Prosím o kontrolu logu z HijackThis.
Uz dva dny se mi pocitac po kratke dobe po zapnuti vypne... a naskoci modra obrazovka, tak bych rad zjistil, jestli se neco nenajde v logu...
na obrazovce je napsano, ze problem zpusobuje nasledujici file: atkdisp
dik moc
Logfile of HijackThis v1.99.1
Scan saved at 23:45:12, on 15.8.2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\DOCUME~1\LENK~1\LOCALS~1\Temp\mexe.com
C:\WINDOWS\system32\notepad.exe
C:\Program Files\HiJackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://google.icq.com/search/search_frame.php
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = devetsil.vse.cz:5555
R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
O2 - BHO: XTTBPos00 - {055FD26D-3A88-4e15-963D-DC8493744B1D} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0\bin\jusched.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [ICQ] "C:\Program Files\ICQ6\ICQ.exe" silent
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing)
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe (file missing)
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: EJJPATR - Unknown owner - C:\DOCUME~1\LENK~1\LOCALS~1\Temp\EJJPATR.exe (file missing)
O23 - Service: JALROFKPWCREHR - Sysinternals - http://www.sysinternals.com - C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\JALROFKPWCREHR.exe
O23 - Service: JDVHZMHAMX - Sysinternals - http://www.sysinternals.com - C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\JDVHZMHAMX.exe
O23 - Service: KDDQZX - Sysinternals - http://www.sysinternals.com - C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\KDDQZX.exe
O23 - Service: PPCBWS - Sysinternals - http://www.sysinternals.com - C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\PPCBWS.exe
O23 - Service: TBHHW - Unknown owner - C:\DOCUME~1\LENK~1\LOCALS~1\Temp\TBHHW.exe (file missing)
Prosím o kontrolu logu HiJackThis, dekuji
log vypadá v pořádku.ale zkus to proskenovat MWAV http://update3.mwti.net/download/tools/mwav.exe
a pak pošli log
a pak pošli log
vypis logu s MWAV
Tady posilam vypis logu z MWAV, prosim o kontrolu... diky moc
Fri Aug 17 00:38:34 2007 => ***** Scanning complete. *****
Fri Aug 17 00:38:34 2007 => Total Objects Scanned: 63207
Fri Aug 17 00:38:34 2007 => Total Critical Objects: 4
Fri Aug 17 00:38:34 2007 => Total Disinfected Objects: 0
Fri Aug 17 00:38:34 2007 => Total Objects Renamed: 0
Fri Aug 17 00:38:34 2007 => Total Deleted Objects: 0
Fri Aug 17 00:38:34 2007 => Total Errors: 84
Fri Aug 17 00:38:34 2007 => Time Elapsed: 00:26:11
Fri Aug 17 00:38:34 2007 => Virus Database Date: 5/10/2007
Fri Aug 17 00:38:34 2007 => Virus Database Count: 316304
Fri Aug 17 00:38:34 2007 => Scan Completed.
Wed Aug 15 22:16:56 2007 => Offending Key found: HKLM\Software\magnet !!!
Wed Aug 15 22:18:13 2007 => Object "grokster Spyware/Adware" found in File System! Action Taken: No Action Taken.
Wed Aug 15 22:18:14 2007 => Offending Key found: HKCU\\magnet !!!
Wed Aug 15 22:18:14 2007 => Object "grokster Spyware/Adware" found in File System! Action Taken: No Action Taken.
Wed Aug 15 22:18:16 2007 => Offending Folder found: C:\Documents and Settings\Leník\Data aplikací\icq\bart\1024
Wed Aug 15 22:18:16 2007 => Object "smitfraud Browser Hijacker" found in File System! Action Taken: No Action Taken.
ri Aug 17 00:14:39 2007 => Checking MountPoints2 Registry Key...
Fri Aug 17 00:14:39 2007 => Invalid Command Found in D\Shell\AutoRun\command: D:\setup.exe
Fri Aug 17 00:14:39 2007 => Offending Key found: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\D !!!
Fri Aug 17 00:14:39 2007 => Object "Possible Fujacks-type Worm" found in File System! Action Taken: No Action Taken.
Fri Aug 17 00:38:34 2007 => ***** Scanning complete. *****
Fri Aug 17 00:38:34 2007 => Total Objects Scanned: 63207
Fri Aug 17 00:38:34 2007 => Total Critical Objects: 4
Fri Aug 17 00:38:34 2007 => Total Disinfected Objects: 0
Fri Aug 17 00:38:34 2007 => Total Objects Renamed: 0
Fri Aug 17 00:38:34 2007 => Total Deleted Objects: 0
Fri Aug 17 00:38:34 2007 => Total Errors: 84
Fri Aug 17 00:38:34 2007 => Time Elapsed: 00:26:11
Fri Aug 17 00:38:34 2007 => Virus Database Date: 5/10/2007
Fri Aug 17 00:38:34 2007 => Virus Database Count: 316304
Fri Aug 17 00:38:34 2007 => Scan Completed.
Wed Aug 15 22:16:56 2007 => Offending Key found: HKLM\Software\magnet !!!
Wed Aug 15 22:18:13 2007 => Object "grokster Spyware/Adware" found in File System! Action Taken: No Action Taken.
Wed Aug 15 22:18:14 2007 => Offending Key found: HKCU\\magnet !!!
Wed Aug 15 22:18:14 2007 => Object "grokster Spyware/Adware" found in File System! Action Taken: No Action Taken.
Wed Aug 15 22:18:16 2007 => Offending Folder found: C:\Documents and Settings\Leník\Data aplikací\icq\bart\1024
Wed Aug 15 22:18:16 2007 => Object "smitfraud Browser Hijacker" found in File System! Action Taken: No Action Taken.
ri Aug 17 00:14:39 2007 => Checking MountPoints2 Registry Key...
Fri Aug 17 00:14:39 2007 => Invalid Command Found in D\Shell\AutoRun\command: D:\setup.exe
Fri Aug 17 00:14:39 2007 => Offending Key found: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\D !!!
Fri Aug 17 00:14:39 2007 => Object "Possible Fujacks-type Worm" found in File System! Action Taken: No Action Taken.
- Baron Prášil
- Master Level 7
- Příspěvky: 4882
- Registrován: červen 06
- Pohlaví:
- Stav:
Offline
jde o nějakej konflikt softwaru viz
http://www.google.cz/search?hl=cs&q=atk ... lr=lang_cs
log je v pořádku
http://www.google.cz/search?hl=cs&q=atk ... lr=lang_cs
log je v pořádku
Kdo je online
Uživatelé prohlížející si toto fórum: Žádní registrovaní uživatelé a 4 hosti