic
Prevx;3.0;2009.11.20;-
Rising;22.22.04.03;2009.11.20;Trojan.DL.Win32.Unruy.b
Sophos;4.47.0;2009.11.20;Troj/Clickr-N
Sunbelt;3.2.1858.2;2009.11.19;-
Symantec;1.4.4.12;2009.11.20;Downloader
TheHacker;6.5.0.2.074;2009.11.19;-
TrendMicro;9.0.0.1003;2009.11.20;-
VBA32;3.12.12.0;2009.11.20;Trojan-Clicker.Win32.Cycler.gq
ViRobot;2009.11.20.2046;2009.11.20;Trojan.Win32.Clicker.39446
VirusBuster;5.0.21.0;2009.11.19;Trojan.CL.Cycler.A

Rozšiřující informace
File size: 96938 bytes
MD5   : edcd120cc5e18988a720fbabd6044837
SHA1  : 7dffc7362d917eb7e5ec7cffd319e781db7d4a9f
SHA256: e0d5d4b5cdd00aca6f11282ba32e4106be7da4941d98dcc75a479019a7871754
PEInfo: PE Structure information ( base data ) entrypointaddress.: 0x3793 timedatestamp.....: 0x4AFCA942 (Fri Nov 13 01:33:06 2009) machinetype.......: 0x14C (Intel I386) ( 3 sections ) name viradd virsiz rawdsiz ntrpy md5 .text 0x1000 0x2872 0x2A00 5.72 af005d893cedae30383258880ff35aa3 .rdata 0x4000 0x2D2 0x400 3.67 6f8be490d6654fa2ecd8dad5eeae3552 .data 0x5000 0x15534 0x6800 6.86 4bb2c299f7d93f8ca890edd9cf3978b0 ( 2 imports ) > kernel32.dll: GetFileAttributesExA, HeapDestroy, HeapFree, HeapCreate, Sleep, HeapAlloc, GetProcessHeap, CloseHandle, ReadFile, SetFilePointer, QueryPerformanceCounter, CreateFileA, ExitProcess, GetModuleFileNameA, GetProcAddress, LoadLibraryA, VirtualAlloc, VirtualFree, IsBadReadPtr, lstrcmpiA, FreeLibrary, GetStartupInfoA, GetModuleHandleA, HeapReAlloc, GetCommandLineA > user32.dll: wvsprintfA ( 0 exports ) 
TrID  : File type identification Win32 Executable Generic (42.3%) Win32 Dynamic Link Library (generic) (37.6%) Generic Win/DOS Executable (9.9%) DOS Executable Generic (9.9%) Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%)
ssdeep: 1536:o77/KSRNddvzL+nlAuRDDWTqRJWx02X0yYD4uM/BS2GI/TkU4tnurTuBcKgIRnSt:o77/KSRNddvzL+nlAuRDDWTqRJ80EbYQ
PEiD  : -
RDS   : NSRL Reference Data Set -

zacalo to smtp Vyřešeno

zacalo to smtp Vyřešeno

Re: zacalo to smtp

Re: zacalo to smtp

Re: zacalo to smtp

Re: zacalo to smtp

Re: zacalo to smtp

Re: zacalo to smtp

Re: zacalo to smtp

Re: zacalo to smtp

Re: zacalo to smtp

Re: zacalo to smtp

Re: zacalo to smtp

Kdo je online