MalwareAlarm!? :: Pc Klinika ~ Doktori za vas kompjuter

Dobri ljudi pomagajte i meni! Iygleda da sam pokupio neke jade sa neta. Stalno mi iskace ovaj Security Alert, poludicu. Javlja mi da imam NetWorm-i. Virus@fp, Spyware. CyberLog-X. i malware. Od yastitnih softvera imam NOD32 i Ad-aware 6. 0
Evo saljem vam moj HiJackThis log, prema uputstvu

Logfile of Trend Micro HijackThis v2. 0. 2
Scan saved at 17:01:14, on 13. 4. 2008
Platform: Windows XP SP2 (WinNT 5. 01. 2600)
MSIE: Internet Explorer v6. 00 SP2 (6. 00. 2900. 2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss. exe
C:\WINDOWS\system32\winlogon. exe
C:\WINDOWS\system32\services. exe
C:\WINDOWS\system32\lsass. exe
C:\WINDOWS\system32\svchost. exe
C:\WINDOWS\System32\svchost. exe
C:\WINDOWS\system32\spoolsv. exe
C:\WINDOWS\system32\drivers\CDAC11BA. EXE
C:\MATLAB6p5\webserver\bin\win32\matlabserver. exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM. EXE
C:\Program Files\Eset\nod32krn. exe
C:\WINDOWS\system32\svchost. exe
C:\WINDOWS\system32\WgaTray. exe
C:\WINDOWS\Explorer. EXE
C:\Program Files\Java\j2re1. 4. 2_06\bin\jusched. exe
C:\Program Files\Winamp\winampa. exe
C:\PROGRA~1\DAP\DAP. EXE
C:\Program Files\HP\HP Software Update\HPWuSchd2. exe
C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1. EXE
C:\Program Files\Adobe\Photoshop Album Starter Edition\3. 0\Apps\apdproxy. exe
C:\Program Files\Eset\nod32kui. exe
C:\WINDOWS\system32\ctfmon. exe
C:\Program Files\Messenger\msmsgs. exe
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2. exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08. exe
C:\Program Files\Metacafe\MetacafeAgent. exe
C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s. exe
C:\PROGRA~1\COMMON~1\PCSuite\Services\SERVIC~1. EXE
C:\PROGRA~1\COMMON~1\PCSuite\DATALA~1\DATALA~1. EXE
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08. exe
C:\PROGRA~1\Yahoo!\MESSEN~1\ymsgr_tray. exe
C:\WINDOWS\System32\svchost. exe
C:\Program Files\NetProject\scit. exe
C:\Program Files\NetProject\scm. exe
C:\Program Files\NetProject\sbmntr. exe
C:\Program Files\NetProject\sbsm. exe
C:\WINDOWS\system32\ntvdm. exe
C:\Program Files\Microsoft Office\OFFICE11\WINWORD. EXE
C:\Program Files\Internet Explorer\iexplore. exe
C:\Program Files\MalwareWar 7. 3\MalwareWar 7. 3. exe
C:\Program Files\Internet Explorer\iexplore. exe
C:\Documents and Settings\Korisnik\Desktop\HiJackThis. exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp:|| us. rd. yahoo. com/customize/ycomp/defaults/sb/*hxxp:|| www. yahoo. com/search/ie. html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp:|| us. rd. yahoo. com/customize/ycomp/defaults/sp/*hxxp:|| www. yahoo. com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp:|| www. yahoo. com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp:|| us. rd. yahoo. com/customize/ie/defaults/su/msgr8/*hxxp:|| www. yahoo. com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp:|| us. rd. yahoo. com/customize/ie/defaults/sb/msgr8/*hxxp:|| www. yahoo. com/ext/search/search. html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp:|| us. rd. yahoo. com/customize/ie/defaults/sp/msgr8/*hxxp:|| www. yahoo. com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp:|| www. yahoo. com/
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = hxxp:|| us. rd. yahoo. com/customize/ycomp/defaults/su/*hxxp:|| www. yahoo. com
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt. dll
O2 - BHO: DAPHelper Class - {0000CC75-ACF3-4cac-A0A9-DD3868E06852} - C:\Program Files\DAP\DAPBHO. dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt. dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7. 0\ActiveX\AcroIEHelper. dll
O2 - BHO: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1. DLL
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc. dll
O2 - BHO: (no name) - {7C109800-A5D5-438F-9640-18D17E168B88} - C:\Program Files\NetProject\sbmdl. dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1. dll
O3 - Toolbar: DAP Bar - {62999427-33FC-4baf-9C9C-BCE6BD127F08} - C:\Program Files\DAP\DAPIEBar. dll
O3 - Toolbar: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1. DLL
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1. dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt. dll
O3 - Toolbar: Internet Service - {51D81DD5-55B7-497F-95DB-D356429BB54E} - C:\Program Files\NetProject\wamdl. dll
O4 - HKLM\. . \Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1. 4. 2_06\bin\jusched. exe
O4 - HKLM\. . \Run: [WinampAgent] C:\Program Files\Winamp\winampa. exe
O4 - HKLM\. . \Run: [DownloadAccelerator] C:\PROGRA~1\DAP\DAP. EXE /STARTUP
O4 - HKLM\. . \Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2. exe
O4 - HKLM\. . \Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1. EXE -onlytray
O4 - HKLM\. . \Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3. 0\Apps\apdproxy. exe"
O4 - HKLM\. . \Run: [nod32kui] "C:\Program Files\Eset\nod32kui. exe" /WAITSERVICE
O4 - HKLM\. . \Run: [pwdir] C:\Program Files\PasswordDirector\PasswordDirector. exe /autorun
O4 - HKLM\. . \Run: [MalwareWar 7. 3] "C:\Program Files\MalwareWar 7. 3\MalwareWar 7. 3. exe" /h
O4 - HKCU\. . \Run: [CTFMON. EXE] C:\WINDOWS\system32\ctfmon. exe
O4 - HKCU\. . \Run: [Skype] "C:\Program Files\Skype\Phone\Skype. exe" /nosplash /minimized
O4 - HKCU\. . \Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs. exe" /background
O4 - HKCU\. . \Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1. 2. 1128. 5462\GoogleToolbarNotifier. exe
O4 - HKCU\. . \Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1. EXE" -quiet
O4 - HKCU\. . \Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2. exe /NoDialog
O4 - HKCU\. . \Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7. 0\Reader\AdobeUpdateManager. exe" AcRdB7_0_8 -reboot 1
O4 - HKLM\. . \Policies\Explorer\Run: [some] C:\Program Files\NetProject\scit. exe
O4 - HKLM\. . \Policies\Explorer\Run: [start] C:\Program Files\NetProject\sbmntr. exe
O4 - HKUS\S-1-5-19\. . \Run: [CTFMON. EXE] C:\WINDOWS\system32\CTFMON. EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\. . \Run: [CTFMON. EXE] C:\WINDOWS\system32\CTFMON. EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\. . \Run: [CTFMON. EXE] C:\WINDOWS\system32\CTFMON. EXE (User 'SYSTEM')
O4 - HKUS\. DEFAULT\. . \Run: [CTFMON. EXE] C:\WINDOWS\system32\CTFMON. EXE (User 'Default user')
O4 - Startup: Metacafe. lnk = C:\Program Files\Metacafe\MetacafeAgent. exe
O4 - Global Startup: Adobe Reader Speed Launch. lnk = C:\Program Files\Adobe\Acrobat 7. 0\Reader\reader_sl. exe
O4 - Global Startup: HP Digital Imaging Monitor. lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08. exe
O4 - Global Startup: Metacafe. lnk = C:\Program Files\Metacafe\MetacafeAgent. exe
O8 - Extra context menu item: &Download with &DAP - C:\PROGRA~1\DAP\dapextie. htm
O8 - Extra context menu item: Download &all with DAP - C:\PROGRA~1\DAP\dapextie2. htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL. EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava. dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava. dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc. dll
O9 - Extra button: Run DAP - {669695BC-A811-4A9D-8CDF-BA8C795F261C} - C:\PROGRA~1\DAP\DAP. EXE
O9 - Extra button: (no name) - {9034A523-D068-4BE8-A284-9DF278BE776E} - hxxp:|| www. ieservicegate. com/redirect. php (file missing)
O9 - Extra 'Tools' menuitem: IE Anti-Spyware - {9034A523-D068-4BE8-A284-9DF278BE776E} - hxxp:|| www. ieservicegate. com/redirect. php (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR. DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs. exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs. exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau. dll
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - hxxp:|| go. microsoft. com/fwlink/?linkid=39204
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper. dll
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA. EXE
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService. exe
O23 - Service: MATLAB Server (matlabserver) - Unknown owner - C:\MATLAB6p5\webserver\bin\win32\matlabserver. exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn. exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12. exe

--
End of file - 9255 bytes