Prosím o kontrolu logu

[bacoss]

Prosím o kontrolu, myslím, že tam mám nějakou havěť, díky

Logfile of HijackThis v1.99.1
Scan saved at 12:09:27, on 25.2.2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Analog Devices\SoundMAX\Smtray.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Prevx1\PXConsole.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Prevx1\PXAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\ICQLite\ICQLite.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Documents and Settings\Jura Acsay\Plocha\Stahování na Plochu\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://google.icq.com/search/search_frame.php
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://google.icq.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQToolbar\toolbaru.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: Malicious Scripts Scanner - {55EA1964-F5E4-4D6A-B9B2-125B37655FCB} - C:\Documents and Settings\All Users\Data aplikací\Prevx\pxbho.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQToolbar\toolbaru.dll
O4 - HKLM\..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\Smtray.exe
O4 - HKLM\..\Run: [DrvListnr] C:\Program Files\Analog Devices\SoundMAX\DrvListnr.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [PrevxOne] "C:\Program Files\Prevx1\PXConsole.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\RunOnce: [ICQ Lite] C:\Program Files\ICQLite\ICQLite.exe -trayboot
O8 - Extra context menu item: &ICQ Toolbar Search - res://C:\Program Files\ICQToolbar\toolbaru.dll/SEARCH.HTML
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O20 - AppInit_DLLs: crypds16.dll
O20 - Winlogon Notify: sccsumdm - C:\WINDOWS\system32\sccsumdm.dll
O20 - Winlogon Notify: wmvmgr - wmvmgr32.dll (file missing)
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: InCD Helper (InCDsrv) - Ahead Software AG - C:\Program Files\Ahead\InCD\InCDsrv.exe
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - c:\Program Files\Intel\NCS\Sync\NetSvc.exe
O23 - Service: NVIDIA Display Driver Service (Omega 1.6693) (Q) (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Prevx Agent (PREVXAgent) - Unknown owner - C:\Program Files\Prevx1\PXAgent.exe" -f (file missing)
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

[Reklama]

[fredik]

Bohužel spěchám tak v rychlosti:

Postupuj podle tohoto návodu s Avengerem. Postup opakuj alespoň 2x za sebou.

Pak si stáhni Mwav Proveď update a spusť prohlídku přes tlačítko Scan & Clean (nesmíš mít zatrhnutou volbu Scan Only) co najde za potvory to odstraní. Po skončení prohlídky sem vlož z něho log stačí ten ze spodní části (Virus Log Information) před tím než dáš ok bude chtít Pc restartovat. Pak sem dej nový log z HJT na kontrolu

[bacoss]

něco asi dělám špatně, tak to zkusim později

[bacoss]

nevim, ale nedostalo se to sem celý, tak nevim, co s tim

[bacoss]

tady je ten výpis z Mwaw:

Sun Feb 25 13:00:53 2007 => System found infected with spylax Corrupted Adware/Spyware (C:\WINDOWS\unvise32.exe)! Action taken: Entries Removed.
Sun Feb 25 13:00:53 2007 => Object "spylax Corrupted Adware/Spyware" found in File System! Action Taken: Entries Removed.

Sun Feb 25 13:04:47 2007 => Scanning File C:\DOCUME~1\JardaC~1\LOCALS~1\Temp\Spyware.sdb [**]

Sun Feb 25 13:36:07 2007 => Loading Spy Signatures from new External Database [Name: C:\DOCUME~1\JardaC~1\LOCALS~1\Temp\spydb.avs, Size: 211465].

Sun Feb 25 13:37:16 2007 => File C:\WINDOWS\system32\avifwmer.dll infected by "Email-Worm.Win32.Warezov.lw" Virus! Action Taken: No Action Taken.

Sun Feb 25 13:37:22 2007 => File C:\WINDOWS\system32\crypds16.dll infected by "Email-Worm.Win32.Warezov.lw" Virus! Action Taken: No Action Taken.

Sun Feb 25 13:38:09 2007 => File C:\WINDOWS\system32\qdvddgrp.exe infected by "Email-Worm.Win32.Warezov.lw" Virus! Action Taken: No Action Taken.

Sun Feb 25 13:38:47 2007 => Scanning File C:\DOCUME~1\JardaC~1\LOCALS~1\Temp\Spyware.sdb

Sun Feb 25 13:38:52 2007 => ***** Scanning complete. *****

Sun Feb 25 13:38:52 2007 => Total Objects Scanned: 25716
Sun Feb 25 13:38:52 2007 => Total Critical Objects: 3
Sun Feb 25 13:38:52 2007 => Total Disinfected Objects: 0
Sun Feb 25 13:38:52 2007 => Total Objects Renamed: 0
Sun Feb 25 13:38:52 2007 => Total Deleted Objects: 0
Sun Feb 25 13:38:52 2007 => Total Errors: 3
Sun Feb 25 13:38:52 2007 => Time Elapsed: 00:11:18
Sun Feb 25 13:38:52 2007 => Virus Database Date: 2/25/2007
Sun Feb 25 13:38:52 2007 => Virus Database Count: 273190

Sun Feb 25 13:38:52 2007 => Scan Completed.

[fredik]

Dej sem nový log z HJT a zkus to znovu projet tím Mwav (nesmíš mít zatrhnutou volbu Scan Only) jestli i pak ti tam zůstanou ty tři soubory tak je odstraníme jinak.