nincsen mitt
udv

Értettem!! Köszönöm szépen a gyors segítséget!

torolheted a Qooboxot
azt nemlehet tudni mivel raktad fell,
igen rakd fell az AVASTOT vagy az AVIRAT FREE
es tegy tuzfalat is,

Lett egy olyan mappa, hogy Qoobox ezt letörölhetem?
Ezt a tróját valamivel feltettem? pl játék vagy egyéb...tegnap hoztam haza és kicsit furcsa.... de ha játékkal jött fel akkor melyikkel...ezt nem lehet tudni? Újraindítottam és nem volt semmi, minden oké

.....

A nod32 helyett - próbaidős - visszatehetem/visszategyem a teljesverziós Avastot?

ez a troja volt ot

mar nemmuszaj futatnod,,,,az sdfixet,,,a combofix elbant a trojaval,,hogy nemukszik rendesen az SDFIX ez azert van mert nemolvastad el az utasitast amit irtam,,,,
de ahogy mar irtam nemkel futatnod,
udv

oké az meg volt
Akkor most mi baja volt?

ok,a logban nemlatok mar semmi veszejes dolgot,ezert az SDFIX-programot mar nefutasd,nemmuszaj ,,,,
Pucold at a gepet CCleaneral es kesz,,
udv

ComboFix 09-06-14.02 - Rendszergazda 009.06.15. 18:40.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1250.36.1038.18.1270.787 [GMT 2:00]
Running from: d:\letöltések\ComboFix.exe
AV: ESET NOD32 Antivirus 4.0 *On-access scanning disabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\system32\msupdte.exe

.
((((((((((((((((((((((((( Files Created from 2009-05-15 to 2009-06-15 )))))))))))))))))))))))))))))))
.

2009-06-15 12:32 . 2009-06-15 12:32 -------- d-----w- c:\documents and settings\Rendszergazda\Application Data\HP
2009-06-15 12:32 . 2009-06-15 12:32 -------- d-----w- c:\documents and settings\All Users\Application Data\HP
2009-06-15 12:27 . 2006-06-03 19:29 48640 ----a-w- c:\windows\system32\hpzll4pi.dll
2009-06-15 12:26 . 2006-03-03 19:03 69632 ----a-w- c:\windows\system32\HPZipm12.exe
2009-06-15 12:26 . 2006-03-03 19:02 204800 ----a-w- c:\windows\system32\HPZipr12.dll
2009-06-15 12:26 . 2006-03-03 19:02 94208 ----a-w- c:\windows\system32\HPZipt12.dll
2009-06-15 12:26 . 2006-03-03 19:02 57344 ----a-w- c:\windows\system32\HPZisn12.dll
2009-06-15 12:26 . 2006-03-03 19:03 282680 ----a-w- c:\windows\system32\HPZidr12.dll
2009-06-15 12:26 . 2006-03-03 19:03 65536 ----a-w- c:\windows\system32\HPZinw12.exe
2009-06-15 12:26 . 1998-10-29 14:45 306688 ----a-w- c:\windows\IsUninst.exe
2009-06-15 12:24 . 2008-04-13 07:45 32128 ----a-w- c:\windows\system32\drivers\usbccgp.sys
2009-06-15 12:24 . 2008-04-13 07:47 25856 ----a-w- c:\windows\system32\drivers\usbprint.sys
2009-06-15 12:24 . 2009-06-15 13:06 -------- d-----w- c:\program files\HP
2009-06-15 12:11 . 2009-06-15 12:33 135695 ----a-w- c:\windows\HPHins12.dat
2009-06-15 12:11 . 2006-06-12 23:15 14916 ------w- c:\windows\hphmdl12.dat
2009-06-15 07:03 . 2009-06-15 07:03 -------- d-----w- c:\documents and settings\Rendszergazda\Local Settings\Application Data\ESET
2009-06-15 06:31 . 2009-06-15 06:31 -------- d-----w- c:\program files\ESET
2009-06-15 06:31 . 2009-06-15 06:31 -------- d-----w- c:\documents and settings\All Users\Application Data\ESET
2009-06-14 19:31 . 2009-06-14 19:31 4096 ----a-w- c:\windows\d3dx.dat
2009-06-14 19:01 . 2009-06-15 16:22 -------- d-----w- c:\documents and settings\Rendszergazda\Application Data\blg
2009-06-14 19:01 . 2009-06-15 16:22 -------- d-----w- c:\documents and settings\All Users\Application Data\blg
2009-06-14 18:53 . 2009-06-14 18:53 -------- d-----w- c:\documents and settings\Rendszergazda\Application Data\Playrix Entertainment
2009-06-14 18:43 . 2009-06-14 18:43 -------- d-----w- c:\documents and settings\All Users\Application Data\Grey Alien Games
2009-06-14 18:14 . 2009-06-14 18:14 -------- d-----w- c:\windows\Fishdom H2O Hidden Odyssey
2009-06-14 16:00 . 2008-06-14 17:36 272512 ------w- c:\windows\system32\drivers\bthport.sys
2009-06-14 16:00 . 2008-06-14 17:36 272512 ------w- c:\windows\system32\dllcache\bthport.sys
2009-06-14 15:59 . 2008-05-27 17:30 765952 ------w- c:\windows\system32\dllcache\vgx.dll
2009-06-14 15:38 . 2008-05-08 14:02 203136 ------w- c:\windows\system32\dllcache\rmcast.sys
2009-06-14 15:38 . 2008-10-24 11:21 455296 ------w- c:\windows\system32\dllcache\mrxsmb.sys
2009-06-14 15:38 . 2008-12-11 10:57 333952 ------w- c:\windows\system32\dllcache\srv.sys
2009-06-14 15:37 . 2008-05-01 14:36 331776 ------w- c:\windows\system32\dllcache\msadce.dll
2009-06-14 15:37 . 2008-04-11 19:06 691712 ------w- c:\windows\system32\dllcache\inetcomm.dll
2009-06-14 15:32 . 2008-10-03 10:04 247326 ------w- c:\windows\system32\dllcache\strmdll.dll
2009-06-14 15:32 . 2008-10-15 16:37 337408 ------w- c:\windows\system32\dllcache\netapi32.dll
2009-06-14 15:32 . 2008-09-04 17:17 1106944 ------w- c:\windows\system32\dllcache\msxml3.dll
2009-06-14 15:31 . 2008-04-21 21:16 218112 ------w- c:\windows\system32\dllcache\wordpad.exe
2009-06-14 15:30 . 2009-06-14 19:50 -------- d--h--w- c:\windows\$hf_mig$
2009-06-14 13:09 . 2009-03-24 12:43 43008 ----a-w- c:\documents and settings\Rendszergazda\Application Data\Mozilla\Firefox\Profiles\rendszergazda.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\metricsloader.dll
2009-06-14 13:09 . 2009-03-24 12:43 43008 ----a-w- c:\documents and settings\Rendszergazda\Application Data\Mozilla\Firefox\Profiles\rendszergazda.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\googletoolbarloader.dll
2009-06-14 13:09 . 2009-03-24 12:43 235520 ----a-w- c:\documents and settings\Rendszergazda\Application Data\Mozilla\Firefox\Profiles\rendszergazda.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\libraries\metrics-ff2.dll
2009-06-14 13:09 . 2009-03-24 12:43 338432 ----a-w- c:\documents and settings\Rendszergazda\Application Data\Mozilla\Firefox\Profiles\rendszergazda.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\libraries\googletoolbar-ff2.dll
2009-06-14 13:09 . 2009-03-24 12:42 235008 ----a-w- c:\documents and settings\Rendszergazda\Application Data\Mozilla\Firefox\Profiles\rendszergazda.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\libraries\metrics-ff3.dll
2009-06-14 13:09 . 2009-03-24 12:42 345088 ----a-w- c:\documents and settings\Rendszergazda\Application Data\Mozilla\Firefox\Profiles\rendszergazda.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\libraries\googletoolbar-ff3.dll
2009-06-14 12:11 . 2009-06-14 12:21 -------- d--h--w- c:\windows\Icons
2009-06-14 12:05 . 2009-06-14 12:05 2754048 ----a-w- c:\documents and settings\All Users\Application Data\TuneUp Software\TuneUp Utilities\WinStyler\tu_logonui.exe
2009-06-14 12:03 . 2009-06-14 12:03 2330240 ----a-w- c:\windows\system32\TUKernel.exe
2009-06-14 11:17 . 2009-06-14 11:18 1 ----a-w- c:\documents and settings\Rendszergazda\Application Data\OpenOffice.org\3\user\uno_packages\cache\stamp.sys
2009-06-14 11:16 . 2009-06-14 11:16 -------- d-----w- c:\documents and settings\Rendszergazda\Application Data\OpenOffice.org
2009-06-14 10:21 . 2009-06-14 11:57 -------- d-----w- c:\documents and settings\Rendszergazda\Contacts
2009-06-13 12:29 . 2009-06-13 12:29 -------- d-----w- c:\documents and settings\NetworkService\Local Settings\Application Data\Google
2009-06-13 11:58 . 2009-06-13 11:58 604416 ----a-w- c:\windows\system32\TUProgSt.exe
2009-06-13 11:58 . 2009-04-27 12:21 28928 ----a-w- c:\windows\system32\uxtuneup.dll
2009-06-13 11:58 . 2009-06-13 11:58 361216 ----a-w- c:\windows\system32\TuneUpDefragService.exe
2009-06-13 11:58 . 2009-06-13 11:58 -------- d-----w- c:\documents and settings\Rendszergazda\Application Data\TuneUp Software
2009-06-13 11:58 . 2009-06-13 11:58 -------- d-----w- c:\documents and settings\All Users\Application Data\TuneUp Software
2009-06-13 11:58 . 2009-06-13 11:58 -------- d-----w- c:\program files\TuneUp Utilities 2009
2009-06-13 11:58 . 2009-06-13 11:58 -------- d-sh--w- c:\documents and settings\All Users\Application Data\{55A29068-F2CE-456C-9148-C869879E2357}
2009-06-13 10:55 . 2009-06-13 10:55 -------- d-----w- c:\documents and settings\LocalService\Local Settings\Application Data\Google
2009-06-13 10:54 . 2009-06-14 13:28 -------- d-----w- c:\documents and settings\Rendszergazda\Local Settings\Application Data\Google
2009-06-13 10:54 . 2009-06-13 10:56 -------- d-----w- c:\program files\Google
2009-06-13 10:46 . 2009-06-13 10:48 -------- d-----w- c:\program files\The KMPlayer
2009-06-13 10:44 . 2009-06-13 10:44 -------- d-----w- c:\documents and settings\Rendszergazda\Application Data\Media Player Classic
2009-06-13 10:42 . 2009-06-13 10:42 -------- d-----w- c:\program files\IrfanView
2009-06-13 10:36 . 2008-09-16 19:23 168448 ----a-w- c:\windows\system32\unrar.dll
2009-06-13 10:36 . 2004-01-25 16:18 217088 ----a-w- c:\windows\system32\yv12vfw.dll
2009-06-13 10:36 . 2009-05-29 21:37 205824 ----a-w- c:\windows\system32\xvidvfw.dll
2009-06-13 10:36 . 2009-05-29 21:31 881664 ----a-w- c:\windows\system32\xvidcore.dll
2009-06-13 10:36 . 2009-05-01 21:02 90112 ----a-w- c:\windows\system32\dpl100.dll
2009-06-13 10:36 . 2009-05-01 21:02 685056 ----a-w- c:\windows\system32\divx.dll
2009-06-13 10:36 . 2008-11-06 16:37 3596288 ----a-w- c:\windows\system32\qt-dx331.dll
2009-06-13 10:36 . 2009-06-02 16:11 85504 ----a-w- c:\windows\system32\ff_vfw.dll
2009-06-13 10:36 . 2009-06-13 10:41 -------- d-----w- c:\program files\K-Lite Codec Pack
2009-06-13 10:30 . 2009-06-13 10:30 -------- d-----w- c:\documents and settings\Rendszergazda\Application Data\Canneverbe_Limited
2009-06-13 10:27 . 2009-06-13 10:27 -------- d-----w- c:\program files\OpenOffice.org 3
2009-06-13 10:24 . 2006-11-14 11:00 24816 ----a-w- c:\windows\system32\mdimon.dll
2009-06-13 10:23 . 2009-06-13 10:23 -------- d-----w- c:\program files\Microsoft Works
2009-06-13 10:23 . 2009-06-13 10:23 -------- d-----w- c:\program files\Microsoft.NET
2009-06-13 10:17 . 2008-04-13 07:39 142592 ----a-w- c:\windows\system32\drivers\aec.sys
2009-06-13 10:17 . 2008-04-13 09:45 52864 ----a-w- c:\windows\system32\drivers\DMusic.sys
2009-06-13 10:17 . 2008-04-13 09:45 6272 ----a-w- c:\windows\system32\drivers\splitter.sys
2009-06-13 10:17 . 2008-04-13 09:39 7552 ----a-w- c:\windows\system32\drivers\MSKSSRV.sys
2009-06-13 10:17 . 2008-04-13 09:45 2944 ----a-w- c:\windows\system32\drivers\drmkaud.sys
2009-06-13 10:17 . 2008-04-13 09:39 5376 ----a-w- c:\windows\system32\drivers\MSPCLOCK.sys
2009-06-13 10:17 . 2008-04-13 09:45 56576 ----a-w- c:\windows\system32\drivers\swmidi.sys
2009-06-13 10:17 . 2008-04-13 09:39 4992 ----a-w- c:\windows\system32\drivers\MSPQM.sys
2009-06-13 10:17 . 2008-04-13 10:17 83072 ----a-w- c:\windows\system32\drivers\wdmaud.sys
2009-06-13 10:17 . 2008-04-13 10:15 60800 ----a-w- c:\windows\system32\drivers\sysaudio.sys
2009-06-13 10:17 . 2008-04-13 09:45 172416 ----a-w- c:\windows\system32\drivers\kmixer.sys
2009-06-13 10:17 . 2001-08-17 19:59 3072 ----a-w- c:\windows\system32\drivers\audstub.sys
2009-06-13 10:16 . 2008-04-14 06:36 57984 ----a-w- c:\windows\system32\drivers\redbook.sys
2009-06-13 10:16 . 2008-04-13 09:36 10240 ----a-w- c:\windows\system32\drivers\compbatt.sys
2009-06-13 10:16 . 2008-04-13 09:36 13952 ----a-w- c:\windows\system32\drivers\CmBatt.sys
2009-06-13 10:16 . 2008-04-13 09:36 14208 ----a-w- c:\windows\system32\drivers\battc.sys
2009-06-13 10:15 . 2009-06-13 10:15 -------- d-----w- c:\windows\system32\x64
2009-06-13 10:15 . 2007-01-13 09:46 389120 ----a-w- c:\windows\system32\igxpun.exe
2009-06-13 10:15 . 2009-06-13 10:15 -------- dc----w- c:\windows\system32\DRVSTORE
2009-06-13 10:15 . 2006-11-10 07:25 319456 ----a-w- c:\windows\system32\difxapi.dll
2009-06-13 10:15 . 2008-04-14 07:02 76288 ----a-w- c:\windows\system32\usbui.dll
2009-06-13 10:15 . 2008-04-14 07:01 4096 ----a-w- c:\windows\system32\ksuser.dll
2009-06-13 10:15 . 2008-04-13 10:19 146048 ----a-w- c:\windows\system32\drivers\portcls.sys
2009-06-13 10:15 . 2008-04-13 09:45 60160 ----a-w- c:\windows\system32\drivers\drmk.sys
2009-06-13 10:15 . 2008-04-13 09:36 8832 ----a-w- c:\windows\system32\drivers\wmiacpi.sys
2009-06-13 10:11 . 2009-06-15 13:10 -------- d-----w- c:\documents and settings\All Users\Asztal
2009-06-13 10:09 . 2008-01-24 21:36 4127488 ----a-w- c:\windows\system32\drivers\ALCXWDM.SYS
2009-06-13 10:09 . 2006-10-18 07:53 147456 ----a-w- c:\windows\system32\RTLCPAPI.dll
2009-06-13 10:08 . 2007-04-16 20:28 577536 ----a-w- c:\windows\SOUNDMAN.EXE
2009-06-13 10:08 . 2006-12-08 20:20 10528768 ----a-w- c:\windows\system32\RTLCPL.EXE
2009-06-13 10:08 . 2006-07-31 16:27 217088 ----a-w- c:\windows\Alcrmv.exe
2009-06-13 10:07 . 2007-07-12 15:49 96384 ----a-w- c:\windows\system32\drivers\Rtnicxp.sys
2009-06-13 10:06 . 2007-01-13 09:33 5672032 ----a-w- c:\windows\system32\drivers\igxpmp32.sys
2009-06-13 10:06 . 2007-01-13 08:48 528384 ----a-w- c:\windows\system32\igfxcfg.exe
2009-06-13 10:06 . 2007-01-13 08:47 131072 ----a-w- c:\windows\system32\igfxtray.exe
2009-06-13 10:06 . 2007-01-13 08:46 135168 ----a-w- c:\windows\system32\igfxpers.exe
2009-06-13 10:06 . 2007-01-13 08:46 163840 ----a-w- c:\windows\system32\igfxext.exe
2009-06-13 10:06 . 2007-01-13 08:46 241664 ----a-w- c:\windows\system32\igfxsrvc.exe
2009-06-13 10:06 . 2007-01-13 08:46 163840 ----a-w- c:\windows\system32\igfxzoom.exe
2009-06-13 10:06 . 2007-01-13 08:47 163840 ----a-w- c:\windows\system32\hkcmd.exe
2009-06-13 10:02 . 2009-06-15 16:39 -------- d--h--w- c:\documents and settings\Default User
2009-06-13 10:02 . 2009-06-13 08:31 -------- d-----w- C:\Documents and Settings
2009-06-13 10:02 . 2009-06-13 08:22 -------- d-----w- c:\documents and settings\All Users

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-06-15 16:37 . 2009-06-13 08:54 -------- d-----w- c:\documents and settings\Rendszergazda\Application Data\utorrent
2009-06-15 06:04 . 2008-05-07 01:18 447540 ----a-w- c:\windows\system32\perfh00E.dat
2009-06-15 06:04 . 2008-05-07 01:18 100292 ----a-w- c:\windows\system32\perfc00E.dat
2009-06-14 18:13 . 2009-06-13 08:52 -------- d-----w- c:\program files\GameHouse
2009-06-14 13:48 . 2009-06-13 08:45 -------- d-----w- c:\documents and settings\Rendszergazda\Application Data\Notepad++
2009-06-14 10:50 . 2009-06-13 08:52 -------- d-----w- c:\program files\SlySoft
2009-06-13 11:50 . 2009-06-13 11:47 -------- d-----w- c:\documents and settings\Rendszergazda\Application Data\Winamp
2009-06-13 11:48 . 2009-06-13 11:47 -------- d-----w- c:\program files\Winamp
2009-06-13 10:30 . 2009-06-13 08:53 67584 ----a-w- c:\documents and settings\Rendszergazda\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-06-13 10:22 . 2009-06-13 08:54 -------- d-----w- c:\program files\CCleaner
2009-06-13 10:11 . 2009-06-13 08:53 -------- d-----w- c:\program files\Messenger Plus! Live
2009-06-13 10:05 . 2009-06-13 10:05 -------- d-----w- c:\program files\Synaptics
2009-06-13 10:05 . 2009-06-13 08:28 -------- d-----w- c:\program files\Common Files\InstallShield
2009-06-13 09:56 . 2009-06-13 08:46 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-06-13 09:48 . 2009-06-13 09:48 -------- d-----w- c:\program files\CONEXANT
2009-06-13 09:30 . 2009-06-13 08:54 270128 ----a-w- c:\windows\utorrent.exe
2009-06-13 09:25 . 2009-06-13 09:25 -------- d-----w- c:\documents and settings\All Users\Application Data\Messenger Plus!
2009-06-13 08:57 . 2009-06-13 08:57 -------- d-----w- c:\documents and settings\Rendszergazda\Application Data\Skype
2009-06-13 08:54 . 2009-06-13 08:54 -------- d-----w- c:\program files\Lavalys
2009-06-13 08:54 . 2009-06-13 08:54 -------- d-----w- c:\program files\TC PowerPack
2009-06-13 08:54 . 2009-06-13 08:54 -------- d-----w- c:\program files\Skype
2009-06-13 08:54 . 2009-06-13 08:54 -------- d-----w- c:\program files\Common Files\Skype
2009-06-13 08:53 . 2009-06-13 08:53 -------- d-----w- c:\documents and settings\All Users\Application Data\Skype
2009-06-13 08:53 . 2009-06-13 08:53 -------- d-----w- c:\program files\Windows Live
2009-06-13 08:47 . 2009-06-13 08:47 -------- d-----w- c:\program files\Microsoft Games
2009-06-13 08:46 . 2009-06-13 08:46 -------- d-----w- c:\documents and settings\All Users\Application Data\CyberLink
2009-06-13 08:46 . 2009-06-13 08:46 -------- d-----w- c:\program files\CyberLink
2009-06-13 08:45 . 2009-06-13 08:45 -------- d-----w- c:\program files\Notepad++
2009-06-13 08:45 . 2009-06-13 08:44 -------- d-----w- c:\program files\Nero
2009-06-13 08:44 . 2009-06-13 08:44 -------- d-----w- c:\program files\Common Files\Nero
2009-06-13 08:44 . 2009-06-13 08:44 -------- d-----w- c:\documents and settings\All Users\Application Data\Nero
2009-06-13 08:43 . 2009-06-13 08:43 -------- d-----w- c:\program files\DAEMON Tools Lite
2009-06-13 08:43 . 2009-06-13 08:43 -------- d-----w- c:\documents and settings\Rendszergazda\Application Data\DAEMON Tools
2009-06-13 08:42 . 2009-06-13 08:42 -------- d-----w- c:\program files\Common Files\Adobe
2009-06-13 08:41 . 2009-06-13 08:41 97224 ----a-w- c:\documents and settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
2009-06-13 08:40 . 2009-06-13 08:40 -------- d-----w- c:\program files\MSBuild
2009-06-13 08:40 . 2009-06-13 08:40 -------- d-----w- c:\program files\Reference Assemblies
2009-06-13 08:33 . 2009-06-13 08:33 136 ----a-w- c:\documents and settings\Rendszergazda\Local Settings\Application Data\fusioncache.dat
2009-06-13 08:29 . 2009-06-13 08:29 -------- d-----w- c:\program files\TinyPDF
2009-06-13 08:29 . 2009-06-13 08:31 -------- d-----w- c:\documents and settings\Rendszergazda\Application Data\Desktopicon
2009-06-13 08:29 . 2009-06-13 08:29 -------- d-----w- c:\documents and settings\Default User\Application Data\Desktopicon
2009-06-13 08:29 . 2009-06-13 08:29 -------- d-----w- c:\program files\Unlocker
2009-06-13 08:29 . 2009-06-13 08:29 717296 ----a-w- c:\windows\system32\drivers\sptd.sys
2009-06-13 08:29 . 2009-06-13 08:28 -------- d-----w- c:\program files\Java
2009-06-13 08:28 . 2009-06-13 08:28 -------- d-----w- c:\program files\Common Files\Java
2009-06-13 08:28 . 2009-06-13 08:31 10134 ----a-r- c:\documents and settings\Rendszergazda\Application Data\Microsoft\Installer\{F3CA9611-CD42-4562-ADAB-A554CF8E17F1}\ARPPRODUCTICON.exe
2009-06-13 08:28 . 2009-06-13 08:28 10134 ----a-r- c:\documents and settings\Default User\Application Data\Microsoft\Installer\{F3CA9611-CD42-4562-ADAB-A554CF8E17F1}\ARPPRODUCTICON.exe
2009-06-13 08:28 . 2009-06-13 08:28 -------- d-----w- c:\program files\Microsoft WSE
2009-06-13 08:24 . 2009-06-13 08:24 -------- d-----w- c:\program files\AutoIt3
2009-06-13 08:23 . 2009-06-13 08:23 86327 ----a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat
2009-06-13 08:20 . 2009-06-13 08:20 21948 ----a-w- c:\windows\system32\emptyregdb.dat
2009-06-13 08:19 . 2009-06-13 08:19 -------- d-----w- c:\program files\Windows Media Connect 2
2009-05-28 09:12 . 2009-05-28 09:12 94360 ----a-w- c:\windows\system32\drivers\epfwtdir.sys
2009-05-28 09:12 . 2009-05-28 09:12 107256 ----a-w- c:\windows\system32\drivers\ehdrv.sys
2009-05-28 09:10 . 2009-05-28 09:10 114472 ----a-w- c:\windows\system32\drivers\eamon.sys
2009-05-07 15:34 . 2008-04-14 09:01 348160 ----a-w- c:\windows\system32\localspl.dll
2009-04-29 04:47 . 2008-05-07 01:35 827392 ----a-w- c:\windows\system32\wininet.dll
2009-04-29 04:47 . 2008-05-07 01:35 78336 ----a-w- c:\windows\system32\ieencode.dll
2009-04-19 19:51 . 2008-04-14 08:36 1847168 ----a-w- c:\windows\system32\win32k.sys
2009-04-15 14:55 . 2008-04-14 09:02 585216 ----a-w- c:\windows\system32\rpcrt4.dll
.

------- Sigcheck -------

[-] 2008-05-07 01:36 1571840 2993C2DF98A2D6D9896E0AB24946F972 c:\windows\system32\sfcfiles.dll
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\daemon.exe" [2008-07-17 490952]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2007-01-13 131072]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2007-01-13 163840]
"Persistence"="c:\windows\system32\igfxpers.exe" [2007-01-13 135168]
"Activecaptions"="c:\windows\activecaptions.exe" [2005-11-14 337408]
"AllSnap"="c:\windows\allsnap.exe" [2006-11-14 81920]
"Transbar"="c:\windows\transbar.exe" [2005-06-01 65536]
"BDRegion"="c:\program files\Cyberlink\Shared Files\brs.exe" [2007-11-16 91432]
"EPM-DM"="c:\acer\epm\epm-dm.exe" [2005-06-01 192512]
"ePowerManagement"="c:\acer\ePM\ePM.exe" [2005-03-15 2893824]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-12-06 1024000]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2009-05-28 2029640]
"SoundMan"="SOUNDMAN.EXE" - c:\windows\SOUNDMAN.EXE [2007-04-16 577536]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"nltide_2"="shell32" [X]
"AfterPost"="c:\windows\afterpost.cmd" [2008-07-22 2553]
"nltide_3"="advpack.dll" - c:\windows\system32\advpack.dll [2009-04-29 124928]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"ForceClassicControlPanel"= 1 (0x1)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoStrCmpLogical"= 1 (0x1)
"ForceCopyAclwithFile"= 0 (0x0)

[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"NoStrCmpLogical"= 1 (0x1)
"ForceCopyAclwithFile"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"UIHost"="c:\documents and settings\All Users\Application Data\TuneUp Software\TuneUp Utilities\WinStyler\tu_logonui.exe"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"DAEMON Tools Lite"="c:\program files\Daemon Tools Lite\daemon.exe" -autorun

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
"FirewallOverride"=dword:00000001
"UpdatesDisableNotify"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
"c:\\WINDOWS\\utorrent.exe"=

R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [2009.05.28. 11:12 107256]
R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [2009.05.28. 11:12 94360]
R2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [2009.05.28. 11:12 731840]
R2 TuneUp.ProgramStatisticsSvc;TuneUp Program Statistics Service;c:\windows\system32\TUProgSt.exe [2009.06.13. 13:58 604416]
S2 gupdate1c9ec1578fe179a;Google Update Service (gupdate1c9ec1578fe179a);c:\program files\Google\Update\GoogleUpdate.exe [2009.06.13. 12:55 133104]

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
Contents of the 'Scheduled Tasks' folder

2009-06-15 c:\windows\Tasks\1-Click Maintenance.job
- c:\program files\TuneUp Utilities 2009\OneClickStarter.exe [2009-04-27 13:37]

2009-06-15 c:\windows\Tasks\GoogleUpdateTaskMachine.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-06-13 10:54]
.
- - - - ORPHANS REMOVED - - - -

HKLM-Run-Microsoft WinUpdate - c:\windows\system32\msupdte.exe


.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.startlap.hu/
IE: E&xportálás Microsoft Excel formátumba - c:\progra~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
FF - ProfilePath -
.
.
------- File Associations -------
.
inffile="%ProgramFiles%\Notepad++\notepad++.exe" "%1"
inifile="%ProgramFiles%\Notepad++\notepad++.exe" "%1"
txtfile="%ProgramFiles%\Notepad++\notepad++.exe" "%1"
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-06-15 18:42
Windows 5.1.2600 Szervizcsomag 3 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\{95808DC4-FA4A-4C74-92FE-5B863F82066B}]
"ImagePath"="\??\c:\program files\CyberLink\PowerDVD\000.fcl"
.
Completion time: 2009-06-15 18:43
ComboFix-quarantined-files.txt 2009-06-15 16:43

Pre-Run: 33 835 245 568 bájt szabad
Post-Run: 33 839 017 984 bájt szabad

295 --- E O F --- 2009-06-14 19:50

udv

Ránézésre látszik, hogy kártevő lehet.
Akkor legyen halat, mint hálót. Beütöd a Google-ba: msupdte.exe

Eredmények:

http://greatis.com/appdata/d/m/msupdte.exe.htm
http://www.prevx.com/filenames/19008009 ... E.EXE.html
http://www.bleepingcomputer.com/startup ... 23270.html
http://forums.techguy.org/malware-remov ... e-exe.html

Lehet ott még más fertőzés is. Ha nincs megfelelő irtó programod vagy a linkek alapján nem tudod leirtani, fordulj stell cimborához a fórumon.
A linken pl. az SDFix-et ajánlják. Néha stell is szokta talán.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:34:56, on 2009.06.15.
Platform: Windows XP Szervizcsomag 3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16850)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\WINDOWS\System32\TUProgSt.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\activecaptions.exe
C:\WINDOWS\allsnap.exe
C:\Program Files\Cyberlink\Shared Files\brs.exe
C:\acer\epm\epm-dm.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\DOCUME~1\RENDSZ~1\LOCALS~1\Temp\RtkBtMnt.EXE
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\WINDOWS\utorrent.exe
D:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.startlap.hu/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows XP Extended Editon
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hivatkozások
R3 - URLSearchHook: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Adobe PDF Reader hivatkozássúgó - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [Activecaptions] "C:\WINDOWS\activecaptions.exe"
O4 - HKLM\..\Run: [AllSnap] "C:\WINDOWS\allsnap.exe"
O4 - HKLM\..\Run: [Transbar] "C:\WINDOWS\transbar.exe" /s
O4 - HKLM\..\Run: [BDRegion] C:\Program Files\Cyberlink\Shared Files\brs.exe
O4 - HKLM\..\Run: [EPM-DM] c:\acer\epm\epm-dm.exe
O4 - HKLM\..\Run: [ePowerManagement] C:\Acer\ePM\ePM.exe boot
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [Microsoft WinUpdate] C:\WINDOWS\system32\msupdte.exe
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'HELYI SZOLGÁLTATÁS')
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'HELYI SZOLGÁLTATÁS')
O4 - HKUS\S-1-5-19\..\RunOnce: [AfterPost] "C:\WINDOWS\afterpost.cmd" (User 'HELYI SZOLGÁLTATÁS')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'HÁLÓZATI SZOLGÁLTATÁS')
O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'HÁLÓZATI SZOLGÁLTATÁS')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')
O8 - Extra context menu item: E&xportálás Microsoft Excel formátumba - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra button: Kutatás - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Google Update Service (gupdate1c9ec1578fe179a) (gupdate1c9ec1578fe179a) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software - C:\WINDOWS\System32\TuneUpDefragService.exe
O23 - Service: TuneUp Program Statistics Service (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\WINDOWS\System32\TUProgSt.exe

--
End of file - 6311 bytes

http://kepfeltoltes.hu/090615/miafene_w ... es.hu_.jpg

Tegnap hoztam haza a gépet, wincseszter csere volt, erre ma reggel meg ezzel indul Mi manó ez? Mit tudok kezdeni vele?
...
fenti szöveggel írtam a windowsos témába, de ott azt mondták vírus. Végig futott az avast és most a nod 32 de már vírust nem talál.