jrccxppu.exe has stopped working

[Dule-DJ]

Šta me sve neće snaći

Deinstalirao sam avast Home i taman što sam krenuo da instaliram avast 5 IS pojavilo mi se ovo:

Problem signature:
Problem Event Name: APPCRASH
Application Name: jrccxppu.exe
Application Version: 0.0.0.0
Application Timestamp: 4b6ae8d7
Fault Module Name: jrccxppu.exe
Fault Module Version: 0.0.0.0
Fault Module Timestamp: 4b6ae8d7
Exception Code: c0000005
Exception Offset: 0000c702
OS Version: 6.1.7600.2.0.0.256.1
Locale ID: 1033
Additional Information 1: 0a9e
Additional Information 2: 0a9e372d3b4ad19135b953a78882e789
Additional Information 3: 0a9e
Additional Information 4: 0a9e372d3b4ad19135b953a78882e789

Read our privacy statement online:
http://go.microsoft.com/fwlink/?link...8&clcid=0x0409

If the online privacy statement is not available, please read our privacy statement offline:
C:\Windows\system32\en-US\erofflps.txt

Restartovao sam komp ali bez efekta...



A kasnije se pojavilo i ovo:
Problem Event Name: APPCRASH
Application Name: lsass.exe
Application Version: 0.0.0.0
Application Timestamp: 4b6ae8d7
Fault Module Name: app_dll.dll
Fault Module Version: 0.0.0.0
Fault Module Timestamp: 4b6da94d
Exception Code: c0000005
Exception Offset: 0000156e
OS Version: 6.1.7600.2.0.0.256.1
Locale ID: 1033
Additional Information 1: 0a9e
Additional Information 2: 0a9e372d3b4ad19135b953a78882e789
Additional Information 3: 0a9e
Additional Information 4: 0a9e372d3b4ad19135b953a78882e789

Read our privacy statement online:
http://go.microsoft.com/fwlink/?link...8&clcid=0x0409

If the online privacy statement is not available, please read our privacy statement offline:
C:\Windows\system32\en-US\erofflps.txt


Komp je počeo da se ponaša jako čudno, nestaju mi gadgeti i moram ih ručno vraćati svaki put po restartovanju, i neprestano se vrti onaj krug oko strelice miša
Inače koristim Windows 7...

[Dule-DJ]

Na Google-u nema ama baš ništa o ovome
Pomozite molim vas

Čak mi je i net usporio

[Dule-DJ]

Еvo loga:

Malwarebytes' Anti-Malware 1.44
Database version: 3556
Windows 6.1.7600
Internet Explorer 8.0.7600.16385

09-Feb-10 04:43:29 PM
mbam-log-2010-02-09 (16-43-29).txt

Scan type: Quick Scan
Objects scanned: 104791
Time elapsed: 5 minute(s), 50 second(s)

Memory Processes Infected: 1
Memory Modules Infected: 0
Registry Keys Infected: 1
Registry Values Infected: 0
Registry Data Items Infected: 4
Folders Infected: 0
Files Infected: 9

Memory Processes Infected:
C:\Windows\System32\sdra64.exe (Spyware.Zbot) -> Unloaded process successfully.

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Servic es\GoogleUpdateBeta (Backdoor.IRCBot) -> Quarantined and deleted successfully.

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Spyware.Zbot) -> Data: c:\windows\system32\sdra64.exe -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Spyware.Zbot) -> Data: system32\sdra64.exe -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Policies\System\DisableRegistryTools (Hijack.Regedit) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Hijack.Userinit) -> Bad: (C:\Windows\system32\userinit.exe,C:\Windows\syste m32\sdra64.exe,) Good: (Userinit.exe) -> Quarantined and deleted successfully.

Folders Infected:
(No malicious items detected)

Files Infected:
C:\pnxkkllb.exe (Worm.Palevo) -> Quarantined and deleted successfully.
C:\Windows\system32\Drivers\lzbholke.sys (Rootkit.Agent) -> Quarantined and deleted successfully.
C:\Windows\Temp\wmpscfgs.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Users\-----\AppData\Local\Temp\wmpscfgs.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Program Files\Internet Explorer\wmpscfgs.exe (Trojan.Agent) -> Delete on reboot.
C:\lsass.exe (Trojan.Agent) -> Delete on reboot.
C:\Windows\System32\sdra64.exe (Spyware.Zbot) -> Quarantined and deleted successfully.
C:\Windows\Tasks\Acrobat Update.job (Malware.Trace) -> Quarantined and deleted successfully.
C:\Program Files\Adobe\acrotray .exe (Trojan.Agent) -> Delete on reboot.


P.S. Windows Firewall se takođe isključuje nakon restarta i moram da ga ručno aktiviram

Jao šta me snađe

[Sass Drake]

Pokreni ovo u Safe Mode-u.

[doctor]

Pokreni ComboFix sa desktopa i ugasi AV pre toga