04.08.2006, 21:57 | empiK (M)

V praci mame jednu stanici na takovy hokuspokusy mimo sit a obcas si tam nekdo prijde a hura na porno stranky. Cas od casu se diky tomu sam otevira web casinotropez.com. Nevite, jak se toho zbavit? Nekdy pred rokem se mi to povedlo odstranit. Mame tam VirusScan Enterprise 8.0.0, Ad-Aware, Spybot a stale se mrska drzi. Nekdy minuly rok se mi to podarilo z toho dostat, ted uz to tam mame zase a ne a ne a ne :-). Bezi to na XP.

 04.08.2006, 21:58 | Šestikule

co zkusit projet registry

 04.08.2006, 22:04 | empiK (M)

nevim, kde bych to tam mel hledat a jestli to tam vubec bude, vyskakuje to jako www

 04.08.2006, 23:51 | JP

Stáhni a nainstaluj program HijackThis a hoď sem log... (nebo ho hoď do diskuzního fóra na viry.cz)

 05.08.2006, 09:11 | empiK (M)

JP: ze me to nenapadlo:
Logfile of HijackThis v1.99.1
Scan saved at 16:05:00, on 4.8.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:Program FilesSymantecNorton Ghost 2003GhostStartService.exe
C:Program FilesEsetnod32krn.exe
C:Program FilesNorton UtilitiesNPROTECT.EXE
C:WINDOWSSystem32nvsvc32.exe
C:Program FilesAnalog DevicesSoundMAXSMAgent.exe
C:Program FilesSpeed Disknopdb.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSExplorer.EXE
C:WINDOWSsystem32ishost.exe
C:WINDOWSsystem32isnotify.exe
C:WINDOWSsystem32issearch.exe
C:Program FilesSymantecNorton Ghost 2003GhostStartTrayApp.exe
C:Program FilesD-Toolsdaemon.exe
C:Program FilesiTunesiTunesHelper.exe
C:WINDOWSsystem32ismon.exe
C:Program FilesQuickTimeqttask.exe
C:WINDOWSsystem32RUNDLL32.EXE
C:WINDOWSsystem32rundll32.exe
C:Program FilesiPodbiniPodService.exe
C:Program FilesElaborate BytesCloneCDCloneCDTray.exe
C:Program FilesEsetnod32kui.exe
C:Program FilesMessengermsmsgs.exe
C:Program FilesInterVideoCommonBinWinCinemaMgr.exe
C:totalcmdTOTALCMD.EXE
C:hijackthisHijackThis.exe

R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Bar = [ Link ]
R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = [ Link ]
R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page_bak = about:blank
R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: (no name) - _{855F3B16-6D32-4fe6-8A56-BBB695989046} - (no file)
R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:Program FilesICQToolbartoolbaru.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:Program FilesAdobeAcrobat 6.0ReaderActiveXAcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:PROGRA~1SPYBOT~1SDHelper.dll
O2 - BHO: (no name) - {873eb32d-ae1a-4183-89bd-45a77f761be4} - C:WINDOWSsystem32ixt0.dll
O2 - BHO: QUICKfind BHO Object - {C08DF07A-3E49-4E25-9AB0-D3882835F153} - C:PROGRA~1TEXTwareQUICKF~1PlugInsIEHelp.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:Program FilesCanonEasy-WebPrintToolband.dll
O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:Program FilesICQToolbartoolbaru.dll
O4 - HKLM..Run: [GhostStartTrayApp] C:Program FilesSymantecNorton Ghost 2003GhostStartTrayApp.exe
O4 - HKLM..Run: [DAEMON Tools-1033] "C:Program FilesD-Toolsdaemon.exe" -lang 1033
O4 - HKLM..Run: [MsWindows SysDate] sysmsvc.exe
O4 - HKLM..Run: [iTunesHelper] C:Program FilesiTunesiTunesHelper.exe
O4 - HKLM..Run: [QuickTime Task] "C:Program FilesQuickTimeqttask.exe" -atboottime
O4 - HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSSystem32NvCpl.dll,NvStartup
O4 - HKLM..Run: [nwiz] nwiz.exe /install
O4 - HKLM..Run: [NvMediaCenter] RUNDLL32.EXE C:WINDOWSSystem32NvMcTray.dll,NvTaskbarInit
O4 - HKLM..Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM..Run: [NeroFilterCheck] C:WINDOWSsystem32NeroCheck.exe
O4 - HKLM..Run: [CloneCDElbyCDFL] "C:Program FilesElaborate BytesCloneCDElbyCheck.exe" /L ElbyCDFL
O4 - HKLM..Run: [CloneCDTray] "C:Program FilesElaborate BytesCloneCDCloneCDTray.exe"
O4 - HKLM..Run: [nod32kui] "C:Program FilesEsetnod32kui.exe" /WAITSERVICE
O4 - HKLM..Run: [Easy-PrintToolBox] C:Program FilesCanonEasy-PrintToolBoxBJPSMAIN.EXE /logon
O4 - HKLM..RunServices: [MsWindows SysDate] sysmsvc.exe
O4 - HKCU..Run: [MSMSGS] "C:Program FilesMessengermsmsgs.exe" /background
O4 - HKCU..Run: [CursorXP] C:Program FilesCursorXPCursorXP.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:Program FilesCommon FilesAdobeCalibrationAdobe Gamma Loader.exe
O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:Program FilesInterVideoCommonBinWinCinemaMgr.exe
O4 - Global Startup: Wireless LAN Utility.lnk = C:Program FilesWLANWLANWLANUTL.exe
O8 - Extra context menu item: &ICQ Toolbar Search - [ Link ] FilesICQToolbartoolbaru.dll/SEARCH.HTML
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - [ Link ]
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - [ Link ]
O8 - Extra context menu item: Easy-WebPrint Add To Print List - [ Link ] FilesCanonEasy-WebPrintResource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint High Speed Print - [ Link ] FilesCanonEasy-WebPrintResource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Preview - [ Link ] FilesCanonEasy-WebPrintResource.dll/RC_Preview.html
O8 - Extra context menu item: Easy-WebPrint Print - [ Link ] FilesCanonEasy-WebPrintResource.dll/RC_Print.html
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:PROGRA~1MICROS~2OFFICE11REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe
O12 - Plugin for .spop: C:Program FilesInternet ExplorerPluginsNPDocBox.dll
O16 - DPF: {F00F4763-7355-4725-82F7-0DA94A256D46} (IMDownloader Class) - [ Link ]
O17 - HKLMSystemCCSServicesTcpip..{5DDF95B0-CBE8-4895-9CC9-BC68D95E2F53}: NameServer = 84.16.96.2,195.146.99.4
O18 - Protocol: textwareilluminatorbase - {CE5CD329-1650-414A-8DB0-4CBF72FAED87} - C:WINDOWSsystem32textwareilluminatorbaseProtocol.dll
O23 - Service: GhostStartService - Symantec Corporation - C:Program FilesSymantecNorton Ghost 2003GhostStartService.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:Program FilesiPodbiniPodService.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:Program FilesEsetnod32krn.exe
O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:Program FilesNorton UtilitiesNPROTECT.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:WINDOWSSystem32nvsvc32.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:Program FilesAnalog DevicesSoundMAXSMAgent.exe
O23 - Service: Speed Disk service - Symantec Corporation - C:Program FilesSpeed Disknopdb.exe

 05.08.2006, 12:59 | empiK (M)

vyreseno

 22.03.2026, 20:49 | Flemming | Upraveno: 2026-03-22 21:49:24

Cool