Problem pri prezerani stranok

[Duro]

ahojte. Mohol by mi niekto poradit? mam takyto problem - symptomy: 1- pri prezerani stranok na internete v mozille mi otvara nejake reklamy v internet explorery
2- nefunguju mi automaticke aktualizacie. pri starte sa zobrazi vpravom dolnom rohu aktualizacna ikonka zltej farby a po chvilke zmizne... a ked chcem vypnut
neviem si s tym dat rady.....
prikladam vypis z hijacku

Logfile of HijackThis v1.99.1
Scan saved at 18:28:55, on 18.2.2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
E:\DU Meter\DUMeter.exe
E:\AVG7\avgcc.exe
E:\Java\jre1.6.0_03\bin\jusched.exe
E:\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\ctfmon.exe
e:\Grisoft\AVG Anti-Spyware 7.5\guard.exe
e:\AVG7\avgamsvr.exe
e:\AVG7\avgupsvc.exe
e:\AVG7\avgemc.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
E:\Nero8\Nero 8\Nero BackItUp\NBService.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\system32\mqsvc.exe
C:\WINDOWS\system32\mqtgsvc.exe
E:\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wuauclt.exe
E:\hijack\HijackThis.exe

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - E:\Java\jre1.6.0_03\bin\ssv.dll
O4 - HKLM\..\Run: [DU Meter] E:\DU Meter\DUMeter.exe
O4 - HKLM\..\Run: [MsmqIntCert] regsvr32 /s mqrt.dll
O4 - HKLM\..\Run: [AVG7_CC] e:\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [NBKeyScan] "E:\Nero8\Nero 8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "E:\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "E:\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/pub/s ... wflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{6DED69AF-1676-4283-A514-F6BC71CFE962}: NameServer = 195.146.132.58,195.146.128.62
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Security Service (APVC) - Unknown owner - C:\WINDOWS\system32\svcd\svchost.exe (file missing)
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - e:\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - e:\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - e:\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - e:\AVG7\avgemc.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - E:\Nero8\Nero 8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe

ten wuauclt.exe mi tam nejako nesedi. fakt uz neviem...

prosim pomozte mi niekto...dakujem

[kajfun]

vidim to na zopar spyware/malware/virusov. Davaj nod32, webroot spy sweeper + pctools spyware doctor, to je podla mna momentalne najkvalitnejsie trio. A potom to este prebehni kasperskim.

[Duro]

No vyskusam tie programy a skusim to teda....dam potom vediet co a ako...Dakujem

[kajfun]

nezabudni to nechat prescannovat aj v safe-mode rezime... aby nejake kvalitne svinstvo malo mensiu sancu byt aktivne v pamati. A ked chces byt velmi dosledny, kukni na internete kde sa v registroch nachadzaju zivotne dolezite sluzby pre windows [=tie ktore sa spustaju aj v safe mode] a vyraz odtial to co tam nepatri... lebo rootkity sa zacinaju integrovat aj hentam.

drzim palec.

[Duro]

ako je to v safe mode? rozmyslam ze stiahnem panda internet security...cital som o tom len dobre veci

[kajfun]

v safe-mode je to tak, ze pri startovani windowsu stlacis F8 a zo zobrazeneho menu si vyberies najvrchnejsiu funkciu Safe Mode.

[Duro]

vdaka...uz som zase trosku mudrejsi

[yoram]

O23 - Service: Security Service (APVC) - Unknown owner - C:\WINDOWS\system32\svcd\svchost.exe (file missing) -tu bolo nieco abnormalne,zrejme je to uz zlikvidovane antivirom,ale mohli niekde zostat aktivne zbytky,wuaclt.exe je subor,ktory spusta automaticke aktualizacie,ten je naprosto v poriadku,je sucastou windows

[br4n0]

Tieto anti-spy-cokolvek su vacsinou na skutocny malware kratke. Spusti smitfraudfix. Potom spusti Combofix a posli log, ktory vytvori.

[Duro]

no nainstaloval som panda internet security a naslo mi 8 veci co tam nema byt....polielam log...zatial to vyzera byt vsetko v poriadku. pc slape v pohode. aj problem s otvaranim stranok sa vyriesil....

Logfile of HijackThis v1.99.1
Scan saved at 23:48:05, on 22.2.2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
e:\Panda Internet Security 2008\TPSrv.exe
C:\WINDOWS\system32\spoolsv.exe
e:\Panda Internet Security 2008\PsCtrls.exe
e:\Panda Internet Security 2008\PavFnSvr.exe
C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe
e:\Panda Internet Security 2008\pavsrv51.exe
e:\Panda Internet Security 2008\AntiSpam\pskmssvc.exe
e:\Panda Internet Security 2008\AVENGINE.EXE
e:\panda internet security 2008\firewall\PSHOST.EXE
e:\Panda Internet Security 2008\PsImSvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\RECYCLER\soundcard.exe
E:\Panda Internet Security 2008\APVXDWIN.EXE
C:\WINDOWS\system32\ctfmon.exe
E:\DAEMON Tools\daemon.exe
e:\Panda Internet Security 2008\SRVLOAD.EXE
e:\Panda Internet Security 2008\WebProxy.exe
e:\Panda Internet Security 2008\PavBckPT.exe
E:\Skype\Phone\Skype.exe
e:\Skype\Plugin Manager\skypePM.exe
E:\Mozilla Firefox\firefox.exe
E:\hijack\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.sk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] "C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE" /SYNC
O4 - HKLM\..\Run: [PHIME2002A] "C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE" /IMEName
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [Microsoft Helper] C:\RECYCLER\soundcard.exe
O4 - HKLM\..\Run: [APVXDWIN] "e:\Panda Internet Security 2008\APVXDWIN.EXE" /s
O4 - HKLM\..\Run: [SCANINICIO] "e:\Panda Internet Security 2008\Inicio.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools] "e:\DAEMON Tools\daemon.exe" -lang 1033
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredi ... p=ZNfox000
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O17 - HKLM\System\CCS\Services\Tcpip\..\{08909E57-BE7A-4E3A-87C6-2CC64FA6F673}: NameServer = 195.146.132.58,195.146.128.62
O17 - HKLM\System\CS1\Services\Tcpip\..\{08909E57-BE7A-4E3A-87C6-2CC64FA6F673}: NameServer = 195.146.132.58,195.146.128.62
O17 - HKLM\System\CS2\Services\Tcpip\..\{08909E57-BE7A-4E3A-87C6-2CC64FA6F673}: NameServer = 195.146.132.58,195.146.128.62
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: avldr - C:\WINDOWS\SYSTEM32\avldr.dll
O23 - Service: Panda Software Controller - Panda Software International - e:\Panda Internet Security 2008\PsCtrls.exe
O23 - Service: Panda Function Service (PAVFNSVR) - Panda Software International - e:\Panda Internet Security 2008\PavFnSvr.exe
O23 - Service: Panda Process Protection Service (PavPrSrv) - Panda Software - C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe
O23 - Service: Panda anti-virus service (PAVSRV) - Panda Software International - e:\Panda Internet Security 2008\pavsrv51.exe
O23 - Service: Panda Antispam Engine (pmshellsrv) - Panda Software International - e:\Panda Internet Security 2008\AntiSpam\pskmssvc.exe
O23 - Service: Panda Host Service (PSHost) - Panda Software International - e:\panda internet security 2008\firewall\PSHOST.EXE
O23 - Service: Panda IManager Service (PSIMSVC) - Panda Software International - e:\Panda Internet Security 2008\PsImSvc.exe
O23 - Service: Panda TPSrv (TPSrv) - Panda Software International - e:\Panda Internet Security 2008\TPSrv.exe


neviem...ja z logu neviem nic vycitat takze mi to nic nevravi...

[Duro]

panda je hnus......uz to v zivote nenainstalujem.......