"You have a security problem", prosím co s tím??

ComboFix - stáhnout, spustit, postupovat podle instrukcí na obrazovce.

Kurte dík, ale já ten ComboFix nemůžu stáhnout - všude mi to píše error 404 stránka nenalezena. Nemohl bys mi ho poslat na mirda.stich@seznam.cz ??

Když jsou ty Vánoce....
Posláno.

"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2007-08-24 33648]
"NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2007-03-01 153136]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2008-11-10 136600]
"RTHDCPL"="RTHDCPL.EXE" [2006-03-07 c:\windows\RTHDCPL.exe]
"AGRSMMSG"="AGRSMMSG.exe" [2006-06-29 c:\windows\AGRSMMSG.exe]

[HKEY_USERS\.DEFAULT\Sof tware\Microsoft\Windows\CurrentVersion\Run]
"CTFMON .EXE"="c:\windows\System32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\MirrÔass\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Věýezy obrazovky a spuçtŘnˇ aplikace OneNote 2007.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2007-12-07 101440]

c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Bluetooth Manager.lnk - c:\program files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe [2007-08-02 2760704]
TMMonitor.lnk - c:\program files\MSI\ArcSoft\TotalMedia\TMMonitor.exe [2008-07-15 249856]

[HKEY_LOCAL_MACHINE\software\microsoft\wi ndows nt\currentversion\winlogon\notify\FJWSEL]
2006-06- 29 13:45 32768 c:\windows\system32\FJWSWNP.dll

[HKEY_LOCAL_MACHI NE\software\microsoft\windows nt\currentversion\winlogon\notify\PSUTY]
2006-06-0 2 16:04 32768 c:\windows\system32\PSUWNP.dll

[HKEY_LOCAL_MACHIN E\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=avgrsstx .dll

[HKEY_LOCAL_MACHINE\software\microsoft\window s nt\currentversion\drivers32]
"msacm.divxa32"= msaud32_divx.acm

[HKLM\~\services\sharedaccess\parameters\firewallpo licy\standardprofile\AuthorizedApplications\List]
" %windir%\\system32\\sessmgr.exe"=
"%windir%\\Networ k Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\AVG\\AVG8\\avgupd.exe"=
"c:\\Program Files\\AVG\\AVG8\\avgnsx.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

R0 AvgRkx86;avgrkx86.sys;c:\windows\system32\Drivers\ avgrkx86.sys [2008-11-30 12936]
R0 FJGSDisk;G-Sensor Application Filter Driver;c:\windows\system32\DRIVERS\FJGSDisk.sys [2008-07-14 7168]
R1 AvgLdx86;AVG AVI Loader Driver x86;c:\windows\system32\Drivers\avgldx86.sys [2008-11-30 98440]
R1 AvgTdiX;AVG8 Network Redirector;c:\windows\system32\Drivers\avgtdix.sys [2008-11-30 90632]
R2 avg8wd;AVG8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [2008-11-30 231704]
R2 PDRJNDL;PDRJNDL;\??\c:\programy\Dekart Private Disk\PDRJNDL.SYS [2008-08-02 16512]
R2 PRVDISK;PRVDISK;\??\c:\programy\Dekart Private Disk\PRVDISK.SYS [2008-08-02 14848]
R3 FUJ02E1;%FUJ02E1.DeviceDesc%;c:\windows\system32\D rivers\FUJ02E1.sys [2008-07-14 5632]
R3 FUJ02E3;Fujitsu FUJ02E3 Device Driver;c:\windows\system32\DRIVERS\FUJ02E3.sys [2008-07-14 4864]
R3 PSched;Plánovač paketů technologie QoS;c:\windows\system32\DRIVERS\psched.sys [2003-04-16 69120]
S1 aswSP;avast! Self Protection; []
S2 aswFsBlk;aswFsBlk;c:\windows\system32\DRIVERS\aswF sBlk.sys []
S3 vmfilter323;323 filter service, Normal;c:\windows\system32\drivers\vmfilter323.sys [2008-09-24 476672]
S3 ZSMC326;VIMICRO USB2.0 PC Camera(VC0323);c:\windows\system32\Drivers\usbvm32 3.sys [2008-09-24 257920]

[HKEY_CURRENT_USER\software\microsoft\windows\curre ntversion\explorer\mountpoints2\{e98ebf44-51c0-11dd -9448-806d6172696f}]
\Shell\AutoRun\command - c:\windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL resycled\boot.com c:
\Shell\Open\command - "resycled\boot

*Newly Created Service* - PROCEXP90
.
Obsah adresáře 'Naplánované úlohy'

2008-12-22 c:\windows\Tasks\At1.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At10.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At11.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At12.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At13.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At14.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At15.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At16.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At17.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At18.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At19.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At2.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At20.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At21.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At22.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At23.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At24.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At25.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At26.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At27.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At28.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At29.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At3.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At30.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At31.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At32.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At33.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At34.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At35.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At36.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At37.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At38.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At39.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At4.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At40.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At41.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At42.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At43.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At44.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At45.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At46.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At47.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At48.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At5.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At6.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At7.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At8.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\At9.job
- c:\windows\system32\TFeJ71tT.exe [2008-12-22 01:49]

2008-12-22 c:\windows\Tasks\PCConfidential.job
- c:\program files\Winferno\PC Confidential\PCConfidential.exe []
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

BHO-{D5BF49A2-94F1-42BD-F434-3604812C807D} - c:\windows\system32\tyshb36rfjdf.dll
HKLM-Run-SMai l - c:\program files\Seznam\Postak\Postak.exe
SharedTaskScheduler -{D5BF49A2-94F1-42BD-F434-3604812C807D} - c:\windows\system32\tyshb36rfjdf.dll

.
------- Doplňkový sken -------
.
uStart Page = hxxp://seznam.cz/
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Stáhnout pomocí Download &Expressu - c:\program files\Download Express\Add_Url.htm
Name-Space Handler: ftp\HIEClickCatcher - {E131C96E-4DDB-11D4-84B8-008048B33DEA} - c:\progra~1\DOWNLO~1\mdpph.dll
Name-Space Handler: http\HIEClickCatcher - {E131C96E-4DDB-11D4-84B8-008048B33DEA} - c:\progra~1\DOWNLO~1\mdpph.dll
Name-Space Handler: https\HIEClickCatcher - {E131C96E-4DDB-11D4-84B8-008048B33DEA} - c:\progra~1\DOWNLO~1\mdpph.dll
.

**************** *************************************************** *******

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, www.gmer.net
Rootkit scan 2008-12-22 12:13:43
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

*********************************************** ***************************

[HKEY_LOCAL_MACHINE\sy stem\ControlSet004\Services\TDSSserv.sys]
"imagepat h"="\systemroot\system32\drivers\TDSSmhct.sys"
.
-- ------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(1156)
c:\windows\system32\FJWSWNP.d ll
c:\windows\system32\PSUWNP.dll
.
Celkový čas: 2008-12-22 12:14:29
ComboFix-quarantined-files.txt 2008-12-22 11:14:18

Před spuštěním: Volných bajtů: 93,075,767,296
Po spuštění: Volných bajtů: 93,520,416,768

314 --- E O F --- 2008-12-18 23:15:02

Do you still have a security problem?
Ještě stáhni Superantispyware, aktualizuj a proskenuj PC. Co najde odstraň a mělo by být po boji.

Moc děkuju

Vypadá to, že je to pryč, jiný problém tu nemám, ale přesto to podle tvé rady ještě proskenuji. Jak jsi to sakra udělal, že to zmizelo??
No každopádně dík a přeji ti hezké prožití svátků

Mirrdass

Taky tak. Označím jako Vyřešené a jdu zase pracovat.