Podezření na vir / log z Hijack

Od: menee 31.07.10 02:17 odpovědí: 2 změna: 31.07.10 16:13

Na zrušeném webu videoton.cz mě Avast upozornil na vir.Udělal jsem antivirovou kontrolu i v nouzovém režimu programy Avast, Super antispyware, Spybot. Všechno bylo v pořádku až na Spybot v nouzovém režimu viz. screenshot (nevím jestli se nezbláznil nebo je utahanej) Jestli bych mohl někoho poprosit aby se mě podíval pro jistotu na log z Hijacku
Logifle of Trend Micro Hijack This v2.0.2
Scan saved at 01:22:44, on 31.7.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
H:WINDOWSExplorer.EXE
H:WINDOWSsystem32RunDLL32.exe
H:WINDOWSRTHDCPL.EXE
H:WINDOWSvsnpstd3.exe
H:WINDOWSsnpstd3.exe
H:WINDOWSFixCamera.exe
H:WINDOWSsnp325.exe
H:WINDOWSvsnp325.exe
H:Program FilesCommon FilesJavaJava Updatejusched.exe
H:PROGRA 1AVGAVGLS9avgtray.exe
H:Program FilesSpyware TerminatorSpywareTerminatorShield.exe
H:PROGRA 1ALWILS 1Avast5avastUI.exe
H:Program FilesCOMODOCOMODO Internet Securitycfp.exe
H:WINDOWSsystem32ctfmon.exe
H:Program FilesCommon FilesNeroLibNMIndexStoreSvr.exe
H:Program FilesMessengermsmsgs.exe
H:Program FilesuTorrentuTorrent.exe
H:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe
H:Program FilesSkypePhoneSkype.exe
H:Program FilesSpybot - Search & DestroyTeaTimer.exe
H:Program FilesSeznam.czpostak.exe
H:Program FilesSpyware TerminatorSpywareTerminatorUpdate.exe
H:Documents and SettingsAdministratorLocal SettingsData aplikacíGoogleUpdateGoogleUpdate.exe
H:Program FilesSUPERAntiSpywareSUPERAntiSpyware.exe
H:Program FilesICQ7.0ICQ.exe
H:Program FilesSkypePlugin ManagerskypePM.exe
H:Program FilesTechTrackerVersionTracker ProVersionTrackerPro.exe
H:Program Filesvghdvghd.exe
H:Program FilesvghdVirtuaGirl_downloader.exe
H:Program FilesMozilla Firefoxfirefox.exe
H:Program FileseMuleemule.exe
H:Program FilesLavasoftAd-AwareAAWTray.exe
H:PROGRA 1CrawlerCToolbar.exe
H:Program FilesMozilla Firefoxplugin-container.exe
H:Program FilesTrend MicroHijackThisHijackThis.exe
R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = About:Blank
R1 - HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyOverride = *.local
R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - H:Program FilesAVGAVGLS9ToolbarIEToolbar.dll
R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - H:Program FilesAsk.comGenericAskToolbar.dll
R3 - URLSearchHook: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - H:PROGRA 1Crawlerctbr.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - H:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelperShim.dll
O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - H:PROGRA 1Crawlerctbr.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - H:Program FilesAVGAVGLS9avgssie.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - H:PROGRA 1SPYBOT 1SDHelper.dll
O2 - BHO: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - H:Program FilesAVGAVGLS9ToolbarIEToolbar.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - H:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - H:Program FilesGoogleGoogleToolbarNotifier5.5.5126.1836swg.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - H:Program FilesAsk.comGenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - H:Program FilesJavajre6injp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - H:Program FilesJavajre6libdeployjqsiejqs_plugin.dll
O2 - BHO: Ukazatel S-Rank - {EA837F48-5AD1-443E-AE34-FFE03CBF3099} - H:Program FilesSeznam.czlisticka.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - H:Program FilesDAEMON Tools ToolbarDTToolbar.dll
O3 - Toolbar: &Crawler lišta - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - H:PROGRA 1Crawlerctbr.dll
O3 - Toolbar: AVG Security Toolbar - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - H:Program FilesAVGAVGLS9ToolbarIEToolbar.dll
O3 - Toolbar: aTube Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - H:Program FilesAsk.comGenericAskToolbar.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - H:Program FilesGoogleGoogle ToolbarGoogleToolbar_32.dll
O4 - HKLM..Run: [NvCplDaemon] RUNDLL32.EXE H:WINDOWSsystem32NvCpl.dll,NvStartup
O4 - HKLM..Run: [nwiz] nwiz.exe /install
O4 - HKLM..Run: [NeroFilterCheck] H:Program FilesCommon FilesNeroLibNeroCheck.exe
O4 - HKLM..Run: [NBKeyScan] "H:Program FilesNeroNero8Nero BackItUpNBKeyScan.exe"
O4 - HKLM..Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM..Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM..Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM..Run: [QuickTime Task] "H:Program FilesQuickTimeqttask.exe"-atboottime
O4 - HKLM..Run: [snpstd3] H:WINDOWSvsnpstd3.exe
O4 - HKLM..Run: [tsnpstd3] H:WINDOWSsnpstd3.exe
O4 - HKLM..Run: [FixCamera] H:WINDOWSFixCamera.exe
O4 - HKLM..Run: [tsnp325] H:WINDOWSsnp325.exe
O4 - HKLM..Run: [snp325] H:WINDOWSvsnp325.exe
O4 - HKLM..Run: [KernelFaultCheck] %systemroot%system32dumprep 0 -k
O4 - HKLM..Run: [SunJavaUpdateSched] "H:Program FilesCommon FilesJavaJava Updatejusched.exe"
O4 - HKLM..Run: [AVG9_TRAY] H:PROGRA 1AVGAVGLS9avgtray.exe
O4 - HKLM..Run: [SpywareTerminator] "H:Program FilesSpyware TerminatorSpywareTerminatorShield.exe"
O4 - HKLM..Run: [avast5] H:PROGRA 1ALWILS 1Avast5avastUI.exe /nogui
O4 - HKLM..Run: [COMODO Internet Security] "H:Program FilesCOMODOCOMODO Internet Securitycfp.exe"-h
O4 - HKLM..Run: [Adobe Reader Speed Launcher] "H:Program FilesAdobeReader 9.0ReaderReader_sl.exe"
O4 - HKLM..Run: [Adobe ARM] "H:Program FilesCommon FilesAdobeARM1.0AdobeARM.exe"
O4 - HKCU..Run: [CTFMON.EXE] H:WINDOWSsystem32ctfmon.exe
O4 - HKCU..Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "H:Program FilesCommon FilesNeroLibNMIndexStoreSvr.exe"ASO-616B5711-6DAE-4795-A05F-39A1E5104020
O4 - HKCU..Run: [MSMSGS] "H:Program FilesMessengermsmsgs.exe"/background
O4 - HKCU..Run: [uTorrent] "H:Program FilesuTorrentuTorrent.exe"
O4 - HKCU..Run: [DAEMON Tools Lite] "H:Program FilesDAEMON Tools LiteDTLite.exe"-autorun
O4 - HKCU..Run: [swg] "H:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe"
O4 - HKCU..Run: [Skype] "H:Program FilesSkypePhoneSkype.exe"/nosplash /minimized
O4 - HKCU..Run: [SpybotSD TeaTimer] H:Program FilesSpybot - Search & DestroyTeaTimer.exe
O4 - HKCU..Run: [Seznam Postak] "H:Program FilesSeznam.czpostak.exe"-s
O4 - HKCU..Run: [SpywareTerminatorUpdate] "H:Program FilesSpyware TerminatorSpywareTerminatorUpdate.exe"
O4 - HKCU..Run: [Google Update] "H:Documents and SettingsAdministratorLocal SettingsData aplikacíGoogleUpdateGoogleUpdate.exe"/c
O4 - HKCU..Run: [SUPERAntiSpyware] H:Program FilesSUPERAntiSpywareSUPERAntiSpyware.exe
O4 - HKCU..Run: [ICQ] "H:Program FilesICQ7.0ICQ.exe"silent loginmode=4
O4 - HKUSS-1-5-18..Run: [CTFMON.EXE] H:WINDOWSsystem32CTFMON.EXE (User SYSTEM)
O4 - HKUS.DEFAULT..Run: [CTFMON.EXE] H:WINDOWSsystem32CTFMON.EXE (User Default user)
O4 - Startup: DesktopVideoPlayer.LNK = H:Program Filesvghdvghd.exe
O4 - Global Startup: VersionTrackerPro.lnk
O8 - Extra context menu item: &Download with SupersonicDownloadAccelerator! - H:Program FilesSupersonic Download Acceleratorsupersonicdownloadaccelerator.htm
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://H:WINDOWSsystem32GPhotos.scr/200
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: E&xport to Microsoft Excel - res://H:PROGRA 1MICROS 2OFFICE11EXCEL.EXE/3000
O9 - Extra button: Nastavení Lištičky ... - {0E46D7B6-887D-4F81-B4CA-FCC92AF73610} - H:Program FilesSeznam.czlisticka.dll
O9 - Extra Tools menuitem: Nastavení Lištičky ... - {0E46D7B6-887D-4F81-B4CA-FCC92AF73610} - H:Program FilesSeznam.czlisticka.dll
O9 - Extra button: Zvýrazňovač slov Lištičky - {4E6D6F90-31CA-4878-A7A3-1CD50F115A69} - H:Program FilesSeznam.czlisticka.dll
O9 - Extra Tools menuitem: Zvýrazňovač slov Lištičky - {4E6D6F90-31CA-4878-A7A3-1CD50F115A69} - H:Program FilesSeznam.czlisticka.dll
O9 - Extra button: ICQ7 - {88EB38EF-4D2C-436D-ABD3-56B232674062} - H:Program FilesICQ7.0ICQ.exe
O9 - Extra Tools menuitem: ICQ7 - {88EB38EF-4D2C-436D-ABD3-56B232674062} - H:Program FilesICQ7.0ICQ.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - H:PROGRA 1MICROS 2OFFICE11REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - H:PROGRA 1SPYBOT 1SDHelper.dll
O9 - Extra Tools menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - H:PROGRA 1SPYBOT 1SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - H:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 - Extra Tools menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - H:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - H:Program FilesMessengermsmsgs.exe
O9 - Extra Tools menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - H:Program FilesMessengermsmsgs.exe
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - cdn.scan.onecare.live.com/...
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - update.microsoft.com/...
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553550000} - fpdownload2.macromedia.co/...
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - platformdl.adobe.com/...
O18 - Protocol: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - H:Program FilesAVGAVGLS9ToolbarIEToolbar.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - H:Program FilesAVGAVGLS9avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - H:PROGRA 1COMMON 1SkypeSKYPE4 1.DLL
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - H:PROGRA 1Crawlerctbr.dll
O20 - AppInit_DLLs: H:WINDOWSsystem32guard32.dll
O20 - Winlogon Notify:!SASWinLogon - H:Program FilesSUPERAntiSpywareSASWINLO.DLL
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - H:WINDOWSATKKBService.exe
O23 - Service: avast! Antivirus - AVAST Software - H:Program FilesAlwil SoftwareAvast5AvastSvc.exe
O23 - Service: avast! Mail Scanner - AVAST Software - H:Program FilesAlwil SoftwareAvast5AvastSvc.exe
O23 - Service: avast! Web Scanner - AVAST Software - H:Program FilesAlwil SoftwareAvast5AvastSvc.exe
O23 - Service: AVG Security Toolbar Service - Unknown owner - H:Program FilesAVGAVGLS9ToolbarToolbarBroker.exe
O23 - Service: AVG LinkScanner®9 WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - H:Program FilesAVGAVGLS9avgwdsvc.exe
O23 - Service: Bonjour Service - Apple Inc. - H:Program FilesBonjourmDNSResponder.exe
O23 - Service: COMODO livePCsupport Service (CLPSLS) - COMODO - H:Program FilesCOMODOCOMODO livePCsupportCLPSLS.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - H:Program FilesCOMODOCOMODO Internet Securitycmdagent.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - H:Program FilesGoogleUpdateGoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - H:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - H:Program FilesCommon FilesInstallShieldDriver11Intel 32IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - H:Program FilesJavajre6injqs.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - H:Program FilesLavasoftAd-AwareAAWService.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - H:Program FilesNeroNero8Nero BackItUpNBService.exe
O23 - Service: NMIndexingService - Nero AG - H:Program FilesCommon FilesNeroLibNMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - H:WINDOWSsystem32vsvc32.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - H:WINDOWSsystem32IoctlSvc.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies, Inc. - H:Program FilesWinPcappcapd.exe
O23 - Service: ServiceLayer - Nokia - H:Program FilesPC Connectivity SolutionServiceLayer.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - H:Program FilesSpyware Terminatorsp_rsser.exe
-
End of file - 13284 bytes
Version Tracker pro - zajituje aktualizace programů

Odpovědět na otázku

2 odpovědi na otázku

Řazeno dle hodnocení

uda1966*

31.07.10 06:26

No máš tam toho dost, takže odstraň:

H:Program FilesTechTrackerVersionTracker ProVersionTrackerPro.exe
H:PROGRA 1CrawlerCToolbar.exe

R3 - URLSearchHook: (no name) - - (no file)

R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - H:Program FilesAsk.comGenericAskToolbar.dll

O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - H:Program FilesAsk.comGenericAskToolbar.dll

O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - H:Program FilesDAEMON Tools ToolbarDTToolbar.dll

O3 - Toolbar: aTube Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - H:Program FilesAsk.comGenericAskToolbar.dll

O4 - HKCU..Run: [Seznam Postak] "H:Program FilesSeznam.czpostak.exe"-s

O4 - Global Startup: VersionTrackerPro.lnk

O9 - Extra button: Nastavení Lištičky ... - {0E46D7B6-887D-4F81-B4CA-FCC92AF73610} - H:Program FilesSeznam.czlisticka.dll

O9 - Extra button: Zvýrazňovač slov Lištičky - {4E6D6F90-31CA-4878-A7A3-1CD50F115A69} - H:Program FilesSeznam.czlisticka.dll

O9 - Extra Tools menuitem: Zvýrazňovač slov Lištičky - {4E6D6F90-31CA-4878-A7A3-1CD50F115A69} - H:Program FilesSeznam.czlisticka.dll

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553550000} - fpdownload2.macromedia.co/...

O23 - Service: AVG Security Toolbar Service - Unknown owner - H:Program FilesAVGAVGLS9ToolbarToolbarBroker.exe

Odinstaluj všechny toolbary, věřím že jsi ani jeden ještě nepoužil. Odstraň to co jsem ti napsal a restartuj pc. Mělo by to být jinak v pořádku.

doplněno 31.07.10 06:30:

A ještě používej jeden antivir a jednu bránu firewall. Na skenování stačí dva programy na spyware. V jednoduchosti je síla. Stránky s pornem nejsou nejbezpečnější.

menee

31.07.10 16:13

Dík moc

[přidat komentář]

Přidat svou odpověď

Přihlásit se k odběru odpovědí z této otázky:

Neneseme odpovědnost za správnost informací a za škodu vzniklou jejich využitím. Jednotlivé odpovědi vyjadřují názory jejich autorů a nemusí se shodovat s názorem provozovatele poradny Poradte.cz.

Používáním poradny vyjadřujete souhlas s personifikovanou reklamou, která pomáhá financovat tento server, děkujeme.