VIRUS ALERT

Question

VIRUS ALERT

Odpovědět | Zobrazit bez stromu | Upozornit redakci | 5 nových odpovědí

Honza | 11. 8. 2008 8:49 |

Níže zasílám log k virus alert a prosím o radu k odstranění z dolní lišty u hodin.

Moc díky, Honza

Logfile of HijackThis v1.99.1
Scan saved at 08:46: VIRUS ALERT!, on 11.8.2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\Documents and Settings\Uzivatel\Plocha\hijackthis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = start.qip.ru ...
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O11 - Options… Ukázat celý příspěvek

Odpovědět na otázku

Mohlo by vás také zajímat

Vyhrožování vire č 5 Samsung Note 4 pomoc (18) Mobily
Xbox 360 viry (11) Programy Xbox 360 viry
Game4playz virus odstranění (2) Programy game4playz virus odstranění
Virus (15) Notebooky virus
Http://36c3f6db.mpstat.us/ co je to za sr....? (23) Web a internet

Odpovědi na otázku

Petr | 19. 08. 2008 11:33 |

Ahoj prosim o vyřešení tohoto problému předem dík a čau

Logfile of HijackThis v1.99.1
Scan saved at 11:33: VIRUS ALERT!, on 19.8.2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.20583)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\payload.exe
C:\Program Files\Gigabyte\Gigabyte Windows Utility Manager\gwum.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\ICQ6\ICQ.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\explorer.exe
C:\Documents and Settings\Administrator\Plocha\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = go.microsoft.com ...
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.seznam.cz ...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = go.microsoft.com ...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = go.microsoft.com ...
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = go.microsoft.com ...
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = go.microsoft.com ...
R0 - HKCU\Software\Microsoft\Internet… Ukázat celý příspěvek

Souhlasím | Nesouhlasím | Odpovědět

Andrew | 28. 08. 2008 15:57 |

Odstran
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\payload.exe
O4 - HKCU\..\Run: [\SUE3AA.exe] C:\Windows\SUE3AA.exe
O4 - HKCU\..\Run: [\SUE3AB.exe] C:\Windows\SUE3AB.exe
O4 - HKCU\..\Run: [\SUE3AC.exe] C:\Windows\SUE3AC.exe
O4 - HKCU\..\Run: [RegCom32] C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\payload.exe

a mozna pro jistotu i
O17 - HKLM\System\CCS\Services\Tcpip\..\{766F19D8-42F1-435D-8DB8-A7C94DE8A0C5}: NameServer = 172.29.1.241
O17 - HKLM\System\CS1\Services\Tcpip\..\{766F19D8-42F1-435D-8DB8-A7C94DE8A0C5}: NameServer = 172.29.1.241
O17 - HKLM\System\CS2\Services\Tcpip\..\{766F19D8-42F1-435D-8DB8-A7C94DE8A0C5}: NameServer = 172.29.1.241

Souhlasím | Nesouhlasím | Odpovědět

Miki | 28. 08. 2008 10:09 |

Podívej se na adresu:
www.pc-help.cz ...
Je to tam vyřešeno

Souhlasím | Nesouhlasím | Odpovědět

virus alter | 01. 09. 2008 12:45 |

prosim nevite co mam virus alert

Logfile of HijackThis v1.99.1
Scan saved at 12:44: VIRUS ALERT!, on 1.9.2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\WgaTray.exe
C:\Program Files\Applications\wcs.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\Program Files\MySQL\MySQL Server 5.0\bin\mysqld-nt.exe
C:\Program Files\MySQL\MySQL Server 6.0\bin\mysqld-nt.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\QIP\qip.exe
C:\Program Files\Internet Explorer\Iexplore.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Martinek\Plocha\antivir_workstation_winu_en_h.exe
C:\Documents and Settings\Martinek\Plocha\hijackthis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = internetsearchservice.com ...
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = internetsearchservice.com ...
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.seznam.cz ...
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
R3 - URLSearchHook: (no name) - {0A94B116-4504-4e26-AB05-E61E474AA38B} - C:\Program Files\AskPBar\SrchAstt\1.bin\A9SRCHAS.DLL
O2 - BHO: XTTBPos00 Class - {055FD26D-3A88-4e15-963D-DC8493744B1D} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
O2 - BHO: Ask Search Assistant BHO - {0A94B111-4504-4e26-AB05-E61E474AA38B}… Ukázat celý příspěvek