Prosím o kontrolu Logu (facebook vir)

Zpráva

#16 Příspěvek od **Caroprd111** » 20 črc 2011 20:05

Znovu spusťte OTL a do spodního bílého okna vložte následující skript. Poté klikněte na Opravit, PC se restartuje, výsledný log vložte sem.

Kód: Vybrat vše

:commands
[RESETHOSTS]
[EMPTYTEMP]
[EMPTYFLASH]
[CLEARALLRESTOREPOINTS]

:OTL
[2011/07/18 21:39:31 | 004,636,907 | ---- | C] () -- C:\windows\geoiplist
[2011/07/18 21:39:29 | 000,904,792 | ---- | C] () -- C:\windows\geoiplist.rar
[2011/07/18 21:38:06 | 005,589,370 | ---- | C] () -- C:\windows\phoenix.rar
[2011/07/18 21:38:06 | 001,075,284 | ---- | C] () -- C:\windows\rpcminer.rar
[2011/07/18 21:38:06 | 000,246,272 | ---- | C] () -- C:\windows\unrar.exe
[2011/07/18 21:38:06 | 000,182,617 | ---- | C] () -- C:\windows\ufa.rar
[2011/07/18 21:32:19 | 000,110,592 | ---- | C] () -- C:\windows\l1rezerv.exe
[2011/07/18 21:32:06 | 000,114,176 | ---- | C] () -- C:\windows\systemup.exe
[2011/07/18 21:30:17 | 000,000,000 | ---- | C] () -- C:\windows\loader2.exe_ok
[2011/07/18 21:30:12 | 000,000,179 | ---- | C] () -- C:\windows\info1
[2011/07/18 21:30:01 | 000,232,960 | ---- | C] () -- C:\windows\sysdriver32.exe
[2011/07/18 21:15:58 | 001,150,976 | ---- | C] () -- C:\windows\services32.exe
[2011/07/19 19:35:16 | 000,246,272 | ---- | M] () -- C:\windows\unrar.exe
[2011/07/19 19:35:15 | 000,114,176 | ---- | M] () -- C:\windows\systemup.exe
[2011/07/19 19:35:14 | 000,008,192 | ---- | M] () -- C:\windows\System32\srvany.exe
[2011/07/19 19:35:11 | 001,150,976 | ---- | M] () -- C:\windows\services32.exe
[2011/07/19 19:35:11 | 000,232,960 | ---- | M] () -- C:\windows\sysdriver32.exe
[2011/07/19 19:35:09 | 000,110,592 | ---- | M] () -- C:\windows\l1rezerv.exe
[2011/07/19 19:35:08 | 000,151,552 | ---- | M] () -- C:\windows\KMService.exe
[2011/07/18 21:39:29 | 000,904,792 | ---- | M] () -- C:\windows\geoiplist.rar
[2011/07/18 21:38:06 | 005,589,370 | ---- | M] () -- C:\windows\phoenix.rar
[2011/07/18 21:38:06 | 001,075,284 | ---- | M] () -- C:\windows\rpcminer.rar
[2011/07/18 21:38:06 | 000,182,617 | ---- | M] () -- C:\windows\ufa.rar
[2011/07/18 21:32:31 | 000,000,179 | ---- | M] () -- C:\windows\info1
[2011/07/18 21:30:17 | 000,000,000 | ---- | M] () -- C:\windows\loader2.exe_ok
[2011/07/17 03:24:20 | 004,636,907 | ---- | M] () -- C:\windows\geoiplist

tomasn127 · #17 Příspěvek od **tomasn127** » 21 črc 2011 13:55

All processes killed
========== COMMANDS ==========
C:\windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Public
->Temp folder emptied: 0 bytes

User: Verca
->Temp folder emptied: 9724417 bytes
->Temporary Internet Files folder emptied: 1926224 bytes
->Java cache emptied: 6816683 bytes
->FireFox cache emptied: 49044736 bytes
->Flash cache emptied: 16330 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 6176 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 64.00 mb

[EMPTYFLASH]

User: All Users

User: Default

User: Default User

User: Public

User: Verca
->Flash cache emptied: 0 bytes

Total Flash Files Cleaned = 0.00 mb

========== OTL ==========
C:\Windows\geoiplist moved successfully.
C:\Windows\geoiplist.rar moved successfully.
C:\Windows\phoenix.rar moved successfully.
C:\Windows\rpcminer.rar moved successfully.
C:\Windows\unrar.exe moved successfully.
C:\Windows\ufa.rar moved successfully.
C:\Windows\l1rezerv.exe moved successfully.
C:\Windows\systemup.exe moved successfully.
C:\Windows\loader2.exe_ok moved successfully.
C:\Windows\info1 moved successfully.
C:\Windows\sysdriver32.exe moved successfully.
C:\Windows\services32.exe moved successfully.
File C:\windows\unrar.exe not found.
File C:\windows\systemup.exe not found.
C:\Windows\System32\srvany.exe moved successfully.
File C:\windows\services32.exe not found.
File C:\windows\sysdriver32.exe not found.
File C:\windows\l1rezerv.exe not found.
C:\Windows\KMService.exe moved successfully.
File C:\windows\geoiplist.rar not found.
File C:\windows\phoenix.rar not found.
File C:\windows\rpcminer.rar not found.
File C:\windows\ufa.rar not found.
File C:\windows\info1 not found.
File C:\windows\loader2.exe_ok not found.
File C:\windows\geoiplist not found.

OTL by OldTimer - Version 3.2.26.1 log created on 07212011_143752

Files\Folders moved on Reboot...

Registry entries deleted on Reboot...

#18 Příspěvek od **Caroprd111** » 21 črc 2011 13:57

Jak se chová PC?

tomasn127 · #19 Příspěvek od **tomasn127** » 21 črc 2011 15:14

Vypadá to dobře zkoušel jsem prohlížet fotky, pustit film a internet přes wifi a všechno funguje. Tak jestli je to vše tak bych nainstaloval antivirus.

#20 Příspěvek od **Caroprd111** » 21 črc 2011 15:16

Antivirus můžete nainstalovat a poté mi sem vložte nový log z RSIT.

tomasn127 · #21 Příspěvek od **tomasn127** » 21 črc 2011 15:20

Dobře nainstaluju microsoft security essentials

a pak pošlu log

#22 Příspěvek od **Caroprd111** » 21 črc 2011 15:30

tomasn127 · #23 Příspěvek od **tomasn127** » 21 črc 2011 21:02

Logfile of random's system information tool 1.09 (written by random/random)
Run by Verca at 2011-07-21 21:58:59
Microsoft Windows 7 Starter
System drive C: has 65 GB (34%) free of 192 GB
Total RAM: 1013 MB (48% free)

=========Mozilla firefox=========

ProfilePath - C:\Users\Verca\AppData\Roaming\Mozilla\Firefox\Profiles\5df5zawj.default

prefs.js - "browser.startup.homepage" - "http://www.seznam.cz"
prefs.js - "extensions.enabledItems" - "{ea614400-e918-4741-9a97-7a972ff7c30b}:2.1.14, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.18"

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\windows\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\4.0.60129.0\npctrl.dll

C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files\Mozilla Firefox\components\
browser.xpt
browserdirprovider.dll
brwsrcmp.dll
components.list
FeedConverter.js
FeedProcessor.js
FeedWriter.js
fuelApplication.js
GPSDGeolocationProvider.js
jsconsole-clhandler.js
NetworkGeolocationProvider.js
nsAddonRepository.js
nsBadCertHandler.js
nsBlocklistService.js
nsBrowserContentHandler.js
nsBrowserGlue.js
nsContentDispatchChooser.js
nsContentPrefService.js
nsDefaultCLH.js
nsDownloadManagerUI.js
nsExtensionManager.js
nsFormAutoComplete.js
nsHandlerService.js
nsHelperAppDlg.js
nsINIProcessor.js
nsLivemarkService.js
nsLoginInfo.js
nsLoginManager.js
nsLoginManagerPrompter.js
nsMicrosummaryService.js
nsPlacesAutoComplete.js
nsPlacesDBFlush.js
nsPlacesTransactionsService.js
nsPrivateBrowsingService.js
nsProxyAutoConfig.js
nsSafebrowsingApplication.js
nsSearchService.js
nsSearchSuggestions.js
nsSessionStartup.js
nsSessionStore.js
nsSetDefaultBrowser.js
nsSidebar.js
nsTaggingService.js
nsTryToClose.js
nsUpdateService.js
nsUpdateServiceStub.js
nsUpdateTimerManager.js
nsUrlClassifierLib.js
nsUrlClassifierListManager.js
nsURLFormatter.js
nsWebHandlerApp.js
pluginGlue.js
storage-Legacy.js
storage-mozStorage.js
txEXSLTRegExFunctions.js
WebContentConverter.js

C:\Program Files\Mozilla Firefox\plugins\
np-mswmp.dll
npnul32.dll
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Program Files\Mozilla Firefox\searchplugins\
google.xml
jyxo-cz.xml
mall-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Users\Verca\AppData\Roaming\Mozilla\Firefox\Profiles\5df5zawj.default\extensions\
{ea614400-e918-4741-9a97-7a972ff7c30b}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-01-30 62376]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-03-09 41760]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-11-25 1594664]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-10-29 249064]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2010-05-18 9210400]
"RtHDVBg"=C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe [2010-05-18 1407520]
"Persistence"=C:\windows\system32\igfxpers.exe [2010-05-26 150552]
"IgfxTray"=C:\windows\system32\igfxtray.exe [2010-05-26 141848]
"IAAnotif"=C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [2009-06-04 186904]
"HotKeysCmds"=C:\windows\system32\hkcmd.exe [2010-05-26 173592]
"EnergyUtility"=C:\Program Files\Lenovo\Energy Management\utility.exe [2009-10-23 4114288]
"Energy Management"=C:\Program Files\Lenovo\Energy Management\Energy Management.exe [2009-10-23 5064560]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe Reader 10.0\Reader\Reader_sl.exe [2011-01-30 35736]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-11-15 932288]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2011-06-15 997920]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2011-01-26 15026056]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2011-01-05 1305408]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\windows\system32\igfxdev.dll [2010-05-26 218112]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\windows\system32\webcheck.dll [2010-03-09 203776]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MpfService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableSecureUIAPaths"=0
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"msacm.l3fhg"=mp3fhg.acm
"VIDC.XVID"=xvidvfw.dll
"VIDC.YV12"=yv12vfw.dll
"msacm.ac3acm"=ac3acm.acm
"VIDC.FFDS"=ff_vfw.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2011-07-21 16:33:44 ----D---- C:\Program Files\Microsoft Security Client
2011-07-21 16:32:08 ----D---- C:\3bdec09374c1a88d3160e61d
2011-07-21 14:37:52 ----D---- C:\_OTL
2011-07-20 14:50:41 ----D---- C:\rsit
2011-07-20 14:50:41 ----D---- C:\Program Files\trend micro
2011-07-19 19:55:59 ----A---- C:\ComboFix.txt
2011-07-19 19:53:40 ----SHD---- C:\$RECYCLE.BIN
2011-07-19 17:03:03 ----D---- C:\windows\temp
2011-07-19 16:50:24 ----A---- C:\windows\zip.exe
2011-07-19 16:50:24 ----A---- C:\windows\SWSC.exe
2011-07-19 16:50:24 ----A---- C:\windows\SWREG.exe
2011-07-19 16:50:24 ----A---- C:\windows\sed.exe
2011-07-19 16:50:24 ----A---- C:\windows\PEV.exe
2011-07-19 16:50:24 ----A---- C:\windows\NIRCMD.exe
2011-07-19 16:50:24 ----A---- C:\windows\MBR.exe
2011-07-19 16:50:24 ----A---- C:\windows\grep.exe
2011-07-19 16:50:15 ----D---- C:\windows\ERDNT
2011-07-19 16:50:04 ----D---- C:\Qoobox
2011-07-18 21:32:13 ----A---- C:\windows\ddh_iplist.txt
2011-07-18 21:30:56 ----A---- C:\windows\iecheck_iplist.txt
2011-07-18 21:30:36 ----A---- C:\windows\btc_client_iplist.txt
2011-07-18 21:30:06 ----A---- C:\windows\iplist.txt
2011-07-18 21:29:45 ----A---- C:\windows\front_ip_list.txt
2011-07-18 21:16:03 ----A---- C:\windows\winlog-ids.txt
2011-07-18 21:16:03 ----A---- C:\windows\winlog-dirs.txt
2011-07-14 14:56:22 ----AH---- C:\ProgramData\ezsidmv.dat
2011-07-13 23:45:08 ----D---- C:\Users\Verca\AppData\Roaming\skypePM

======List of files/folders modified in the last 1 month======

2011-07-21 21:59:43 ----D---- C:\windows\Prefetch
2011-07-21 21:55:32 ----D---- C:\Users\Verca\AppData\Roaming\Skype
2011-07-21 17:52:24 ----D---- C:\windows\system32\config
2011-07-21 17:34:07 ----D---- C:\windows\system32\catroot
2011-07-21 17:34:04 ----D---- C:\windows\winsxs
2011-07-21 17:33:29 ----D---- C:\windows\system32\catroot2
2011-07-21 17:08:30 ----SHD---- C:\System Volume Information
2011-07-21 16:34:26 ----SHD---- C:\windows\Installer
2011-07-21 16:34:11 ----D---- C:\windows\System32
2011-07-21 16:34:11 ----D---- C:\windows\inf
2011-07-21 16:34:11 ----A---- C:\windows\system32\PerfStringBackup.INI
2011-07-21 16:34:10 ----D---- C:\windows\system32\drivers
2011-07-21 16:33:52 ----SD---- C:\ProgramData\Microsoft
2011-07-21 16:33:44 ----RD---- C:\Program Files
2011-07-21 16:13:18 ----D---- C:\Program Files\Total Commander
2011-07-21 16:09:57 ----A---- C:\AtmApInit.txt
2011-07-21 14:38:07 ----D---- C:\Windows
2011-07-21 14:37:55 ----D---- C:\windows\system32\drivers\etc
2011-07-20 14:34:16 ----D---- C:\ProgramData\Microsoft Help
2011-07-20 14:34:13 ----RSD---- C:\windows\assembly
2011-07-20 14:34:03 ----D---- C:\Program Files\Microsoft.NET
2011-07-20 14:34:03 ----D---- C:\Program Files\Common Files\microsoft shared
2011-07-20 14:34:00 ----D---- C:\Program Files\Common Files
2011-07-20 14:33:57 ----RSD---- C:\windows\Fonts
2011-07-19 19:49:25 ----A---- C:\windows\system.ini
2011-07-19 19:41:06 ----D---- C:\windows\AppPatch
2011-07-18 21:30:45 ----D---- C:\Program Files\Mozilla Firefox
2011-07-14 14:56:56 ----D---- C:\windows\system32\wdi
2011-07-14 14:56:22 ----D---- C:\ProgramData

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\windows\system32\DRIVERS\iaStor.sys [2009-06-04 330264]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2009-07-14 173648]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\windows\system32\DRIVERS\dtsoftbus01.sys [2011-04-05 218176]
R1 MpFilter;Microsoft Malware Protection Driver; C:\windows\system32\DRIVERS\MpFilter.sys [2011-04-18 165648]
R1 MpKsl136721f3;MpKsl136721f3; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{4C2F6047-343E-4BB6-BE46-89B6D1D43D51}\MpKsl136721f3.sys [2011-07-21 28752]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R3 ACPIVPC;Lenovo Virtual Power Controller Driver; C:\windows\system32\DRIVERS\AcpiVpc.sys [2009-05-19 21520]
R3 BCM43XX;Broadcom 802.11 Network Adapter Driver; C:\windows\system32\DRIVERS\bcmwl6.sys [2009-11-05 2494968]
R3 Cam5607;Lenovo EasyCamera ; C:\windows\System32\Drivers\BisonC07.sys [2010-01-29 1313776]
R3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd32.sys [2010-05-26 4806144]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\windows\system32\drivers\RTKVHDA.sys [2010-05-18 3096992]
R3 MpNWMon;Microsoft Malware Protection Network Driver; C:\windows\system32\DRIVERS\MpNWMon.sys [2011-04-18 43392]
R3 NisDrv;Microsoft Network Inspection System; C:\windows\system32\DRIVERS\NisDrvWFP.sys [2011-04-27 65024]
R3 RTL8167;Realtek 8167 NT Driver; C:\windows\system32\DRIVERS\Rt86win7.sys [2009-08-20 189440]
R3 SynTP;Synaptics TouchPad Driver; C:\windows\system32\DRIVERS\SynTP.sys [2009-11-25 230576]
R3 wdmirror;wdmirror; C:\windows\system32\DRIVERS\WDMirror.sys [2009-07-16 11792]
S2 Parvdm;Parvdm; C:\windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\windows\system32\DRIVERS\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 Bridge0;Bridge0; C:\windows\system32\drivers\WDBridge.sys [2009-07-28 63240]
S3 BthEnum;Bluetooth Request Block Driver; C:\windows\system32\DRIVERS\BthEnum.sys [2009-07-14 34816]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
S3 BTHPORT;Bluetooth Port Driver; C:\windows\System32\Drivers\BTHport.sys [2009-07-14 392704]
S3 BTHUSB;Bluetooth Radio USB Driver; C:\windows\System32\Drivers\BTHUSB.sys [2009-07-14 58880]
S3 catchme;catchme; \??\C:\Users\Verca\AppData\Local\Temp\catchme.sys []
S3 CFcatchme;CFcatchme; \??\C:\Users\Verca\AppData\Local\Temp\CFcatchme.sys []
S3 k57nd60x;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0; C:\windows\system32\DRIVERS\k57nd60x.sys [2009-07-14 229888]
S3 netw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit; C:\windows\system32\DRIVERS\netw5v32.sys [2009-07-14 4231168]
S3 pciide;pciide; C:\windows\system32\DRIVERS\pciide.sys [2009-07-14 12368]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\windows\System32\Drivers\RtsUStor.sys [2009-09-30 175104]
S3 sisagp;SIS AGP Bus Filter; C:\windows\system32\DRIVERS\sisagp.sys [2009-07-14 52304]
S3 viaagp;VIA AGP Bus Filter; C:\windows\system32\DRIVERS\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 WimFltr;WimFltr; C:\windows\system32\DRIVERS\wimfltr.sys [2008-08-06 128104]
S3 WinUsb;WinUsb; C:\windows\system32\DRIVERS\WinUsb.sys [2009-07-14 34944]
S3 wsvd;wsvd; C:\windows\system32\DRIVERS\wsvd.sys [2009-07-21 81704]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 DvmMDES;DeviceVM Meta Data Export Service; C:\QSTART.SYS\config\DVMExportService.exe [2009-12-29 331776]
R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe [2009-06-04 354840]
R2 IGRS;IGRS; C:\Program Files\Lenovo\ReadyComm\common\IGRS.exe [2009-07-14 38152]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe [2011-04-27 11736]
R2 ReadyComm.DirectRouter;ReadyComm.DirectRouter; C:\windows\System32\IgrsSvcs.exe [2009-07-14 20992]
R3 NisSrv;@c:\Program Files\Microsoft Security Client\Antimalware\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe [2011-04-27 208944]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 Lenovo ReadyComm AppSvc;Lenovo ReadyComm AppSvc; C:\Program Files\Lenovo\ReadyComm\AppSvc.exe [2009-08-14 509192]
S3 Lenovo ReadyComm ConnSvc;Lenovo ReadyComm ConnSvc; C:\Program Files\Lenovo\ReadyComm\ConnSvc.exe [2009-09-22 579400]
S3 PS_MDP;ReadyComm Presentation Space Helper Service; C:\windows\System32\IgrsSvcs.exe [2009-07-14 20992]

-----------------EOF-----------------

#24 Příspěvek od **Caroprd111** » 21 črc 2011 21:03

Odinstalujte ComboFix přes:
Start >> Spustit, zkopírujte do okénka:

ComboFix /Uninstall

stiskněte Enter

Obrázek

Stáhněte T-Cleaner http://sweb.cz/Marinus/T-Cleaner.exe

Spusťte, pro potvrzení volby mačkejte klávesu A, Enter
Po použití program vymažte. Pozor, antiviry ho mohou falešně označit za vir.

Stáhněte TFC http://oldtimer.geekstogo.com/TFC.exe

Spusťte.
Klikněte na "Start". Potvrďte hlášku kliknutím na "Ok" (Bude následovat restart)

Stáhněte OTC http://oldtimer.geekstogo.com/OTC.exe

Spusťte.
Klikněte na "CleanUp!". Potvrďte hlášky kliknutím na "Yes" (Bude následovat restart)

Stáhněte Ccleaner http://viry.cz/forum/viewtopic.php?t=7478
Obrázek

Záložka Čistič
[*] Dejte analyzovat, po dokončení dejte Spustit Ccleaner.

Obrázek

Záložka Registry
[*] Klikněte na Hledej problémy, po dokončení klikněte na Opravit problémy, zálohu dělat nemusíte, potom dejte Opravit všechny problémy.
Obrázek

OK

Zavřít[/list]

Jinak je log v pořádku.

tomasn127 · #25 Příspěvek od **tomasn127** » 22 črc 2011 06:16

Já jsem to udělal blbě combofix jsem hodil do koše a vymazal. Ted mi začal antivirák hlásit hrozbu Backdoor:win32/delf.kv to uložím do karantény ? a odkaz na T-cleaner.exe nefunguje.

tomasn127 · #26 Příspěvek od **tomasn127** » 22 črc 2011 06:20

Tak antivirák už to sám odstanil.

#27 Příspěvek od **Caroprd111** » 22 črc 2011 11:08

Vložte mi sem ještě nový log z RSIT.

tomasn127 · #28 Příspěvek od **tomasn127** » 22 črc 2011 11:54

Logfile of random's system information tool 1.09 (written by random/random)
Run by Verca at 2011-07-22 12:51:00
Microsoft Windows 7 Starter
System drive C: has 66 GB (34%) free of 192 GB
Total RAM: 1013 MB (44% free)

=========Mozilla firefox=========

ProfilePath - C:\Users\Verca\AppData\Roaming\Mozilla\Firefox\Profiles\5df5zawj.default

prefs.js - "browser.startup.homepage" - "http://www.seznam.cz"
prefs.js - "extensions.enabledItems" - "{ea614400-e918-4741-9a97-7a972ff7c30b}:2.1.14, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.18"

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\windows\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll

C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files\Mozilla Firefox\components\
browser.xpt
browserdirprovider.dll
brwsrcmp.dll
components.list
FeedConverter.js
FeedProcessor.js
FeedWriter.js
fuelApplication.js
GPSDGeolocationProvider.js
jsconsole-clhandler.js
NetworkGeolocationProvider.js
nsAddonRepository.js
nsBadCertHandler.js
nsBlocklistService.js
nsBrowserContentHandler.js
nsBrowserGlue.js
nsContentDispatchChooser.js
nsContentPrefService.js
nsDefaultCLH.js
nsDownloadManagerUI.js
nsExtensionManager.js
nsFormAutoComplete.js
nsHandlerService.js
nsHelperAppDlg.js
nsINIProcessor.js
nsLivemarkService.js
nsLoginInfo.js
nsLoginManager.js
nsLoginManagerPrompter.js
nsMicrosummaryService.js
nsPlacesAutoComplete.js
nsPlacesDBFlush.js
nsPlacesTransactionsService.js
nsPrivateBrowsingService.js
nsProxyAutoConfig.js
nsSafebrowsingApplication.js
nsSearchService.js
nsSearchSuggestions.js
nsSessionStartup.js
nsSessionStore.js
nsSetDefaultBrowser.js
nsSidebar.js
nsTaggingService.js
nsTryToClose.js
nsUpdateService.js
nsUpdateServiceStub.js
nsUpdateTimerManager.js
nsUrlClassifierLib.js
nsUrlClassifierListManager.js
nsURLFormatter.js
nsWebHandlerApp.js
pluginGlue.js
storage-Legacy.js
storage-mozStorage.js
txEXSLTRegExFunctions.js
WebContentConverter.js

C:\Program Files\Mozilla Firefox\plugins\
np-mswmp.dll
npnul32.dll
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Program Files\Mozilla Firefox\searchplugins\
google.xml
jyxo-cz.xml
mall-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Users\Verca\AppData\Roaming\Mozilla\Firefox\Profiles\5df5zawj.default\extensions\
{ea614400-e918-4741-9a97-7a972ff7c30b}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-01-30 62376]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-03-09 41760]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-11-25 1594664]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-10-29 249064]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2010-05-18 9210400]
"RtHDVBg"=C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe [2010-05-18 1407520]
"Persistence"=C:\windows\system32\igfxpers.exe [2010-05-26 150552]
"IgfxTray"=C:\windows\system32\igfxtray.exe [2010-05-26 141848]
"IAAnotif"=C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [2009-06-04 186904]
"HotKeysCmds"=C:\windows\system32\hkcmd.exe [2010-05-26 173592]
"EnergyUtility"=C:\Program Files\Lenovo\Energy Management\utility.exe [2009-10-23 4114288]
"Energy Management"=C:\Program Files\Lenovo\Energy Management\Energy Management.exe [2009-10-23 5064560]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe Reader 10.0\Reader\Reader_sl.exe [2011-01-30 35736]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-11-15 932288]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2011-06-15 997920]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2011-01-26 15026056]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2011-01-05 1305408]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\windows\system32\igfxdev.dll [2010-05-26 218112]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\windows\system32\webcheck.dll [2010-03-09 203776]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MpfService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableSecureUIAPaths"=0
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"msacm.l3fhg"=mp3fhg.acm
"VIDC.XVID"=xvidvfw.dll
"VIDC.YV12"=yv12vfw.dll
"msacm.ac3acm"=ac3acm.acm
"VIDC.FFDS"=ff_vfw.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2011-07-22 06:57:09 ----A---- C:\windows\system32\mshtmled.dll
2011-07-22 06:57:08 ----A---- C:\windows\system32\iertutil.dll
2011-07-22 06:57:07 ----A---- C:\windows\system32\ieui.dll
2011-07-22 06:57:06 ----A---- C:\windows\system32\jscript9.dll
2011-07-22 06:57:06 ----A---- C:\windows\system32\jscript.dll
2011-07-22 06:57:02 ----A---- C:\windows\system32\mshtml.dll
2011-07-22 06:57:02 ----A---- C:\windows\system32\ieframe.dll
2011-07-22 06:57:00 ----A---- C:\windows\system32\urlmon.dll
2011-07-21 17:40:07 ----A---- C:\windows\system32\drivers\srv2.sys
2011-07-21 17:40:07 ----A---- C:\windows\system32\drivers\srv.sys
2011-07-21 17:40:06 ----A---- C:\windows\system32\drivers\srvnet.sys
2011-07-21 17:39:17 ----A---- C:\windows\system32\ntkrnlpa.exe
2011-07-21 17:39:15 ----A---- C:\windows\system32\ntoskrnl.exe
2011-07-21 17:38:14 ----A---- C:\windows\system32\kernel32.dll
2011-07-21 17:38:13 ----A---- C:\windows\system32\winsrv.dll
2011-07-21 17:38:13 ----A---- C:\windows\system32\KernelBase.dll
2011-07-21 17:38:12 ----AH---- C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2011-07-21 17:38:12 ----A---- C:\windows\system32\conhost.exe
2011-07-21 17:38:08 ----AH---- C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2011-07-21 17:38:08 ----AH---- C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll
2011-07-21 17:38:08 ----AH---- C:\windows\system32\api-ms-win-core-string-l1-1-0.dll
2011-07-21 17:38:07 ----AH---- C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2011-07-21 17:38:07 ----AH---- C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll
2011-07-21 17:38:07 ----AH---- C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2011-07-21 17:38:07 ----AH---- C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2011-07-21 17:38:07 ----AH---- C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2011-07-21 17:38:07 ----AH---- C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll
2011-07-21 17:38:07 ----AH---- C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll
2011-07-21 17:38:06 ----AH---- C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2011-07-21 17:38:06 ----AH---- C:\windows\system32\api-ms-win-core-io-l1-1-0.dll
2011-07-21 17:38:06 ----AH---- C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2011-07-21 17:38:06 ----AH---- C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll
2011-07-21 17:38:06 ----AH---- C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll
2011-07-21 17:38:06 ----AH---- C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2011-07-21 17:38:06 ----AH---- C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2011-07-21 17:38:06 ----AH---- C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2011-07-21 17:38:05 ----AH---- C:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2011-07-21 17:38:05 ----AH---- C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2011-07-21 17:38:05 ----AH---- C:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2011-07-21 17:38:05 ----AH---- C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2011-07-21 17:38:05 ----AH---- C:\windows\system32\api-ms-win-core-file-l1-1-0.dll
2011-07-21 17:38:05 ----AH---- C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll
2011-07-21 17:38:05 ----AH---- C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2011-07-21 17:38:04 ----AH---- C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll
2011-07-21 17:38:04 ----AH---- C:\windows\system32\api-ms-win-core-console-l1-1-0.dll
2011-07-21 17:37:04 ----A---- C:\windows\system32\drivers\tcpip.sys
2011-07-21 17:37:03 ----A---- C:\windows\system32\drivers\afd.sys
2011-07-21 17:36:34 ----A---- C:\windows\system32\mfc42.dll
2011-07-21 17:36:33 ----A---- C:\windows\system32\mfc42u.dll
2011-07-21 17:35:49 ----A---- C:\windows\system32\oleaut32.dll
2011-07-21 17:35:41 ----A---- C:\windows\system32\dnsrslvr.dll
2011-07-21 17:35:41 ----A---- C:\windows\system32\dnsapi.dll
2011-07-21 17:35:40 ----A---- C:\windows\system32\dnscacheugc.exe
2011-07-21 17:35:37 ----A---- C:\windows\system32\atmfd.dll
2011-07-21 17:35:36 ----A---- C:\windows\system32\atmlib.dll
2011-07-21 17:35:27 ----A---- C:\windows\system32\umpnpmgr.dll
2011-07-21 17:35:25 ----A---- C:\windows\system32\drivers\dfsc.sys
2011-07-21 17:35:12 ----A---- C:\windows\system32\FXSCOVER.exe
2011-07-21 17:35:08 ----A---- C:\windows\system32\inetcomm.dll
2011-07-21 17:34:58 ----A---- C:\windows\system32\win32k.sys
2011-07-21 17:34:52 ----A---- C:\windows\system32\drivers\bowser.sys
2011-07-21 17:34:32 ----A---- C:\windows\system32\poqexec.exe
2011-07-21 17:34:28 ----A---- C:\windows\system32\drivers\mrxsmb10.sys
2011-07-21 17:34:27 ----A---- C:\windows\system32\drivers\mrxsmb20.sys
2011-07-21 17:34:27 ----A---- C:\windows\system32\drivers\mrxsmb.sys
2011-07-21 16:33:44 ----D---- C:\Program Files\Microsoft Security Client
2011-07-21 14:37:52 ----D---- C:\_OTL
2011-07-20 14:50:41 ----D---- C:\rsit
2011-07-20 14:50:41 ----D---- C:\Program Files\trend micro
2011-07-19 19:55:59 ----A---- C:\ComboFix.txt
2011-07-19 19:53:40 ----SHD---- C:\$RECYCLE.BIN
2011-07-19 17:03:03 ----D---- C:\windows\temp
2011-07-19 16:50:24 ----A---- C:\windows\zip.exe
2011-07-19 16:50:24 ----A---- C:\windows\SWSC.exe
2011-07-19 16:50:24 ----A---- C:\windows\SWREG.exe
2011-07-19 16:50:24 ----A---- C:\windows\sed.exe
2011-07-19 16:50:24 ----A---- C:\windows\PEV.exe
2011-07-19 16:50:24 ----A---- C:\windows\NIRCMD.exe
2011-07-19 16:50:24 ----A---- C:\windows\MBR.exe
2011-07-19 16:50:24 ----A---- C:\windows\grep.exe
2011-07-19 16:50:15 ----D---- C:\windows\ERDNT
2011-07-19 16:50:04 ----D---- C:\Qoobox
2011-07-18 21:32:13 ----A---- C:\windows\ddh_iplist.txt
2011-07-18 21:30:56 ----A---- C:\windows\iecheck_iplist.txt
2011-07-18 21:30:36 ----A---- C:\windows\btc_client_iplist.txt
2011-07-18 21:30:06 ----A---- C:\windows\iplist.txt
2011-07-18 21:29:45 ----A---- C:\windows\front_ip_list.txt
2011-07-18 21:16:03 ----A---- C:\windows\winlog-ids.txt
2011-07-18 21:16:03 ----A---- C:\windows\winlog-dirs.txt
2011-07-14 14:56:22 ----AH---- C:\ProgramData\ezsidmv.dat
2011-07-13 23:45:08 ----D---- C:\Users\Verca\AppData\Roaming\skypePM

======List of files/folders modified in the last 1 month======

2011-07-22 12:50:27 ----D---- C:\windows\Prefetch
2011-07-22 12:48:32 ----D---- C:\Users\Verca\AppData\Roaming\Skype
2011-07-22 12:48:01 ----D---- C:\windows\system32\config
2011-07-22 12:47:36 ----A---- C:\AtmApInit.txt
2011-07-22 07:22:23 ----D---- C:\windows\winsxs
2011-07-22 07:15:32 ----D---- C:\windows\Microsoft.NET
2011-07-22 07:15:29 ----RSD---- C:\windows\assembly
2011-07-22 07:12:28 ----D---- C:\windows\System32
2011-07-22 07:12:28 ----D---- C:\windows\inf
2011-07-22 07:12:28 ----A---- C:\windows\system32\PerfStringBackup.INI
2011-07-22 07:05:39 ----D---- C:\windows\system32\drivers
2011-07-22 07:05:35 ----D---- C:\Program Files\Internet Explorer
2011-07-22 07:04:16 ----D---- C:\windows\system32\catroot
2011-07-22 07:02:43 ----D---- C:\windows\system32\catroot2
2011-07-22 07:02:16 ----SHD---- C:\windows\Installer
2011-07-22 06:59:24 ----D---- C:\Program Files\Microsoft Silverlight
2011-07-21 22:12:12 ----SHD---- C:\System Volume Information
2011-07-21 16:33:52 ----SD---- C:\ProgramData\Microsoft
2011-07-21 16:33:44 ----RD---- C:\Program Files
2011-07-21 16:13:18 ----D---- C:\Program Files\Total Commander
2011-07-21 14:38:07 ----D---- C:\Windows
2011-07-21 14:37:55 ----D---- C:\windows\system32\drivers\etc
2011-07-20 14:34:16 ----D---- C:\ProgramData\Microsoft Help
2011-07-20 14:34:03 ----D---- C:\Program Files\Microsoft.NET
2011-07-20 14:34:03 ----D---- C:\Program Files\Common Files\microsoft shared
2011-07-20 14:34:00 ----D---- C:\Program Files\Common Files
2011-07-20 14:33:57 ----RSD---- C:\windows\Fonts
2011-07-19 19:49:25 ----A---- C:\windows\system.ini
2011-07-19 19:41:06 ----D---- C:\windows\AppPatch
2011-07-18 21:30:45 ----D---- C:\Program Files\Mozilla Firefox
2011-07-14 14:56:56 ----D---- C:\windows\system32\wdi
2011-07-14 14:56:22 ----D---- C:\ProgramData

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\windows\system32\DRIVERS\iaStor.sys [2009-06-04 330264]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2009-07-14 173648]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\windows\system32\DRIVERS\dtsoftbus01.sys [2011-04-05 218176]
R1 MpFilter;Microsoft Malware Protection Driver; C:\windows\system32\DRIVERS\MpFilter.sys [2011-04-18 165648]
R1 MpKsl1fa4a605;MpKsl1fa4a605; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{4C2F6047-343E-4BB6-BE46-89B6D1D43D51}\MpKsl1fa4a605.sys [2011-07-22 28752]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R3 ACPIVPC;Lenovo Virtual Power Controller Driver; C:\windows\system32\DRIVERS\AcpiVpc.sys [2009-05-19 21520]
R3 BCM43XX;Broadcom 802.11 Network Adapter Driver; C:\windows\system32\DRIVERS\bcmwl6.sys [2009-11-05 2494968]
R3 Cam5607;Lenovo EasyCamera ; C:\windows\System32\Drivers\BisonC07.sys [2010-01-29 1313776]
R3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd32.sys [2010-05-26 4806144]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\windows\system32\drivers\RTKVHDA.sys [2010-05-18 3096992]
R3 MpNWMon;Microsoft Malware Protection Network Driver; C:\windows\system32\DRIVERS\MpNWMon.sys [2011-04-18 43392]
R3 NisDrv;Microsoft Network Inspection System; C:\windows\system32\DRIVERS\NisDrvWFP.sys [2011-04-27 65024]
R3 RTL8167;Realtek 8167 NT Driver; C:\windows\system32\DRIVERS\Rt86win7.sys [2009-08-20 189440]
R3 SynTP;Synaptics TouchPad Driver; C:\windows\system32\DRIVERS\SynTP.sys [2009-11-25 230576]
R3 wdmirror;wdmirror; C:\windows\system32\DRIVERS\WDMirror.sys [2009-07-16 11792]
S1 MpKsl136721f3;MpKsl136721f3; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{4C2F6047-343E-4BB6-BE46-89B6D1D43D51}\MpKsl136721f3.sys []
S2 Parvdm;Parvdm; C:\windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\windows\system32\DRIVERS\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 Bridge0;Bridge0; C:\windows\system32\drivers\WDBridge.sys [2009-07-28 63240]
S3 BthEnum;Bluetooth Request Block Driver; C:\windows\system32\DRIVERS\BthEnum.sys [2009-07-14 34816]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
S3 BTHPORT;Bluetooth Port Driver; C:\windows\System32\Drivers\BTHport.sys [2009-07-14 392704]
S3 BTHUSB;Bluetooth Radio USB Driver; C:\windows\System32\Drivers\BTHUSB.sys [2009-07-14 58880]
S3 catchme;catchme; \??\C:\Users\Verca\AppData\Local\Temp\catchme.sys []
S3 CFcatchme;CFcatchme; \??\C:\Users\Verca\AppData\Local\Temp\CFcatchme.sys []
S3 k57nd60x;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0; C:\windows\system32\DRIVERS\k57nd60x.sys [2009-07-14 229888]
S3 netw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit; C:\windows\system32\DRIVERS\netw5v32.sys [2009-07-14 4231168]
S3 pciide;pciide; C:\windows\system32\DRIVERS\pciide.sys [2009-07-14 12368]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\windows\System32\Drivers\RtsUStor.sys [2009-09-30 175104]
S3 sisagp;SIS AGP Bus Filter; C:\windows\system32\DRIVERS\sisagp.sys [2009-07-14 52304]
S3 viaagp;VIA AGP Bus Filter; C:\windows\system32\DRIVERS\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 WimFltr;WimFltr; C:\windows\system32\DRIVERS\wimfltr.sys [2008-08-06 128104]
S3 WinUsb;WinUsb; C:\windows\system32\DRIVERS\WinUsb.sys [2009-07-14 34944]
S3 wsvd;wsvd; C:\windows\system32\DRIVERS\wsvd.sys [2009-07-21 81704]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 DvmMDES;DeviceVM Meta Data Export Service; C:\QSTART.SYS\config\DVMExportService.exe [2009-12-29 331776]
R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe [2009-06-04 354840]
R2 IGRS;IGRS; C:\Program Files\Lenovo\ReadyComm\common\IGRS.exe [2009-07-14 38152]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe [2011-04-27 11736]
R2 ReadyComm.DirectRouter;ReadyComm.DirectRouter; C:\windows\System32\IgrsSvcs.exe [2009-07-14 20992]
R3 NisSrv;@c:\Program Files\Microsoft Security Client\Antimalware\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe [2011-04-27 208944]
S3 Lenovo ReadyComm AppSvc;Lenovo ReadyComm AppSvc; C:\Program Files\Lenovo\ReadyComm\AppSvc.exe [2009-08-14 509192]
S3 Lenovo ReadyComm ConnSvc;Lenovo ReadyComm ConnSvc; C:\Program Files\Lenovo\ReadyComm\ConnSvc.exe [2009-09-22 579400]
S3 PS_MDP;ReadyComm Presentation Space Helper Service; C:\windows\System32\IgrsSvcs.exe [2009-07-14 20992]

-----------------EOF-----------------

#29 Příspěvek od **Caroprd111** » 22 črc 2011 15:25

Stáhněte a uložte na plochu http://jpshortstuff.247fixes.com/SystemLook.exe nebo http://images.malwareremoval.com/jpshor ... emLook.exe

Dvojklikem na ikonu program spusťte.
Do bílého okénka zkopírujte text z následujícího bílého pole.

Kód: Vybrat vše

:dir
c:\ProgramData\Microsoft\Microsoft Antimalware

Klikněte na Look, po dokončení skenu na Vás vyskočí log, zkopírujte ho sem.
Log se také bude nacházet na ploše v souboru SystemLook.txt

tomasn127 · #30 Příspěvek od **tomasn127** » 22 črc 2011 15:50

SystemLook 04.09.10 by jpshortstuff
Log created at 16:49 on 22/07/2011 by Verca
Administrator - Elevation successful

========== dir ==========

c:\ProgramData\Microsoft\Microsoft Antimalware - Parameters: "(none)"

---Files---
IMpServiceEDB4FA23-53B8-4AFA-8C5D-99752CCA7094.lock --ah--- 0 bytes [10:47 22/07/2011] [10:47 22/07/2011]

---Folders---
Definition Updates d------ [14:33 21/07/2011]
LocalCopy d------ [14:33 21/07/2011]
Network Inspection System d------ [14:34 21/07/2011]
Quarantine d------ [14:33 21/07/2011]
Scans d------ [14:33 21/07/2011]
Support d------ [14:33 21/07/2011]

-= EOF =-

VIRY.CZ

Prosím o kontrolu Logu (facebook vir)

Re: Prosím o kontrolu Logu (facebook vir)

Re: Prosím o kontrolu Logu (facebook vir)

Re: Prosím o kontrolu Logu (facebook vir)

Re: Prosím o kontrolu Logu (facebook vir)

Re: Prosím o kontrolu Logu (facebook vir)

Re: Prosím o kontrolu Logu (facebook vir)

Re: Prosím o kontrolu Logu (facebook vir)

Re: Prosím o kontrolu Logu (facebook vir)

Re: Prosím o kontrolu Logu (facebook vir)

Re: Prosím o kontrolu Logu (facebook vir)

Re: Prosím o kontrolu Logu (facebook vir)

Re: Prosím o kontrolu Logu (facebook vir)

Re: Prosím o kontrolu Logu (facebook vir)

Re: Prosím o kontrolu Logu (facebook vir)

Re: Prosím o kontrolu Logu (facebook vir)