Ma jok....na odgovori mi neda da kliknem a kliknem na "brz odgovor" al nemam opciju da ubacim...ccc jesam smotan

ComboFix 09-08-07.09 - PC NET 08/08/2009 20:47:35.1.4 - NTFSx86
Microsoft Windows XP Home Edition  5.1.2600.2.1252.1.1033.18.3327.2385 [GMT 2:00]
Running from: C:\Documents and Settings\PC NET\Desktop\ComboFix.exe
AV: Kaspersky Internet Security *On-access scanning disabled* (Outdated) {2C4D4BC6-0793-4956-A9F9-E252435469C0}
FW: Kaspersky Internet Security *disabled* {2C4D4BC6-0793-4956-A9F9-E252435469C0}
.

(((((((((((((((((((((((((((((((((((((((   Other Deletions   )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\PC NET\uni.exe
C:\WINDOWS\system32\baseham32.dll
C:\WINDOWS\system32\kr_done1

.
(((((((((((((((((((((((((   Files Created from 2009-07-08 to 2009-08-08  )))))))))))))))))))))))))))))))
.

2009-08-08 17:09:09 . 2009-08-08 17:09:09   0   d-----w-   C:\Documents and Settings\PC NET\Application Data\Uniblue
2009-08-05 17:39:54 . 2009-08-05 18:26:42   0   d-----w-   C:\Documents and Settings\PC NET\Local Settings\Application Data\WMTools Downloaded Files
2009-08-05 10:33:10 . 2009-08-07 12:25:27   0   d-s---w-   C:\winnt_
2009-07-31 18:43:01 . 2009-07-31 18:44:11   0   d-----w-   C:\Documents and Settings\PC NET\Local Settings\Application Data\Temp
2009-07-28 13:43:00 . 2009-07-28 13:43:00   0   d-----w-   C:\Documents and Settings\NetworkService\Local Settings\Application Data\Google
2009-07-28 13:28:02 . 2009-07-28 13:45:48   0   d-----w-   C:\Documents and Settings\PC NET\Application Data\DivX
2009-07-28 13:26:33 . 2009-05-13 21:56:16   120056   ------w-   C:\WINDOWS\system32\pxcpyi64.exe
2009-07-28 13:26:33 . 2009-05-13 21:56:16   118520   ------w-   C:\WINDOWS\system32\pxinsi64.exe
2009-07-22 11:31:15 . 2009-07-22 11:31:15   0   d-----w-   C:\Documents and Settings\PC NET\Application Data\SmartFTP
2009-07-22 11:31:03 . 2009-07-22 11:31:05   0   d-----w-   C:\Program Files\SmartFTP Client
2009-07-22 11:30:49 . 2009-07-22 11:30:49   0   d-----w-   C:\Program Files\SmartFTP Client 3.0 Setup Files
2009-07-22 11:14:00 . 2009-07-27 11:18:15   0   d-----w-   C:\Documents and Settings\PC NET\Application Data\FileZilla
2009-07-15 10:29:13 . 2009-07-15 10:29:13   0   d-----w-   C:\Documents and Settings\PC NET\Application Data\Apple Computer

.
((((((((((((((((((((((((((((((((((((((((   Find3M Report   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-08-08 18:51:55 . 2009-06-08 11:42:29   12386336   --sha-w-   C:\WINDOWS\system32\drivers\fidbox.dat
2009-08-08 18:51:14 . 2009-06-08 11:42:29   565792   --sha-w-   C:\WINDOWS\system32\drivers\fidbox2.dat
2009-08-08 18:50:21 . 2009-06-08 11:42:29   71840   --sha-w-   C:\WINDOWS\system32\drivers\fidbox2.idx
2009-08-08 18:50:20 . 2009-06-08 11:42:29   199232   --sha-w-   C:\WINDOWS\system32\drivers\fidbox.idx
2009-08-08 18:49:54 . 2009-06-08 15:19:20   0   d-----w-   C:\Documents and Settings\All Users\Application Data\Cybera Server
2009-08-08 18:49:12 . 2009-06-22 17:26:20   0   d-----w-   C:\Documents and Settings\PC NET\Application Data\Skype
2009-08-08 14:49:29 . 2009-06-22 17:27:27   0   d-----w-   C:\Documents and Settings\PC NET\Application Data\skypePM
2009-08-08 08:11:20 . 2009-06-08 11:42:29   0   d-----w-   C:\Documents and Settings\All Users\Application Data\Kaspersky Lab
2009-07-28 13:26:59 . 2009-06-14 09:24:05   0   d-----w-   C:\Program Files\Google
2009-07-09 11:11:53 . 2009-07-09 11:11:27   0   d-----w-   C:\Program Files\QuickTime
2009-07-09 11:11:26 . 2009-07-09 11:11:26   0   d-----w-   C:\Documents and Settings\All Users\Application Data\Apple Computer
2009-07-09 11:11:12 . 2009-07-09 11:11:11   0   d-----w-   C:\Program Files\Apple Software Update
2009-07-09 11:11:11 . 2009-07-09 11:11:11   0   d-----w-   C:\Documents and Settings\All Users\Application Data\Apple
2009-07-03 11:41:09 . 2009-07-03 11:41:09   0   d-----w-   C:\Program Files\Common Files\xing shared
2009-07-03 11:41:06 . 2009-07-03 11:40:53   0   d-----w-   C:\Program Files\Common Files\Real
2009-07-03 11:40:56 . 2009-07-03 11:40:56   499712   ----a-w-   C:\WINDOWS\system32\msvcp71.dll
2009-07-03 11:40:56 . 2009-06-08 12:40:34   348160   ----a-w-   C:\WINDOWS\system32\msvcr71.dll
2009-07-03 11:40:50 . 2009-07-03 11:40:50   0   d-----w-   C:\Program Files\Real
2009-06-26 16:18:54 . 2006-02-28 12:00:00   659456   ----a-w-   C:\WINDOWS\system32\wininet.dll
2009-06-26 16:18:52 . 2006-02-28 12:00:00   81920   ----a-w-   C:\WINDOWS\system32\ieencode.dll
2009-06-22 17:27:27 . 2009-06-22 17:27:27   56   ---ha-w-   C:\WINDOWS\system32\ezsidmv.dat
2009-06-22 17:26:11 . 2009-06-22 17:26:09   0   d-----r-   C:\Program Files\Skype
2009-06-22 17:26:11 . 2009-06-22 17:26:04   0   d-----w-   C:\Documents and Settings\All Users\Application Data\Skype
2009-06-22 17:26:10 . 2009-06-22 17:26:10   0   d-----w-   C:\Program Files\Common Files\Skype
2009-06-22 13:04:58 . 2009-06-22 13:04:58   0   d-----w-   C:\Program Files\PlayVix
2009-06-16 14:55:16 . 2006-02-28 12:00:00   82432   ----a-w-   C:\WINDOWS\system32\fontsub.dll
2009-06-16 14:55:16 . 2006-02-28 12:00:00   119808   ----a-w-   C:\WINDOWS\system32\t2embed.dll
2009-06-12 09:40:11 . 2009-06-08 16:48:56   0   d-----w-   C:\Program Files\The KMPlayer
2009-06-11 13:05:39 . 2009-06-11 13:05:38   0   d-----w-   C:\Documents and Settings\PC NET\Application Data\Media Player Classic
2009-06-10 01:00:40 . 2009-06-10 01:00:40   0   d-----w-   C:\Program Files\MSXML 4.0
2009-06-09 16:44:42 . 2009-06-08 10:39:48   76487   ----a-w-   C:\WINDOWS\pchealth\helpctr\OfflineCache\index.dat
2009-06-08 16:29:13 . 2009-06-08 16:29:33   410984   ----a-w-   C:\WINDOWS\system32\deploytk.dll
2009-06-08 16:28:53 . 2009-06-08 16:28:52   152576   ----a-w-   C:\Documents and Settings\PC NET\Application Data\Sun\Java\jre1.6.0_13\lzma.dll
2009-06-08 16:03:30 . 2007-10-31 11:41:16   112144   ----a-w-   C:\WINDOWS\system32\drivers\kl1.sys
2009-06-08 16:03:22 . 2009-06-08 11:42:46   94643   ----a-w-   C:\WINDOWS\system32\drivers\klick.dat
2009-06-08 16:03:22 . 2009-06-08 11:42:46   105395   ----a-w-   C:\WINDOWS\system32\drivers\klin.dat
2009-06-08 16:03:21 . 2009-06-08 16:03:21   25104   ----a-w-   C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\AutoPatches\kav6\7.0.1.321\ushata.dll
2009-06-08 16:03:21 . 2009-06-08 16:03:21   112144   ----a-w-   C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\AutoPatches\kav6\7.0.1.321\X86\kl1.sys
2009-06-08 16:03:21 . 2009-06-08 16:03:19   772624   ----a-w-   C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\AutoPatches\kav6\7.0.1.321\updater.dll
2009-06-08 16:03:16 . 2009-06-08 16:03:16   195344   ----a-w-   C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\AutoPatches\kav6\7.0.1.321\klif.sys
2009-06-08 16:03:16 . 2009-06-08 16:03:16   150032   ----a-w-   C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\AutoPatches\kav6\7.0.1.321\diffs.dll
2009-06-08 16:03:16 . 2009-06-08 16:03:16   109072   ----a-w-   C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\AutoPatches\kav6\7.0.1.321\dnsq.dll
2009-06-08 16:03:15 . 2009-06-08 16:03:15   354832   ----a-w-   C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP7\Data\Updater\Temporary Files\temporaryFolder\AutoPatches\kav6\7.0.1.321\ckahum.dll
2009-06-08 11:37:41 . 2009-06-08 11:17:14   63592   ----a-w-   C:\Documents and Settings\PC NET\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-06-08 11:33:32 . 2009-06-08 11:33:32   0   ----a-w-   C:\WINDOWS\nsreg.dat
2009-06-08 11:17:00 . 2009-06-08 11:17:00   0   ----a-w-   C:\WINDOWS\ativpsrm.bin
2009-06-08 11:12:01 . 2009-06-08 11:12:01   9158   ----a-r-   C:\Documents and Settings\PC NET\Application Data\Microsoft\Installer\{89DE67AD-08B8-4699-A55D-CA5C0AF82BF3}\ARPPRODUCTICON.exe
2009-06-08 11:02:25 . 2009-06-08 11:02:25   0   ----a-w-   C:\WINDOWS\system32\drivers\SET56.tmp
2009-06-08 11:00:51 . 2009-06-08 11:00:51   315392   ----a-w-   C:\WINDOWS\HideWin.exe
2009-06-08 10:37:39 . 2009-06-08 10:37:39   21640   ----a-w-   C:\WINDOWS\system32\emptyregdb.dat
2009-06-03 19:27:58 . 2006-02-28 12:00:00   1290752   ----a-w-   C:\WINDOWS\system32\quartz.dll
.

(((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe" [2007-09-20 13:35:10 202024]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-08-01 13:23:08 61440]
"NeroFilterCheck"="C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe" [2007-03-01 13:57:24 153136]
"NBKeyScan"="C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" [2007-09-20 07:51:46 1836328]
"SunJavaUpdateSched"="C:\Program Files\Java\jre6\bin\jusched.exe" [2009-06-08 16:29:14 148888]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-27 15:10:28 35696]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [2009-07-03 11:40:54 185896]
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2009-05-26 15:18:30 413696]
"winntR1"="C:\winnt_\winntR1.exe" [2009-08-05 10:33:34 645632]
"winntR2"="C:\winnt_\winntR2.exe" [2009-08-05 10:33:34 747520]
"winnt3"="C:\winnt_\winnt3.exe" [2009-08-05 10:33:34 1888256]
"winnt4"="C:\winnt_\winnt4.exe" [2009-08-05 10:33:38 669184]
"winnt5"="C:\winnt_\winnt5.exe" [2009-08-05 10:33:40 1462272]
"winnt6"="C:\winnt_\winnt6.exe" [2009-08-05 10:33:43 1450496]
"AVP"="C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe" [2007-12-17 22:43:32 227856]
"SkyTel"="SkyTel.EXE" - C:\WINDOWS\SkyTel.exe [2007-08-03 05:22:02 1826816]
"RTHDCPL"="RTHDCPL.EXE" - C:\WINDOWS\RTHDCPL.exe [2007-08-10 07:21:56 16384000]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"="C:\Program Files\MSN Messenger\msnmsgr.exe" [2007-01-19 10:54:56 5674352]

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
"FirewallOverride"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"=
"C:\\Program Files\\MSN Messenger\\livecall.exe"=
"C:\\Program Files\\Cybera Server\\cybserv.exe"=
"\\\\192.168.1.20\\D\\Medal of honor\\MOHAA.exe"=
"C:\\Program Files\\SmartFTP Client\\SmartFTP.exe"=
"C:\\Program Files\\Skype\\Phone\\Skype.exe"=

R3 AtiHdmiService;ATI Function Driver for HDMI Service;C:\WINDOWS\system32\drivers\AtiHdmi.sys [6/8/2009 1:11:34 PM 89600]
R3 klim5;Kaspersky Anti-Virus NDIS Filter;C:\WINDOWS\system32\drivers\klim5.sys [12/13/2007 1:28:40 PM 24592]
S2 gupdate1ca0f86fda365fd;Google Update Service (gupdate1ca0f86fda365fd);C:\Program Files\Google\Update\GoogleUpdate.exe [7/28/2009 3:26:17 PM 133104]
S3 FXDrv32;FXDrv32;\??\E:\FXDrv32.sys --> E:\FXDrv32.sys [?]
.
Contents of the 'Scheduled Tasks' folder

2009-07-09 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 10:34:12 . 2008-07-30 10:34:12]

2009-08-08 C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
- C:\Program Files\Google\Update\GoogleUpdate.exe [2009-07-28 13:26:17 . 2009-07-28 13:26:12]

2009-08-08 C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
- C:\Program Files\Google\Update\GoogleUpdate.exe [2009-07-28 13:26:17 . 2009-07-28 13:26:12]
.
.
------- Supplementary Scan -------
.
IE: E&xport to Microsoft Excel - C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
TCP: {3898B0CA-919E-4AE4-BF11-D634A278EA40} = 208.67.222.222,208.67.220.220
FF - ProfilePath - C:\Documents and Settings\PC NET\Application Data\Mozilla\Firefox\Profiles\cj1txby3.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com
FF - component: C:\Program Files\Mozilla Firefox\extensions\{B13721C7-F507-4982-B2E5-502A71474FED}\components\NPComponent.dll
FF - plugin: C:\Program Files\Google\Update\1.2.183.7\npGoogleOneClick8.dll
FF - plugin: C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll
FF - plugin: C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll
.

Iskopiraj mi deo loga kosi se nalazi ispod ovoga

Nema nista ispod toga....prekopirao sam sve sto je bilo

Skini ovaj fajl i raspakuj ga na desktop. Ugasi AV.
Levim klikom misa prevuci skriptu na ikonicu Combofixa, ako treba klikni Run



Kad se zavrsi skeniranje postavi mi novi log .

to ti je jedna vrsta virusa koji ima sposobnost se sam salje na sve kontatke koji postoje u tvom imeniku... ne mogu sad da se setim kako se tacno zove, al je vrlo bitno da nikada ne otvaras atachemente ako ne znas posiljaoca...