INTERNET HELP !

Caute neviem ci je to virus alebo co ale nejde mi ziadna adresa ked napisem bud nenacita alebo prsmeruje na volaku esteticku kozmetiku poradte mi ide mi teraz net ked som vypol vsetky doplny k IE funguje len mozila po vypnuti tych doplnkov HELP ! PLS

Sory za spam ale strasne to suri potrebujem to uz dnes aby to slapalo !! HEEELP PLS !

Samozrejme ze virus. Alebo lepsie mallware..
HijackThis

jo hned to sem hodim len by ma zaujimalo ako sa mi dostal do pc som nic nestahoval okrem mozili SA:MP a icq a WMP

No tak som to prehnal tim slovickom samozrejme.. Ale je to najpravdepodobnejsie..

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:30:17, on 26. 6. 2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
C:\Program Files\ICQ6\ICQ.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\DOCUME~1\ROMAN~1.ROM\LOCALS~1\Temp\Dočasný adresář 1 pro HiJackThis.zip\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
O2 - BHO: XTTBPos00 - {055FD26D-3A88-4e15-963D-DC8493744B1D} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ICQ] "C:\Program Files\ICQ6\ICQ.exe" silent
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

--
End of file - 3973 bytes

Hmm nic zle, sken AV urob...
Ale ako ze si sa dostal tu ked hovoris ze ta to presmeruvava?

HJT vsetko OK, log z Combofixu

jednoducho vypol som vsetky doplnky od ie a mozila zazrakom zacala slapat normalne ale nieco tam asi bude ked mi vcera nainstalovane xp zerie 500 mb ram

**************** Teraz som preinstaloval win a hadajte zaseee !!!!!!!!
Te nvirus mam niekde na disku a asi iem co to bolo bol to obrazok

Teda ta este presmeruva?
Prelistuj http://www.google.sk/search?hl=sk&q=vir ... ogle&meta=

a co takto ked preinstalovavas win aj formatnut HDD ? lebo mam pocit ze si dal len orpavit a to nepomaha

..inak dat radu aby koli prehliadacom formatol disk je super...
odinstaluj FF potom chod na stranku mozili tam najdes co robit pri problemoch a najdi vsetky mozilla priecniky-odstran
http://www.mozilla.sk/firefox/firefox-5 ... ako/6/#o50

http://www.mozilla.sk/firefox/standardn ... -firefoxu/

... potom si cely komp precisti CC Cleanerom a skontroluj antispyvearom (ja poouzivam spybot) chod sem http://www.avast.com/cze/down_cleaner.html spusti a nakoniec restartuj PC a preinstaluj mozzilu... inak skus pozriet vsetky nastavenia..

Este mozes skusit ComboFix
http://www.pcforum.sk/cistime-napadnuty ... 27265.html

sakra som hladal na nete Slovak interface pack pre EN windows xp profesional nenasiel som teda nasiel ale na microsoft stranke nejde link len volaka zmluva nabehne

UZ netreba nasie l som na nete