udv
ide kel tened a HijackThis logjat es a combofix logjat,

szia stell!

segítséget kérnék tőled!

december végén bekaptam egy resycled.boot.com , és vmilyen win32/kryptik.dj című vírusokat. combofixszel sikerült letakarítani, de vmilyen szemetet rajtahagyott a gépen, mert azóta nem frissít a nod (dns hibára hivatkozik) nem frissít a windows (xp), nem hajlandó letölteni se az xplorer, se a mozilla a ms honlapról, eset honlapról, stb...


mi lehet a probléma?

telepitsd ujra es aztan futasd le az online skenert vagy

Kedves stell , sajnos arra jutottam , hogy az 1. gépet amelyet nagyon nyögvenyelősen sokáig takarítottunk , újratelepítem ( a másik kettő stabilan fut) , az történt , hogy még egy utolsó kisérlet képpen (ez volt az a gép amelyik lassan töltött be és a tálcaikonok is ...) ráengedtem a Panda online keresőjét ......rengeteg szemetet talált még , de 30%-nál lefagyott ....na újraindítottam.......egyszercsak lekapcsolt a gép (nem újraindult)......újraindítottam.., azóta tudok ADSL kapcsolatot létesíteni , de eggyetlen böngészőm sem működik, ja és visszakapcsol a rendszervisszaállítás az összes meghajtón....valami dögöt nagyon megpiszkálhatott a Panda .

Szóval attól félek , ha újratelepítek másik partíciómról újra rámászik a dög a rendszerpartícióra.......Mit tehetnék ez ellen.Újratelepítés előtt.

az renben van ugy gondolom hogy a Nero programe.

STEEL mégcsak annyit akarok kérdezni hogy ezek mik mert ezek futnak a STARTER program mutatja:
NWEreboot
és regsvr32/s/n/i:u shell32
szerintem gyanusak

ok,renben van es nincsen mit koszonod
udv

Szia STELL mostmár ugy érzem stabil a gép a spyware terminatort leszedtem az ad-awaret nem és felraktam az superantyspyware-t és teljesen kitisztottam a gépet ami még volt az ad-awareval megférnek egymás mellet.Csak azt akaom kérdezni hogy a STARTER programmal megnéztem mi fut és ezt a kettőt találtam amit em tudom mi:NWEreboot
és regsvr32/s/n/i:u shell32 na meg felteszem a hijack logfile-t nézd már meg hogy szerinted is tiszta-e.És nagyon köszönöm az eddigi segitséged nagyon rendes vagy.:



log: Logfile of HijackThis v1.99.1
Scan saved at 14:57:05, on 2009.01.15.
Platform: Windows XP Szervizcsomag 3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4ss.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4gui.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\PixArt\PAC7311\Monitor.exe
C:\WINDOWS\system32\qttask.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Analog Devices\SoundMAX\DrvLsnr.exe
C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxtray.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Documents and Settings\All Users\Application Data\Macrovision\FLEXnet Connect\6\ISUSPM.exe
C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4gui.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\TC PowerPack\Optimize Memory\OMemory.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
E:\PhoneConnectorVMC.exe
C:\Program Files\vodafone\vmclite\vmc.exe
C:\Program Files\internet explorer\iexplore.exe
C:\PROGRA~1\Crawler\Toolbar\CToolbar.exe
C:\Program Files\Lavasoft\Ad-Aware SE Professional\Ad-Watch.exe
C:\Program Files\Hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.hu/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60341
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_custo ... TbId=60341
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60341
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.com/support/sa_custo ... TbId=60341
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.microsoft.com/fwlink/?LinkId=74005
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hivatkozások
R3 - URLSearchHook: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O2 - BHO: Adobe PDF Reader hivatkozássúgó - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Windows Live bejelentkezési segítség - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: &Crawler Toolbar - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O4 - HKLM\..\Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [Monitor] C:\WINDOWS\PixArt\PAC7311\Monitor.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\system32\qttask.exe" -atboottime
O4 - HKLM\..\Run: [DrvLsnr] C:\Program Files\Analog Devices\SoundMAX\DrvLsnr.exe
O4 - HKLM\..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [ISUSPM] "C:\Documents and Settings\All Users\Application Data\Macrovision\FLEXnet Connect\6\ISUSPM.exe" -scheduler
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - Startup: Optimize Memory.lnk = C:\Program Files\TC PowerPack\Optimize Memory\OMemory.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: E&xportálás Microsoft Excel formátumba - res://C:\PROGRA~1\MICROS~1\Office10\EXCEL.EXE/3000
O9 - Extra button: Küldés blogba - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Küldés blogba a Windows Live Writer programmal - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O11 - Options group: [TABS] Tabbed Browsing
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windows ... 3305059251
O17 - HKLM\System\CCS\Services\Tcpip\..\{7E78DBC3-15B6-44F4-9AC1-39EDBDB62A42}: NameServer = 80.244.97.30 80.244.96.1
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O18 - Protocol: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll
O20 - AppInit_DLLs: CLKERN.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\wpdshserviceobj.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Autodesk Licensing Service - Unknown owner - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: Google Updater Service (gusvc) - Unknown owner - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe (file missing)
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Unknown owner - C:\Program Files\Java\jre6\bin\jqs.exe" -service -config "C:\Program Files\Java\jre6\lib\deploy\jqs\jqs.conf (file missing)
O23 - Service: Sunbelt Kerio Personal Firewall 4 (KPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4ss.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: Sentinel Keys Server (SentinelKeysServer) - Unknown owner - C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe (file missing)
O23 - Service: Sentinel Protection Server (SentinelProtectionServer) - Unknown owner - C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe (file missing)
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

Ezekszerint mostmár végeztem? Ha így van akkor szeretném megköszönni a segítséged! Jó látni amikor ilyen önzetlenül segít valaki.

Persze megtörtént csak gondoltam beírom

na es mit akarunk uninstaled= letelepiteni,tehat ok

Ezt írja:

Combofix uninstalled

ok,ha nincsen problem leszedni a combofixet-start-futatas -masold be combofix /u ok
es ted ide uj hijack logot

Itt az eredményem:

ComboFix 09-01-12.04 - Krati 2009-01-14 20:29:06.2 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1250.1.1038.18.2047.1624 [GMT 1:00]
Running from: d:\krati\Programok\Vírusirtás lépések\1. lépés\ComboFix.exe
Command switches used :: c:\documents and settings\Krati\Asztal\CFScript.txt
AV: ESET NOD32 Antivirus 3.0 *On-access scanning disabled* (Outdated)
* Created a new restore point
* Resident AV is active


WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!

FILE ::
d:\resycled\boot.com
f:\resycled\boot.com
g:\resycled\boot.com
.

((((((((((((((((((((((((( Files Created from 2008-12-14 to 2009-01-14 )))))))))))))))))))))))))))))))
.

2009-01-13 17:21 . 2001-10-26 20:25 899,402 --a--c--- c:\windows\system32\dllcache\r2mdkxga.sys
2009-01-13 17:20 . 2001-08-17 22:05 351,616 --a--c--- c:\windows\system32\dllcache\ovcodek2.sys
2009-01-13 17:19 . 2001-08-17 21:28 802,683 --a--c--- c:\windows\system32\dllcache\ltsm.sys
2009-01-13 17:18 . 2001-10-26 21:24 1,733,120 --a--c--- c:\windows\system32\dllcache\g400d.dll
2009-01-13 17:17 . 2001-10-26 18:57 980,034 --a--c--- c:\windows\system32\dllcache\cicap.sys
2009-01-13 17:16 . 2001-08-17 21:28 871,388 --a--c--- c:\windows\system32\dllcache\bcmdm.sys
2009-01-13 17:15 . 2001-08-17 21:28 762,780 --a--c--- c:\windows\system32\dllcache\3cwmcru.sys
2009-01-13 17:14 . 2001-10-26 21:24 66,048 --a--c--- c:\windows\system32\dllcache\s3legacy.dll
2009-01-13 15:30 . 2009-01-13 15:30 <DIR> d-------- c:\documents and settings\All Users\Application Data\Kaspersky Lab Setup Files
2009-01-07 17:06 . 2009-01-07 17:06 <DIR> d-------- c:\documents and settings\Krati\WINDOWS
2009-01-07 16:56 . 2009-01-07 16:58 <DIR> d-------- c:\program files\Runtime Software
2009-01-02 12:00 . 2009-01-02 12:00 7,680 --a------ C:\AssistentGraph.grf
2009-01-02 11:56 . 1995-05-05 10:50 14,025 --------- c:\windows\TWAINCAP.INI
2009-01-02 11:56 . 1997-06-11 08:02 5,526 --------- c:\windows\TWAINCAP.SRC
2009-01-02 10:28 . 2008-04-14 18:01 363,520 --a------ c:\windows\system32\PsisDecd.dll
2009-01-02 10:28 . 2008-04-14 18:01 363,520 --a--c--- c:\windows\system32\dllcache\psisdecd.dll
2009-01-02 10:28 . 2008-04-14 18:02 56,832 --a------ c:\windows\system32\MSDvbNP.ax
2009-01-02 10:28 . 2008-04-14 18:02 56,832 --a--c--- c:\windows\system32\dllcache\msdvbnp.ax
2009-01-02 10:28 . 2008-04-14 18:02 33,280 --a------ c:\windows\system32\PsisRndr.ax
2009-01-02 10:28 . 2008-04-14 18:02 33,280 --a--c--- c:\windows\system32\dllcache\psisrndr.ax
2009-01-02 10:28 . 2008-04-14 18:02 18,432 --a--c--- c:\windows\system32\dllcache\bdaplgin.ax
2009-01-02 10:28 . 2008-04-14 18:02 18,432 --a------ c:\windows\system32\BdaPlgIn.ax
2009-01-02 10:28 . 2008-04-13 20:46 15,232 --a------ c:\windows\system32\drivers\MPE.sys
2009-01-02 10:28 . 2008-04-13 20:46 15,232 --a--c--- c:\windows\system32\dllcache\mpe.sys
2009-01-02 10:28 . 2008-04-13 20:46 11,776 --a------ c:\windows\system32\drivers\BdaSup.sys
2009-01-02 10:28 . 2008-04-13 20:46 11,776 --a--c--- c:\windows\system32\dllcache\bdasup.sys
2008-12-16 10:02 . 2008-12-16 10:02 <DIR> d-------- c:\documents and settings\Krati\Application Data\Ulead Systems
2008-12-16 09:56 . 2008-12-16 09:56 <DIR> d-------- c:\program files\Windows Media Components
2008-12-16 09:56 . 2008-12-16 09:56 <DIR> d-------- c:\documents and settings\All Users\Application Data\InstallShield
2008-12-16 09:55 . 2008-12-16 09:55 <DIR> d-------- c:\program files\Ulead Systems
2008-12-16 09:55 . 2008-12-16 09:56 <DIR> d-------- c:\program files\Common Files\Ulead Systems
2008-12-16 09:55 . 2008-12-16 10:02 <DIR> d-------- c:\documents and settings\All Users\Application Data\Ulead Systems
2008-12-16 09:55 . 2005-06-10 10:43 73,728 --a------ c:\windows\system32\ISUSPM.cpl
2008-12-16 09:50 . 2008-12-16 09:50 <DIR> d-------- c:\program files\Nokia
2008-12-16 09:50 . 2008-12-16 09:53 <DIR> d-------- c:\program files\Common Files\PCSuite
2008-12-16 09:50 . 2008-12-16 09:51 <DIR> d-------- c:\documents and settings\Krati\Application Data\PC Suite
2008-12-16 09:50 . 2008-12-16 09:51 <DIR> d-------- c:\documents and settings\All Users\Application Data\PC Suite
2008-12-16 09:50 . 2006-05-29 08:26 127,488 --a------ c:\windows\system32\drivers\nmwcd.sys
2008-12-16 09:50 . 2006-05-29 08:26 50,688 --a------ c:\windows\system32\nmwcdcls.dll
2008-12-16 09:50 . 2006-05-29 08:26 30,720 --a------ c:\windows\system32\nmwcdcocls.dll
2008-12-16 09:50 . 2006-05-29 08:26 13,312 --a------ c:\windows\system32\drivers\nmwcdcm.sys
2008-12-16 09:50 . 2006-05-29 08:26 8,704 --a------ c:\windows\system32\drivers\nmwcdc.sys
2008-12-16 09:50 . 2006-05-29 08:26 4,608 --a------ c:\windows\system32\nmwcdlog.dll
2008-12-16 09:49 . 2008-12-16 09:53 <DIR> d-------- c:\documents and settings\All Users\Application Data\Downloaded Installations

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-01-14 19:12 --------- d-----w c:\documents and settings\All Users\Application Data\Google Updater
2009-01-14 18:30 --------- d-----w c:\documents and settings\Krati\Application Data\uTorrent
2009-01-13 20:32 --------- d-----w c:\documents and settings\Krati\Application Data\Xfire
2009-01-13 18:24 137,688 ----a-w c:\windows\system32\drivers\PnkBstrK.sys
2009-01-09 13:54 --------- d-----w c:\program files\Xfire
2009-01-02 10:55 --------- d--h--w c:\program files\InstallShield Installation Information
2009-01-02 10:53 --------- d-----w c:\program files\Pinnacle
2008-12-16 08:55 --------- d-----w c:\program files\Common Files\InstallShield
2008-12-11 10:57 333,952 ----a-w c:\windows\system32\drivers\srv.sys
2008-11-26 08:51 --------- d-----w c:\program files\Java
2008-11-26 08:50 --------- d-----w c:\program files\Common Files\Java
2008-11-25 11:47 --------- d-----w c:\program files\PicLensIE
2008-11-23 08:45 22,328 -c--a-w c:\documents and settings\Krati\Application Data\PnkBstrK.sys
2008-11-23 08:28 --------- d-----w c:\program files\Common Files\Wise Installation Wizard
2008-11-23 08:28 --------- d-----w c:\program files\AGEIA Technologies
2008-11-20 12:03 --------- d-----w c:\program files\Google
2008-04-14 13:58 56 -csh--r c:\windows\system32\A2A18710D4.sys
2008-04-14 13:58 1,682 -csha-w c:\windows\system32\KGyGaAvL.sys
2008-09-09 15:54 32,768 -csha-w c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\MSHist012008090920080910\index.dat
.

((((((((((((((((((((((((((((( snapshot@2009-01-13_18.09.19.46 )))))))))))))))))))))))))))))))))))))))))
.
- 2008-12-12 08:44:23 593,920 ----a-r c:\windows\Installer\{9011040E-6000-11D3-8CFE-0150048383C9}\accicons.exe
+ 2009-01-14 04:11:08 593,920 ----a-r c:\windows\Installer\{9011040E-6000-11D3-8CFE-0150048383C9}\accicons.exe
- 2008-12-12 08:44:23 12,288 ----a-r c:\windows\Installer\{9011040E-6000-11D3-8CFE-0150048383C9}\cagicon.exe
+ 2009-01-14 04:11:08 12,288 ----a-r c:\windows\Installer\{9011040E-6000-11D3-8CFE-0150048383C9}\cagicon.exe
- 2008-12-12 08:44:23 86,016 ----a-r c:\windows\Installer\{9011040E-6000-11D3-8CFE-0150048383C9}\inficon.exe
+ 2009-01-14 04:11:08 86,016 ----a-r c:\windows\Installer\{9011040E-6000-11D3-8CFE-0150048383C9}\inficon.exe
- 2008-12-12 08:44:23 135,168 ----a-r c:\windows\Installer\{9011040E-6000-11D3-8CFE-0150048383C9}\misc.exe
+ 2009-01-14 04:11:08 135,168 ----a-r c:\windows\Installer\{9011040E-6000-11D3-8CFE-0150048383C9}\misc.exe
- 2008-12-12 08:44:24 11,264 ----a-r c:\windows\Installer\{9011040E-6000-11D3-8CFE-0150048383C9}\mspicons.exe
+ 2009-01-14 04:11:09 11,264 ----a-r c:\windows\Installer\{9011040E-6000-11D3-8CFE-0150048383C9}\mspicons.exe
- 2008-12-12 08:44:24 27,136 ----a-r c:\windows\Installer\{9011040E-6000-11D3-8CFE-0150048383C9}\oisicon.exe
+ 2009-01-14 04:11:09 27,136 ----a-r c:\windows\Installer\{9011040E-6000-11D3-8CFE-0150048383C9}\oisicon.exe
- 2008-12-12 08:44:24 4,096 ----a-r c:\windows\Installer\{9011040E-6000-11D3-8CFE-0150048383C9}\opwicon.exe
+ 2009-01-14 04:11:09 4,096 ----a-r c:\windows\Installer\{9011040E-6000-11D3-8CFE-0150048383C9}\opwicon.exe
- 2008-12-12 08:44:24 794,624 ----a-r c:\windows\Installer\{9011040E-6000-11D3-8CFE-0150048383C9}\outicon.exe
+ 2009-01-14 04:11:09 794,624 ----a-r c:\windows\Installer\{9011040E-6000-11D3-8CFE-0150048383C9}\outicon.exe
- 2008-12-12 08:44:23 249,856 ----a-r c:\windows\Installer\{9011040E-6000-11D3-8CFE-0150048383C9}\pptico.exe
+ 2009-01-14 04:11:08 249,856 ----a-r c:\windows\Installer\{9011040E-6000-11D3-8CFE-0150048383C9}\pptico.exe
- 2008-12-12 08:44:23 61,440 ----a-r c:\windows\Installer\{9011040E-6000-11D3-8CFE-0150048383C9}\pubs.exe
+ 2009-01-14 04:11:08 61,440 ----a-r c:\windows\Installer\{9011040E-6000-11D3-8CFE-0150048383C9}\pubs.exe
- 2008-12-12 08:44:24 23,040 ----a-r c:\windows\Installer\{9011040E-6000-11D3-8CFE-0150048383C9}\unbndico.exe
+ 2009-01-14 04:11:09 23,040 ----a-r c:\windows\Installer\{9011040E-6000-11D3-8CFE-0150048383C9}\unbndico.exe
- 2008-12-12 08:44:23 286,720 ----a-r c:\windows\Installer\{9011040E-6000-11D3-8CFE-0150048383C9}\wordicon.exe
+ 2009-01-14 04:11:08 286,720 ----a-r c:\windows\Installer\{9011040E-6000-11D3-8CFE-0150048383C9}\wordicon.exe
- 2008-12-12 08:44:23 409,600 ----a-r c:\windows\Installer\{9011040E-6000-11D3-8CFE-0150048383C9}\xlicons.exe
+ 2009-01-14 04:11:08 409,600 ----a-r c:\windows\Installer\{9011040E-6000-11D3-8CFE-0150048383C9}\xlicons.exe
- 2008-09-08 10:41:42 333,824 -c--a-w c:\windows\system32\dllcache\srv.sys
+ 2008-12-11 10:57:09 333,952 -c--a-w c:\windows\system32\dllcache\srv.sys
- 2008-12-09 23:24:37 17,593,280 ----a-w c:\windows\system32\MRT.exe
+ 2009-01-10 01:35:28 20,853,704 ----a-w c:\windows\system32\MRT.exe
- 2009-01-13 16:57:57 202,040 ----a-w c:\windows\system32\PnkBstrB.exe
+ 2009-01-13 18:24:02 202,040 ----a-w c:\windows\system32\PnkBstrB.exe
.
-- Snapshot reset to current date --
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NVMixerTray"="c:\program files\NVIDIA Corporation\NvMixer\NVMixerTray.exe" [2004-12-20 131072]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-10-07 13574144]
"VX1000"="c:\windows\vVX1000.exe" [2006-12-06 707360]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-10-07 86016]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2008-06-10 1447168]
"nwiz"="nwiz.exe" [2008-10-07 c:\windows\system32\nwiz.exe]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\All Users\Start Menu\Programs\Indˇt˘pult\
Pinnacle Scheduler.lnk - c:\program files\Pinnacle\Shared Files\Programs\Scheduler\PCLEScheduler.exe [2009-01-02 245760]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"VIDC.XFR1"= xfcodec.dll
"VIDC.HFYU"= huffyuv.dll
"vidc.ffds"= c:\program files\ffdshow\ffdshow.ax
"vidc.DIV3"= DivXc32.dll
"vidc.DIV4"= DivXc32f.dll
"msacm.divxa32"= DivXa32.acm
"msacm.dvacm"= c:\progra~1\COMMON~1\ULEADS~1\Vio\Dvacm.acm
"msacm.ulmp3acm"= c:\progra~1\COMMON~1\ULEADS~1\MPEG\ulmp3acm.acm
"msacm.mpegacm"= c:\progra~1\COMMON~1\ULEADS~1\MPEG\mpegacm.acm
"VIDC.PIM1"= PCLEPIM1.dll

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Indítópult^Adobe Reader Speed Launch.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Indítópult\Adobe Reader Speed Launch.lnk
backup=c:\windows\pss\Adobe Reader Speed Launch.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Indítópult^HP Digital Imaging Monitor.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Indítópult\HP Digital Imaging Monitor.lnk
backup=c:\windows\pss\HP Digital Imaging Monitor.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
--a------ 2007-10-23 14:18 202024 c:\program files\Common Files\Nero\Lib\NMBgMonitor.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools-1033]
--a------ 2004-08-22 17:05 81920 c:\program files\D-Tools\daemon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LifeCam]
--a------ 2007-01-13 02:48 275800 c:\program files\Microsoft LifeCam\LifeExp.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
--------- 2008-04-14 17:02 1695232 c:\program files\Messenger\msmsgs.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
--a------ 2007-10-18 10:34 5724184 c:\program files\Windows Live\Messenger\msnmsgr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBKeyScan]
--a--c--- 2007-09-20 08:51 1836328 c:\program files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
--a--c--- 2007-03-01 14:57 153136 c:\program files\Common Files\Nero\Lib\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
--a------ 2008-10-07 13:33 13574144 c:\windows\system32\nvcpl.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl]
--a--c--- 2004-11-02 20:24 32768 c:\program files\CyberLink\PowerDVD\PDVDServ.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
--a------ 2005-06-03 03:52 36975 c:\program files\Java\jre1.5.0_04\bin\jusched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
--a------ 2008-10-12 07:28 39408 c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\updateMgr]
-ra------ 2006-03-30 16:45 313472 c:\program files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VX1000]
--a------ 2006-12-06 00:38 707360 c:\windows\vVX1000.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\NVIDIA Corporation\\NetworkAccessManager\\Apache Group\\Apache2\\bin\\Apache.exe"=
"c:\\Program Files\\Microsoft LifeCam\\LifeCam.exe"=
"c:\\Program Files\\Microsoft LifeCam\\LifeExp.exe"=
"d:\\Krati\\Programok\\Dc++\\Strongdc++\\StrongDC.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"c:\\Program Files\\Xfire\\xfire.exe"=
"d:\\Games\\Cod4\\iw3mp.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009
"1417:UDP"= 1417:UDP:1417
"1417:TCP"= 1417:TCP:1417

R0 xmasbus;xmasbus;c:\windows\system32\drivers\xmasbus.sys [2008-01-22 140800]
R0 xmasscsi;xmasscsi;c:\windows\system32\drivers\xmasscsi.sys [2008-01-22 5504]
R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [2008-06-10 34312]
R3 3xHybrid;Pinnacle PCTV Stereo service;c:\windows\system32\drivers\3xHybrid.sys [2004-11-22 556416]
R3 pctvvbi;PCTVVBI;c:\windows\system32\drivers\pctvvbi.sys [2009-01-02 6400]
R4 ekrn;Eset Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [2008-06-10 468224]
S4 NOD32FiXTemDono;Eset Nod32 Boot;c:\windows\system32\regedt32.exe [2001-10-26 3584]
.
.
------- Supplementary Scan -------
.
uStart Page = about:blank
IE: E&xportálás Microsoft Excel formátumba - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-01-14 20:32:25
Windows 5.1.2600 Szervizcsomag 3 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_USERS\S-1-5-21-1177238915-602609370-682003330-1003\Software\SecuROM\License information*]
"datasecu"=hex:24,eb,9d,f6,b9,ff,23,82,b0,0d,fe,fb,b9,eb,4c,60,15,56,20,1f,fa,
39,f2,84,65,cd,72,8a,12,80,43,7e,8c,0b,dc,6c,eb,c2,2c,6b,5f,5b,59,8c,bd,ea,\
"rkeysecu"=hex:84,84,17,95,a7,40,b7,7c,dd,1b,ee,be,9f,7b,1b,90

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{47629D4B-2AD3-4e50-B716-A66C15C63153}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"cd042efbbd7f7af1647644e76e06692b"=hex:e2,63,26,f1,3f,c8,ff,68,09,f7,d5,61,04,
b1,04,1d,e2,63,26,f1,3f,c8,ff,68,40,1a,53,62,0b,d1,48,88,e2,63,26,f1,3f,c8,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{604BB98A-A94F-4a5c-A67C-D8D3582C741C}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"bca643cdc5c2726b20d2ecedcc62c59b"=hex:71,3b,04,66,8b,46,0d,96,b0,62,05,71,36,
c3,f9,cd,6a,9c,d6,61,af,45,84,18,92,9e,2f,ff,35,78,73,01,6a,9c,d6,61,af,45,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{684373FB-9CD8-4e47-B990-5A4466C16034}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"2c81e34222e8052573023a60d06dd016"=hex:25,da,ec,7e,55,20,c9,26,e8,4f,da,c6,70,
7f,0c,91,ff,7c,85,e0,43,d4,0e,fe,34,3b,07,ba,62,58,84,b7,ff,7c,85,e0,43,d4,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{74554CCD-F60F-4708-AD98-D0152D08C8B9}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"2582ae41fb52324423be06337561aa48"=hex:6b,65,49,6a,7e,99,74,f7,4d,d3,46,2e,b9,
a8,4c,f8,86,8c,21,01,be,91,eb,e7,8c,0c,41,b0,24,78,33,8f,86,8c,21,01,be,91,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{7EB537F9-A916-4339-B91B-DED8E83632C0}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"caaeda5fd7a9ed7697d9686d4b818472"=hex:cd,44,cd,b9,a6,33,6c,cd,bf,85,26,f7,1d,
bc,20,5a,f5,1d,4d,73,a8,13,5c,05,87,8e,2a,c0,3a,5e,96,38,f5,1d,4d,73,a8,13,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{948395E8-7A56-4fb1-843B-3E52D94DB145}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"a4a1bcf2cc2b8bc3716b74b2b4522f5d"=hex:b0,18,ed,a7,3f,8d,37,a4,20,a4,20,9b,85,
f4,37,03,df,20,58,62,78,6b,cf,c8,57,a1,11,dd,7c,d5,c4,bc,df,20,58,62,78,6b,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AC3ED30B-6F1A-4bfc-A4F6-2EBDCCD34C19}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"4d370831d2c43cd13623e232fed27b7b"=hex:fb,a7,78,e6,12,2f,9a,ea,f2,fd,f5,7f,1d,
c5,e5,3f,fb,a7,78,e6,12,2f,9a,ea,b5,43,38,1a,67,19,c4,79,fb,a7,78,e6,12,2f,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{DE5654CA-EB84-4df9-915B-37E957082D6D}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"1d68fe701cdea33e477eb204b76f993d"=hex:01,3a,48,fc,e8,04,4a,f1,d4,b8,2c,9f,dd,
29,8a,a1,01,3a,48,fc,e8,04,4a,f1,29,23,55,55,75,f8,87,90,01,3a,48,fc,e8,04,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{E39C35E8-7488-4926-92B2-2F94619AC1A5}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"1fac81b91d8e3c5aa4b0a51804d844a3"=hex:51,fa,6e,91,28,9e,14,cc,53,8c,44,0b,e9,
5f,38,e1,f6,0f,4e,58,98,5b,89,c9,8b,7a,44,c1,16,20,c3,b5,f6,0f,4e,58,98,5b,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{EACAFCE5-B0E2-4288-8073-C02FF9619B6F}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"f5f62a6129303efb32fbe080bb27835b"=hex:b1,cd,45,5a,a8,c4,f8,b9,79,0c,16,85,eb,
50,99,08,3d,ce,ea,26,2d,45,aa,78,46,e5,1c,69,4b,ec,d0,af,3d,ce,ea,26,2d,45,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{F8F02ADD-7366-4186-9488-C21CB8B3DCEC}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"fd4e2e1a3940b94dceb5a6a021f2e3c6"=hex:2a,b7,cc,b5,b9,7f,41,e7,6e,2e,bf,a7,23,
bb,03,21,2a,b7,cc,b5,b9,7f,41,e7,1d,75,ea,76,00,c9,bb,00,2a,b7,cc,b5,b9,7f,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{FEE45DE2-A467-4bf9-BF2D-1411304BCD84}\InprocServer32*]
"ThreadingModel"="Apartment"
@="c:\\WINDOWS\\system32\\OLE32.DLL"
"8a8aec57dd6508a385616fbc86791ec2"=hex:6c,43,2d,1e,aa,22,2f,9c,74,3e,3b,99,3a,
47,73,98,6c,43,2d,1e,aa,22,2f,9c,df,da,61,9c,b5,a9,f8,f9,6c,43,2d,1e,aa,22,\
.
------------------------ Other Running Processes ------------------------
.
c:\windows\system32\rundll32.exe
c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe
c:\program files\Microsoft LifeCam\MSCamS32.exe
c:\program files\Nero\Nero8\Nero BackItUp\NBService.exe
c:\program files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
c:\windows\system32\nvsvc32.exe
c:\windows\system32\HPZipm12.exe
c:\windows\system32\PnkBstrA.exe
c:\windows\system32\PnkBstrB.exe
.
**************************************************************************
.
Completion time: 2009-01-14 20:34:14 - machine was rebooted
ComboFix-quarantined-files.txt 2009-01-14 19:34:02
ComboFix2.txt 2009-01-13 17:10:09

Pre-Run: 1 648 095 232 bájt szabad
Post-Run: 1,633,431,552 bájt szabad

308 --- E O F --- 2009-01-14 04:11:10

eztet med fixeld le
O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - (no file)
O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\system32\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SpywareTerminator] "C:\PROGRA~1\SPYWAR~1\SpywareTerminatorShield.exe"
szed le az ad-avaret mindenestol .




krati
Kinyitod a Notepadot>Start>futatas>beirod notepad
Es bemasolod a piros textet

Mostan>a notepadon elso full-fajl>ballfelsosarokban>4-sor>lementenni mint....
A txt-hejetfajlnev beteszed eztett>CFScript.txt<alatta bealitod >minden fajl<
legfelull>asztall i<klik gomb letenni.Es mostan megcsinalod eztett:

A combofix maga elindul es lehet hogy restartol es befejezi a scent.Amit majd ad ted ide Es az uj HijackThis logjat ted ide OK
majd holnap megnezem ma vegzek
udv

Én is kaphatok még választ Stell, hogy minden oké-e?
A virustotal eredményét kicsit feljebb találod.

faggio
szed le a geprol ezeket a marhasagokat
ad-awaret es a terminatotrt-mert ehez erteni kell
1:A terminator jo de nemfuthat automatikusan a es kikel kapcsolni a virus vedo pajzat is mert verekszik az avasztal
2: ad-aware-ez nemenged valtoztatas a registerben mindig kerdez hogy mit csinaljon,
3:Neked nemlehet csak 1-virusirto=avast-1\tuzfal =van-1-spyware program,vagy hagyod a terminatort pajzok nelkul vagy felrakod hejetok a SAS-programort=superantispyware.

Mit csináljak steel?Tényleg tanácstalan vagyok valami csak betölti oda a registrybe akkor ez azt jelenti hogy valami még van.Mondj még valamit utána már nem zavarlak igy is segitettél ma eleget még azé adj tanácsot

na most meg kikapcsoltam a spwareterminatort meg a adawaret és most nézd:
Logfile of HijackThis v1.99.1
Scan saved at 19:56:08, on 2009.01.14.
Platform: Windows XP Szervizcsomag 3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\PixArt\PAC7311\Monitor.exe
C:\WINDOWS\system32\qttask.exe
C:\Program Files\Analog Devices\SoundMAX\DrvLsnr.exe
C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxtray.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Documents and Settings\All Users\Application Data\Macrovision\FLEXnet Connect\6\ISUSPM.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\TC PowerPack\Optimize Memory\OMemory.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
E:\PhoneConnectorVMC.exe
C:\Program Files\vodafone\vmclite\vmc.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4ss.exe
C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4gui.exe
C:\Program Files\internet explorer\iexplore.exe
C:\PROGRA~1\Crawler\Toolbar\CToolbar.exe
C:\Program Files\Hijackthis\HijackThis.exe
C:\Documents and Settings\All Users\Application Data\Macrovision\FLEXnet Connect\6\agent.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.hu/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60341
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_custo ... TbId=60341
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60341
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.com/support/sa_custo ... TbId=60341
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.microsoft.com/fwlink/?LinkId=74005
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hivatkozások
R3 - URLSearchHook: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O2 - BHO: Adobe PDF Reader hivatkozássúgó - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Windows Live bejelentkezési segítség - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: &Crawler Toolbar - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O4 - HKLM\..\Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [Monitor] C:\WINDOWS\PixArt\PAC7311\Monitor.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\system32\qttask.exe" -atboottime
O4 - HKLM\..\Run: [DrvLsnr] C:\Program Files\Analog Devices\SoundMAX\DrvLsnr.exe
O4 - HKLM\..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [SpywareTerminator] "C:\PROGRA~1\SPYWAR~1\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [ISUSPM] "C:\Documents and Settings\All Users\Application Data\Macrovision\FLEXnet Connect\6\ISUSPM.exe" -scheduler
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: Optimize Memory.lnk = C:\Program Files\TC PowerPack\Optimize Memory\OMemory.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: E&xportálás Microsoft Excel formátumba - res://C:\PROGRA~1\MICROS~1\Office10\EXCEL.EXE/3000
O9 - Extra button: Küldés blogba - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Küldés blogba a Windows Live Writer programmal - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O11 - Options group: [TABS] Tabbed Browsing
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} - http://download.bitdefender.com/resourc ... oscan8.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windows ... 3305059251
O17 - HKLM\System\CCS\Services\Tcpip\..\{7E78DBC3-15B6-44F4-9AC1-39EDBDB62A42}: NameServer = 80.244.97.30 80.244.96.1
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O18 - Protocol: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll
O20 - AppInit_DLLs: CLKERN.DLL
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\wpdshserviceobj.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Autodesk Licensing Service - Unknown owner - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: Google Updater Service (gusvc) - Unknown owner - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe (file missing)
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Unknown owner - C:\Program Files\Java\jre6\bin\jqs.exe" -service -config "C:\Program Files\Java\jre6\lib\deploy\jqs\jqs.conf (file missing)
O23 - Service: Sunbelt Kerio Personal Firewall 4 (KPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4ss.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: Sentinel Keys Server (SentinelKeysServer) - Unknown owner - C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe (file missing)
O23 - Service: Sentinel Protection Server (SentinelProtectionServer) - Unknown owner - C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe (file missing)
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe

NA MOST MEG ICS OTT MOST AKKOR MIVAN? A SWEETIM HAMARABB VOLT MEG SOKKAL MINT ŐK

Itt a virustotal eredménye:

A(z) A2A18710d4.sys állomány feltöltve:2009.01.14 19:41:01 (CET)
Pillanatnyi állapot: befejeződött
Eredmény: 0/39 (0%)

Eredmény: 0/39 (0%)
Antivírus Verzió Utolsó frissítés Eredmény
a-squared 4.0.0.73 2009.01.14 -
AhnLab-V3 2009.1.15.0 2009.01.14 -
AntiVir 7.9.0.54 2009.01.14 -
Authentium 5.1.0.4 2009.01.14 -
Avast 4.8.1281.0 2009.01.14 -
AVG 8.0.0.229 2009.01.14 -
BitDefender 7.2 2009.01.14 -
CAT-QuickHeal 10.00 2009.01.14 -
ClamAV 0.94.1 2009.01.14 -
Comodo 931 2009.01.14 -
DrWeb 4.44.0.09170 2009.01.14 -
eSafe 7.0.17.0 2009.01.14 -
eTrust-Vet 31.6.6307 2009.01.14 -
F-Prot 4.4.4.56 2009.01.14 -
F-Secure 8.0.14470.0 2009.01.14 -
Fortinet 3.117.0.0 2009.01.14 -
GData 19 2009.01.14 -
Ikarus T3.1.1.45.0 2009.01.14 -
K7AntiVirus 7.10.584 2009.01.09 -
Kaspersky 7.0.0.125 2009.01.14 -
McAfee 5495 2009.01.14 -
McAfee+Artemis 5495 2009.01.14 -
Microsoft 1.4205 2009.01.14 -
NOD32 3766 2009.01.14 -
Norman 5.93.01 2009.01.13 -
nProtect 2009.1.8.0 2009.01.14 -
Panda 9.5.1.2 2009.01.13 -
PCTools 4.4.2.0 2009.01.14 -
Prevx1 V2 2009.01.14 -
Rising 21.12.22.00 2009.01.14 -
SecureWeb-Gateway 6.7.6 2009.01.14 -
Sophos 4.37.0 2009.01.14 -
Sunbelt 3.2.1831.2 2009.01.09 -
Symantec 10 2009.01.14 -
TheHacker 6.3.1.4.219 2009.01.14 -
TrendMicro 8.700.0.1004 2009.01.14 -
VBA32 3.12.8.10 2009.01.13 -
ViRobot 2009.1.14.1559 2009.01.14 -
VirusBuster 4.5.11.0 2009.01.14 -
További információ
File size: 56 bytes
MD5...: 5d02e9c0d005b92b1ac84a263e80995a
SHA1..: 2dd86b8e98dc50411df0bc8c1d6139a1f9586ed0
SHA256: 03b8a732cbde616b021dd4c305264095c162c4a252e5522a55bb5cd30dbdf050
SHA512: a9d6527fe80baca8004e46bf750ad6119ce51ed173d928f948f4eb2770c069e7
1f8ea2d7a5a25d9620ea978d383ed22c1d8dbd1b81c3a1573d767ecda1d572c9

ssdeep: 3:/ldEVpvX:M/

PEiD..: -
TrID..: File type identification
MS Flight Simulator Aircraft Performance Info (100.0%)
PEInfo: -

akkor ezt hallgasd amikor fixelem akkor a ad-aware watch észlel hogy beleiródott a registrybe ez a sweetim na erre mondj valamit

igen a TERMINATOR viszaalit,szed le a Terminatort es ted ide az uj hijackthis logjat.

hiába lefixelem akkor is ott van már megint vagy valamit bekell állitani a hijackthis-be hogy törölje?

inkáBB Csinálom megint az egészet mert lehet hogy a hülye spyware terminátor amikor uninstalláltam a combofixet megakadályozta a karantént is és lehet hogy kiszabadult:):):):(::(:(:(:(:(:(em tudom már nembirom ez már a nyolcadik nap ÁÁÁÁÁÁÁ csinálta már az avassal is nem engedte berakni a karantéba a virust a terminátor szerinted csináljam az egészet ujra?

A T-Cleaner renben van ha jelez a virusirto azt neved figyelembe,Ha otvana sweetim.com lekel Fixelni a hijackal

Van egy kis gond a cim amit adtál a t-cleaner az kémprogis volt valami spybanker de ez még semmi mikor uninstaláltam a combfixet és csináltam logfájl analizist a sweetim.com megint ott volt a registrybe??

mijen piros kereszt en nemlatok sehol piros keresztet,
ha a pix art ra gondolsz
Monitor.exe Related to PixArt CMOS image sensors from PixArt Imaging Inc. Note: located in \%WINDIR%\PixArt\PAC7302\ U
eztet lefixelheted a te dolgod ha hagyod e
FIXELD
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - (no file)
O3 - Toolbar: (no name) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - (no file)
O3 - Toolbar: (no name) - {35065594-9169-4A34-B167-FC4865038E53} - (no file)
O20 - Winlogon Notify: dimsntfy - %SystemRoot%\System32\dimsntfy.dll (file missing)
leszeded a combofixet-start-futatas masold be combofix /u ok
futatod ezt a programot-mindig nyomd be A-es [enter]
leszedi a programokat amit a pucolasra hasznaltunk
http://sweb.cz/Marinus/T-Cleaner.exe
pucold ki a gepet CCleaneral

a haladot nembantod
ez minden es nincsen mitt koszonod
udv,

itt a hijack scan:
Logfile of HijackThis v1.99.1
Scan saved at 16:18:42, on 2009.01.14.
Platform: Windows XP Szervizcsomag 3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\PixArt\PAC7311\Monitor.exe
C:\WINDOWS\system32\qttask.exe
C:\Program Files\Analog Devices\SoundMAX\DrvLsnr.exe
C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxtray.exe
C:\PROGRA~1\SPYWAR~1\SpywareTerminatorShield.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Documents and Settings\All Users\Application Data\Macrovision\FLEXnet Connect\6\ISUSPM.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\TC PowerPack\Optimize Memory\OMemory.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
E:\PhoneConnectorVMC.exe
C:\Program Files\vodafone\vmclite\vmc.exe
C:\Program Files\internet explorer\iexplore.exe
C:\PROGRA~1\Crawler\Toolbar\CToolbar.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4ss.exe
C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4gui.exe
C:\Program Files\Hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.hu/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60341
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_custo ... TbId=60341
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.microsoft.com/fwlink/?LinkId=74005
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hivatkozások
R3 - URLSearchHook: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O2 - BHO: Adobe PDF Reader hivatkozássúgó - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Windows Live bejelentkezési segítség - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: (no name) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - (no file)
O3 - Toolbar: (no name) - {35065594-9169-4A34-B167-FC4865038E53} - (no file)
O3 - Toolbar: &Crawler Toolbar - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O4 - HKLM\..\Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [Monitor] C:\WINDOWS\PixArt\PAC7311\Monitor.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\system32\qttask.exe" -atboottime
O4 - HKLM\..\Run: [DrvLsnr] C:\Program Files\Analog Devices\SoundMAX\DrvLsnr.exe
O4 - HKLM\..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [ISUSPM] "C:\Documents and Settings\All Users\Application Data\Macrovision\FLEXnet Connect\6\ISUSPM.exe" -scheduler
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: Optimize Memory.lnk = C:\Program Files\TC PowerPack\Optimize Memory\OMemory.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: E&xportálás Microsoft Excel formátumba - res://C:\PROGRA~1\MICROS~1\Office10\EXCEL.EXE/3000
O9 - Extra button: Küldés blogba - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Küldés blogba a Windows Live Writer programmal - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O11 - Options group: [TABS] Tabbed Browsing
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} - http://download.bitdefender.com/resourc ... oscan8.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windows ... 3305059251
O17 - HKLM\System\CCS\Services\Tcpip\..\{7E78DBC3-15B6-44F4-9AC1-39EDBDB62A42}: NameServer = 80.244.97.30 80.244.96.1
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O18 - Protocol: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll
O20 - AppInit_DLLs: CLKERN.DLL
O20 - Winlogon Notify: dimsntfy - %SystemRoot%\System32\dimsntfy.dll (file missing)
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\wpdshserviceobj.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Autodesk Licensing Service - Unknown owner - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: Google Updater Service (gusvc) - Unknown owner - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe (file missing)
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Unknown owner - C:\Program Files\Java\jre6\bin\jqs.exe" -service -config "C:\Program Files\Java\jre6\lib\deploy\jqs\jqs.conf (file missing)
O23 - Service: Sunbelt Kerio Personal Firewall 4 (KPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4ss.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: Sentinel Keys Server (SentinelKeysServer) - Unknown owner - C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe (file missing)
O23 - Service: Sentinel Protection Server (SentinelProtectionServer) - Unknown owner - C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe (file missing)
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe

amik a karanténba vannak a combonak meg a sdfix-nek azokat törölhetem?

Akkor kész?Analizáltam a hijackot és a sweetim.com és már nem töltődik be vissza nagyon köszönöm shell hálás vagyok már csak az a monitor .exe piros x-es de nem irja már mellete hogy nasty és már nincs 2 userini.exe franco mégegyszer nagyon köszönöm dakujeme:):):)

ok,ted ide csinalj az uj hijack logot es ird le mi van a gepel,jo,vagy nem jo.

bocs bocsi már jo a tüzfal

Most szerintem lehet hogy valamit rosszul csináltam mert a kerio tűzfalam hibát észlel és nem indul szerinted restart után?

OK. Megvan tessék:

ComboFix 09-01-13.04 - Rendszergazda 2009-01-14 15:06:22.2 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1250.1.1038.18.1271.800 [GMT 1:00]
Running from: c:\documents and settings\Rendszergazda\Asztal\ComboFix.exe
Command switches used :: c:\documents and settings\Rendszergazda\Asztal\CFScript.txt
AV: avast! antivirus 4.8.1169 [VPS 090113-1] *On-access scanning disabled* (Outdated)
FW: Kerio Personal Firewall *disabled*
* Created a new restore point

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!

FILE ::
C:\sqmdata00.sqm
C:\sqmnoopt00.sqm
c:\windows\system32\dowload.dds
c:\windows\system32\drivers\msqpdxtetqlhbb.sys
c:\windows\system32\i4Zj1jUjy2Q.dds
c:\windows\system32\upload.dds
c:\windows\TSDataEx.ini
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\sqmdata00.sqm
C:\sqmnoopt00.sqm
c:\windows\system32\dowload.dds
c:\windows\system32\i4Zj1jUjy2Q.dds
c:\windows\system32\upload.dds
c:\windows\TSDataEx.ini

.
((((((((((((((((((((((((( Files Created from 2008-12-14 to 2009-01-14 )))))))))))))))))))))))))))))))
.

2009-01-14 12:57 . 2009-01-14 12:57 <DIR> d-------- c:\windows\system32\xircom
2009-01-14 12:57 . 2009-01-14 12:57 <DIR> d-------- c:\program files\microsoft frontpage
2009-01-14 12:50 . 2009-01-14 12:50 578,560 --a------ c:\windows\system32\dllcache\user32.dll
2009-01-14 12:46 . 2009-01-14 12:47 <DIR> d-------- c:\windows\ERUNT
2009-01-14 12:41 . 2009-01-14 13:24 <DIR> d-------- C:\SDFix
2009-01-14 07:33 . 2009-01-14 07:33 <DIR> d-------- c:\documents and settings\Rendszergazda\Tracing
2009-01-14 07:26 . 2009-01-14 07:26 <DIR> d-------- c:\program files\Microsoft
2009-01-14 07:25 . 2009-01-14 07:25 <DIR> d-------- c:\program files\Windows Live SkyDrive
2009-01-14 07:25 . 2009-01-14 07:32 <DIR> d-------- c:\program files\Windows Live
2009-01-14 06:22 . 2009-01-14 06:22 <DIR> d-------- c:\program files\Common Files\Windows Live
2009-01-13 21:08 . 2009-01-13 21:09 <DIR> d-------- c:\program files\starter
2009-01-13 20:33 . 2009-01-13 20:34 <DIR> d-------- c:\program files\3d xp
2009-01-13 20:07 . 2009-01-13 20:11 <DIR> d-------- c:\program files\jetaudio
2009-01-13 17:52 . 2009-01-13 18:39 <DIR> d-------- c:\documents and settings\Rendszergazda\Application Data\Aston
2009-01-13 10:36 . 2009-01-13 10:36 <DIR> d-------- c:\program files\ESET
2009-01-11 19:38 . 2009-01-11 19:38 <DIR> d-------- c:\windows\system32\ebay
2009-01-11 19:38 . 2009-01-11 19:38 <DIR> d-------- c:\program files\Ashampoo
2009-01-11 01:16 . 2009-01-12 18:29 <DIR> d-------- c:\program files\Lavasoft
2009-01-11 00:51 . 2009-01-11 17:13 <DIR> d-------- c:\documents and settings\All Users\Application Data\Lavasoft
2009-01-10 23:29 . 2009-01-12 18:29 <DIR> d-------- c:\documents and settings\Rendszergazda\Application Data\Lavasoft
2009-01-10 21:13 . 2009-01-10 21:13 <DIR> d-------- c:\program files\Alwil Software
2009-01-10 13:36 . 2009-01-10 13:36 <DIR> d-------- c:\documents and settings\All Users\Application Data\Kaspersky Lab Setup Files
2009-01-09 19:31 . 2009-01-09 19:35 <DIR> d-------- c:\program files\Cracklock
2009-01-09 19:31 . 2005-11-07 00:36 118,784 --a------ c:\windows\system32\CLKERN.DLL
2009-01-09 18:39 . 2009-01-14 12:44 9,074 --a------ c:\windows\system32\drivers\fwdrv.err
2009-01-09 15:24 . 2009-01-09 15:24 <DIR> d-------- c:\program files\AxBx
2009-01-09 10:55 . 2009-01-09 15:52 <DIR> d-------- c:\program files\M Computer Software
2009-01-09 08:57 . 2009-01-14 13:28 113 --a------ c:\windows\system32\BIN_STRSBW.SPT
2009-01-09 01:49 . 2009-01-14 15:14 <DIR> d-------- c:\program files\WinClamAVShield
2009-01-09 01:41 . 2009-01-14 11:19 <DIR> d-------- c:\program files\Spyware Terminator
2009-01-09 01:41 . 2009-01-09 01:41 <DIR> d-------- c:\program files\Crawler
2009-01-09 01:41 . 2009-01-14 14:48 <DIR> d-------- c:\documents and settings\Rendszergazda\Application Data\Spyware Terminator
2009-01-09 01:41 . 2009-01-12 20:40 <DIR> d-------- c:\documents and settings\All Users\Application Data\Spyware Terminator
2009-01-09 01:41 . 2009-01-09 01:41 142,592 --a------ c:\windows\system32\drivers\sp_rsdrv2.sys
2009-01-08 16:12 . 2009-01-08 16:12 <DIR> d-------- c:\program files\Sunbelt Software
2009-01-08 08:52 . 2009-01-08 08:53 <DIR> d--h----- c:\documents and settings\All Users\Application Data\{F481FC18-57D5-4479-B2FB-083BFF223F8F}
2009-01-08 07:59 . 2008-03-03 14:25 5,702 --ah----- c:\windows\nod32restoretemdono.reg
2009-01-04 17:49 . 2000-10-11 14:11 121,562 --a------ c:\windows\system32\PicFormat32.dll
2009-01-04 17:49 . 2000-10-11 13:22 36,864 --a------ c:\windows\system32\PicFormat32.ocx
2009-01-04 10:09 . 2009-01-04 10:09 4,096 --a------ c:\windows\d3dx.dat
2009-01-03 05:30 . 2009-01-13 13:27 0 --a------ C:\FileOut.Cns
2009-01-03 05:30 . 2009-01-13 13:27 0 --a------ C:\FileIn.Cns
2009-01-03 05:12 . 2009-01-03 08:53 <DIR> d-------- c:\program files\Microsoft Games
2009-01-02 15:32 . 2009-01-10 02:59 13,030 --a------ C:\PDOXUSRS.NET
2009-01-02 07:43 . 2009-01-02 07:44 <DIR> d-------- c:\program files\Common Files\Autodesk Shared
2009-01-02 07:43 . 2009-01-02 07:43 <DIR> d-------- c:\program files\backburner 2
2009-01-02 07:43 . 2009-01-02 07:51 <DIR> d-------- c:\documents and settings\All Users\Application Data\Autodesk
2009-01-02 07:43 . 2009-01-13 17:35 <DIR> d-------- C:\3dsmax7
2009-01-02 02:42 . 2009-01-02 04:31 <DIR> d-------- c:\documents and settings\Rendszergazda\.bitrock
2009-01-01 13:50 . 2009-01-01 13:50 763 --a------ c:\windows\ST5UNST.001
2009-01-01 13:49 . 2009-01-01 13:49 779 --a------ c:\windows\ST5UNST.000
2008-12-27 14:48 . 2008-04-14 08:40 14,720 --a------ c:\windows\system32\drivers\kbdhid.sys
2008-12-24 19:38 . 2008-12-24 19:38 <DIR> d-------- c:\program files\Audacity
2008-12-23 19:21 . 2008-12-23 19:21 <DIR> d-------- c:\program files\Common Files\Borland Shared
2008-12-23 19:21 . 1999-01-20 05:01 210,032 --a------ c:\windows\system32\DBCLIENT.DLL
2008-12-23 19:21 . 1999-11-12 05:11 183,808 --a------ c:\windows\system32\BDEADMIN.CPL
2008-12-23 19:19 . 2008-12-23 19:21 <DIR> d-------- c:\program files\LOIM
2008-12-22 11:14 . 2008-12-22 11:14 <DIR> d-------- c:\documents and settings\Rendszergazda\Application Data\3DFA
2008-12-21 11:19 . 2007-06-01 06:20 503,808 --a------ c:\windows\SwSetupu.exe
2008-12-21 02:16 . 2008-12-21 02:16 917 --a------ c:\windows\GTA-SA_Trn_Settings.ini
2008-12-20 10:18 . 2008-12-20 10:18 <DIR> d-------- c:\program files\AVI MPEG RM WMV Joiner
2008-12-20 09:29 . 2008-12-20 09:29 56,346 ---h----- C:\treeinfo.wc
2008-12-20 06:40 . 2008-12-20 11:20 <DIR> d-------- C:\OutputFolder
2008-12-20 06:38 . 2008-12-20 06:39 <DIR> d-------- c:\program files\WMV to AVI MPEG DVD WMV Converter
2008-12-20 05:45 . 2008-12-20 05:45 <DIR> d-------- c:\documents and settings\Rendszergazda\Application Data\CyberLink
2008-12-20 05:15 . 2008-12-20 05:15 <DIR> d-------- c:\program files\TFM
2008-12-20 04:45 . 2003-03-13 12:51 51,200 --a------ c:\windows\system32\camcodec.dll
2008-12-20 04:44 . 2003-03-13 12:51 1,461 --a------ c:\windows\system32\drivers\camcodec.inf
2008-12-20 04:34 . 2008-12-20 04:34 <DIR> d-------- c:\program files\Bobyte
2008-12-20 04:20 . 2008-12-20 04:20 <DIR> d-------- c:\documents and settings\Rendszergazda\Application Data\HighAndes
2008-12-20 04:20 . 2008-12-20 04:20 <DIR> d-------- c:\documents and settings\All Users\Application Data\HighAndes
2008-12-20 04:19 . 2008-12-20 04:19 <DIR> d-------- c:\program files\HighAndes
2008-12-19 10:06 . 2008-12-19 10:06 <DIR> d-------- c:\program files\PC Camera
2008-12-19 10:06 . 2008-12-19 10:06 <DIR> d-------- c:\program files\Common Files\PXIINST64
2008-12-19 10:06 . 2008-12-19 10:06 <DIR> d-------- c:\program files\Common Files\PXIINST
2008-12-19 10:06 . 2008-12-19 10:06 <DIR> d-------- c:\program files\Common Files\PAC7311
2008-12-18 12:24 . 2008-12-20 05:08 <DIR> d-------- c:\documents and settings\Rendszergazda\Application Data\gtk-2.0
2008-12-18 12:19 . 2008-12-18 12:19 <DIR> d-------- c:\documents and settings\Rendszergazda\Application Data\avidemux
2008-12-18 12:18 . 2008-12-24 10:50 <DIR> d-------- c:\program files\Avidemux 2.4
2008-12-18 12:11 . 2008-12-18 12:11 <DIR> d-------- c:\program files\Paint.NET
2008-12-18 04:27 . 2005-06-21 15:49 68,112 --a------ c:\windows\system32\igfx.hlp
2008-12-16 15:46 . 2008-12-16 15:48 <DIR> d-------- c:\program files\nfs cuccok
2008-12-14 11:36 . 2008-12-14 11:49 <DIR> d-------- c:\documents and settings\Rendszergazda\Application Data\flightgear.org
2008-12-14 09:45 . 2008-12-14 09:45 126,976 --a------ c:\windows\dsrmv.exe
2008-12-14 08:58 . 2008-12-14 08:58 <DIR> d-------- c:\program files\TallStick
2008-12-14 02:26 . 2008-12-14 02:26 <DIR> d-------- c:\program files\URUSoft
2008-12-14 01:07 . 2008-12-14 01:07 <DIR> d-------- c:\program files\AviSynth 2.5
2008-12-14 01:06 . 2006-09-12 11:46 227,328 -r-hs---- c:\windows\system32\ac3DX.ax
2008-12-14 01:06 . 2005-01-17 23:26 179,200 -r-hs---- c:\windows\system32\DiracSplitter.ax
2008-12-14 01:06 . 2006-08-16 14:53 175,104 -r-hs---- c:\windows\system32\CoreAAC.ax
2008-12-14 01:06 . 2006-03-10 21:48 169,472 -r-hs---- c:\windows\system32\MatroskaDX.ax
2008-12-14 01:06 . 2006-05-03 10:06 163,328 -r-hs---- c:\windows\system32\flvDX.dll
2008-12-14 01:06 . 2006-01-12 23:23 123,904 -r-hs---- c:\windows\system32\AVCDX.ax
2008-12-14 01:06 . 2005-02-22 16:55 81,920 -r-hs---- c:\windows\system32\aac_parser.ax
2008-12-14 01:00 . 2008-12-14 01:00 <DIR> d-------- c:\program files\eRightSoft
2008-12-14 00:36 . 2008-12-14 03:04 <DIR> d-------- c:\program files\avi szerkesztő

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-01-14 08:09 --------- d---a-w c:\documents and settings\All Users\Application Data\TEMP
2009-01-12 17:28 --------- d-----w c:\program files\Common Files\Wise Installation Wizard
2009-01-11 01:48 --------- d-----w c:\program files\Winamp
2009-01-11 01:19 --------- d-----w c:\program files\Rockstar Games
2008-12-27 10:13 --------- d-----w c:\documents and settings\Rendszergazda\Application Data\Power Sound Editor Free
2008-12-27 06:41 --------- d-----w c:\program files\DivX
2008-12-20 04:45 --------- d-----w c:\program files\SuperDVD Video Editor
2008-12-19 09:19 921,632 ----a-w C:\PA7311.DAT
2008-12-17 17:37 --------- d-----w c:\program files\Valve
2008-12-16 19:19 --------- d-----w c:\program files\ArcSoft
2008-12-16 11:40 367,776 ----a-w c:\windows\Need For Speed_ Most Wanted Eltávolító.exe
2008-12-13 16:27 --------- d-----w c:\program files\Google
2008-12-13 06:39 3,593,216 ------w c:\windows\system32\dllcache\mshtml.dll
2008-12-12 11:24 4,930 ----a-w c:\windows\system32\drivers\hwinterface32B01.sys
2008-12-11 10:57 333,952 ----a-w c:\windows\system32\drivers\srv.sys
2008-12-11 10:57 333,952 ------w c:\windows\system32\dllcache\srv.sys
2008-12-10 08:37 286,720 ----a-w c:\windows\iun507.exe
2008-12-09 10:19 --------- d-----w c:\program files\EarthView
2008-12-09 10:19 --------- d-----w c:\documents and settings\Rendszergazda\Application Data\DeskSoft
2008-12-08 19:44 --------- d-----w c:\program files\RegCleaner
2008-12-08 10:54 --------- d--h--w c:\program files\InstallShield Installation Information
2008-12-07 19:58 --------- d-----w c:\program files\Common Files\DirectX
2008-12-07 19:45 --------- d-----w c:\program files\Common Files\EasyInfo
2008-12-06 13:51 --------- d-----w c:\program files\VID_0E8F&PID_0003
2008-12-06 13:50 --------- d-----w c:\documents and settings\Rendszergazda\Application Data\InstallShield
2008-12-04 23:42 308,072 ----a-w c:\windows\WLXPGSS.SCR
2008-12-04 17:19 22,960 ----a-w c:\documents and settings\Rendszergazda\Application Data\GDIPFONTCACHEV1.DAT
2008-12-04 16:32 410,976 ----a-w c:\windows\system32\deploytk.dll
2008-12-04 16:32 --------- d-----w c:\program files\Java
2008-12-02 21:37 49,480 ----a-w c:\windows\system32\sirenacm.dll
2008-12-02 17:46 27,904 ----a-w c:\windows\system32\drivers\ndisprot.sys
2008-11-28 08:41 3,584,000 ----a-w c:\windows\Virtuelle Bahnfahrt.scr
2008-11-21 21:46 200,704 ----a-w c:\windows\system32\ssldivx.dll
2008-11-21 21:46 1,044,480 ----a-w c:\windows\system32\libdivx.dll
2008-11-21 16:35 --------- d-----w c:\program files\Sanny Builder 3
2008-11-06 16:25 922,210 ----a-w c:\windows\Grand Theft Auto_ San Andreas hun Uninstaller.exe
2008-10-24 11:21 455,296 ------w c:\windows\system32\dllcache\mrxsmb.sys
2008-10-23 12:42 286,720 ----a-w c:\windows\system32\gdi32.dll
2008-10-23 12:42 286,720 ------w c:\windows\system32\dllcache\gdi32.dll
2008-10-16 13:13 70,656 ------w c:\windows\system32\dllcache\ie4uinit.exe
2008-10-16 13:13 202,776 ----a-w c:\windows\system32\wuweb.dll
2008-10-16 13:13 1,809,944 ----a-w c:\windows\system32\wuaueng.dll
2008-10-16 13:12 561,688 ----a-w c:\windows\system32\wuapi.dll
2008-10-16 13:12 323,608 ----a-w c:\windows\system32\wucltui.dll
2008-10-16 13:11 13,824 ------w c:\windows\system32\dllcache\ieudinit.exe
2008-10-16 13:09 92,696 ----a-w c:\windows\system32\cdm.dll
2008-10-16 13:09 51,224 ----a-w c:\windows\system32\wuauclt.exe
2008-10-16 13:09 43,544 ----a-w c:\windows\system32\wups2.dll
2008-10-16 13:08 34,328 ----a-w c:\windows\system32\wups.dll
2008-10-16 13:06 268,648 ----a-w c:\windows\system32\mucltui.dll
2008-10-16 13:06 208,744 ----a-w c:\windows\system32\muweb.dll
2008-10-15 16:37 337,408 ------w c:\windows\system32\dllcache\netapi32.dll
2008-10-15 07:06 633,632 ------w c:\windows\system32\dllcache\iexplore.exe
2008-10-15 07:04 161,792 ------w c:\windows\system32\dllcache\ieakui.dll
2008-10-06 15:35 17,192,960 ----a-w c:\program files\Windows.Live.Messenger-8.5.1302.1018_magyar.msi
2006-05-03 09:06 163,328 --sh--r c:\windows\system32\flvDX.dll
2007-02-21 10:47 31,232 --sh--r c:\windows\system32\msfDX.dll
2008-03-16 12:30 216,064 --sh--r c:\windows\system32\nbDX.dll
.

((((((((((((((((((((((((((((( snapshot@2009-01-14_14.03.39,64 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-01-14 14:12:09 16,384 ----atw c:\windows\Temp\Perflib_Perfdata_164.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ISUSPM"="c:\documents and settings\All Users\Application Data\Macrovision\FLEXnet Connect\6\ISUSPM.exe" [2007-03-29 222128]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2006-08-30 139264]
"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2008-12-04 136600]
"Monitor"="c:\windows\PixArt\PAC7311\Monitor.exe" [2006-11-03 319488]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 39792]
"NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2006-01-12 155648]
"QuickTime Task"="c:\windows\system32\qttask.exe" [2008-10-06 98304]
"DrvLsnr"="c:\program files\Analog Devices\SoundMAX\DrvLsnr.exe" [2003-05-08 69632]
"Smapp"="c:\program files\Analog Devices\SoundMAX\SMTray.exe" [2003-05-05 143360]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2005-06-21 126976]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2005-06-21 155648]
"SpywareTerminator"="c:\progra~1\SPYWAR~1\SpywareTerminatorShield.exe" [2009-01-09 2267136]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2008-03-29 79224]
"Tweak UI"="TWEAKUI.CPL" [2003-03-25 c:\windows\system32\tweakui.cpl]
"NWEReboot"="" [BU]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"nltide_2"="shell32" [X]

c:\documents and settings\Rendszergazda\Start Menu\Programs\Indˇt˘pult\
Optimize Memory.lnk - c:\program files\TC PowerPack\Optimize Memory\OMemory.exe [2004-04-07 1573888]

c:\documents and settings\All Users\Start Menu\Programs\Indˇt˘pult\
Microsoft Office.lnk - c:\program files\Microsoft Office\Office10\OSA.EXE [2001-02-13 83360]
WinZip Quick Pick.lnk - c:\program files\WinZip\WZQKPICK.EXE [2008-10-10 118784]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=CLKERN.DLL

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"msacm.iac2"= c:\progra~1\ACEMEG~1\SystemS\Intel\iac25_32.ax
"VIDC.CSCD"= camcodec.dll
"msacm.sl_anet"= c:\progra~1\ACEMEG~1\SystemS\sl_anet.acm
"VIDC.I420"= i420vfw.dll
"msacm.msaudio1"= c:\progra~1\ACEMEG~1\SystemS\MICROS~1\msaud32.acm

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"UpdatesDisableNotify"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Program Files\\Valve\\hl.exe"=
"c:\\Program Files\\Valve\\hlds.exe"=
"c:\\WINDOWS\\system32\\ftp.exe"=
"c:\\3dsmax7\\3dsmax.exe"=
"c:\\Program Files\\backburner 2\\monitor.exe"=
"c:\\Program Files\\backburner 2\\manager.exe"=
"c:\\Program Files\\backburner 2\\server.exe"=
"c:\\Program Files\\Sunbelt Software\\Personal Firewall 4\\kpf4gui.exe"=
"c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Sunbelt Software\\Personal Firewall 4\\kpf4ss.exe"=

R0 sfsync03;StarForce Protection Synchronization Driver (version 3.x);c:\windows\system32\drivers\sfsync03.sys [2005-10-13 35328]
R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [2009-01-10 75856]
R1 fwdrv;Firewall Driver;c:\windows\system32\drivers\fwdrv.sys [2005-12-15 274432]
R1 hwinterface32B01;hwinterface32B01;c:\windows\system32\drivers\hwinterface32B01.sys [2008-12-12 4930]
R1 khips;Kerio HIPS Driver;c:\windows\system32\drivers\khips.sys [2005-12-15 81920]
R1 sp_rsdrv2;Spyware Terminator Driver 2;c:\windows\system32\drivers\sp_rsdrv2.sys [2009-01-09 142592]
R4 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2009-01-10 20560]
S3 Ndisprot;ArcNet NDIS Protocol Driver;c:\windows\system32\drivers\ndisprot.sys [2008-12-02 27904]
S3 PAC7311;VGA SoC PC-Camera;c:\windows\system32\drivers\PA707UCM.SYS [2006-11-08 530304]
S4 SentinelKeysServer;Sentinel Keys Server;"c:\program files\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe" --> c:\program files\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe [?]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\E]
\Shell\AutoRun\command - E:\StartVMCLite.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a69bde2f-9a78-11dd-8441-000bcda0e420}]
\Shell\AutoRun\command - E:\StartVMCLite.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a77a3fbe-93b3-11dd-a654-000bcda0e420}]
\Shell\AutoRun\command - E:\StartVMCLite.exe
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.hu/
mStart Page = hxxp://home.sweetim.com
IE: Crawler Search - tbr:iemenu
IE: E&xportálás Microsoft Excel formátumba - c:\progra~1\MICROS~1\Office10\EXCEL.EXE/3000
Handler: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - c:\progra~1\Crawler\Toolbar\ctbr.dll
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-01-14 15:12:36
Windows 5.1.2600 Szervizcsomag 3 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_USERS\Administrator\Software\Microsoft\SystemCertificates\AddressBook*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'explorer.exe'(3656)
c:\program files\Common Files\Ahead\Lib\NeroSearchBar.dll
c:\program files\Common Files\Ahead\Lib\MFC71U.DLL
c:\program files\Common Files\Ahead\Lib\BCGCBPRO800u.dll
.
------------------------ Other Running Processes ------------------------
.
c:\program files\Alwil Software\Avast4\aswUpdSv.exe
c:\program files\Alwil Software\Avast4\ashServ.exe
c:\program files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Sunbelt Software\Personal Firewall 4\kpf4ss.exe
c:\program files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
c:\program files\Sunbelt Software\Personal Firewall 4\kpf4gui.exe
c:\program files\Analog Devices\SoundMAX\SMAgent.exe
c:\program files\Spyware Terminator\sp_rsser.exe
c:\program files\Alwil Software\Avast4\ashMaiSv.exe
c:\program files\Alwil Software\Avast4\ashWebSv.exe
c:\program files\Sunbelt Software\Personal Firewall 4\kpf4gui.exe
c:\windows\system32\wbem\wmiapsrv.exe
c:\program files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
c:\windows\system32\imapi.exe
.
**************************************************************************
.
Completion time: 2009-01-14 15:18:21 - machine was rebooted
ComboFix-quarantined-files.txt 2009-01-14 14:18:08

Pre-Run: 12 861 640 704 bájt szabad
Post-Run: 12,855,406,592 bájt szabad

320 --- E O F --- 2009-01-14 08:13:15

Kinyitod a Notepadot>Start>futatas>beirod notepad
Es bemasolod a piros textet

Mostan>a notepadon elso full-fajl>ballfelsosarokban>4-sor>lementenni mint....
A txt-hejetfajlnev beteszed eztett>CFScript.txt<alatta bealitod >minden fajl<
legfelull>asztall i<klik gomb letenni.Es mostan megcsinalod eztett:

A combofix maga elindul es lehet hogy restartol es befejezi a scent.Amit majd ad ted ide

Azt szeretném még megkérdezni stell hogy ezek a müveletek amiket most csináltam ezek a folyamatok már kiirtották a szemét virusokat?Meg ha ezek utá fogom ellenőrizni a gépet és ha valamelyikre azt jelzi(combofix,sdfix ) azt jelzi hogy fertözőtt mert talán erröl már hallottam de nem biztos és bocsánat ha tévedek akkor mitcsináljak?Elöre is köszönöm az eddigi segitséget ha még kell valamit csinálnom mond és már csinálom is mert mintha már gyorsabb lenne a gépem:)

Igen megvan ez is tessék:

ComboFix 09-01-13.04 - Rendszergazda 2009-01-14 13:57:26.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1250.1.1038.18.1271.858 [GMT 1:00]
Running from: c:\documents and settings\Rendszergazda\Asztal\ComboFix.exe
AV: avast! antivirus 4.8.1169 [VPS 090113-1] *On-access scanning disabled* (Outdated)
FW: Kerio Personal Firewall *disabled*
* Created a new restore point

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\ynh.dx

.
((((((((((((((((((((((((( Files Created from 2008-12-14 to 2009-01-14 )))))))))))))))))))))))))))))))
.

2009-01-14 12:57 . 2009-01-14 12:57 <DIR> d-------- c:\windows\system32\xircom
2009-01-14 12:57 . 2009-01-14 12:57 <DIR> d-------- c:\program files\microsoft frontpage
2009-01-14 12:50 . 2009-01-14 12:50 578,560 --a------ c:\windows\system32\dllcache\user32.dll
2009-01-14 12:46 . 2009-01-14 12:47 <DIR> d-------- c:\windows\ERUNT
2009-01-14 12:41 . 2009-01-14 13:24 <DIR> d-------- C:\SDFix
2009-01-14 07:33 . 2009-01-14 07:33 <DIR> d-------- c:\documents and settings\Rendszergazda\Tracing
2009-01-14 07:26 . 2009-01-14 07:26 <DIR> d-------- c:\program files\Microsoft
2009-01-14 07:25 . 2009-01-14 07:25 <DIR> d-------- c:\program files\Windows Live SkyDrive
2009-01-14 07:25 . 2009-01-14 07:32 <DIR> d-------- c:\program files\Windows Live
2009-01-14 06:22 . 2009-01-14 06:22 <DIR> d-------- c:\program files\Common Files\Windows Live
2009-01-13 21:08 . 2009-01-13 21:09 <DIR> d-------- c:\program files\starter
2009-01-13 20:33 . 2009-01-13 20:34 <DIR> d-------- c:\program files\3d xp
2009-01-13 20:07 . 2009-01-13 20:11 <DIR> d-------- c:\program files\jetaudio
2009-01-13 17:52 . 2009-01-13 18:39 <DIR> d-------- c:\documents and settings\Rendszergazda\Application Data\Aston
2009-01-13 10:36 . 2009-01-13 10:36 <DIR> d-------- c:\program files\ESET
2009-01-11 19:38 . 2009-01-11 19:38 <DIR> d-------- c:\windows\system32\ebay
2009-01-11 19:38 . 2009-01-11 19:38 <DIR> d-------- c:\program files\Ashampoo
2009-01-11 01:16 . 2009-01-12 18:29 <DIR> d-------- c:\program files\Lavasoft
2009-01-11 00:51 . 2009-01-11 17:13 <DIR> d-------- c:\documents and settings\All Users\Application Data\Lavasoft
2009-01-10 23:29 . 2009-01-12 18:29 <DIR> d-------- c:\documents and settings\Rendszergazda\Application Data\Lavasoft
2009-01-10 21:13 . 2009-01-10 21:13 <DIR> d-------- c:\program files\Alwil Software
2009-01-10 13:36 . 2009-01-10 13:36 <DIR> d-------- c:\documents and settings\All Users\Application Data\Kaspersky Lab Setup Files
2009-01-09 19:31 . 2009-01-09 19:35 <DIR> d-------- c:\program files\Cracklock
2009-01-09 19:31 . 2005-11-07 00:36 118,784 --a------ c:\windows\system32\CLKERN.DLL
2009-01-09 18:39 . 2009-01-14 12:44 9,074 --a------ c:\windows\system32\drivers\fwdrv.err
2009-01-09 15:24 . 2009-01-09 15:24 <DIR> d-------- c:\program files\AxBx
2009-01-09 10:55 . 2009-01-09 15:52 <DIR> d-------- c:\program files\M Computer Software
2009-01-09 08:57 . 2009-01-14 13:28 113 --a------ c:\windows\system32\BIN_STRSBW.SPT
2009-01-09 01:49 . 2009-01-14 13:25 <DIR> d-------- c:\program files\WinClamAVShield
2009-01-09 01:41 . 2009-01-14 11:19 <DIR> d-------- c:\program files\Spyware Terminator
2009-01-09 01:41 . 2009-01-09 01:41 <DIR> d-------- c:\program files\Crawler
2009-01-09 01:41 . 2009-01-14 11:18 <DIR> d-------- c:\documents and settings\Rendszergazda\Application Data\Spyware Terminator
2009-01-09 01:41 . 2009-01-12 20:40 <DIR> d-------- c:\documents and settings\All Users\Application Data\Spyware Terminator
2009-01-09 01:41 . 2009-01-09 01:41 142,592 --a------ c:\windows\system32\drivers\sp_rsdrv2.sys
2009-01-08 16:12 . 2009-01-08 16:12 <DIR> d-------- c:\program files\Sunbelt Software
2009-01-08 08:52 . 2009-01-08 08:53 <DIR> d--h----- c:\documents and settings\All Users\Application Data\{F481FC18-57D5-4479-B2FB-083BFF223F8F}
2009-01-08 07:59 . 2008-03-03 14:25 5,702 --ah----- c:\windows\nod32restoretemdono.reg
2009-01-04 17:49 . 2000-10-11 14:11 121,562 --a------ c:\windows\system32\PicFormat32.dll
2009-01-04 17:49 . 2000-10-11 13:22 36,864 --a------ c:\windows\system32\PicFormat32.ocx
2009-01-04 10:34 . 2009-01-04 10:34 158 --a------ c:\windows\TSDataEx.ini
2009-01-04 10:09 . 2009-01-04 10:09 4,096 --a------ c:\windows\d3dx.dat
2009-01-03 05:30 . 2009-01-13 13:27 0 --a------ C:\FileOut.Cns
2009-01-03 05:30 . 2009-01-13 13:27 0 --a------ C:\FileIn.Cns
2009-01-03 05:12 . 2009-01-03 08:53 <DIR> d-------- c:\program files\Microsoft Games
2009-01-02 15:32 . 2009-01-10 02:59 13,030 --a------ C:\PDOXUSRS.NET
2009-01-02 07:46 . 2009-01-02 07:46 268 --ah----- C:\sqmdata00.sqm
2009-01-02 07:46 . 2009-01-02 07:46 244 --ah----- C:\sqmnoopt00.sqm
2009-01-02 07:43 . 2009-01-02 07:44 <DIR> d-------- c:\program files\Common Files\Autodesk Shared
2009-01-02 07:43 . 2009-01-02 07:43 <DIR> d-------- c:\program files\backburner 2
2009-01-02 07:43 . 2009-01-02 07:51 <DIR> d-------- c:\documents and settings\All Users\Application Data\Autodesk
2009-01-02 07:43 . 2009-01-13 17:35 <DIR> d-------- C:\3dsmax7
2009-01-02 02:42 . 2009-01-02 04:31 <DIR> d-------- c:\documents and settings\Rendszergazda\.bitrock
2009-01-01 13:50 . 2009-01-01 13:50 763 --a------ c:\windows\ST5UNST.001
2009-01-01 13:49 . 2009-01-01 13:49 779 --a------ c:\windows\ST5UNST.000
2008-12-27 14:48 . 2008-04-14 08:40 14,720 --a------ c:\windows\system32\drivers\kbdhid.sys
2008-12-24 19:38 . 2008-12-24 19:38 <DIR> d-------- c:\program files\Audacity
2008-12-23 19:21 . 2008-12-23 19:21 <DIR> d-------- c:\program files\Common Files\Borland Shared
2008-12-23 19:21 . 1999-01-20 05:01 210,032 --a------ c:\windows\system32\DBCLIENT.DLL
2008-12-23 19:21 . 1999-11-12 05:11 183,808 --a------ c:\windows\system32\BDEADMIN.CPL
2008-12-23 19:19 . 2008-12-23 19:21 <DIR> d-------- c:\program files\LOIM
2008-12-22 11:14 . 2008-12-22 11:14 <DIR> d-------- c:\documents and settings\Rendszergazda\Application Data\3DFA
2008-12-22 09:13 . 2008-12-22 09:13 11 --a------ c:\windows\system32\i4Zj1jUjy2Q.dds
2008-12-22 09:13 . 2008-12-22 09:13 0 --a------ c:\windows\system32\upload.dds
2008-12-22 09:13 . 2008-12-22 09:13 0 --a------ c:\windows\system32\dowload.dds
2008-12-21 11:19 . 2007-06-01 06:20 503,808 --a------ c:\windows\SwSetupu.exe
2008-12-21 02:16 . 2008-12-21 02:16 917 --a------ c:\windows\GTA-SA_Trn_Settings.ini
2008-12-20 10:18 . 2008-12-20 10:18 <DIR> d-------- c:\program files\AVI MPEG RM WMV Joiner
2008-12-20 09:29 . 2008-12-20 09:29 56,346 ---h----- C:\treeinfo.wc
2008-12-20 06:40 . 2008-12-20 11:20 <DIR> d-------- C:\OutputFolder
2008-12-20 06:38 . 2008-12-20 06:39 <DIR> d-------- c:\program files\WMV to AVI MPEG DVD WMV Converter
2008-12-20 05:45 . 2008-12-20 05:45 <DIR> d-------- c:\documents and settings\Rendszergazda\Application Data\CyberLink
2008-12-20 05:15 . 2008-12-20 05:15 <DIR> d-------- c:\program files\TFM
2008-12-20 04:45 . 2003-03-13 12:51 51,200 --a------ c:\windows\system32\camcodec.dll
2008-12-20 04:44 . 2003-03-13 12:51 1,461 --a------ c:\windows\system32\drivers\camcodec.inf
2008-12-20 04:34 . 2008-12-20 04:34 <DIR> d-------- c:\program files\Bobyte
2008-12-20 04:20 . 2008-12-20 04:20 <DIR> d-------- c:\documents and settings\Rendszergazda\Application Data\HighAndes
2008-12-20 04:20 . 2008-12-20 04:20 <DIR> d-------- c:\documents and settings\All Users\Application Data\HighAndes
2008-12-20 04:19 . 2008-12-20 04:19 <DIR> d-------- c:\program files\HighAndes
2008-12-19 10:06 . 2008-12-19 10:06 <DIR> d-------- c:\program files\PC Camera
2008-12-19 10:06 . 2008-12-19 10:06 <DIR> d-------- c:\program files\Common Files\PXIINST64
2008-12-19 10:06 . 2008-12-19 10:06 <DIR> d-------- c:\program files\Common Files\PXIINST
2008-12-19 10:06 . 2008-12-19 10:06 <DIR> d-------- c:\program files\Common Files\PAC7311
2008-12-18 12:24 . 2008-12-20 05:08 <DIR> d-------- c:\documents and settings\Rendszergazda\Application Data\gtk-2.0
2008-12-18 12:19 . 2008-12-18 12:19 <DIR> d-------- c:\documents and settings\Rendszergazda\Application Data\avidemux
2008-12-18 12:18 . 2008-12-24 10:50 <DIR> d-------- c:\program files\Avidemux 2.4
2008-12-18 12:11 . 2008-12-18 12:11 <DIR> d-------- c:\program files\Paint.NET
2008-12-18 04:27 . 2005-06-21 15:49 68,112 --a------ c:\windows\system32\igfx.hlp
2008-12-16 15:46 . 2008-12-16 15:48 <DIR> d-------- c:\program files\nfs cuccok
2008-12-14 11:36 . 2008-12-14 11:49 <DIR> d-------- c:\documents and settings\Rendszergazda\Application Data\flightgear.org
2008-12-14 09:45 . 2008-12-14 09:45 126,976 --a------ c:\windows\dsrmv.exe
2008-12-14 08:58 . 2008-12-14 08:58 <DIR> d-------- c:\program files\TallStick
2008-12-14 02:26 . 2008-12-14 02:26 <DIR> d-------- c:\program files\URUSoft
2008-12-14 01:07 . 2008-12-14 01:07 <DIR> d-------- c:\program files\AviSynth 2.5
2008-12-14 01:06 . 2006-09-12 11:46 227,328 -r-hs---- c:\windows\system32\ac3DX.ax
2008-12-14 01:06 . 2005-01-17 23:26 179,200 -r-hs---- c:\windows\system32\DiracSplitter.ax
2008-12-14 01:06 . 2006-08-16 14:53 175,104 -r-hs---- c:\windows\system32\CoreAAC.ax
2008-12-14 01:06 . 2006-03-10 21:48 169,472 -r-hs---- c:\windows\system32\MatroskaDX.ax
2008-12-14 01:06 . 2006-05-03 10:06 163,328 -r-hs---- c:\windows\system32\flvDX.dll
2008-12-14 01:06 . 2006-01-12 23:23 123,904 -r-hs---- c:\windows\system32\AVCDX.ax
2008-12-14 01:06 . 2005-02-22 16:55 81,920 -r-hs---- c:\windows\system32\aac_parser.ax
2008-12-14 01:00 . 2008-12-14 01:00 <DIR> d-------- c:\program files\eRightSoft
2008-12-14 00:36 . 2008-12-14 03:04 <DIR> d-------- c:\program files\avi szerkesztő

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-01-14 08:09 --------- d---a-w c:\documents and settings\All Users\Application Data\TEMP
2009-01-12 17:28 --------- d-----w c:\program files\Common Files\Wise Installation Wizard
2009-01-11 01:48 --------- d-----w c:\program files\Winamp
2009-01-11 01:19 --------- d-----w c:\program files\Rockstar Games
2008-12-27 10:13 --------- d-----w c:\documents and settings\Rendszergazda\Application Data\Power Sound Editor Free
2008-12-27 06:41 --------- d-----w c:\program files\DivX
2008-12-20 04:45 --------- d-----w c:\program files\SuperDVD Video Editor
2008-12-19 09:19 921,632 ----a-w C:\PA7311.DAT
2008-12-17 17:37 --------- d-----w c:\program files\Valve
2008-12-16 19:19 --------- d-----w c:\program files\ArcSoft
2008-12-16 11:40 367,776 ----a-w c:\windows\Need For Speed_ Most Wanted Eltávolító.exe
2008-12-13 16:27 --------- d-----w c:\program files\Google
2008-12-13 06:39 3,593,216 ------w c:\windows\system32\dllcache\mshtml.dll
2008-12-12 11:24 4,930 ----a-w c:\windows\system32\drivers\hwinterface32B01.sys
2008-12-11 10:57 333,952 ----a-w c:\windows\system32\drivers\srv.sys
2008-12-11 10:57 333,952 ------w c:\windows\system32\dllcache\srv.sys
2008-12-10 08:37 286,720 ----a-w c:\windows\iun507.exe
2008-12-09 10:19 --------- d-----w c:\program files\EarthView
2008-12-09 10:19 --------- d-----w c:\documents and settings\Rendszergazda\Application Data\DeskSoft
2008-12-08 19:44 --------- d-----w c:\program files\RegCleaner
2008-12-08 10:54 --------- d--h--w c:\program files\InstallShield Installation Information
2008-12-07 19:58 --------- d-----w c:\program files\Common Files\DirectX
2008-12-07 19:45 --------- d-----w c:\program files\Common Files\EasyInfo
2008-12-06 13:51 --------- d-----w c:\program files\VID_0E8F&PID_0003
2008-12-06 13:50 --------- d-----w c:\documents and settings\Rendszergazda\Application Data\InstallShield
2008-12-04 23:42 308,072 ----a-w c:\windows\WLXPGSS.SCR
2008-12-04 17:19 22,960 ----a-w c:\documents and settings\Rendszergazda\Application Data\GDIPFONTCACHEV1.DAT
2008-12-04 16:32 410,976 ----a-w c:\windows\system32\deploytk.dll
2008-12-04 16:32 --------- d-----w c:\program files\Java
2008-12-02 21:37 49,480 ----a-w c:\windows\system32\sirenacm.dll
2008-12-02 17:46 27,904 ----a-w c:\windows\system32\drivers\ndisprot.sys
2008-11-28 08:41 3,584,000 ----a-w c:\windows\Virtuelle Bahnfahrt.scr
2008-11-21 21:46 200,704 ----a-w c:\windows\system32\ssldivx.dll
2008-11-21 21:46 1,044,480 ----a-w c:\windows\system32\libdivx.dll
2008-11-21 16:35 --------- d-----w c:\program files\Sanny Builder 3
2008-11-06 16:25 922,210 ----a-w c:\windows\Grand Theft Auto_ San Andreas hun Uninstaller.exe
2008-10-24 11:21 455,296 ------w c:\windows\system32\dllcache\mrxsmb.sys
2008-10-23 12:42 286,720 ----a-w c:\windows\system32\gdi32.dll
2008-10-23 12:42 286,720 ------w c:\windows\system32\dllcache\gdi32.dll
2008-10-16 13:13 70,656 ------w c:\windows\system32\dllcache\ie4uinit.exe
2008-10-16 13:13 202,776 ----a-w c:\windows\system32\wuweb.dll
2008-10-16 13:13 1,809,944 ----a-w c:\windows\system32\wuaueng.dll
2008-10-16 13:12 561,688 ----a-w c:\windows\system32\wuapi.dll
2008-10-16 13:12 323,608 ----a-w c:\windows\system32\wucltui.dll
2008-10-16 13:11 13,824 ------w c:\windows\system32\dllcache\ieudinit.exe
2008-10-16 13:09 92,696 ----a-w c:\windows\system32\cdm.dll
2008-10-16 13:09 51,224 ----a-w c:\windows\system32\wuauclt.exe
2008-10-16 13:09 43,544 ----a-w c:\windows\system32\wups2.dll
2008-10-16 13:08 34,328 ----a-w c:\windows\system32\wups.dll
2008-10-16 13:06 268,648 ----a-w c:\windows\system32\mucltui.dll
2008-10-16 13:06 208,744 ----a-w c:\windows\system32\muweb.dll
2008-10-15 16:37 337,408 ------w c:\windows\system32\dllcache\netapi32.dll
2008-10-15 07:06 633,632 ------w c:\windows\system32\dllcache\iexplore.exe
2008-10-15 07:04 161,792 ------w c:\windows\system32\dllcache\ieakui.dll
2008-10-06 15:35 17,192,960 ----a-w c:\program files\Windows.Live.Messenger-8.5.1302.1018_magyar.msi
2006-05-03 09:06 163,328 --sh--r c:\windows\system32\flvDX.dll
2007-02-21 10:47 31,232 --sh--r c:\windows\system32\msfDX.dll
2008-03-16 12:30 216,064 --sh--r c:\windows\system32\nbDX.dll
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ISUSPM"="c:\documents and settings\All Users\Application Data\Macrovision\FLEXnet Connect\6\ISUSPM.exe" [2007-03-29 222128]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2006-08-30 139264]
"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2008-12-04 136600]
"Monitor"="c:\windows\PixArt\PAC7311\Monitor.exe" [2006-11-03 319488]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 39792]
"NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2006-01-12 155648]
"QuickTime Task"="c:\windows\system32\qttask.exe" [2008-10-06 98304]
"DrvLsnr"="c:\program files\Analog Devices\SoundMAX\DrvLsnr.exe" [2003-05-08 69632]
"Smapp"="c:\program files\Analog Devices\SoundMAX\SMTray.exe" [2003-05-05 143360]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2005-06-21 126976]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2005-06-21 155648]
"SpywareTerminator"="c:\progra~1\SPYWAR~1\SpywareTerminatorShield.exe" [2009-01-09 2267136]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2008-03-29 79224]
"Tweak UI"="TWEAKUI.CPL" [2003-03-25 c:\windows\system32\tweakui.cpl]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"nltide_2"="shell32" [X]

c:\documents and settings\Rendszergazda\Start Menu\Programs\Indˇt˘pult\
Optimize Memory.lnk - c:\program files\TC PowerPack\Optimize Memory\OMemory.exe [2004-04-07 1573888]

c:\documents and settings\All Users\Start Menu\Programs\Indˇt˘pult\
Microsoft Office.lnk - c:\program files\Microsoft Office\Office10\OSA.EXE [2001-02-13 83360]
WinZip Quick Pick.lnk - c:\program files\WinZip\WZQKPICK.EXE [2008-10-10 118784]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=CLKERN.DLL

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"msacm.iac2"= c:\progra~1\ACEMEG~1\SystemS\Intel\iac25_32.ax
"VIDC.CSCD"= camcodec.dll
"msacm.sl_anet"= c:\progra~1\ACEMEG~1\SystemS\sl_anet.acm
"VIDC.I420"= i420vfw.dll
"msacm.msaudio1"= c:\progra~1\ACEMEG~1\SystemS\MICROS~1\msaud32.acm
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\C:
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\C:\WINDOWS
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\c:\windows\system32

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"UpdatesDisableNotify"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Program Files\\Valve\\hl.exe"=
"c:\\Program Files\\Valve\\hlds.exe"=
"c:\\WINDOWS\\system32\\ftp.exe"=
"c:\\3dsmax7\\3dsmax.exe"=
"c:\\Program Files\\backburner 2\\monitor.exe"=
"c:\\Program Files\\backburner 2\\manager.exe"=
"c:\\Program Files\\backburner 2\\server.exe"=
"c:\\Program Files\\Sunbelt Software\\Personal Firewall 4\\kpf4gui.exe"=
"c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=

R0 sfsync03;StarForce Protection Synchronization Driver (version 3.x);c:\windows\system32\drivers\sfsync03.sys [2005-10-13 35328]
R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [2009-01-10 75856]
R1 fwdrv;Firewall Driver;c:\windows\system32\drivers\fwdrv.sys [2005-12-15 274432]
R1 hwinterface32B01;hwinterface32B01;c:\windows\system32\drivers\hwinterface32B01.sys [2008-12-12 4930]
R1 khips;Kerio HIPS Driver;c:\windows\system32\drivers\khips.sys [2005-12-15 81920]
R1 sp_rsdrv2;Spyware Terminator Driver 2;c:\windows\system32\drivers\sp_rsdrv2.sys [2009-01-09 142592]
R4 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2009-01-10 20560]
S3 Ndisprot;ArcNet NDIS Protocol Driver;c:\windows\system32\drivers\ndisprot.sys [2008-12-02 27904]
S3 PAC7311;VGA SoC PC-Camera;c:\windows\system32\drivers\PA707UCM.SYS [2006-11-08 530304]
S4 SentinelKeysServer;Sentinel Keys Server;"c:\program files\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe" --> c:\program files\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe [?]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\E]
\Shell\AutoRun\command - E:\StartVMCLite.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a69bde2f-9a78-11dd-8441-000bcda0e420}]
\Shell\AutoRun\command - E:\StartVMCLite.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{a77a3fbe-93b3-11dd-a654-000bcda0e420}]
\Shell\AutoRun\command - E:\StartVMCLite.exe
.
- - - - ORPHANS REMOVED - - - -

HKLM-Run-NWEReboot - (no file)
MSConfigStartUp-AVP - c:\program files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe


.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.hu/
mStart Page = hxxp://home.sweetim.com
IE: Crawler Search - tbr:iemenu
IE: E&xportálás Microsoft Excel formátumba - c:\progra~1\MICROS~1\Office10\EXCEL.EXE/3000
Handler: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - c:\progra~1\Crawler\Toolbar\ctbr.dll
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-01-14 14:02:28
Windows 5.1.2600 Szervizcsomag 3 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_USERS\Administrator\Software\Microsoft\SystemCertificates\AddressBook*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'winlogon.exe'(800)
c:\windows\system32\CLKERN.DLL

- - - - - - - > 'lsass.exe'(864)
c:\windows\system32\CLKERN.DLL
.
Completion time: 2009-01-14 14:05:24
ComboFix-quarantined-files.txt 2009-01-14 13:05:19

Pre-Run: 12 617 809 920 bájt szabad
Post-Run: 12,891,996,160 bájt szabad

292 --- E O F --- 2009-01-14 08:13:15

DE MOST MEG MEGJELENT AZ ASZTALON AZ INTERNERTEXPLORER.EXE-JE

a comodot ne is frisitds neenged mert ez stabil verzio es a frisitesekel mindig problemak vannak,
nincsen mit koszonod
udv

Nagyon szépen köszönöm a türelmedet és segítségedet

Biztos rendben van....egyenlőre minden működik rendesen ....a Comodó frissítési probléma érdekelt ezért keresgéltem ,hogy ne téged terheljelek már megint

mar renben kene lenie enmek a gepnek is ,vagy meg nem??

ok
fojtatod a combofixel

Nagyon köszönöm STELL eddig ezt megcsináltam amit mondtál tessék itt a scan eredménye:


SDFix: Version 1.240
Run by Rendszergazda on 2009.01.14. at 12:50

Microsoft Windows XP [verzi˘sz m: 5.1.2600]
Running From: C:\SDFix

Checking Services :


Restoring Default Security Values
Restoring Default Hosts File

Rebooting


Checking Files :

Trojan Files Found:

C:\Documents and Settings\LocalService\Application Data\twain_32\user.ds - Deleted
C:\DOCUME~1\RENDSZ~1\LOCALS~1\Temp\tmp5.tmp - Deleted
C:\WINDOWS\system32\twain_32\local.ds - Deleted
C:\WINDOWS\system32\twain_32\user.ds - Deleted
C:\WINDOWS\system32\twain_32\user.ds.cla - Deleted



Folder C:\Documents and Settings\LocalService\Application Data\twain_32 - Removed
Folder C:\resycled - Removed
Folder C:\WINDOWS\system32\twain_32 - Removed


Removing Temp Files

ADS Check :



Final Check :

catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-01-14 13:21:09
Windows 5.1.2600 Szervizcsomag 3 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\d347prt\Cfg\0Jf40]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\d347prt\Cfg\0Jf41]
"khjeh"=hex:20,02,00,00,82,91,50,64,14,01,77,c5,27,ac,70,dd,ce,f0,9f,a0,59,..
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\msqpdxserv.sys]
"start"=dword:00000001
"type"=dword:00000001
"imagepath"=str(2):"\systemroot\system32\drivers\msqpdxtetqlhbb.sys"
"group"="file system"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg]
"s0"=dword:cac075ca
"s1"=dword:7f6c8056
"s2"=dword:bd51e6ef
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\msqpdxserv.sys]
"start"=dword:00000001
"type"=dword:00000001
"imagepath"=str(2):"\systemroot\system32\drivers\msqpdxtetqlhbb.sys"
"group"="file system"

scanning hidden registry entries ...

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Prefetcher]
"TracesProcessed"=dword:0000055a

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0


Remaining Services :




Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Messenger\\msmsgs.exe"="C:\\Program Files\\Messenger\\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\\Program Files\\Valve\\hl.exe"="C:\\Program Files\\Valve\\hl.exe:*:Enabled:Half-Life Launcher"
"C:\\Program Files\\Valve\\hlds.exe"="C:\\Program Files\\Valve\\hlds.exe:*:Enabled:HLDS Launcher"
"C:\\Program Files\\Winamp Remote\\bin\\Orb.exe"="C:\\Program Files\\Winamp Remote\\bin\\Orb.exe:*:Enabled:Orb"
"C:\\Program Files\\Winamp Remote\\bin\\OrbTray.exe"="C:\\Program Files\\Winamp Remote\\bin\\OrbTray.exe:*:Enabled:OrbTray"
"C:\\Program Files\\Winamp Remote\\bin\\OrbStreamerClient.exe"="C:\\Program Files\\Winamp Remote\\bin\\OrbStreamerClient.exe:*:Enabled:Orb Stream Client"
"C:\\Program Files\\FlightGear\\bin\\win32\\fgfs.exe"="C:\\Program Files\\FlightGear\\bin\\win32\\fgfs.exe:*:Enabled:fgfs"
"C:\\WINDOWS\\system32\\ftp.exe"="C:\\WINDOWS\\system32\\ftp.exe:*:Enabled:FTP - f jl tviteli program"
"C:\\Program Files\\Common Files\\SafeNet Sentinel\\Sentinel Protection Server\\WinNT\\spnsrvnt.exe"="C:\\Program Files\\Common Files\\SafeNet Sentinel\\Sentinel Protection Server\\WinNT\\spnsrvnt.exe:*:Disabled:Sentinel Protection Server"
"C:\\Program Files\\Common Files\\SafeNet Sentinel\\Sentinel Keys Server\\sntlkeyssrvr.exe"="C:\\Program Files\\Common Files\\SafeNet Sentinel\\Sentinel Keys Server\\sntlkeyssrvr.exe:*:Disabled:Sentinel Keys Server"
"C:\\3dsmax7\\3dsmax.exe"="C:\\3dsmax7\\3dsmax.exe:*:Enabled:3ds max 7"
"C:\\Program Files\\backburner 2\\monitor.exe"="C:\\Program Files\\backburner 2\\monitor.exe:*:Enabled:backburner 2.3 monitor"
"C:\\Program Files\\backburner 2\\manager.exe"="C:\\Program Files\\backburner 2\\manager.exe:*:Enabled:backburner 2.3 manager"
"C:\\Program Files\\backburner 2\\server.exe"="C:\\Program Files\\backburner 2\\server.exe:*:Enabled:backburner 2.3 server"
"C:\\Program Files\\Sunbelt Software\\Personal Firewall 4\\kpf4gui.exe"="C:\\Program Files\\Sunbelt Software\\Personal Firewall 4\\kpf4gui.exe:*:Enabled:Sunbelt Kerio Personal Firewall 4 - GUI"
"C:\\Program Files\\Kaspersky Lab\\Kaspersky Anti-Virus 7.0\\avp.exe"="C:\\Program Files\\Kaspersky Lab\\Kaspersky Anti-Virus 7.0\\avp.exe:*:Enabled:Kaspersky Anti-Virus"
"C:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"="C:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"="C:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"

Remaining Files :


File Backups: - C:\SDFix\backups\backups.zip

Files with Hidden Attributes :

Mon 3 Mar 2008 5,702 A..H. --- "C:\WINDOWS\nod32restoretemdono.reg"
Wed 3 May 2006 163,328 ..SHR --- "C:\WINDOWS\system32\flvDX.dll"
Wed 21 Feb 2007 31,232 ..SHR --- "C:\WINDOWS\system32\msfDX.dll"
Sun 16 Mar 2008 216,064 ..SHR --- "C:\WINDOWS\system32\nbDX.dll"
Wed 8 Oct 2008 4,348 A.SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
Sun 26 Jun 2005 616,448 ..SHR --- "C:\Program Files\eRightSoft\SUPER\cygwin1.dll"
Tue 21 Jun 2005 45,568 ..SHR --- "C:\Program Files\eRightSoft\SUPER\cygz.dll"
Sun 14 Dec 2008 72,704 ..SHR --- "C:\Program Files\eRightSoft\SUPER\Setup.exe"
Tue 2 Oct 2007 15,872 A.SHR --- "C:\Program Files\eRightSoft\SUPER\_Setup.dll"
Tue 4 Jun 2002 84,992 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\14_43260.dll"
Tue 4 Jun 2002 44,032 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\28_83260.dll"
Tue 10 Dec 2002 73,766 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\atrc3260.dll"
Tue 10 Dec 2002 65,575 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\cook3260.dll"
Sun 9 Jun 2002 36,864 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\ddnt3260.dll"
Tue 4 Jun 2002 20,480 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\dnet3260.dll"
Tue 10 Dec 2002 102,437 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\drv13260.dll"
Tue 10 Dec 2002 176,165 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\drv23260.dll"
Tue 10 Dec 2002 208,935 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\drv33260.dll"
Tue 10 Dec 2002 217,127 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\drv43260.dll"
Sun 9 Jun 2002 40,448 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\dspr3260.dll"
Sat 3 Nov 2001 225,280 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\ivvideo.dll"
Tue 10 Apr 2001 225,280 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\qtmlClient.dll"
Fri 20 Feb 2004 232,960 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\raac.dll"
Sun 9 Jun 2002 525,824 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\rnco3260.dll"
Tue 10 Dec 2002 245,805 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\rnlt3260.dll"
Tue 10 Dec 2002 45,093 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\rv103260.dll"
Tue 10 Dec 2002 98,341 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\rv203260.dll"
Tue 10 Dec 2002 94,247 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\rv303260.dll"
Tue 10 Dec 2002 90,151 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\rv403260.dll"
Tue 10 Dec 2002 102,439 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\sipr3260.dll"
Sun 9 Jun 2002 49,152 ...HR --- "C:\Program Files\eRightSoft\SUPER\mencoder\tokr3260.dll"
Thu 20 Mar 2008 5,632 ..SHR --- "C:\Program Files\eRightSoft\SUPER\spk\1stRun.exe"

Finished!

JA MEG ANNYI HOGY AZÓTA EZEK VOLTAK INDITÁSKOR A DOKUMENTUM MAPPA JELENIK MEG (lehet hogy csak utvonal probléma)

Köszi , rákerestem és találtam egy fórumot ,ahol mások is ilyesmire panaszkodtak , és arra jutottak , hogy valamiféle server probléma lehet...hol sikerül frissíteni , hol nem....

szed le a geprol es ha comodot akarsz akor rakd visza ha nem ted fell a PCTOOLS tuzfalat,
http://www.pctools.com/firewall/

Megcsináltam mindent , java lecserélve , de a Comodo tűzfal frissítése továbbra is 7%- nál megáll 113-as hibával

udv
faggio

Sziasztok én uj vagyok itt de örülök hogy találtam egy oldalt ahol tudok rendesen segitséget kérni máshol már nem jártak hónapok ota.Na most az a helyzet hogy kb egy álló hete irtom a nyüveket a gépről sorolom rootkitek trojaiak spyware-k keyloggerek ezek száma olya 200 volt:((A NOD32 ilyen szépen átegendte őket amikr jelzett akkor csak karanténba tette és nem törölte szoval ezek maradtak rajta a csata az övéjük volt de a háborut megnyertem reinstall nélkül.Na de a hijackthis valamit mutatott amit a logfile-ban analizáltam(hijackthis.de)és igaz volt a sejtésem a widows/system32/userini.exe 2x van rajta és jelzi is az oldalon hiába zöld pipa van mellette akkor is a veszélyességi fokozat magas (piros csik)és az van mellette hogy "nasty"eddig egy akkor azt a sweetim.com-ot folyamatosan visszatölti (ez tele volt virussal) a registrybe valami illetve a momitor.exe mellet is van PIROS X de ezzel a kettővel nem merek semmit sem csinálni addig amig bövebb infot nem kapok még nem értek annyira a géphez.Kérlek segitsetek itt a logscan:Logfile of HijackThis v1.99.1
Scan saved at 9:47:04, on 2009.01.14.
Platform: Windows XP Szervizcsomag 3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4ss.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4gui.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\PixArt\PAC7311\Monitor.exe
C:\WINDOWS\system32\qttask.exe
C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4gui.exe
C:\Program Files\Analog Devices\SoundMAX\DrvLsnr.exe
C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxtray.exe
C:\PROGRA~1\SPYWAR~1\SpywareTerminatorShield.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Documents and Settings\All Users\Application Data\Macrovision\FLEXnet Connect\6\ISUSPM.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\TC PowerPack\Optimize Memory\OMemory.exe
E:\PhoneConnectorVMC.exe
C:\Program Files\vodafone\vmclite\vmc.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\PROGRA~1\Crawler\Toolbar\CToolbar.exe
C:\Program Files\Lavasoft\Ad-Aware SE Professional\Ad-Watch.exe
C:\Program Files\Alwil Software\Avast4\ashSimpl.exe
C:\Program Files\3d xp\Yodm3D.exe
C:\Program Files\Hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.crawler.com/search/dispatche ... p=aus&qkw=%s&tbid=60341
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.hu/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60341
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_custo ... TbId=60341
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sweetim.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60341
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.com/support/sa_custo ... TbId=60341
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.microsoft.com/fwlink/?LinkId=74005
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hivatkozások
R3 - URLSearchHook: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,userinit.exe
O2 - BHO: Adobe PDF Reader hivatkozássúgó - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Windows Live bejelentkezési segítség - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: (no name) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - (no file)
O3 - Toolbar: (no name) - {35065594-9169-4A34-B167-FC4865038E53} - (no file)
O3 - Toolbar: &Crawler Toolbar - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O4 - HKLM\..\Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [Monitor] C:\WINDOWS\PixArt\PAC7311\Monitor.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\system32\qttask.exe" -atboottime
O4 - HKLM\..\Run: [DrvLsnr] C:\Program Files\Analog Devices\SoundMAX\DrvLsnr.exe
O4 - HKLM\..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [SpywareTerminator] "C:\PROGRA~1\SPYWAR~1\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [ISUSPM] "C:\Documents and Settings\All Users\Application Data\Macrovision\FLEXnet Connect\6\ISUSPM.exe" -scheduler
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: Optimize Memory.lnk = C:\Program Files\TC PowerPack\Optimize Memory\OMemory.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: E&xportálás Microsoft Excel formátumba - res://C:\PROGRA~1\MICROS~1\Office10\EXCEL.EXE/3000
O9 - Extra button: Küldés blogba - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Küldés blogba a Windows Live Writer programmal - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O11 - Options group: [TABS] Tabbed Browsing
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} - http://download.bitdefender.com/resourc ... oscan8.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windows ... 3305059251
O17 - HKLM\System\CCS\Services\Tcpip\..\{7E78DBC3-15B6-44F4-9AC1-39EDBDB62A42}: NameServer = 80.244.97.30 80.244.96.1
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O18 - Protocol: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll
O20 - AppInit_DLLs: CLKERN.DLL
O20 - Winlogon Notify: dimsntfy - %SystemRoot%\System32\dimsntfy.dll (file missing)
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\wpdshserviceobj.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Autodesk Licensing Service - Unknown owner - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: Google Updater Service (gusvc) - Unknown owner - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe (file missing)
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Unknown owner - C:\Program Files\Java\jre6\bin\jqs.exe" -service -config "C:\Program Files\Java\jre6\lib\deploy\jqs\jqs.conf (file missing)
O23 - Service: Sunbelt Kerio Personal Firewall 4 (KPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4ss.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: Sentinel Keys Server (SentinelKeysServer) - Unknown owner - C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe (file missing)
O23 - Service: Sentinel Protection Server (SentinelProtectionServer) - Unknown owner - C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe (file missing)
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe

ezek nem torlesek a program meg marad de kezel fogod futatni,ezeknek nemkel hogy fusanak automatikusan minden programot lehet kezel futatni,de ha gondolod hogy kel hogy fuson azokat nefixeld le,a spybotot ujra telepitsd fel es utana szed le a vezerlo pulton keresztul ha maradekok vannak.

Csinálom amit írtál.

Nem akarlak a butaságaimmal fárasztani , de végignéztem a Hijack listát és azt látom ,hogy a Spybot&Serarch an Destroy program már régen nincs fenn, mégis van valami maradványa az (ujjab verzióktól mintha fagyott volna a gép)
És van egy érdekes alkalmazásom az Unlocker assistant ez szükség esetén feloldja egy alkalmazás kapcsolatait más alkalmazásokkal és igy lehet őket törölni(nagy hasznát vettem mikor az eMuléval töltögettem, csak vele sikerült törölnöm sok kártevőt.

Fixeld le
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - (no file)
O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file)
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [VC5Player] C:\Program Files\HHVcdV5Sys\VC5Play.exe
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\Run: [TrueImageMonitor.exe] C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe
O4 - HKLM\..\Run: [Acronis Scheduler2 Service] "C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe"
O4 - HKLM\..\Run: [AcronisTimounterMonitor] C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [CClipboard] C:\Program Files\ComfortClipboard\CClipboard.exe
O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.2.2.28.dll/206 (file missing)

leszedni a regi javat es felrakni ujat
evel leszeded
http://mesh.dl.sourceforge.net/sourceforge/javara/JavaRa.zip
inen felraksz ujat
(JRE) 6 Update 11 - http://java.sun.com/javase/downloads/index.jsp
kipucolni CCleaneral kiprobalni es irni.