Nezničiteľný Trojan

chcel by som sa vas spytat zaviril som pc cistil som to vsetkym moznym avirou ktoru mam aj dva krat spybotom avastom cistil som aj registre ale nomozem sa toho zbavit stale mi vyhadzuje toto
http://upnito.sk/imgresize.php?id=9b621 ... b369&ms=-1
pred exe je vzdy ine cislo aj ked to davam do karanteny alebo to dam zmazat tak je to stale dookola systemove problemy zatial nebadam,toto je v karantene
http://upnito.sk/imgresize.php?id=8ec1b ... fb44&ms=-1
je to v systeme 32 dik za odpoved

Ahoj, nejaky replikator...poradime si s nim

Stiahni DDS. Uloz na plochu, ukonci vsetky spustene programy a spust ho. Po skonceni scanu sa otvoria vysledky v 2 oknach - DDS.txt a Attach.txt. Obsah oboch by som rad videl.

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_09-12-01.01)

Systém Microsoft Windows XP Home Edition
Boot Device: \Device\HarddiskVolume1
Install Date: 22.6.2009 1:48:49
System Uptime: 17.1.2010 18:33:21 (0 hours ago)

Motherboard: Micro-Star | | MS-7255
Processor: Intel(R) Pentium(R) 4 CPU 3.06GHz | CPU 1 | 3059/133mhz
Processor: Intel(R) Pentium(R) 4 CPU 3.06GHz | CPU 1 | 3059/133mhz

==== Disk Partitions =========================

A: is Removable
C: is FIXED (NTFS) - 233 GiB total, 198,217 GiB free.
D: is CDROM ()

==== Disabled Device Manager Items =============

==== System Restore Points ===================

RP79: 9.10.2009 20:52:08 - Kontrolný bod systému
RP80: 11.10.2009 13:17:28 - Kontrolný bod systému
RP81: 14.10.2009 23:48:55 - Software Distribution Service 3.0
RP82: 16.10.2009 17:30:48 - Kontrolný bod systému
RP83: 21.10.2009 21:19:59 - Kontrolný bod systému
RP84: 27.10.2009 19:24:26 - Kontrolný bod systému
RP85: 28.10.2009 20:28:14 - Kontrolný bod systému
RP86: 28.10.2009 21:54:42 - Installed Sunbelt Personal Firewall.
RP87: 29.10.2009 22:24:46 - Removed Sunbelt Personal Firewall.
RP88: 29.10.2009 22:27:56 - Installed Sunbelt Personal Firewall.
RP89: 2.11.2009 17:53:22 - Kontrolný bod systému
RP90: 3.11.2009 19:27:21 - Software Distribution Service 3.0
RP91: 5.11.2009 19:52:15 - Kontrolný bod systému
RP92: 8.11.2009 10:43:46 - Removed Adobe Media Player
RP93: 12.11.2009 21:35:32 - Software Distribution Service 3.0
RP94: 13.11.2009 19:43:24 - Installed linguatec Voice Reader
RP95: 14.11.2009 14:14:12 - Removed Topaz Adjust 3
RP96: 14.11.2009 14:15:29 - Installed Topaz Adjust 3
RP97: 14.11.2009 23:26:09 - Removed linguatec Voice Reader
RP98: 19.11.2009 20:46:59 - Kontrolný bod systému
RP99: 21.11.2009 20:21:36 - Kontrolný bod systému
RP100: 22.11.2009 12:26:19 - Removed Adobe Photoshop Elements 6.0.
RP101: 22.11.2009 12:52:49 - Installed Adobe Photoshop Elements 8.0.
RP102: 22.11.2009 13:47:38 - Removed Adobe Photoshop Elements 8.0.
RP103: 22.11.2009 14:00:24 - Installed Adobe Photoshop Elements 6.0.
RP104: 24.11.2009 20:04:50 - Software Distribution Service 3.0
RP105: 29.11.2009 17:48:21 - Kontrolný bod systému
RP106: 9.12.2009 19:36:25 - Software Distribution Service 3.0
RP107: 19.12.2009 12:27:53 - Kontrolný bod systému
RP108: 20.12.2009 14:24:51 - Kontrolný bod systému
RP109: 25.12.2009 12:40:41 - Kontrolný bod systému
RP110: 26.12.2009 13:12:47 - Kontrolný bod systému
RP111: 27.12.2009 16:09:25 - Kontrolný bod systému
RP112: 30.12.2009 15:49:14 - Kontrolný bod systému
RP113: 1.1.2010 14:11:58 - Kontrolný bod systému
RP114: 3.1.2010 17:40:36 - Kontrolný bod systému
RP115: 4.1.2010 18:35:01 - Kontrolný bod systému
RP116: 5.1.2010 20:21:57 - Kontrolný bod systému
RP117: 10.1.2010 19:45:23 - Kontrolný bod systému
RP118: 13.1.2010 21:10:08 - Software Distribution Service 3.0

==== Installed Programs ======================

Adobe AIR
Adobe Flash Player 10 Plugin
Adobe Photoshop Elements 6.0
Adobe Reader 9 - Slovak
Advanced RAR Repair v1.2
Audacity 1.3.8 (Unicode)
Auto Gordian Knot 2.45
AV Bros. Puzzle Pro 3.0 (Remove Only)
Avira Premium Security Suite
AviSynth 2.5
CamStudio
Canon MP Navigator 3.0
Canon MP180
Canon MP180 User Registration
CANYON CN-WCAM21 PC-Camera
ConvertHelper 2.2
ConvertXtoDVD 3.3.0.96
DVDFab 6.0.0.5 Beta (May 12, 2009)
E.M.Total Video Converter 3.20 3.20
Haali Media Splitter
High Definition Audio Driver Package - KB888111
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB954550-v5)
Hotfix for Windows XP (KB961118)
Hotfix for Windows XP (KB970653-v3)
Hotfix for Windows XP (KB976098-v2)
Image Grabber II.NET
Java(TM) 6 Update 15
K-Lite Codec Pack 5.3.0 (Basic)
Mask Pro 4.1
Matroska Pack
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft Office Access MUI (Slovak) 2007
Microsoft Office Excel MUI (Slovak) 2007
Microsoft Office InfoPath MUI (Slovak) 2007
Microsoft Office Outlook MUI (Slovak) 2007
Microsoft Office PowerPoint MUI (Slovak) 2007
Microsoft Office Professional Plus 2007
Microsoft Office Proof (Czech) 2007
Microsoft Office Proof (English) 2007
Microsoft Office Proof (German) 2007
Microsoft Office Proof (Hungarian) 2007
Microsoft Office Proof (Slovak) 2007
Microsoft Office Proofing (Slovak) 2007
Microsoft Office Publisher MUI (Slovak) 2007
Microsoft Office Shared MUI (Slovak) 2007
Microsoft Office Word MUI (Slovak) 2007
Microsoft Private Folder 1.0
Microsoft Software Update for Web Folders (Slovak) 12
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Windows Media Video 9 VCM
MKVtoolnix 2.9.8
Mozilla Firefox (3.5.7)
MSN
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
MSXML 6 Service Pack 2 (KB973686)
Nero 7 Ultra Edition
neroxml
NetXfer 2.27.344
NVIDIA Drivers
PC Translator
PhotoFiltre Studio
Platform
RealDraw Pro v4.0.17.1
ScanSoft OmniPage SE 4.0
Security Update for Windows Media Player (KB911564)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player (KB954155)
Security Update for Windows Media Player (KB968816)
Security Update for Windows Media Player (KB973540)
Security Update for Windows Media Player 10 (KB936782)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows XP (KB890046)
Security Update for Windows XP (KB893756)
Security Update for Windows XP (KB896358)
Security Update for Windows XP (KB896423)
Security Update for Windows XP (KB896428)
Security Update for Windows XP (KB899587)
Security Update for Windows XP (KB899591)
Security Update for Windows XP (KB900725)
Security Update for Windows XP (KB901017)
Security Update for Windows XP (KB901214)
Security Update for Windows XP (KB902400)
Security Update for Windows XP (KB905414)
Security Update for Windows XP (KB905749)
Security Update for Windows XP (KB908519)
Security Update for Windows XP (KB911562)
Security Update for Windows XP (KB911927)
Security Update for Windows XP (KB913580)
Security Update for Windows XP (KB914388)
Security Update for Windows XP (KB914389)
Security Update for Windows XP (KB918118)
Security Update for Windows XP (KB918439)
Security Update for Windows XP (KB920213)
Security Update for Windows XP (KB920670)
Security Update for Windows XP (KB920683)
Security Update for Windows XP (KB920685)
Security Update for Windows XP (KB923191)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB923789)
Security Update for Windows XP (KB923980)
Security Update for Windows XP (KB924270)
Security Update for Windows XP (KB924667)
Security Update for Windows XP (KB925902)
Security Update for Windows XP (KB926255)
Security Update for Windows XP (KB926436)
Security Update for Windows XP (KB927779)
Security Update for Windows XP (KB927802)
Security Update for Windows XP (KB928255)
Security Update for Windows XP (KB928843)
Security Update for Windows XP (KB929123)
Security Update for Windows XP (KB930178)
Security Update for Windows XP (KB931261)
Security Update for Windows XP (KB932168)
Security Update for Windows XP (KB938127)
Security Update for Windows XP (KB938464-v2)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB943055)
Security Update for Windows XP (KB944338-v2)
Security Update for Windows XP (KB944653)
Security Update for Windows XP (KB945553)
Security Update for Windows XP (KB946026)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950749)
Security Update for Windows XP (KB950760)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB954600)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956844)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958470)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
Security Update for Windows XP (KB958869)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960225)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB960859)
Security Update for Windows XP (KB961371)
Security Update for Windows XP (KB961373)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB968537)
Security Update for Windows XP (KB969059)
Security Update for Windows XP (KB969897)
Security Update for Windows XP (KB969898)
Security Update for Windows XP (KB969947)
Security Update for Windows XP (KB970238)
Security Update for Windows XP (KB970430)
Security Update for Windows XP (KB971486)
Security Update for Windows XP (KB971557)
Security Update for Windows XP (KB971633)
Security Update for Windows XP (KB971657)
Security Update for Windows XP (KB971961)
Security Update for Windows XP (KB972260)
Security Update for Windows XP (KB972270)
Security Update for Windows XP (KB973346)
Security Update for Windows XP (KB973354)
Security Update for Windows XP (KB973507)
Security Update for Windows XP (KB973525)
Security Update for Windows XP (KB973869)
Security Update for Windows XP (KB973904)
Security Update for Windows XP (KB974112)
Security Update for Windows XP (KB974318)
Security Update for Windows XP (KB974392)
Security Update for Windows XP (KB974455)
Security Update for Windows XP (KB974571)
Security Update for Windows XP (KB975025)
Security Update for Windows XP (KB975467)
Security Update for Windows XP (KB976325)
Slovník Verdict Free
Spybot - Search & Destroy
Sunbelt Personal Firewall
Topaz Adjust 3
Total Commander (Remove or Repair)
Total Video Converter 3.20 090104
TuneUp Utilities 2009
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Update for Windows XP (KB894391)
Update for Windows XP (KB898461)
Update for Windows XP (KB900485)
Update for Windows XP (KB908531)
Update for Windows XP (KB910437)
Update for Windows XP (KB911164)
Update for Windows XP (KB911280)
Update for Windows XP (KB916595)
Update for Windows XP (KB920872)
Update for Windows XP (KB922582)
Update for Windows XP (KB925720)
Update for Windows XP (KB927891)
Update for Windows XP (KB930916)
Update for Windows XP (KB932823-v3)
Update for Windows XP (KB936357)
Update for Windows XP (KB938828)
Update for Windows XP (KB955759)
Update for Windows XP (KB955839)
Update for Windows XP (KB967715)
Update for Windows XP (KB968389)
Update for Windows XP (KB971737)
Update for Windows XP (KB973687)
Update for Windows XP (KB973815)
Update for Windows XP (KB976749)
VIA Platform Device Manager
VobSub v2.23 (Remove Only)
WebFldrs XP
Windows Imaging Component
Windows Installer 3.1 (KB893803)
Windows Media Format Runtime
Windows Media Player 10
Windows XP Hotfix - KB873339
Windows XP Hotfix - KB885835
Windows XP Hotfix - KB885836
Windows XP Hotfix - KB886185
Windows XP Hotfix - KB887472
Windows XP Hotfix - KB888302
Windows XP Hotfix - KB890859
Windows XP Hotfix - KB891781
WinRAR archiver
XML Paper Specification Shared Components Pack 1.0
XviD MPEG4 Video Codec (remove only)

==== End Of File ===========================

DDS (Ver_09-12-01.01) - NTFSx86
Run by Owner at 18:43:49,59 on ne 17.01.2010
Internet Explorer: 6.0.2900.2180 BrowserJavaVersion: 1.6.0_15
Systém Microsoft Windows XP Home Edition 5.1.2600.2.1250.421.1033.18.2046.1580 [GMT 1:00]

AV: AntiVir Desktop *On-access scanning enabled* (Updated) {11638345-E4FC-4BEE-BB73-EC754659C5F6}
FW: Avira Firewall *enabled* {11638345-E4FC-4BEE-BB73-EC754659C5F6}
FW: Sunbelt Personal Firewall *enabled* {BFD080F6-3BF0-40E1-9507-9CA969C35870}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Documents and Settings\Owner\uddjvff.exe
C:\WINDOWS\Explorer.EXE
svchost.exe
C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Microsoft Private Folder 1.0\PrfldSvc.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\All Users\Application Data\LangSoft\OETRN.EXE
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\System32\TUProgSt.exe
C:\Program Files\Avira\AntiVir Desktop\avmailc.exe
C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
C:\Documents and Settings\Owner\Desktop\Universal\dds.scr

============== Pseudo HJT Report ===============

uStart Page = hxxp://www.google.sk/
mWinlogon: Userinit=c:\windows\system32\userinit.exe,c:\documents and settings\owner\uddjvff.exe \s
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: WebTransBHO Class: {2db66063-bb98-466a-aa0d-3e7acf5ed853} - c:\documents and settings\all users\application data\langsoft\WebIE.dll
BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - c:\progra~1\spybot~1\SDHelper.dll
BHO: NXIECatcher Class: {83b80a9c-d91a-4f22-8dcf-ea7204039f79} - c:\program files\xi\netxfer\NXIEHelper.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: WebTranslator: {bfc32e1d-ee75-4a48-bc60-104e11ee2431} - c:\documents and settings\all users\application data\langsoft\WebIE.dll
TB: NetXfer: {c16cbaac-a75c-4db5-a0dd-cdf5cafcdd3a} - c:\program files\xi\netxfer\NXToolBar.dll
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [OEXPRESS] c:\documents and settings\all users\application data\langsoft\OETRN.EXE
mRun: [avgnt] "c:\program files\avira\antivir desktop\avgnt.exe" /min
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [nwiz] nwiz.exe /install
mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit
mRun: [rfws] c:\windows\system32\rfws.exe \u
dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE
IE: E&xportovať do programu Microsoft Excel - c:\progra~1\micros~2\office12\EXCEL.EXE/3000
IE: Stiahni položku cez NetXfer - c:\program files\xi\netxfer\NXAddLink.html
IE: Stiahni všetky položky cez NetXfer - c:\program files\xi\netxfer\NXAddList.html
IE: {BFC32E1D-EE75-4A48-BC60-104E11EE2431}
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - c:\documents and settings\all users\application data\langsoft\WebIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office12\REFIEBAR.DLL
IE: {CC963627-B1DC-40E0-B52A-CF21EE748449} - {CC963627-B1DC-40E0-B52A-CF21EE748449} - c:\documents and settings\all users\application data\langsoft\WebIE.dll
IE: {CC963627-B1DC-40E0-B52A-CF21EE748450} - {CC963627-B1DC-40E0-B52A-CF21EE748450} - c:\documents and settings\all users\application data\langsoft\WebIE.dll
IE: {CC963627-B1DC-40E0-B52A-CF21EE748451} - {CC963627-B1DC-40E0-B52A-CF21EE748451} - c:\documents and settings\all users\application data\langsoft\WebIE.dll
IE: {CC963627-B1DC-40E0-B52A-CF21EE748452} - {CC963627-B1DC-40E0-B52A-CF21EE748452} - c:\documents and settings\all users\application data\langsoft\WebIE.dll
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\progra~1\spybot~1\SDHelper.dll
LSP: c:\program files\avira\antivir desktop\avsda.dll
DPF: {31435657-9980-0010-8000-00AA00389B71} - hxxp://download.microsoft.com/download/ ... vc1dmo.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
Hosts: 127.0.0.1 www.spywareinfo.com

================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\owner\applic~1\mozilla\firefox\profiles\cm4ogay3.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.sk/
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\dotnetassistantextension\
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}

---- FIREFOX POLICIES ----
c:\program files\mozilla firefox\greprefs\all.js - pref("capability.policy.default.XMLHttpRequest.channel", "noAccess");
c:\program files\mozilla firefox\greprefs\all.js - pref("javascript.options.jit.chrome", false);
c:\program files\mozilla firefox\greprefs\all.js - pref("security.checkloaduri", true);
c:\program files\mozilla firefox\greprefs\all.js - pref("bidi.characterset", 1);
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl3.rsa_seed_sha", true);
c:\program files\mozilla firefox\defaults\pref\channel-prefs.js - pref("app.update.channel", "release");
c:\program files\mozilla firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".sk");

============= SERVICES / DRIVERS ===============

R0 xfilt;VIA SATA IDE Hot-plug Driver;c:\windows\system32\drivers\xfilt.sys [2009-6-22 11264]
R1 avfwot;avfwot;c:\windows\system32\drivers\avfwot.sys [2009-6-22 97608]
R1 avgio;avgio;c:\program files\avira\antivir desktop\avgio.sys [2009-6-22 11608]
R1 fwdrv;Firewall Driver;c:\windows\system32\drivers\fwdrv.sys [2007-4-26 302000]
R1 khips;Kerio HIPS Driver;c:\windows\system32\drivers\khips.sys [2007-4-26 72624]
R2 AntiVirFirewallService;Avira Firewall;c:\program files\avira\antivir desktop\avfwsvc.exe [2009-6-22 388865]
R2 AntiVirMailService;Avira AntiVir MailGuard;c:\program files\avira\antivir desktop\avmailc.exe [2009-6-22 194817]
R2 AntiVirService;Avira AntiVir Guard;c:\program files\avira\antivir desktop\avguard.exe [2009-6-22 185089]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files\avira\antivir desktop\sched.exe [2009-6-22 108289]
R2 AntiVirWebService;Avira AntiVir WebGuard;c:\program files\avira\antivir desktop\avwebgrd.exe [2009-6-22 434945]
R2 avgntflt;avgntflt;c:\windows\system32\drivers\avgntflt.sys [2009-6-22 56816]
R2 Prvflder;Prvflder;c:\windows\system32\drivers\prvflder.sys [2006-4-21 70912]
R2 SPF4;Sunbelt Personal Firewall 4;c:\program files\sunbelt software\personal firewall\kpf4ss.exe [2007-4-26 1234480]
R3 avfwim;AvFw Packet Filter Miniport;c:\windows\system32\drivers\avfwim.sys [2009-6-22 69632]
R3 PSched;QoS Packet Scheduler;c:\windows\system32\drivers\psched.sys [2006-2-28 69120]
S2 SSHNAS;SSHNAS;c:\windows\system32\svchost.exe -k netsvcs [2006-2-28 14336]

=============== Created Last 30 ================

2010-01-17 10:17:44 58368 ---h--w- c:\documents and settings\owner\uddjvff.exe
2010-01-17 10:17:44 58368 ----a-w- c:\windows\system32\rfws.exe
2010-01-10 13:46:07 0 d-----w- c:\docume~1\owner\applic~1\3DFA
2010-01-09 17:45:17 0 d-----w- C:\Virtual Dub
2010-01-09 16:50:58 0 d-----w- c:\docume~1\owner\applic~1\GetRightToGo
2010-01-06 14:14:20 0 d-----w- C:\TRANSLAT
2009-12-28 13:45:52 0 d-----w- c:\docume~1\owner\applic~1\AV Bros Puzzle Pro 3.0
2009-12-28 11:40:32 0 d-----w- c:\docume~1\owner\applic~1\AV Bros Puzzle Pro 2.2 DEMO
2009-12-28 10:32:44 210944 ----a-w- c:\windows\system32\Msvcrt10.dll
2009-12-28 10:32:44 152848 ----a-w- c:\windows\system32\Comdlg32.ocx

==================== Find3M ====================

2010-01-17 17:41:35 91537 ----a-w- c:\windows\system32\drivers\fwdrv.err
2009-12-09 17:48:29 56816 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2009-11-22 13:00:35 9464 ------w- c:\windows\system32\drivers\cdralw2k.sys
2009-11-22 13:00:35 9336 ------w- c:\windows\system32\drivers\cdr4_xp.sys
2009-11-22 13:00:34 129784 ------w- c:\windows\system32\pxafs.dll
2009-11-22 13:00:34 116472 ------w- c:\windows\system32\pxcpyi64.exe
2009-11-22 13:00:33 43528 ------w- c:\windows\system32\drivers\PxHelp20.sys
2009-11-22 13:00:33 118520 ------w- c:\windows\system32\pxinsi64.exe
2009-11-21 18:57:06 43698 ----a-w- c:\windows\system32\xvid-uninstall.exe
2009-10-29 05:48:04 662016 ----a-w- c:\windows\system32\wininet.dll
2009-10-25 09:05:43 356352 ----a-w- c:\windows\eSellerateEngine.dll
2009-10-21 06:00:55 75776 ----a-w- c:\windows\system32\strmfilt.dll
2009-10-21 06:00:55 25088 ----a-w- c:\windows\system32\httpapi.dll

============= FINISH: 18:45:11,31 ===============

snad ti to pomoze

chcem sa spytat nakolko som ten problem nevyriesil ci by mi vedel niekto poradit pretote pitimir chcel odomna DDS info ale akosi sa 3 dni neozval tak ked v tejto veci viete poradit ocenil by som to dik

A ten Spybot nič nezistil??
Nejde ten prg jednoducho vymazať? alebo sa tá hláška vracia?

Ahoj, casova zaneprazdnenost mi nedovolila prist skor...kazdopadne tam mas vystavny kusok, paradna ukazka - je tam vsetko mozne

Stiahni ComboFix - NESPUSTAT.

Presun ikonu CF na plochu, vypni vsetky otvorene aplikacie, ako aj rezidenty antiviru, antispywaru a firewall a otvor poznamkovy blok. Donho skopiruj:


Uloz na plochu ako CFScript.txt a mysou pretiahni nad ikonou CF.



Program script spracuje a spravi novy log.


Pozor: Ak po aplikacii skriptu nenabehne Windows, restartuj PC, stlac F8 a zvol Poslednu znamu funkcnu konfiguraciu.


Btw, pouzival si AVG? Je tam nejaky driver...

kedze som sa to znazil vyriesit ako sa dalo tak som dnes stiahol Malwarebytes' Anti-Malware
a po prejdeni celeho systemu a odstraneni niekolkych trojanov vratane aj toho otravneho mi zatial hlasku nevyhadzuje takze teraz neviem ci je to na dobro prec alebo to este mozem ocakavat co ty na to
http://upnito.sk/imgresize.php?id=deff9 ... 758a&ms=-1

chcem sa este spytat virusy v karantene mozem zmazat? dik

MbAM dokaze vytvorit log, ten mi povie o dost viac nez neuplny screenshot...

Malwarebytes' Anti-Malware 1.44
Verzia databázy: 3599
Windows 5.1.2600 Service Pack 2
Internet Explorer 6.0.2900.2180

19.1.2010 20:18:14
mbam-log-2010-01-19 (20-18-14).txt

Typ kontroly: Úplná (C:\|)
Objektov kontrolovaných: 190258
Uplynutý cas: 1 hour(s), 8 minute(s), 31 second(s)

Infikovaných procesov pamäte: 0
Infikovaných modulov pamäte: 0
Infikovaných registracných klúcov: 4
Infikovaných registracných hodnôt: 0
Infikovaných registracných údajov položiek: 1
Infikovaných priecinkov: 0
Infikovaných súborov: 5

Infikovaných procesov pamäte:
(Žiadne škodlivé položky)

Infikovaných modulov pamäte:
(Žiadne škodlivé položky)

Infikovaných registracných klúcov:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{500bca15-57a7-4eaf-8143-8c619470b13d} (Worm.Allaple) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SSHNAS (Trojan.Renos) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\XML (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Handle (Malware.Trace) -> Quarantined and deleted successfully.

Infikovaných registracných hodnôt:
(Žiadne škodlivé položky)

Infikovaných registracných údajov položiek:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Hijack.Userinit) -> Bad: (C:\WINDOWS\system32\userinit.exe,C:\Documents and Settings\Owner\uddjvff.exe \s) Good: (Userinit.exe) -> Quarantined and deleted successfully.

Infikovaných priecinkov:
(Žiadne škodlivé položky)

Infikovaných súborov:
C:\Documents and Settings\Owner\Application Data\Desktopicon\eBayShortcuts.exe (Adware.ADON) -> Quarantined and deleted successfully.
C:\Documents and Settings\Owner\Desktop\Programy\DivX Pro 6.8.2.8 for Windows\KEYGEN - DVT\Keymaker.exe (Malware.Packer) -> Quarantined and deleted successfully.
C:\Documents and Settings\Owner\Desktop\Programy\DivX Pro 6.8.2.8 for Windows\KEYGEN - FFF\Keygen.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{05D01658-E7D3-4E21-96F9-039718D55104}\RP118\A0065506.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{05D01658-E7D3-4E21-96F9-039718D55104}\RP82\A0038035.exe (Trojan.Downloader) -> Quarantined and deleted successfully.

Pokial mienis pouzivat cracks&keygens, tak sa nemame o com bavit...

Cize ako sa rozhodnes? Pouzivat ich a zostat so zasratym PC, alebo sa ich vzdas a ja ti pomozem s dalsim postupom?

teraz neviem presne co mas na mysli ale ked narazas na to co to sposobilo tak je to urcite prec o pomoc urcite stojim dik

vidim ze takto by som riesil jeden problem z virusom asi este niekolko tyzdnov a na to nemam cas dakujem vsetkym za rady a nazory majte sa.

a čo sa rozčuľuješ?..pozri čo používaš:
načo sú ti také somariny ako DiVX Pro ??,kopa kodekov je na inete a nemajú v sebe cracky a keygeny a podobnú háveď

Infikovaných súborov:
C:\Documents and Settings\Owner\Application Data\Desktopicon\eBayShortcuts.exe (Adware.ADON) -> Quarantined and deleted successfully.
C:\Documents and Settings\Owner\Desktop\Programy\DivX Pro 6.8.2.8 for Windows\KEYGEN - DVT\Keymaker.exe (Malware.Packer) -> Quarantined and deleted successfully.
C:\Documents and Settings\Owner\Desktop\Programy\DivX Pro 6.8.2.8 for Windows\KEYGEN - FFF\Keygen.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{05D01658-E7D3-4E21-96F9-039718D55104}\RP118\A0065506.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{05D01658-E7D3-4E21-96F9-039718D55104}\RP82\A0038035.exe (Trojan.Downloader) -> Quarantined and deleted successfully.

Maj sa aj ty, snad ti inde poradia rychlejsie