vejdou zobrazovat www
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
vejdou zobrazovat www
zdravim mam problem se zobrazovanim webu v prohlizeci a cely pc je zasekany
prosim o kontrolu logu
Logfile of random's system information tool 1.09 (written by random/random)
Run by Administrator at 2011-08-17 16:47:03
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 220 GB (92%) free of 238 GB
Total RAM: 1471 MB (69% free)
HijackThis download failed
=========Mozilla firefox=========
ProfilePath - C:\Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\jfenu7kz.default
"jqs@sun.com"=C:\Program Files\Java\jre6\lib\deploy\jqs\ff
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@google.com/npPicasa3,version=3.0.0]
"Description"=Picasa3 plugin
"Path"=C:\Documents and Settings\Administrator\Plocha\Picasa3\npPicasa3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll
C:\Program Files\Mozilla Firefox\extensions\
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA}
C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
C:\Program Files\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml
C:\Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\jfenu7kz.default\extensions\
{FC5BAC7D-D696-4ba6-B913-CF8F000C33DF}
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-05-16 1164680]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-05-03 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2011-05-03 79648]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2005-10-10 7286784]
"nwiz"=nwiz.exe /install []
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2005-10-10 86016]
"SoundMAXPnP"=C:\Program Files\Analog Devices\Core\smax4pnp.exe [2005-08-11 925696]
"SoundMAX"=C:\Program Files\Analog Devices\SoundMAX\Smax4.exe [2005-09-07 716800]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2011-01-07 253672]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2011-06-03 2734184]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"Startw3i"=C:\Program Files\PC Speed Maximizer\Startw3i.exe []
"InstallIQUpdater"=C:\Program Files\W3i\InstallIQUpdater\InstallIQUpdater.exe [2011-08-09 1176064]
C:\Documents and Settings\Administrator\Nabídka Start\Programy\Po spuštění
fliptoast.lnk - C:\Program Files\Fliptoast\fliptoast.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=1
"DisableRegistryTools"=1
"EnableLUA"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
======List of files/folders created in the last 1 month======
2011-08-17 16:47:08 ----D---- C:\Program Files\trend micro
2011-08-17 16:47:03 ----D---- C:\rsit
2011-08-11 13:06:43 ----D---- C:\Program Files\W3i
2011-08-10 10:59:10 ----D---- C:\Program Files\ESET
2011-08-10 10:59:10 ----D---- C:\Documents and Settings\All Users\Data aplikací\ESET
2011-08-10 00:34:27 ----HDC---- C:\WINDOWS\$NtUninstallKB2567680$
2011-08-10 00:34:22 ----HDC---- C:\WINDOWS\$NtUninstallKB2536276-v2$
2011-08-10 00:34:18 ----HDC---- C:\WINDOWS\$NtUninstallKB2570222$
2011-08-10 00:31:43 ----HDC---- C:\WINDOWS\$NtUninstallKB2566454$
2011-08-10 00:31:38 ----HDC---- C:\WINDOWS\$NtUninstallKB2562937$
2011-08-05 18:18:45 ----RHD---- C:\Documents and Settings\Administrator\Data aplikací\Windupdt
2011-08-05 15:21:31 ----D---- C:\Documents and Settings\Administrator\Data aplikací\RegistryKeys
2011-08-05 14:51:52 ----D---- C:\Program Files\Fliptoast
2011-08-02 21:39:04 ----A---- C:\WINDOWS\WORDPAD.INI
2011-07-26 08:07:49 ----HDC---- C:\WINDOWS\$NtUninstallKB941569$
2011-07-26 08:07:39 ----HDC---- C:\WINDOWS\$NtUninstallKB929399$
2011-07-26 08:07:30 ----HDC---- C:\WINDOWS\$NtUninstallKB939683$
2011-07-26 08:07:15 ----HDC---- C:\WINDOWS\$NtUninstallKB954154_WM11$
2011-07-26 07:04:30 ----A---- C:\WINDOWS\system32\muweb.dll
2011-07-26 07:04:30 ----A---- C:\WINDOWS\system32\mucltui.dll
2011-07-25 19:36:37 ----D---- C:\Program Files\Microsoft Silverlight
2011-07-25 12:54:49 ----N---- C:\WINDOWS\system32\spmsg.dll
2011-07-25 12:54:48 ----HDC---- C:\WINDOWS\$NtUninstallMSCompPackV1$
2011-07-25 12:54:43 ----A---- C:\WINDOWS\system32\wmpns.dll
2011-07-25 12:54:37 ----D---- C:\Program Files\Windows Media Connect 2
2011-07-25 12:54:31 ----HDC---- C:\WINDOWS\$NtUninstallwmp11$
2011-07-25 12:54:01 ----HDC---- C:\WINDOWS\$NtUninstallWMFDist11$
2011-07-25 12:53:43 ----D---- C:\WINDOWS\system32\drivers\UMDF
2011-07-25 12:53:41 ----HDC---- C:\WINDOWS\$NtUninstallWudf01000$
2011-07-24 19:20:33 ----D---- C:\WINDOWS\Sun
2011-07-21 15:43:35 ----D---- C:\WINDOWS\system32\appmgmt
2011-07-21 15:40:58 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2011-07-21 15:40:57 ----D---- C:\Program Files\Adobe
2011-07-21 15:40:56 ----D---- C:\Program Files\Common Files\Adobe AIR
2011-07-21 15:39:14 ----D---- C:\Program Files\Free Offers from Freeze.com
2011-07-21 15:38:56 ----SHD---- C:\WINDOWS\system32\AI_RecycleBin
2011-07-21 15:38:54 ----D---- C:\Documents and Settings\All Users\Data aplikací\W3i
======List of files/folders modified in the last 1 month======
2011-08-17 16:47:08 ----RD---- C:\Program Files
2011-08-17 16:47:04 ----D---- C:\WINDOWS\Prefetch
2011-08-17 16:42:25 ----D---- C:\WINDOWS\system32\CatRoot2
2011-08-17 16:34:11 ----D---- C:\WINDOWS\Temp
2011-08-17 16:34:02 ----D---- C:\WINDOWS\system32\inetsrv
2011-08-17 14:45:07 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-08-17 14:44:15 ----D---- C:\WINDOWS\system32\Restore
2011-08-17 11:37:16 ----D---- C:\WINDOWS\pchealth
2011-08-13 13:15:03 ----HD---- C:\WINDOWS\inf
2011-08-11 13:06:44 ----SHD---- C:\WINDOWS\Installer
2011-08-10 15:46:52 ----D---- C:\WINDOWS
2011-08-10 15:10:56 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Skype
2011-08-10 15:06:41 ----RD---- C:\Program Files\Skype
2011-08-10 15:06:36 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2011-08-10 11:00:59 ----D---- C:\WINDOWS\system32\drivers
2011-08-10 00:37:18 ----D---- C:\WINDOWS\system32
2011-08-10 00:34:28 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-08-10 00:34:25 ----A---- C:\WINDOWS\imsins.BAK
2011-08-10 00:34:22 ----HD---- C:\WINDOWS\$hf_mig$
2011-08-10 00:32:40 ----A---- C:\WINDOWS\system32\MRT.exe
2011-08-10 00:32:05 ----D---- C:\Program Files\Internet Explorer
2011-08-09 18:22:29 ----D---- C:\Documents and Settings\Administrator\Data aplikací\skypePM
2011-08-08 09:11:16 ----D---- C:\WINDOWS\Registration
2011-08-05 15:23:00 ----SD---- C:\WINDOWS\Tasks
2011-07-25 19:36:41 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2011-07-25 17:48:15 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Mozilla
2011-07-25 17:47:58 ----D---- C:\Program Files\Mozilla Firefox
2011-07-25 17:08:54 ----A---- C:\WINDOWS\system32\mshtml.dll
2011-07-25 13:13:38 ----D---- C:\WINDOWS\system32\CatRoot
2011-07-25 13:08:19 ----D---- C:\Program Files\Windows Media Player
2011-07-25 12:54:43 ----A---- C:\WINDOWS\win.ini
2011-07-25 12:54:35 ----D---- C:\WINDOWS\Help
2011-07-25 12:53:43 ----D---- C:\WINDOWS\system32\Logfiles
2011-07-22 10:01:35 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype Extras
2011-07-21 16:34:49 ----SD---- C:\Documents and Settings\Administrator\Data aplikací\Microsoft
2011-07-21 16:33:11 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-07-21 15:40:58 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Adobe
2011-07-21 15:40:56 ----D---- C:\Program Files\Common Files
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 nvata;nvata; C:\WINDOWS\system32\DRIVERS\nvata.sys [2005-08-12 98432]
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI NEC FireWarden; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-14 61696]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2011-06-03 118104]
R1 epfwtdir;epfwtdir; C:\WINDOWS\system32\DRIVERS\epfwtdir.sys [2011-06-03 103112]
R2 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2011-06-03 154136]
R3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\ADIHdAud.sys [2005-08-11 141312]
R3 AEAudioService;AEAudio Service; C:\WINDOWS\system32\drivers\AEAudio.sys [2005-08-11 127872]
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-14 60800]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-25 12160]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-14 61824]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2005-10-10 3530432]
R3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS\system32\DRIVERS\nvnetbus.sys [2005-07-30 12928]
R3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2008-04-14 20992]
R3 SenFiltService;SenFilt Service; C:\WINDOWS\system32\drivers\Senfilt.sys [2005-08-11 393088]
R3 usbstor;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
S3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\WINDOWS\system32\DRIVERS\NVENETFD.sys [2005-07-30 34048]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-14 15104]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 IISADMIN;Správa služby IIS; C:\WINDOWS\system32\inetsrv\inetinfo.exe [2008-04-14 15872]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2011-05-03 153376]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2005-10-10 131139]
R2 W3SVC;Publikování na webu; C:\WINDOWS\system32\inetsrv\inetinfo.exe [2008-04-14 15872]
S2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2011-06-03 974944]
S3 ESHASRV;ESET SHA Service; C:\Program Files\ESET\ESET NOD32 Antivirus\EShaSrv.exe [2011-06-03 183904]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-02-08 136120]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
-----------------EOF-----------------
prosim o kontrolu logu
Logfile of random's system information tool 1.09 (written by random/random)
Run by Administrator at 2011-08-17 16:47:03
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 220 GB (92%) free of 238 GB
Total RAM: 1471 MB (69% free)
HijackThis download failed
=========Mozilla firefox=========
ProfilePath - C:\Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\jfenu7kz.default
"jqs@sun.com"=C:\Program Files\Java\jre6\lib\deploy\jqs\ff
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@google.com/npPicasa3,version=3.0.0]
"Description"=Picasa3 plugin
"Path"=C:\Documents and Settings\Administrator\Plocha\Picasa3\npPicasa3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll
C:\Program Files\Mozilla Firefox\extensions\
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA}
C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
C:\Program Files\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml
C:\Documents and Settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\jfenu7kz.default\extensions\
{FC5BAC7D-D696-4ba6-B913-CF8F000C33DF}
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-05-16 1164680]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-05-03 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2011-05-03 79648]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2005-10-10 7286784]
"nwiz"=nwiz.exe /install []
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2005-10-10 86016]
"SoundMAXPnP"=C:\Program Files\Analog Devices\Core\smax4pnp.exe [2005-08-11 925696]
"SoundMAX"=C:\Program Files\Analog Devices\SoundMAX\Smax4.exe [2005-09-07 716800]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2011-01-07 253672]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2011-06-03 2734184]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"Startw3i"=C:\Program Files\PC Speed Maximizer\Startw3i.exe []
"InstallIQUpdater"=C:\Program Files\W3i\InstallIQUpdater\InstallIQUpdater.exe [2011-08-09 1176064]
C:\Documents and Settings\Administrator\Nabídka Start\Programy\Po spuštění
fliptoast.lnk - C:\Program Files\Fliptoast\fliptoast.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\{1a3e09be-1e45-494b-9174-d7385b45bbf5}]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=1
"DisableRegistryTools"=1
"EnableLUA"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
======List of files/folders created in the last 1 month======
2011-08-17 16:47:08 ----D---- C:\Program Files\trend micro
2011-08-17 16:47:03 ----D---- C:\rsit
2011-08-11 13:06:43 ----D---- C:\Program Files\W3i
2011-08-10 10:59:10 ----D---- C:\Program Files\ESET
2011-08-10 10:59:10 ----D---- C:\Documents and Settings\All Users\Data aplikací\ESET
2011-08-10 00:34:27 ----HDC---- C:\WINDOWS\$NtUninstallKB2567680$
2011-08-10 00:34:22 ----HDC---- C:\WINDOWS\$NtUninstallKB2536276-v2$
2011-08-10 00:34:18 ----HDC---- C:\WINDOWS\$NtUninstallKB2570222$
2011-08-10 00:31:43 ----HDC---- C:\WINDOWS\$NtUninstallKB2566454$
2011-08-10 00:31:38 ----HDC---- C:\WINDOWS\$NtUninstallKB2562937$
2011-08-05 18:18:45 ----RHD---- C:\Documents and Settings\Administrator\Data aplikací\Windupdt
2011-08-05 15:21:31 ----D---- C:\Documents and Settings\Administrator\Data aplikací\RegistryKeys
2011-08-05 14:51:52 ----D---- C:\Program Files\Fliptoast
2011-08-02 21:39:04 ----A---- C:\WINDOWS\WORDPAD.INI
2011-07-26 08:07:49 ----HDC---- C:\WINDOWS\$NtUninstallKB941569$
2011-07-26 08:07:39 ----HDC---- C:\WINDOWS\$NtUninstallKB929399$
2011-07-26 08:07:30 ----HDC---- C:\WINDOWS\$NtUninstallKB939683$
2011-07-26 08:07:15 ----HDC---- C:\WINDOWS\$NtUninstallKB954154_WM11$
2011-07-26 07:04:30 ----A---- C:\WINDOWS\system32\muweb.dll
2011-07-26 07:04:30 ----A---- C:\WINDOWS\system32\mucltui.dll
2011-07-25 19:36:37 ----D---- C:\Program Files\Microsoft Silverlight
2011-07-25 12:54:49 ----N---- C:\WINDOWS\system32\spmsg.dll
2011-07-25 12:54:48 ----HDC---- C:\WINDOWS\$NtUninstallMSCompPackV1$
2011-07-25 12:54:43 ----A---- C:\WINDOWS\system32\wmpns.dll
2011-07-25 12:54:37 ----D---- C:\Program Files\Windows Media Connect 2
2011-07-25 12:54:31 ----HDC---- C:\WINDOWS\$NtUninstallwmp11$
2011-07-25 12:54:01 ----HDC---- C:\WINDOWS\$NtUninstallWMFDist11$
2011-07-25 12:53:43 ----D---- C:\WINDOWS\system32\drivers\UMDF
2011-07-25 12:53:41 ----HDC---- C:\WINDOWS\$NtUninstallWudf01000$
2011-07-24 19:20:33 ----D---- C:\WINDOWS\Sun
2011-07-21 15:43:35 ----D---- C:\WINDOWS\system32\appmgmt
2011-07-21 15:40:58 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2011-07-21 15:40:57 ----D---- C:\Program Files\Adobe
2011-07-21 15:40:56 ----D---- C:\Program Files\Common Files\Adobe AIR
2011-07-21 15:39:14 ----D---- C:\Program Files\Free Offers from Freeze.com
2011-07-21 15:38:56 ----SHD---- C:\WINDOWS\system32\AI_RecycleBin
2011-07-21 15:38:54 ----D---- C:\Documents and Settings\All Users\Data aplikací\W3i
======List of files/folders modified in the last 1 month======
2011-08-17 16:47:08 ----RD---- C:\Program Files
2011-08-17 16:47:04 ----D---- C:\WINDOWS\Prefetch
2011-08-17 16:42:25 ----D---- C:\WINDOWS\system32\CatRoot2
2011-08-17 16:34:11 ----D---- C:\WINDOWS\Temp
2011-08-17 16:34:02 ----D---- C:\WINDOWS\system32\inetsrv
2011-08-17 14:45:07 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-08-17 14:44:15 ----D---- C:\WINDOWS\system32\Restore
2011-08-17 11:37:16 ----D---- C:\WINDOWS\pchealth
2011-08-13 13:15:03 ----HD---- C:\WINDOWS\inf
2011-08-11 13:06:44 ----SHD---- C:\WINDOWS\Installer
2011-08-10 15:46:52 ----D---- C:\WINDOWS
2011-08-10 15:10:56 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Skype
2011-08-10 15:06:41 ----RD---- C:\Program Files\Skype
2011-08-10 15:06:36 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2011-08-10 11:00:59 ----D---- C:\WINDOWS\system32\drivers
2011-08-10 00:37:18 ----D---- C:\WINDOWS\system32
2011-08-10 00:34:28 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-08-10 00:34:25 ----A---- C:\WINDOWS\imsins.BAK
2011-08-10 00:34:22 ----HD---- C:\WINDOWS\$hf_mig$
2011-08-10 00:32:40 ----A---- C:\WINDOWS\system32\MRT.exe
2011-08-10 00:32:05 ----D---- C:\Program Files\Internet Explorer
2011-08-09 18:22:29 ----D---- C:\Documents and Settings\Administrator\Data aplikací\skypePM
2011-08-08 09:11:16 ----D---- C:\WINDOWS\Registration
2011-08-05 15:23:00 ----SD---- C:\WINDOWS\Tasks
2011-07-25 19:36:41 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2011-07-25 17:48:15 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Mozilla
2011-07-25 17:47:58 ----D---- C:\Program Files\Mozilla Firefox
2011-07-25 17:08:54 ----A---- C:\WINDOWS\system32\mshtml.dll
2011-07-25 13:13:38 ----D---- C:\WINDOWS\system32\CatRoot
2011-07-25 13:08:19 ----D---- C:\Program Files\Windows Media Player
2011-07-25 12:54:43 ----A---- C:\WINDOWS\win.ini
2011-07-25 12:54:35 ----D---- C:\WINDOWS\Help
2011-07-25 12:53:43 ----D---- C:\WINDOWS\system32\Logfiles
2011-07-22 10:01:35 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype Extras
2011-07-21 16:34:49 ----SD---- C:\Documents and Settings\Administrator\Data aplikací\Microsoft
2011-07-21 16:33:11 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-07-21 15:40:58 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Adobe
2011-07-21 15:40:56 ----D---- C:\Program Files\Common Files
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 nvata;nvata; C:\WINDOWS\system32\DRIVERS\nvata.sys [2005-08-12 98432]
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI NEC FireWarden; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-14 61696]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2011-06-03 118104]
R1 epfwtdir;epfwtdir; C:\WINDOWS\system32\DRIVERS\epfwtdir.sys [2011-06-03 103112]
R2 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2011-06-03 154136]
R3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:\WINDOWS\system32\drivers\ADIHdAud.sys [2005-08-11 141312]
R3 AEAudioService;AEAudio Service; C:\WINDOWS\system32\drivers\AEAudio.sys [2005-08-11 127872]
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-14 60800]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-25 12160]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-14 61824]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2005-10-10 3530432]
R3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS\system32\DRIVERS\nvnetbus.sys [2005-07-30 12928]
R3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2008-04-14 20992]
R3 SenFiltService;SenFilt Service; C:\WINDOWS\system32\drivers\Senfilt.sys [2005-08-11 393088]
R3 usbstor;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
S3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\WINDOWS\system32\DRIVERS\NVENETFD.sys [2005-07-30 34048]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-14 15104]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 IISADMIN;Správa služby IIS; C:\WINDOWS\system32\inetsrv\inetinfo.exe [2008-04-14 15872]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2011-05-03 153376]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2005-10-10 131139]
R2 W3SVC;Publikování na webu; C:\WINDOWS\system32\inetsrv\inetinfo.exe [2008-04-14 15872]
S2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2011-06-03 974944]
S3 ESHASRV;ESET SHA Service; C:\Program Files\ESET\ESET NOD32 Antivirus\EShaSrv.exe [2011-06-03 183904]
S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-02-08 136120]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
-----------------EOF-----------------
Re: vejdou zobrazovat www
Zdravim a pekny den preji
Na ten NOD32 si hodlate kupovat licenci nebo jej jen jednou za mesic preisntalujete a pojedete znovu trial 
Re: vejdou zobrazovat www
mel sem tam licencovanou 4 ale pritelkyne to prejinstalovala a takhle to dopadlo chtel sem to spravit ale nemuzu uz ani spustit ovladaci panely
Re: vejdou zobrazovat www
- Ukoncete vsechny programy
- Pokud pouzivate Win Vista ci W7, kliknete na RogueKiller pravym a dejte Run As Administrator ci Spustit jako spravce
- Zvolte moznost 2 a potvrte enterem
- Utilita provede svou cinnost a da log - ten sem vlozte
- Nyni znovu, ale zvolte moznost 3 a pote jeste 4 - logy opet vlozte
Re: vejdou zobrazovat www
ale ja mam opravdu platnou zakoupenou licenci
tady sou ty logy
RogueKiller V5.3.1 [08/06/2011] by Tigzy
contact at http://www.sur-la-toile.com
mail: tigzyRK<at>gmail<dot>com
Feedback: http://www.sur-la-toile.com/discussion- ... ntees.html
Operating System: Windows XP (5.1.2600 Service Pack 3) 32 bits version
Started in : Normal mode
User: Administrator [Admin rights]
Mode: Remove -- Date : 08/17/2011 18:08:26
Bad processes: 0
Registry Entries: 3
[HJPOL] HKCU\[...]\System : DisableTaskMgr (1) -> DELETED
[HJPOL] HKCU\[...]\System : DisableRegistryTools (1) -> DELETED
[HJ] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED (0)
HOSTS File:
127.0.0.1 localhost
Finished : << RKreport[1].txt >>
RKreport[1].txt
tady sou ty logy
RogueKiller V5.3.1 [08/06/2011] by Tigzy
contact at http://www.sur-la-toile.com
mail: tigzyRK<at>gmail<dot>com
Feedback: http://www.sur-la-toile.com/discussion- ... ntees.html
Operating System: Windows XP (5.1.2600 Service Pack 3) 32 bits version
Started in : Normal mode
User: Administrator [Admin rights]
Mode: Remove -- Date : 08/17/2011 18:08:26
Bad processes: 0
Registry Entries: 3
[HJPOL] HKCU\[...]\System : DisableTaskMgr (1) -> DELETED
[HJPOL] HKCU\[...]\System : DisableRegistryTools (1) -> DELETED
[HJ] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED (0)
HOSTS File:
127.0.0.1 localhost
Finished : << RKreport[1].txt >>
RKreport[1].txt
Re: vejdou zobrazovat www
RogueKiller V5.3.1 [08/06/2011] by Tigzy
contact at http://www.sur-la-toile.com
mail: tigzyRK<at>gmail<dot>com
Feedback: http://www.sur-la-toile.com/discussion- ... ntees.html
Operating System: Windows XP (5.1.2600 Service Pack 3) 32 bits version
Started in : Normal mode
User: Administrator [Admin rights]
Mode: HOSTSFix -- Date : 08/17/2011 18:09:06
Bad processes: 0
HOSTS File:
127.0.0.1 localhost
Resetted HOSTS:
127.0.0.1 localhost
Finished : << RKreport[2].txt >>
RKreport[1].txt ; RKreport[2].txt
contact at http://www.sur-la-toile.com
mail: tigzyRK<at>gmail<dot>com
Feedback: http://www.sur-la-toile.com/discussion- ... ntees.html
Operating System: Windows XP (5.1.2600 Service Pack 3) 32 bits version
Started in : Normal mode
User: Administrator [Admin rights]
Mode: HOSTSFix -- Date : 08/17/2011 18:09:06
Bad processes: 0
HOSTS File:
127.0.0.1 localhost
Resetted HOSTS:
127.0.0.1 localhost
Finished : << RKreport[2].txt >>
RKreport[1].txt ; RKreport[2].txt
Re: vejdou zobrazovat www
RogueKiller V5.3.1 [08/06/2011] by Tigzy
contact at http://www.sur-la-toile.com
mail: tigzyRK<at>gmail<dot>com
Feedback: http://www.sur-la-toile.com/discussion- ... ntees.html
Operating System: Windows XP (5.1.2600 Service Pack 3) 32 bits version
Started in : Normal mode
User: Administrator [Admin rights]
Mode: ProxyFix -- Date : 08/17/2011 18:09:32
Bad processes: 0
Registry Entries: 0
Finished : << RKreport[3].txt >>
RKreport[1].txt ; RKreport[2].txt ; RKreport[3].txt
contact at http://www.sur-la-toile.com
mail: tigzyRK<at>gmail<dot>com
Feedback: http://www.sur-la-toile.com/discussion- ... ntees.html
Operating System: Windows XP (5.1.2600 Service Pack 3) 32 bits version
Started in : Normal mode
User: Administrator [Admin rights]
Mode: ProxyFix -- Date : 08/17/2011 18:09:32
Bad processes: 0
Registry Entries: 0
Finished : << RKreport[3].txt >>
RKreport[1].txt ; RKreport[2].txt ; RKreport[3].txt
Re: vejdou zobrazovat www
PROSIM CTETE DUKLADNE NAVOD - TATO UTILITA MA VELKOU SCHOPNOST MAZAT A JE NUTNE JI APLIKOVAT JEN NA DOPORUCENI, JINAK VAM MUZE JIT SYSTEM DO KYTEK
- Vypnete vsechny rezidentni bezpecnostní programy - firewally, antiviry, antispywary apod.
- Pokud mate Win XP spustte pod uctem Spravce\Administratora
- Pokud mate Win Vista ci Win 7, kliknete na Combofix pravym a dejte Run As Administrator ci Spustit jako spravce
- Ihned po startu se zobrazi stranka s licencnim ujednanim, pokracujte kliknutim na Ano
- Pokud Vam CF nabidne instalaci Konzoly pro zotaveni, tak souhlaste
- Dale postupujte dle pokynu, behem scanu nechte PC naprosto v klidu - nespoustejte zadne aplikace a neklikejte do zobrazujiciho se okna
- Scan by mel trvat cca 10 min, ale pokud bude PC hodne zaneseno, muze se cas prodlouzit
- Po dokonceni skenu a pripadnem restartu CF zobrazi log, pripadne jej najdete zde C:\ComboFix.txt, jeho obsah sem vlozte
- Detailni postup vc. obrazku mate zde http://www.bleepingcomputer.com/combofi ... t-combofix
Re: vejdou zobrazovat www
tady to je
ComboFix 11-08-17.02 - Administrator 17.08.2011 19:21:24.1.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.1471.1147 [GMT 2:00]
Spuštěný z: c:\documents and settings\Administrator\Plocha\ComboFix.exe
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\Administrator\Recent\Thumbs.db
c:\windows\system32\Cache
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-07-17 do 2011-08-17 )))))))))))))))))))))))))))))))
.
.
2011-08-17 16:49 . 2011-08-17 16:50 -------- d-----w- c:\windows\LastGood
2011-08-17 14:47 . 2011-08-17 14:47 -------- d-----w- c:\program files\trend micro
2011-08-17 14:47 . 2011-08-17 14:48 -------- d-----w- C:\rsit
2011-08-11 11:06 . 2011-08-11 11:06 -------- d-----w- c:\program files\W3i
2011-08-10 09:10 . 2011-08-10 09:10 -------- d-----w- c:\documents and settings\LocalService\Local Settings\Data aplikací\ESET
2011-08-10 09:10 . 2011-08-10 09:10 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Data aplikací\ESET
2011-08-05 16:18 . 2011-08-10 09:10 -------- d--h--r- c:\documents and settings\Administrator\Data aplikací\Windupdt
2011-08-05 13:21 . 2011-08-05 13:21 -------- d-----w- c:\documents and settings\Administrator\Data aplikací\RegistryKeys
2011-08-05 12:51 . 2011-08-05 13:23 -------- d-----w- c:\program files\Fliptoast
2011-07-26 05:04 . 2009-08-06 17:23 274288 ----a-w- c:\windows\system32\mucltui.dll
2011-07-26 05:04 . 2009-08-06 17:23 215920 ----a-w- c:\windows\system32\muweb.dll
2011-07-25 20:05 . 2008-04-14 06:52 26624 ----a-w- c:\documents and settings\LocalService\Data aplikací\Microsoft\UPnP Device Host\upnphost\udhisapi.dll
2011-07-25 17:36 . 2011-07-25 17:36 -------- d-----w- c:\program files\Microsoft Silverlight
2011-07-25 11:13 . 2011-07-25 11:13 -------- d-----w- c:\documents and settings\NetworkService\Plocha
2011-07-25 11:08 . 2011-07-25 11:08 -------- d-----w- c:\documents and settings\LocalService\Plocha
2011-07-25 10:54 . 2008-04-14 06:52 221184 ----a-w- c:\windows\system32\wmpns.dll
2011-07-25 10:54 . 2011-07-25 10:54 -------- d-----w- c:\program files\Windows Media Connect 2
2011-07-25 10:53 . 2011-07-25 10:54 -------- d-----w- c:\windows\system32\drivers\UMDF
2011-07-24 17:20 . 2011-07-24 17:20 -------- d-----w- c:\windows\Sun
2011-07-21 13:40 . 2011-07-21 13:40 -------- d-----w- c:\program files\Common Files\Adobe AIR
2011-07-21 13:40 . 2011-07-21 13:40 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Data aplikací\Adobe
2011-07-21 13:39 . 2011-08-05 12:51 -------- d-----w- c:\program files\Free Offers from Freeze.com
2011-07-21 13:38 . 2011-08-11 11:06 -------- d-sh--w- c:\windows\system32\AI_RecycleBin
2011-07-21 13:38 . 2011-07-21 13:38 -------- d-----w- c:\documents and settings\All Users\Data aplikací\W3i
2011-07-18 20:06 . 2011-07-18 20:06 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Data aplikací\Identities
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-07-15 13:29 . 2008-04-13 22:47 456320 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2011-07-08 14:02 . 2008-04-13 22:27 10496 ----a-w- c:\windows\system32\drivers\ndistapi.sys
2011-06-24 14:10 . 2011-05-02 17:28 139656 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2011-06-23 18:31 . 2008-04-14 06:52 916480 ----a-w- c:\windows\system32\wininet.dll
2011-06-23 18:31 . 2008-04-14 06:52 1469440 ------w- c:\windows\system32\inetcpl.cpl
2011-06-23 18:31 . 2008-04-14 06:51 43520 ------w- c:\windows\system32\licmgr10.dll
2011-06-23 12:05 . 2008-04-14 05:50 385024 ------w- c:\windows\system32\html.iec
2011-06-20 17:44 . 2008-04-14 06:52 293376 ----a-w- c:\windows\system32\winsrv.dll
2011-06-06 11:35 . 2008-04-14 05:45 1858944 ----a-w- c:\windows\system32\win32k.sys
2011-07-08 07:29 . 2011-07-25 15:47 142296 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"InstallIQUpdater"="c:\program files\W3i\InstallIQUpdater\InstallIQUpdater.exe" [2011-08-09 1176064]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2005-10-10 7286784]
"nwiz"="nwiz.exe" [2005-10-10 1519616]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2005-10-10 86016]
"SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2005-08-11 925696]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-01-07 253672]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
c:\documents and settings\Administrator\Nabˇdka Start\Programy\Po spuçtŘnˇ\
fliptoast.lnk - c:\program files\Fliptoast\fliptoast.exe [N/A]
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
.
R4 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys --> c:\windows\system32\DRIVERS\ehdrv.sys [?]
R4 epfwtdir;epfwtdir;c:\windows\system32\DRIVERS\epfwtdir.sys --> c:\windows\system32\DRIVERS\epfwtdir.sys [?]
.
.
------- Doplňkový sken -------
.
uDefault_Search_URL = hxxp://www.google.com/ie
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
TCP: DhcpNameServer = 88.146.248.2 88.146.248.1
FF - ProfilePath - c:\documents and settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\jfenu7kz.default\
FF - prefs.js: network.proxy.type - 0
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
HKCU-Run-Startw3i - c:\program files\PC Speed Maximizer\Startw3i.exe
AddRemove-Picasa 3 - c:\documents and settings\Administrator\Plocha\Picasa3\Uninstall.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-08-17 19:24
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-776561741-1177238915-1417001333-500\Software\Microsoft\Internet Explorer\User Preferences]
@Denied: (2) (Administrator)
"88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,f9,fa,b8,d0,f6,c8,c6,45,b5,53,c7,\
"2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,f9,fa,b8,d0,f6,c8,c6,45,b5,53,c7,\
"6256FFB019F8FDFBD36745B06F4540E9AEAF222A25"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,f9,fa,b8,d0,f6,c8,c6,45,b5,53,c7,\
.
Celkový čas: 2011-08-17 19:25:48
ComboFix-quarantined-files.txt 2011-08-17 17:25
.
Před spuštěním: Volných bajtů: 236 157 181 952
Po spuštění: Volných bajtů: 237 561 118 720
.
WindowsXP-KB310994-SP2-Pro-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect
.
- - End Of File - - 3F00BA62F96AD308CE32F3EE5B2F7B63
ComboFix 11-08-17.02 - Administrator 17.08.2011 19:21:24.1.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.1471.1147 [GMT 2:00]
Spuštěný z: c:\documents and settings\Administrator\Plocha\ComboFix.exe
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\Administrator\Recent\Thumbs.db
c:\windows\system32\Cache
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-07-17 do 2011-08-17 )))))))))))))))))))))))))))))))
.
.
2011-08-17 16:49 . 2011-08-17 16:50 -------- d-----w- c:\windows\LastGood
2011-08-17 14:47 . 2011-08-17 14:47 -------- d-----w- c:\program files\trend micro
2011-08-17 14:47 . 2011-08-17 14:48 -------- d-----w- C:\rsit
2011-08-11 11:06 . 2011-08-11 11:06 -------- d-----w- c:\program files\W3i
2011-08-10 09:10 . 2011-08-10 09:10 -------- d-----w- c:\documents and settings\LocalService\Local Settings\Data aplikací\ESET
2011-08-10 09:10 . 2011-08-10 09:10 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Data aplikací\ESET
2011-08-05 16:18 . 2011-08-10 09:10 -------- d--h--r- c:\documents and settings\Administrator\Data aplikací\Windupdt
2011-08-05 13:21 . 2011-08-05 13:21 -------- d-----w- c:\documents and settings\Administrator\Data aplikací\RegistryKeys
2011-08-05 12:51 . 2011-08-05 13:23 -------- d-----w- c:\program files\Fliptoast
2011-07-26 05:04 . 2009-08-06 17:23 274288 ----a-w- c:\windows\system32\mucltui.dll
2011-07-26 05:04 . 2009-08-06 17:23 215920 ----a-w- c:\windows\system32\muweb.dll
2011-07-25 20:05 . 2008-04-14 06:52 26624 ----a-w- c:\documents and settings\LocalService\Data aplikací\Microsoft\UPnP Device Host\upnphost\udhisapi.dll
2011-07-25 17:36 . 2011-07-25 17:36 -------- d-----w- c:\program files\Microsoft Silverlight
2011-07-25 11:13 . 2011-07-25 11:13 -------- d-----w- c:\documents and settings\NetworkService\Plocha
2011-07-25 11:08 . 2011-07-25 11:08 -------- d-----w- c:\documents and settings\LocalService\Plocha
2011-07-25 10:54 . 2008-04-14 06:52 221184 ----a-w- c:\windows\system32\wmpns.dll
2011-07-25 10:54 . 2011-07-25 10:54 -------- d-----w- c:\program files\Windows Media Connect 2
2011-07-25 10:53 . 2011-07-25 10:54 -------- d-----w- c:\windows\system32\drivers\UMDF
2011-07-24 17:20 . 2011-07-24 17:20 -------- d-----w- c:\windows\Sun
2011-07-21 13:40 . 2011-07-21 13:40 -------- d-----w- c:\program files\Common Files\Adobe AIR
2011-07-21 13:40 . 2011-07-21 13:40 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Data aplikací\Adobe
2011-07-21 13:39 . 2011-08-05 12:51 -------- d-----w- c:\program files\Free Offers from Freeze.com
2011-07-21 13:38 . 2011-08-11 11:06 -------- d-sh--w- c:\windows\system32\AI_RecycleBin
2011-07-21 13:38 . 2011-07-21 13:38 -------- d-----w- c:\documents and settings\All Users\Data aplikací\W3i
2011-07-18 20:06 . 2011-07-18 20:06 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Data aplikací\Identities
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-07-15 13:29 . 2008-04-13 22:47 456320 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2011-07-08 14:02 . 2008-04-13 22:27 10496 ----a-w- c:\windows\system32\drivers\ndistapi.sys
2011-06-24 14:10 . 2011-05-02 17:28 139656 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2011-06-23 18:31 . 2008-04-14 06:52 916480 ----a-w- c:\windows\system32\wininet.dll
2011-06-23 18:31 . 2008-04-14 06:52 1469440 ------w- c:\windows\system32\inetcpl.cpl
2011-06-23 18:31 . 2008-04-14 06:51 43520 ------w- c:\windows\system32\licmgr10.dll
2011-06-23 12:05 . 2008-04-14 05:50 385024 ------w- c:\windows\system32\html.iec
2011-06-20 17:44 . 2008-04-14 06:52 293376 ----a-w- c:\windows\system32\winsrv.dll
2011-06-06 11:35 . 2008-04-14 05:45 1858944 ----a-w- c:\windows\system32\win32k.sys
2011-07-08 07:29 . 2011-07-25 15:47 142296 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"InstallIQUpdater"="c:\program files\W3i\InstallIQUpdater\InstallIQUpdater.exe" [2011-08-09 1176064]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2005-10-10 7286784]
"nwiz"="nwiz.exe" [2005-10-10 1519616]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2005-10-10 86016]
"SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2005-08-11 925696]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-01-07 253672]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
c:\documents and settings\Administrator\Nabˇdka Start\Programy\Po spuçtŘnˇ\
fliptoast.lnk - c:\program files\Fliptoast\fliptoast.exe [N/A]
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
.
R4 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys --> c:\windows\system32\DRIVERS\ehdrv.sys [?]
R4 epfwtdir;epfwtdir;c:\windows\system32\DRIVERS\epfwtdir.sys --> c:\windows\system32\DRIVERS\epfwtdir.sys [?]
.
.
------- Doplňkový sken -------
.
uDefault_Search_URL = hxxp://www.google.com/ie
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
TCP: DhcpNameServer = 88.146.248.2 88.146.248.1
FF - ProfilePath - c:\documents and settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\jfenu7kz.default\
FF - prefs.js: network.proxy.type - 0
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
HKCU-Run-Startw3i - c:\program files\PC Speed Maximizer\Startw3i.exe
AddRemove-Picasa 3 - c:\documents and settings\Administrator\Plocha\Picasa3\Uninstall.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-08-17 19:24
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\S-1-5-21-776561741-1177238915-1417001333-500\Software\Microsoft\Internet Explorer\User Preferences]
@Denied: (2) (Administrator)
"88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,f9,fa,b8,d0,f6,c8,c6,45,b5,53,c7,\
"2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,f9,fa,b8,d0,f6,c8,c6,45,b5,53,c7,\
"6256FFB019F8FDFBD36745B06F4540E9AEAF222A25"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,f9,fa,b8,d0,f6,c8,c6,45,b5,53,c7,\
.
Celkový čas: 2011-08-17 19:25:48
ComboFix-quarantined-files.txt 2011-08-17 17:25
.
Před spuštěním: Volných bajtů: 236 157 181 952
Po spuštění: Volných bajtů: 237 561 118 720
.
WindowsXP-KB310994-SP2-Pro-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect
.
- - End Of File - - 3F00BA62F96AD308CE32F3EE5B2F7B63
Re: vejdou zobrazovat www
- Spustte poznamkovy blok (Start-spustit-notepad)
- Zkopirujte skript nize
Kód: Vybrat vše
KillAll:: RegLockDel:: [HKEY_USERS\S-1-5-21-776561741-1177238915-1417001333-500\Software\Microsoft\Internet Explorer\User Preferences] Registry:: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] "SunJavaUpdateSched"=- AtJob:: Reboot::- Ulozte vytvoreny TXT jako CFScript.txt
- Pretahnete vytvoreny CFScript.txt nad Combofix a pustte (viz obrazek nize)

- Po aplikaci skriptu (a pripadnem restartu) na Vas vypadne log, jeho obsah sem vlozte
Re: vejdou zobrazovat www
ComboFix 11-08-17.02 - Administrator 17.08.2011 19:48:43.2.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.1471.1121 [GMT 2:00]
Spuštěný z: c:\documents and settings\Administrator\Plocha\ComboFix.exe
Použité ovládací přepínače :: d:\conbofix\CFScript.txt
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-07-17 do 2011-08-17 )))))))))))))))))))))))))))))))
.
.
2011-08-17 16:49 . 2011-08-17 16:50 -------- d-----w- c:\windows\LastGood.Tmp
2011-08-17 14:47 . 2011-08-17 14:47 -------- d-----w- c:\program files\trend micro
2011-08-17 14:47 . 2011-08-17 14:48 -------- d-----w- C:\rsit
2011-08-11 11:06 . 2011-08-11 11:06 -------- d-----w- c:\program files\W3i
2011-08-10 09:10 . 2011-08-10 09:10 -------- d-----w- c:\documents and settings\LocalService\Local Settings\Data aplikací\ESET
2011-08-10 09:10 . 2011-08-10 09:10 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Data aplikací\ESET
2011-08-05 16:18 . 2011-08-10 09:10 -------- d--h--r- c:\documents and settings\Administrator\Data aplikací\Windupdt
2011-08-05 13:21 . 2011-08-05 13:21 -------- d-----w- c:\documents and settings\Administrator\Data aplikací\RegistryKeys
2011-08-05 12:51 . 2011-08-05 13:23 -------- d-----w- c:\program files\Fliptoast
2011-07-26 05:04 . 2009-08-06 17:23 274288 ----a-w- c:\windows\system32\mucltui.dll
2011-07-26 05:04 . 2009-08-06 17:23 215920 ----a-w- c:\windows\system32\muweb.dll
2011-07-25 20:05 . 2008-04-14 06:52 26624 ----a-w- c:\documents and settings\LocalService\Data aplikací\Microsoft\UPnP Device Host\upnphost\udhisapi.dll
2011-07-25 17:36 . 2011-07-25 17:36 -------- d-----w- c:\program files\Microsoft Silverlight
2011-07-25 11:13 . 2011-07-25 11:13 -------- d-----w- c:\documents and settings\NetworkService\Plocha
2011-07-25 11:08 . 2011-07-25 11:08 -------- d-----w- c:\documents and settings\LocalService\Plocha
2011-07-25 10:54 . 2008-04-14 06:52 221184 ----a-w- c:\windows\system32\wmpns.dll
2011-07-25 10:54 . 2011-07-25 10:54 -------- d-----w- c:\program files\Windows Media Connect 2
2011-07-25 10:53 . 2011-07-25 10:54 -------- d-----w- c:\windows\system32\drivers\UMDF
2011-07-24 17:20 . 2011-07-24 17:20 -------- d-----w- c:\windows\Sun
2011-07-21 13:40 . 2011-07-21 13:40 -------- d-----w- c:\program files\Common Files\Adobe AIR
2011-07-21 13:40 . 2011-07-21 13:40 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Data aplikací\Adobe
2011-07-21 13:39 . 2011-08-05 12:51 -------- d-----w- c:\program files\Free Offers from Freeze.com
2011-07-21 13:38 . 2011-08-11 11:06 -------- d-sh--w- c:\windows\system32\AI_RecycleBin
2011-07-21 13:38 . 2011-07-21 13:38 -------- d-----w- c:\documents and settings\All Users\Data aplikací\W3i
2011-07-18 20:06 . 2011-07-18 20:06 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Data aplikací\Identities
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-07-15 13:29 . 2008-04-13 22:47 456320 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2011-07-08 14:02 . 2008-04-13 22:27 10496 ----a-w- c:\windows\system32\drivers\ndistapi.sys
2011-06-24 14:10 . 2011-05-02 17:28 139656 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2011-06-23 18:31 . 2008-04-14 06:52 916480 ----a-w- c:\windows\system32\wininet.dll
2011-06-23 18:31 . 2008-04-14 06:52 1469440 ------w- c:\windows\system32\inetcpl.cpl
2011-06-23 18:31 . 2008-04-14 06:51 43520 ------w- c:\windows\system32\licmgr10.dll
2011-06-23 12:05 . 2008-04-14 05:50 385024 ------w- c:\windows\system32\html.iec
2011-06-20 17:44 . 2008-04-14 06:52 293376 ----a-w- c:\windows\system32\winsrv.dll
2011-06-06 11:35 . 2008-04-14 05:45 1858944 ----a-w- c:\windows\system32\win32k.sys
2011-07-08 07:29 . 2011-07-25 15:47 142296 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((( SnapShot@2011-08-17_17.24.08 )))))))))))))))))))))))))))))))))))))))))
.
+ 2011-08-17 17:52 . 2011-08-17 17:52 16384 c:\windows\temp\Perflib_Perfdata_3fc.dat
+ 2011-05-02 17:29 . 2011-08-17 17:52 202053 c:\windows\system32\inetsrv\MetaBase.bin
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"InstallIQUpdater"="c:\program files\W3i\InstallIQUpdater\InstallIQUpdater.exe" [2011-08-09 1176064]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2005-10-10 7286784]
"nwiz"="nwiz.exe" [2005-10-10 1519616]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2005-10-10 86016]
"SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2005-08-11 925696]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
c:\documents and settings\Administrator\Nabˇdka Start\Programy\Po spuçtŘnˇ\
fliptoast.lnk - c:\program files\Fliptoast\fliptoast.exe [N/A]
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
.
.
.
------- Doplňkový sken -------
.
uDefault_Search_URL = hxxp://www.google.com/ie
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
TCP: DhcpNameServer = 88.146.248.2 88.146.248.1
FF - ProfilePath - c:\documents and settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\jfenu7kz.default\
FF - prefs.js: network.proxy.type - 0
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-08-17 19:52
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'explorer.exe'(2176)
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\RUNDLL32.EXE
c:\windows\system32\inetsrv\inetinfo.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\windows\system32\nvsvc32.exe
c:\windows\system32\wscntfy.exe
.
**************************************************************************
.
Celkový čas: 2011-08-17 19:54:14 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-08-17 17:54
ComboFix2.txt 2011-08-17 17:25
.
Před spuštěním: Volných bajtů: 237 572 452 352
Po spuštění: Volných bajtů: 237 568 159 744
.
- - End Of File - - D45FDA9075FD7128CC8A2A9F9AA7DEB4
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.1471.1121 [GMT 2:00]
Spuštěný z: c:\documents and settings\Administrator\Plocha\ComboFix.exe
Použité ovládací přepínače :: d:\conbofix\CFScript.txt
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-07-17 do 2011-08-17 )))))))))))))))))))))))))))))))
.
.
2011-08-17 16:49 . 2011-08-17 16:50 -------- d-----w- c:\windows\LastGood.Tmp
2011-08-17 14:47 . 2011-08-17 14:47 -------- d-----w- c:\program files\trend micro
2011-08-17 14:47 . 2011-08-17 14:48 -------- d-----w- C:\rsit
2011-08-11 11:06 . 2011-08-11 11:06 -------- d-----w- c:\program files\W3i
2011-08-10 09:10 . 2011-08-10 09:10 -------- d-----w- c:\documents and settings\LocalService\Local Settings\Data aplikací\ESET
2011-08-10 09:10 . 2011-08-10 09:10 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Data aplikací\ESET
2011-08-05 16:18 . 2011-08-10 09:10 -------- d--h--r- c:\documents and settings\Administrator\Data aplikací\Windupdt
2011-08-05 13:21 . 2011-08-05 13:21 -------- d-----w- c:\documents and settings\Administrator\Data aplikací\RegistryKeys
2011-08-05 12:51 . 2011-08-05 13:23 -------- d-----w- c:\program files\Fliptoast
2011-07-26 05:04 . 2009-08-06 17:23 274288 ----a-w- c:\windows\system32\mucltui.dll
2011-07-26 05:04 . 2009-08-06 17:23 215920 ----a-w- c:\windows\system32\muweb.dll
2011-07-25 20:05 . 2008-04-14 06:52 26624 ----a-w- c:\documents and settings\LocalService\Data aplikací\Microsoft\UPnP Device Host\upnphost\udhisapi.dll
2011-07-25 17:36 . 2011-07-25 17:36 -------- d-----w- c:\program files\Microsoft Silverlight
2011-07-25 11:13 . 2011-07-25 11:13 -------- d-----w- c:\documents and settings\NetworkService\Plocha
2011-07-25 11:08 . 2011-07-25 11:08 -------- d-----w- c:\documents and settings\LocalService\Plocha
2011-07-25 10:54 . 2008-04-14 06:52 221184 ----a-w- c:\windows\system32\wmpns.dll
2011-07-25 10:54 . 2011-07-25 10:54 -------- d-----w- c:\program files\Windows Media Connect 2
2011-07-25 10:53 . 2011-07-25 10:54 -------- d-----w- c:\windows\system32\drivers\UMDF
2011-07-24 17:20 . 2011-07-24 17:20 -------- d-----w- c:\windows\Sun
2011-07-21 13:40 . 2011-07-21 13:40 -------- d-----w- c:\program files\Common Files\Adobe AIR
2011-07-21 13:40 . 2011-07-21 13:40 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Data aplikací\Adobe
2011-07-21 13:39 . 2011-08-05 12:51 -------- d-----w- c:\program files\Free Offers from Freeze.com
2011-07-21 13:38 . 2011-08-11 11:06 -------- d-sh--w- c:\windows\system32\AI_RecycleBin
2011-07-21 13:38 . 2011-07-21 13:38 -------- d-----w- c:\documents and settings\All Users\Data aplikací\W3i
2011-07-18 20:06 . 2011-07-18 20:06 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Data aplikací\Identities
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-07-15 13:29 . 2008-04-13 22:47 456320 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2011-07-08 14:02 . 2008-04-13 22:27 10496 ----a-w- c:\windows\system32\drivers\ndistapi.sys
2011-06-24 14:10 . 2011-05-02 17:28 139656 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2011-06-23 18:31 . 2008-04-14 06:52 916480 ----a-w- c:\windows\system32\wininet.dll
2011-06-23 18:31 . 2008-04-14 06:52 1469440 ------w- c:\windows\system32\inetcpl.cpl
2011-06-23 18:31 . 2008-04-14 06:51 43520 ------w- c:\windows\system32\licmgr10.dll
2011-06-23 12:05 . 2008-04-14 05:50 385024 ------w- c:\windows\system32\html.iec
2011-06-20 17:44 . 2008-04-14 06:52 293376 ----a-w- c:\windows\system32\winsrv.dll
2011-06-06 11:35 . 2008-04-14 05:45 1858944 ----a-w- c:\windows\system32\win32k.sys
2011-07-08 07:29 . 2011-07-25 15:47 142296 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((( SnapShot@2011-08-17_17.24.08 )))))))))))))))))))))))))))))))))))))))))
.
+ 2011-08-17 17:52 . 2011-08-17 17:52 16384 c:\windows\temp\Perflib_Perfdata_3fc.dat
+ 2011-05-02 17:29 . 2011-08-17 17:52 202053 c:\windows\system32\inetsrv\MetaBase.bin
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"InstallIQUpdater"="c:\program files\W3i\InstallIQUpdater\InstallIQUpdater.exe" [2011-08-09 1176064]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2005-10-10 7286784]
"nwiz"="nwiz.exe" [2005-10-10 1519616]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2005-10-10 86016]
"SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2005-08-11 925696]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
c:\documents and settings\Administrator\Nabˇdka Start\Programy\Po spuçtŘnˇ\
fliptoast.lnk - c:\program files\Fliptoast\fliptoast.exe [N/A]
.
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
.
.
.
------- Doplňkový sken -------
.
uDefault_Search_URL = hxxp://www.google.com/ie
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
TCP: DhcpNameServer = 88.146.248.2 88.146.248.1
FF - ProfilePath - c:\documents and settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\jfenu7kz.default\
FF - prefs.js: network.proxy.type - 0
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-08-17 19:52
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'explorer.exe'(2176)
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\RUNDLL32.EXE
c:\windows\system32\inetsrv\inetinfo.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\windows\system32\nvsvc32.exe
c:\windows\system32\wscntfy.exe
.
**************************************************************************
.
Celkový čas: 2011-08-17 19:54:14 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-08-17 17:54
ComboFix2.txt 2011-08-17 17:25
.
Před spuštěním: Volných bajtů: 237 572 452 352
Po spuštění: Volných bajtů: 237 568 159 744
.
- - End Of File - - D45FDA9075FD7128CC8A2A9F9AA7DEB4
Re: vejdou zobrazovat www
Jak se chova PC 
Re: vejdou zobrazovat www
vypada to ze je vporadku
Re: vejdou zobrazovat www
- Prejmenujte ComboFix na Uninstall
- Spustte jej
- Tohle smaze Combofix a jeho slozky
- Stahnete a spustte
- Pro potvrzeni volby mackejte A, Enter
- Po pouziti utilitu smazte
- Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)
- Stahnete a spustte
- Kliknete na CleanUp a potvrdte YES
- Program uklidi a restartuje PC
- Stahnete a spustte
- Kliknete na Start a potvrdte OK
- Program uklidi a restartuje pc
- Po pouziti utilitu smazte
Panel čistič
- Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner
- dejte Hledej problémy
- nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
- postup opakujte dokud nebude bez problemu - vetsinou cca 3x
- Zde muzete odinstalovat nepotrebne programy
Re: vejdou zobrazovat www
dekuji moc za pomoc



Přispějete na provoz fóra?