Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Zavirován notebook

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
Hajadlo
Návštěvník
Návštěvník
Příspěvky: 28
Registrován: 19 črc 2011 19:58

Re: Zavirován notebook

#16 Příspěvek od Hajadlo »

zde je log z rsit:
Logfile of random's system information tool 1.09 (written by random/random)
Run by Vera at 2011-08-18 18:29:29
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 13 GB (22%) free of 60 GB
Total RAM: 1015 MB (25% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:29:46, on 18.8.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17099)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
C:\Program Files\Ashampoo\Ashampoo Magical Defrag 3\defragservice.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe
C:\Program Files\Ashampoo\Ashampoo Magical Defrag 3\defragActivityMonitor.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesApp32.exe
C:\Program Files\Ashampoo\Ashampoo Magical Defrag 3\defragtaskbar.exe
C:\Program Files\AVAST Software\Avast\avastUI.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\WINDOWS\system32\cleanmgr.exe
C:\Documents and Settings\Vera\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Vera\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Vera\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Vera\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Vera\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Vera\Dokumenty\Downloads\RSIT.exe
C:\Program Files\trend micro\Vera.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - (no file)
O2 - BHO: Use the DivX Plus Web Player to watch web videos with less interruptions and smoother playback on supported sites - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - (no file)
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5805.1910\swg.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O9 - Extra button: Přeložit - {230D1201-7607-4CF6-A11F-9E4BF0A333E0} - C:\Program Files\Verdict Free\etnxp.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: (no name) - {2C73F784-D2DE-4422-B070-2E3332FE5744} - C:\Program Files\Verdict Free\etnxp.dll
O9 - Extra 'Tools' menuitem: Internetový překladač... - {2C73F784-D2DE-4422-B070-2E3332FE5744} - C:\Program Files\Verdict Free\etnxp.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - http://download.eset.com/special/eos/OnlineScanner.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
O23 - Service: Ashampoo Defrag Service - Unknown owner - C:\Program Files\Ashampoo\Ashampoo Magical Defrag 3\defragservice.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Google Update Service (gupdate1c9859260829cc) (gupdate1c9859260829cc) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe

--
End of file - 7688 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Google Software Updater.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore1cc53364d9a1fec.job
C:\WINDOWS\tasks\User_Feed_Synchronization-{73A007AF-4A83-4C06-8201-BDFD13A41A04}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{326E768D-4182-46FD-9C16-1449A49795F4}]
DivX Plus Web Player HTML5 <video>

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{593DDEC6-7468-4cdd-90E1-42DADAA222E9}]
DivX HiQ

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2010-01-21 4222864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2011-07-04 820864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5805.1910\swg.dll [2010-10-23 843832]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2010-01-16 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-05-04 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2011-05-04 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2011-07-04 820864]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2011-07-04 3493720]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\!SASWinLogon]
C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL [2011-05-04 551296]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2007-11-06 204800]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2008-09-06 267304]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2008-04-27 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2010-01-21 4222864]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2011-07-19 113024]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\!SASCORE]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\uTorrent\utorrent.exe"="C:\Program Files\uTorrent\utorrent.exe:*:Enabled:µTorrent"
"C:\WINDOWS\system32\dpnsvr.exe"="C:\WINDOWS\system32\dpnsvr.exe:*:Enabled:Microsoft DirectPlay8 Server"
"C:\Program Files\Java\jre6\bin\javaw.exe"="C:\Program Files\Java\jre6\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Program Files\Garena\Garena.exe"="C:\Program Files\Garena\Garena.exe:*:Enabled:Garena"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\Microsoft Office\Office14\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office14\GROOVE.EXE:*:Enabled:Microsoft SharePoint Workspace"
"C:\Program Files\Microsoft Office\Office14\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office14\ONENOTE.EXE:*:Enabled:Microsoft OneNote"
"C:\Program Files\Microsoft Office\Office14\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office14\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\mIRC\mirc.exe"="C:\Program Files\mIRC\mirc.exe:*:Enabled:mIRC"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Documents and Settings\Pavla\Data aplikací\Dropbox\bin\Dropbox.exe"="C:\Documents and Settings\Pavla\Data aplikací\Dropbox\bin\Dropbox.exe:*:Enabled:Dropbox"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"C:\Program Files\World of Warcraft\Launcher.exe"="C:\Program Files\World of Warcraft\Launcher.exe:*:Enabled:Blizzard Launcher"
"C:\Program Files\World of Warcraft\BackgroundDownloader.exe"="C:\Program Files\World of Warcraft\BackgroundDownloader.exe:*:Enabled:Blizzard Downloader"
"C:\Program Files\World of Warcraft\Launcher.patch.exe"="C:\Program Files\World of Warcraft\Launcher.patch.exe:*:Enabled:Blizzard Launcher"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\WINDOWS\explorer.exe"="C:\WINDOWS\explorer.exe:*:Enabled:Windows Shell"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"vidc.VP60"=C:\WINDOWS\system32\vp6vfw.dll
"vidc.VP61"=C:\WINDOWS\system32\vp6vfw.dll
"vidc.DIVX"=DivX.dll
"vidc.yv12"=DivX.dll

======List of files/folders created in the last 1 month======

2011-08-18 18:29:29 ----D---- C:\rsit
2011-08-18 17:41:58 ----D---- C:\Documents and Settings\Vera\Data aplikací\vlc
2011-08-18 11:19:59 ----D---- C:\Documents and Settings\Vera\Data aplikací\SUPERAntiSpyware.com
2011-08-18 11:18:00 ----D---- C:\WINDOWS\system32\AppLogs
2011-08-18 11:17:58 ----D---- C:\Documents and Settings\All Users\Data aplikací\!SASCORE
2011-08-18 11:17:45 ----D---- C:\Program Files\SUPERAntiSpyware
2011-08-18 11:17:45 ----D---- C:\Documents and Settings\All Users\Data aplikací\SUPERAntiSpyware.com
2011-08-18 11:17:35 ----D---- C:\Documents and Settings\All Users\Data aplikací\SUPERSetup
2011-08-15 20:30:09 ----A---- C:\WINDOWS\system32\XAudio2_7.dll
2011-08-15 20:30:09 ----A---- C:\WINDOWS\system32\XAPOFX1_5.dll
2011-08-15 20:30:07 ----A---- C:\WINDOWS\system32\xactengine3_7.dll
2011-08-15 20:30:05 ----A---- C:\WINDOWS\system32\D3DCompiler_43.dll
2011-08-15 20:30:04 ----A---- C:\WINDOWS\system32\d3dcsx_43.dll
2011-08-15 20:30:02 ----A---- C:\WINDOWS\system32\d3dx11_43.dll
2011-08-15 20:30:02 ----A---- C:\WINDOWS\system32\d3dx10_43.dll
2011-08-15 20:30:01 ----A---- C:\WINDOWS\system32\D3DX9_43.dll
2011-08-15 20:29:59 ----A---- C:\WINDOWS\system32\XAudio2_6.dll
2011-08-15 20:29:59 ----A---- C:\WINDOWS\system32\XAPOFX1_4.dll
2011-08-15 20:29:58 ----A---- C:\WINDOWS\system32\xactengine3_6.dll
2011-08-15 20:29:57 ----A---- C:\WINDOWS\system32\X3DAudio1_7.dll
2011-08-15 20:29:56 ----A---- C:\WINDOWS\system32\XAudio2_5.dll
2011-08-15 20:29:55 ----A---- C:\WINDOWS\system32\xactengine3_5.dll
2011-08-15 20:29:55 ----A---- C:\WINDOWS\system32\D3DCompiler_42.dll
2011-08-15 20:29:44 ----A---- C:\WINDOWS\system32\d3dcsx_42.dll
2011-08-15 20:29:43 ----A---- C:\WINDOWS\system32\d3dx11_42.dll
2011-08-15 20:29:42 ----A---- C:\WINDOWS\system32\d3dx10_42.dll
2011-08-15 20:29:41 ----A---- C:\WINDOWS\system32\D3DX9_42.dll
2011-08-15 20:29:41 ----A---- C:\WINDOWS\system32\d3dx10_41.dll
2011-08-15 20:29:41 ----A---- C:\WINDOWS\system32\D3DCompiler_41.dll
2011-08-15 20:29:40 ----A---- C:\WINDOWS\system32\D3DX9_41.dll
2011-08-15 20:29:38 ----A---- C:\WINDOWS\system32\XAPOFX1_3.dll
2011-08-15 20:29:37 ----A---- C:\WINDOWS\system32\XAudio2_4.dll
2011-08-15 20:29:37 ----A---- C:\WINDOWS\system32\xactengine3_4.dll
2011-08-15 20:29:36 ----A---- C:\WINDOWS\system32\X3DAudio1_6.dll
2011-08-15 20:29:36 ----A---- C:\WINDOWS\system32\D3DCompiler_40.dll
2011-08-15 20:29:35 ----A---- C:\WINDOWS\system32\d3dx10_40.dll
2011-08-15 20:29:33 ----A---- C:\WINDOWS\system32\D3DX9_40.dll
2011-08-15 20:29:31 ----A---- C:\WINDOWS\system32\XAudio2_3.dll
2011-08-15 20:29:31 ----A---- C:\WINDOWS\system32\XAPOFX1_2.dll
2011-08-15 20:29:30 ----A---- C:\WINDOWS\system32\xactengine3_3.dll
2011-08-15 20:29:30 ----A---- C:\WINDOWS\system32\X3DAudio1_5.dll
2011-08-15 20:29:28 ----A---- C:\WINDOWS\system32\xactengine3_2.dll
2011-08-15 20:29:22 ----A---- C:\WINDOWS\system32\XAudio2_1.dll
2011-08-15 20:29:22 ----A---- C:\WINDOWS\system32\XAPOFX1_0.dll
2011-08-15 20:29:21 ----A---- C:\WINDOWS\system32\xactengine3_1.dll
2011-08-15 20:29:21 ----A---- C:\WINDOWS\system32\X3DAudio1_4.dll
2011-08-15 20:29:20 ----A---- C:\WINDOWS\system32\d3dx10_38.dll
2011-08-15 20:29:20 ----A---- C:\WINDOWS\system32\D3DCompiler_38.dll
2011-08-15 20:29:19 ----A---- C:\WINDOWS\system32\D3DX9_38.dll
2011-08-15 20:26:58 ----D---- C:\Program Files\directx
2011-08-15 20:05:57 ----D---- C:\Program Files\World of Warcraft
2011-08-15 20:05:57 ----D---- C:\Program Files\Common Files\Blizzard Entertainment
2011-08-15 19:46:35 ----D---- C:\Documents and Settings\All Users\Data aplikací\Blizzard Entertainment
2011-08-15 12:02:17 ----A---- C:\WINDOWS\system32\drivers\aswSP.sys
2011-08-15 12:02:17 ----A---- C:\WINDOWS\system32\drivers\aswFsBlk.sys
2011-08-15 12:02:16 ----A---- C:\WINDOWS\system32\drivers\aswTdi.sys
2011-08-15 12:02:16 ----A---- C:\WINDOWS\system32\drivers\aswSnx.sys
2011-08-15 12:02:16 ----A---- C:\WINDOWS\system32\drivers\aswRdr.sys
2011-08-15 12:02:16 ----A---- C:\WINDOWS\system32\drivers\aswmon2.sys
2011-08-15 12:02:16 ----A---- C:\WINDOWS\system32\drivers\aswmon.sys
2011-08-15 12:02:16 ----A---- C:\WINDOWS\system32\drivers\aavmker4.sys
2011-08-15 12:02:04 ----A---- C:\WINDOWS\system32\aswBoot.exe
2011-08-15 12:02:04 ----A---- C:\WINDOWS\avastSS.scr
2011-08-15 12:01:52 ----D---- C:\Program Files\AVAST Software
2011-08-15 12:01:52 ----D---- C:\Documents and Settings\All Users\Data aplikací\AVAST Software
2011-08-12 00:28:07 ----HDC---- C:\WINDOWS\$NtUninstallKB2567680$
2011-08-12 00:27:56 ----HDC---- C:\WINDOWS\$NtUninstallKB2536276-v2$
2011-08-12 00:25:32 ----HDC---- C:\WINDOWS\$NtUninstallKB2570222$
2011-08-12 00:15:56 ----HDC---- C:\WINDOWS\$NtUninstallKB2566454$
2011-08-12 00:15:43 ----HDC---- C:\WINDOWS\$NtUninstallKB2562937$
2011-08-02 19:16:45 ----A---- C:\Boot.bak
2011-08-02 19:16:39 ----RASHD---- C:\cmdcons
2011-08-02 19:14:31 ----D---- C:\Qoobox
2011-08-02 18:31:30 ----D---- C:\Program Files\trend micro
2011-08-02 14:03:53 ----D---- C:\Program Files\CCleaner
2011-08-02 13:44:09 ----D---- C:\Documents and Settings\Vera\Data aplikací\Opera
2011-08-01 00:23:55 ----HDC---- C:\WINDOWS\$NtUninstallKB2510581$
2011-07-31 00:01:33 ----D---- C:\Program Files\Opera

======List of files/folders modified in the last 1 month======

2011-08-18 18:29:23 ----D---- C:\WINDOWS\Prefetch
2011-08-18 18:29:12 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-08-18 18:07:48 ----D---- C:\WINDOWS
2011-08-18 17:44:12 ----D---- C:\WINDOWS\Temp
2011-08-18 17:44:11 ----SHD---- C:\System Volume Information
2011-08-18 17:44:11 ----D---- C:\WINDOWS\system32\Restore
2011-08-18 17:29:00 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-08-18 17:27:12 ----HD---- C:\Program Files\Warcraft IIIa
2011-08-18 16:31:50 ----SD---- C:\WINDOWS\Tasks
2011-08-18 16:31:42 ----D---- C:\WINDOWS\system32\CatRoot2
2011-08-18 14:07:55 ----D---- C:\Program Files\mIRC
2011-08-18 12:02:04 ----SHD---- C:\WINDOWS\CSC
2011-08-18 11:18:00 ----D---- C:\WINDOWS\system32
2011-08-18 11:17:45 ----RD---- C:\Program Files
2011-08-18 11:07:00 ----D---- C:\Documents and Settings\All Users\Data aplikací\Google Updater
2011-08-16 11:49:58 ----RSD---- C:\WINDOWS\assembly
2011-08-16 11:49:58 ----D---- C:\WINDOWS\Microsoft.NET
2011-08-15 21:26:32 ----SHD---- C:\WINDOWS\Installer
2011-08-15 21:26:32 ----D---- C:\Config.Msi
2011-08-15 21:26:31 ----D---- C:\WINDOWS\WinSxS
2011-08-15 20:30:11 ----D---- C:\WINDOWS\system32\DirectX
2011-08-15 20:30:09 ----HD---- C:\WINDOWS\inf
2011-08-15 20:28:00 ----D---- C:\WINDOWS\Logs
2011-08-15 20:07:23 ----D---- C:\Program Files\Common Files
2011-08-15 19:54:24 ----D---- C:\WINDOWS\Debug
2011-08-15 19:20:32 ----D---- C:\Documents and Settings\Vera\Data aplikací\uTorrent
2011-08-15 19:20:05 ----SHD---- C:\RECYCLER
2011-08-15 12:02:17 ----D---- C:\WINDOWS\system32\drivers
2011-08-12 09:04:44 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-08-12 00:27:53 ----HD---- C:\WINDOWS\$hf_mig$
2011-08-12 00:25:58 ----D---- C:\WINDOWS\system32\cs-cz
2011-08-12 00:25:58 ----D---- C:\Program Files\Internet Explorer
2011-08-12 00:25:51 ----D---- C:\WINDOWS\ie7updates
2011-08-12 00:23:34 ----A---- C:\WINDOWS\system32\MRT.exe
2011-08-12 00:23:25 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2011-08-02 20:10:06 ----A---- C:\WINDOWS\system.ini
2011-08-02 20:09:23 ----D---- C:\WINDOWS\system32\drivers\etc
2011-08-02 20:07:45 ----D---- C:\WINDOWS\system32\config
2011-08-02 20:03:20 ----D---- C:\WINDOWS\AppPatch
2011-08-02 19:16:45 ----RASH---- C:\boot.ini
2011-07-31 01:31:22 ----D---- C:\Program Files\uTorrent
2011-07-31 01:14:13 ----D---- C:\Program Files\Common Files\GTK
2011-07-31 01:11:02 ----D---- C:\Program Files\Ashampoo
2011-07-31 00:48:10 ----D---- C:\Documents and Settings\All Users\Data aplikací\ashampoo
2011-07-30 23:44:37 ----D---- C:\Program Files\Pando Networks
2011-07-30 23:44:36 ----D---- C:\WINDOWS\Media
2011-07-30 23:44:36 ----D---- C:\WINDOWS\Help
2011-07-30 23:11:17 ----D---- C:\WINDOWS\ie8updates
2011-07-30 23:10:52 ----D---- C:\Documents and Settings\All Users\Data aplikací\VMware
2011-07-30 23:07:23 ----RD---- C:\Program Files\Skype
2011-07-30 23:02:16 ----DC---- C:\WINDOWS\system32\DRVSTORE
2011-07-30 23:01:25 ----D---- C:\WINDOWS\system32\appmgmt
2011-07-30 23:01:21 ----D---- C:\Program Files\Common Files\Adobe
2011-07-30 23:01:20 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2011-07-30 22:31:14 ----D---- C:\WINDOWS\Minidump
2011-07-30 22:30:07 ----HDC---- C:\WINDOWS\$NtUninstallKB2479628$
2011-07-30 22:30:07 ----HDC---- C:\WINDOWS\$NtUninstallKB2412687$
2011-07-30 22:30:06 ----HDC---- C:\WINDOWS\$NtUninstallKB952011$
2011-07-30 22:30:06 ----HDC---- C:\WINDOWS\$NtUninstallKB2555917$
2011-07-30 22:30:06 ----HDC---- C:\WINDOWS\$NtUninstallKB2524375$
2011-07-30 22:30:06 ----HDC---- C:\WINDOWS\$NtUninstallKB2508429$
2011-07-30 22:30:06 ----HDC---- C:\WINDOWS\$NtUninstallKB2506223$
2011-07-28 00:03:08 ----D---- C:\WINDOWS\system32\ReinstallBackups
2011-07-28 00:00:07 ----D---- C:\WINDOWS\SoftwareDistribution
2011-07-26 22:55:57 ----D---- C:\Program Files\Garena
2011-07-25 18:53:04 ----D---- C:\Documents and Settings\Vera\Data aplikací\PriceGong
2011-07-22 18:30:58 ----A---- C:\WINDOWS\system32\mshtml.dll
2011-07-20 06:53:59 ----D---- C:\Program Files\Google

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\WINDOWS\system32\DRIVERS\iaStor.sys [2008-10-20 304920]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2010-08-12 45648]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2009-02-10 717296]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2008-04-27 77568]
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2011-07-04 30808]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2011-07-04 25432]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2011-07-04 441176]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2011-07-04 309848]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2011-07-04 43608]
R1 ElbyCDIO;ElbyCDIO Driver; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [2008-07-21 24392]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS []
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS []
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2011-07-04 19544]
R2 aswMon2;aswMon2; C:\WINDOWS\system32\drivers\aswMon2.sys [2011-07-04 102616]
R2 EAPPkt;Realtek EAPPkt Protocol; C:\WINDOWS\system32\DRIVERS\EAPPkt.sys [2006-11-15 38144]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-14 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2007-11-06 5761760]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2007-11-06 4608000]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ATKACPI.sys [2007-11-06 5760]
R3 RTL8023xp;Realtek 10/100/1000 PCI NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys [2007-11-06 85120]
R3 RTL8187B;Realtek RTL8187B Wireless 802.11g 54Mbps USB 2.0 Network Adapter; C:\WINDOWS\system32\DRIVERS\RTL8187B.sys [2007-11-06 264576]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2007-11-06 209280]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv; \??\C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesDriver32.sys []
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 VClone;VClone; C:\WINDOWS\system32\DRIVERS\VClone.sys [2008-09-24 29184]
S1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
S3 aj10uupa;aj10uupa; C:\WINDOWS\system32\drivers\aj10uupa.sys []
S3 GarenaPEngine;GarenaPEngine; \??\C:\DOCUME~1\Will\LOCALS~1\Temp\KQU5.tmp []
S3 GGSAFERDriver;GGSAFER Driver; \??\C:\Program Files\Garena\safedrv.sys []
S3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2009-03-18 26176]
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2005-10-28 49664]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2005-10-28 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2005-10-28 21568]
S3 KMWDFILTER;HIDUASDesc; C:\WINDOWS\system32\DRIVERS\KMWDFILTER.sys [2008-10-09 17408]
S3 RT73;D-Link USB Wireless LAN Card Driver; C:\WINDOWS\system32\DRIVERS\Dr71WU.sys [2005-11-03 245504]
S3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2008-04-13 20992]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 VMnetAdapter;VMware Virtual Ethernet Adapter Driver; C:\WINDOWS\system32\DRIVERS\vmnetadapter.sys []
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2008-04-27 38528]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2008-04-27 82944]
S4 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-25 12032]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 !SASCORE;SAS Core Service; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE [2011-08-18 116608]
R2 Ashampoo Defrag Service;Ashampoo Defrag Service; C:\Program Files\Ashampoo\Ashampoo Magical Defrag 3\defragservice.exe [2009-12-16 890208]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2011-07-04 42184]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [2005-03-14 69632]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service; C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe [2011-06-06 1524544]
R2 UxTuneUp;TuneUp Theme Extension; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate1c9859260829cc;Google Update Service (gupdate1c9859260829cc); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-02-03 133104]
S2 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-03-26 183280]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-02-03 133104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2010-01-21 30963576]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S4 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S4 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2011-05-04 153376]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------
Nahoru
Hajadlo
Návštěvník
Návštěvník
Příspěvky: 28
Registrován: 19 črc 2011 19:58

Re: Zavirován notebook

#17 Příspěvek od Hajadlo »

zde je log z rsit:
Logfile of random's system information tool 1.09 (written by random/random)
Run by Vera at 2011-08-18 18:29:29
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 13 GB (22%) free of 60 GB
Total RAM: 1015 MB (25% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:29:46, on 18.8.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17099)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
C:\Program Files\Ashampoo\Ashampoo Magical Defrag 3\defragservice.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe
C:\Program Files\Ashampoo\Ashampoo Magical Defrag 3\defragActivityMonitor.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesApp32.exe
C:\Program Files\Ashampoo\Ashampoo Magical Defrag 3\defragtaskbar.exe
C:\Program Files\AVAST Software\Avast\avastUI.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\WINDOWS\system32\cleanmgr.exe
C:\Documents and Settings\Vera\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Vera\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Vera\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Vera\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Vera\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Vera\Dokumenty\Downloads\RSIT.exe
C:\Program Files\trend micro\Vera.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - (no file)
O2 - BHO: Use the DivX Plus Web Player to watch web videos with less interruptions and smoother playback on supported sites - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - (no file)
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5805.1910\swg.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O9 - Extra button: Přeložit - {230D1201-7607-4CF6-A11F-9E4BF0A333E0} - C:\Program Files\Verdict Free\etnxp.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: (no name) - {2C73F784-D2DE-4422-B070-2E3332FE5744} - C:\Program Files\Verdict Free\etnxp.dll
O9 - Extra 'Tools' menuitem: Internetový překladač... - {2C73F784-D2DE-4422-B070-2E3332FE5744} - C:\Program Files\Verdict Free\etnxp.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - http://download.eset.com/special/eos/OnlineScanner.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
O23 - Service: Ashampoo Defrag Service - Unknown owner - C:\Program Files\Ashampoo\Ashampoo Magical Defrag 3\defragservice.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Google Update Service (gupdate1c9859260829cc) (gupdate1c9859260829cc) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe

--
End of file - 7688 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Google Software Updater.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore1cc53364d9a1fec.job
C:\WINDOWS\tasks\User_Feed_Synchronization-{73A007AF-4A83-4C06-8201-BDFD13A41A04}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{326E768D-4182-46FD-9C16-1449A49795F4}]
DivX Plus Web Player HTML5 <video>

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{593DDEC6-7468-4cdd-90E1-42DADAA222E9}]
DivX HiQ

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2010-01-21 4222864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2011-07-04 820864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5805.1910\swg.dll [2010-10-23 843832]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2010-01-16 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-05-04 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2011-05-04 79648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2011-07-04 820864]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2011-07-04 3493720]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\!SASWinLogon]
C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL [2011-05-04 551296]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2007-11-06 204800]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2008-09-06 267304]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2008-04-27 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2010-01-21 4222864]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2011-07-19 113024]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\!SASCORE]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\uTorrent\utorrent.exe"="C:\Program Files\uTorrent\utorrent.exe:*:Enabled:µTorrent"
"C:\WINDOWS\system32\dpnsvr.exe"="C:\WINDOWS\system32\dpnsvr.exe:*:Enabled:Microsoft DirectPlay8 Server"
"C:\Program Files\Java\jre6\bin\javaw.exe"="C:\Program Files\Java\jre6\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary"
"C:\Program Files\Garena\Garena.exe"="C:\Program Files\Garena\Garena.exe:*:Enabled:Garena"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\Microsoft Office\Office14\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office14\GROOVE.EXE:*:Enabled:Microsoft SharePoint Workspace"
"C:\Program Files\Microsoft Office\Office14\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office14\ONENOTE.EXE:*:Enabled:Microsoft OneNote"
"C:\Program Files\Microsoft Office\Office14\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office14\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\mIRC\mirc.exe"="C:\Program Files\mIRC\mirc.exe:*:Enabled:mIRC"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Documents and Settings\Pavla\Data aplikací\Dropbox\bin\Dropbox.exe"="C:\Documents and Settings\Pavla\Data aplikací\Dropbox\bin\Dropbox.exe:*:Enabled:Dropbox"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"C:\Program Files\World of Warcraft\Launcher.exe"="C:\Program Files\World of Warcraft\Launcher.exe:*:Enabled:Blizzard Launcher"
"C:\Program Files\World of Warcraft\BackgroundDownloader.exe"="C:\Program Files\World of Warcraft\BackgroundDownloader.exe:*:Enabled:Blizzard Downloader"
"C:\Program Files\World of Warcraft\Launcher.patch.exe"="C:\Program Files\World of Warcraft\Launcher.patch.exe:*:Enabled:Blizzard Launcher"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\WINDOWS\explorer.exe"="C:\WINDOWS\explorer.exe:*:Enabled:Windows Shell"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"vidc.VP60"=C:\WINDOWS\system32\vp6vfw.dll
"vidc.VP61"=C:\WINDOWS\system32\vp6vfw.dll
"vidc.DIVX"=DivX.dll
"vidc.yv12"=DivX.dll

======List of files/folders created in the last 1 month======

2011-08-18 18:29:29 ----D---- C:\rsit
2011-08-18 17:41:58 ----D---- C:\Documents and Settings\Vera\Data aplikací\vlc
2011-08-18 11:19:59 ----D---- C:\Documents and Settings\Vera\Data aplikací\SUPERAntiSpyware.com
2011-08-18 11:18:00 ----D---- C:\WINDOWS\system32\AppLogs
2011-08-18 11:17:58 ----D---- C:\Documents and Settings\All Users\Data aplikací\!SASCORE
2011-08-18 11:17:45 ----D---- C:\Program Files\SUPERAntiSpyware
2011-08-18 11:17:45 ----D---- C:\Documents and Settings\All Users\Data aplikací\SUPERAntiSpyware.com
2011-08-18 11:17:35 ----D---- C:\Documents and Settings\All Users\Data aplikací\SUPERSetup
2011-08-15 20:30:09 ----A---- C:\WINDOWS\system32\XAudio2_7.dll
2011-08-15 20:30:09 ----A---- C:\WINDOWS\system32\XAPOFX1_5.dll
2011-08-15 20:30:07 ----A---- C:\WINDOWS\system32\xactengine3_7.dll
2011-08-15 20:30:05 ----A---- C:\WINDOWS\system32\D3DCompiler_43.dll
2011-08-15 20:30:04 ----A---- C:\WINDOWS\system32\d3dcsx_43.dll
2011-08-15 20:30:02 ----A---- C:\WINDOWS\system32\d3dx11_43.dll
2011-08-15 20:30:02 ----A---- C:\WINDOWS\system32\d3dx10_43.dll
2011-08-15 20:30:01 ----A---- C:\WINDOWS\system32\D3DX9_43.dll
2011-08-15 20:29:59 ----A---- C:\WINDOWS\system32\XAudio2_6.dll
2011-08-15 20:29:59 ----A---- C:\WINDOWS\system32\XAPOFX1_4.dll
2011-08-15 20:29:58 ----A---- C:\WINDOWS\system32\xactengine3_6.dll
2011-08-15 20:29:57 ----A---- C:\WINDOWS\system32\X3DAudio1_7.dll
2011-08-15 20:29:56 ----A---- C:\WINDOWS\system32\XAudio2_5.dll
2011-08-15 20:29:55 ----A---- C:\WINDOWS\system32\xactengine3_5.dll
2011-08-15 20:29:55 ----A---- C:\WINDOWS\system32\D3DCompiler_42.dll
2011-08-15 20:29:44 ----A---- C:\WINDOWS\system32\d3dcsx_42.dll
2011-08-15 20:29:43 ----A---- C:\WINDOWS\system32\d3dx11_42.dll
2011-08-15 20:29:42 ----A---- C:\WINDOWS\system32\d3dx10_42.dll
2011-08-15 20:29:41 ----A---- C:\WINDOWS\system32\D3DX9_42.dll
2011-08-15 20:29:41 ----A---- C:\WINDOWS\system32\d3dx10_41.dll
2011-08-15 20:29:41 ----A---- C:\WINDOWS\system32\D3DCompiler_41.dll
2011-08-15 20:29:40 ----A---- C:\WINDOWS\system32\D3DX9_41.dll
2011-08-15 20:29:38 ----A---- C:\WINDOWS\system32\XAPOFX1_3.dll
2011-08-15 20:29:37 ----A---- C:\WINDOWS\system32\XAudio2_4.dll
2011-08-15 20:29:37 ----A---- C:\WINDOWS\system32\xactengine3_4.dll
2011-08-15 20:29:36 ----A---- C:\WINDOWS\system32\X3DAudio1_6.dll
2011-08-15 20:29:36 ----A---- C:\WINDOWS\system32\D3DCompiler_40.dll
2011-08-15 20:29:35 ----A---- C:\WINDOWS\system32\d3dx10_40.dll
2011-08-15 20:29:33 ----A---- C:\WINDOWS\system32\D3DX9_40.dll
2011-08-15 20:29:31 ----A---- C:\WINDOWS\system32\XAudio2_3.dll
2011-08-15 20:29:31 ----A---- C:\WINDOWS\system32\XAPOFX1_2.dll
2011-08-15 20:29:30 ----A---- C:\WINDOWS\system32\xactengine3_3.dll
2011-08-15 20:29:30 ----A---- C:\WINDOWS\system32\X3DAudio1_5.dll
2011-08-15 20:29:28 ----A---- C:\WINDOWS\system32\xactengine3_2.dll
2011-08-15 20:29:22 ----A---- C:\WINDOWS\system32\XAudio2_1.dll
2011-08-15 20:29:22 ----A---- C:\WINDOWS\system32\XAPOFX1_0.dll
2011-08-15 20:29:21 ----A---- C:\WINDOWS\system32\xactengine3_1.dll
2011-08-15 20:29:21 ----A---- C:\WINDOWS\system32\X3DAudio1_4.dll
2011-08-15 20:29:20 ----A---- C:\WINDOWS\system32\d3dx10_38.dll
2011-08-15 20:29:20 ----A---- C:\WINDOWS\system32\D3DCompiler_38.dll
2011-08-15 20:29:19 ----A---- C:\WINDOWS\system32\D3DX9_38.dll
2011-08-15 20:26:58 ----D---- C:\Program Files\directx
2011-08-15 20:05:57 ----D---- C:\Program Files\World of Warcraft
2011-08-15 20:05:57 ----D---- C:\Program Files\Common Files\Blizzard Entertainment
2011-08-15 19:46:35 ----D---- C:\Documents and Settings\All Users\Data aplikací\Blizzard Entertainment
2011-08-15 12:02:17 ----A---- C:\WINDOWS\system32\drivers\aswSP.sys
2011-08-15 12:02:17 ----A---- C:\WINDOWS\system32\drivers\aswFsBlk.sys
2011-08-15 12:02:16 ----A---- C:\WINDOWS\system32\drivers\aswTdi.sys
2011-08-15 12:02:16 ----A---- C:\WINDOWS\system32\drivers\aswSnx.sys
2011-08-15 12:02:16 ----A---- C:\WINDOWS\system32\drivers\aswRdr.sys
2011-08-15 12:02:16 ----A---- C:\WINDOWS\system32\drivers\aswmon2.sys
2011-08-15 12:02:16 ----A---- C:\WINDOWS\system32\drivers\aswmon.sys
2011-08-15 12:02:16 ----A---- C:\WINDOWS\system32\drivers\aavmker4.sys
2011-08-15 12:02:04 ----A---- C:\WINDOWS\system32\aswBoot.exe
2011-08-15 12:02:04 ----A---- C:\WINDOWS\avastSS.scr
2011-08-15 12:01:52 ----D---- C:\Program Files\AVAST Software
2011-08-15 12:01:52 ----D---- C:\Documents and Settings\All Users\Data aplikací\AVAST Software
2011-08-12 00:28:07 ----HDC---- C:\WINDOWS\$NtUninstallKB2567680$
2011-08-12 00:27:56 ----HDC---- C:\WINDOWS\$NtUninstallKB2536276-v2$
2011-08-12 00:25:32 ----HDC---- C:\WINDOWS\$NtUninstallKB2570222$
2011-08-12 00:15:56 ----HDC---- C:\WINDOWS\$NtUninstallKB2566454$
2011-08-12 00:15:43 ----HDC---- C:\WINDOWS\$NtUninstallKB2562937$
2011-08-02 19:16:45 ----A---- C:\Boot.bak
2011-08-02 19:16:39 ----RASHD---- C:\cmdcons
2011-08-02 19:14:31 ----D---- C:\Qoobox¨





myš zase najela, nevím co se stalo...
2011-08-02 18:31:30 ----D---- C:\Program Files\trend micro
2011-08-02 14:03:53 ----D---- C:\Program Files\CCleaner
2011-08-02 13:44:09 ----D---- C:\Documents and Settings\Vera\Data aplikací\Opera
2011-08-01 00:23:55 ----HDC---- C:\WINDOWS\$NtUninstallKB2510581$
2011-07-31 00:01:33 ----D---- C:\Program Files\Opera

======List of files/folders modified in the last 1 month======

2011-08-18 18:29:23 ----D---- C:\WINDOWS\Prefetch
2011-08-18 18:29:12 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-08-18 18:07:48 ----D---- C:\WINDOWS
2011-08-18 17:44:12 ----D---- C:\WINDOWS\Temp
2011-08-18 17:44:11 ----SHD---- C:\System Volume Information
2011-08-18 17:44:11 ----D---- C:\WINDOWS\system32\Restore
2011-08-18 17:29:00 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-08-18 17:27:12 ----HD---- C:\Program Files\Warcraft IIIa
2011-08-18 16:31:50 ----SD---- C:\WINDOWS\Tasks
2011-08-18 16:31:42 ----D---- C:\WINDOWS\system32\CatRoot2
2011-08-18 14:07:55 ----D---- C:\Program Files\mIRC
2011-08-18 12:02:04 ----SHD---- C:\WINDOWS\CSC
2011-08-18 11:18:00 ----D---- C:\WINDOWS\system32
2011-08-18 11:17:45 ----RD---- C:\Program Files
2011-08-18 11:07:00 ----D---- C:\Documents and Settings\All Users\Data aplikací\Google Updater
2011-08-16 11:49:58 ----RSD---- C:\WINDOWS\assembly
2011-08-16 11:49:58 ----D---- C:\WINDOWS\Microsoft.NET
2011-08-15 21:26:32 ----SHD---- C:\WINDOWS\Installer
2011-08-15 21:26:32 ----D---- C:\Config.Msi
2011-08-15 21:26:31 ----D---- C:\WINDOWS\WinSxS
2011-08-15 20:30:11 ----D---- C:\WINDOWS\system32\DirectX
2011-08-15 20:30:09 ----HD---- C:\WINDOWS\inf
2011-08-15 20:28:00 ----D---- C:\WINDOWS\Logs
2011-08-15 20:07:23 ----D---- C:\Program Files\Common Files
2011-08-15 19:54:24 ----D---- C:\WINDOWS\Debug
2011-08-15 19:20:32 ----D---- C:\Documents and Settings\Vera\Data aplikací\uTorrent
2011-08-15 19:20:05 ----SHD---- C:\RECYCLER
2011-08-15 12:02:17 ----D---- C:\WINDOWS\system32\drivers
2011-08-12 09:04:44 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-08-12 00:27:53 ----HD---- C:\WINDOWS\$hf_mig$
2011-08-12 00:25:58 ----D---- C:\WINDOWS\system32\cs-cz
2011-08-12 00:25:58 ----D---- C:\Program Files\Internet Explorer
2011-08-12 00:25:51 ----D---- C:\WINDOWS\ie7updates
2011-08-12 00:23:34 ----A---- C:\WINDOWS\system32\MRT.exe
2011-08-12 00:23:25 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2011-08-02 20:10:06 ----A---- C:\WINDOWS\system.ini
2011-08-02 20:09:23 ----D---- C:\WINDOWS\system32\drivers\etc
2011-08-02 20:07:45 ----D---- C:\WINDOWS\system32\config
2011-08-02 20:03:20 ----D---- C:\WINDOWS\AppPatch
2011-08-02 19:16:45 ----RASH---- C:\boot.ini
2011-07-31 01:31:22 ----D---- C:\Program Files\uTorrent
2011-07-31 01:14:13 ----D---- C:\Program Files\Common Files\GTK
2011-07-31 01:11:02 ----D---- C:\Program Files\Ashampoo
2011-07-31 00:48:10 ----D---- C:\Documents and Settings\All Users\Data aplikací\ashampoo
2011-07-30 23:44:37 ----D---- C:\Program Files\Pando Networks
2011-07-30 23:44:36 ----D---- C:\WINDOWS\Media
2011-07-30 23:44:36 ----D---- C:\WINDOWS\Help
2011-07-30 23:11:17 ----D---- C:\WINDOWS\ie8updates
2011-07-30 23:10:52 ----D---- C:\Documents and Settings\All Users\Data aplikací\VMware
2011-07-30 23:07:23 ----RD---- C:\Program Files\Skype
2011-07-30 23:02:16 ----DC---- C:\WINDOWS\system32\DRVSTORE
2011-07-30 23:01:25 ----D---- C:\WINDOWS\system32\appmgmt
2011-07-30 23:01:21 ----D---- C:\Program Files\Common Files\Adobe
2011-07-30 23:01:20 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2011-07-30 22:31:14 ----D---- C:\WINDOWS\Minidump
2011-07-30 22:30:07 ----HDC---- C:\WINDOWS\$NtUninstallKB2479628$
2011-07-30 22:30:07 ----HDC---- C:\WINDOWS\$NtUninstallKB2412687$
2011-07-30 22:30:06 ----HDC---- C:\WINDOWS\$NtUninstallKB952011$
2011-07-30 22:30:06 ----HDC---- C:\WINDOWS\$NtUninstallKB2555917$
2011-07-30 22:30:06 ----HDC---- C:\WINDOWS\$NtUninstallKB2524375$
2011-07-30 22:30:06 ----HDC---- C:\WINDOWS\$NtUninstallKB2508429$
2011-07-30 22:30:06 ----HDC---- C:\WINDOWS\$NtUninstallKB2506223$
2011-07-28 00:03:08 ----D---- C:\WINDOWS\system32\ReinstallBackups
2011-07-28 00:00:07 ----D---- C:\WINDOWS\SoftwareDistribution
2011-07-26 22:55:57 ----D---- C:\Program Files\Garena
2011-07-25 18:53:04 ----D---- C:\Documents and Settings\Vera\Data aplikací\PriceGong
2011-07-22 18:30:58 ----A---- C:\WINDOWS\system32\mshtml.dll
2011-07-20 06:53:59 ----D---- C:\Program Files\Google

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\WINDOWS\system32\DRIVERS\iaStor.sys [2008-10-20 304920]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2010-08-12 45648]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2009-02-10 717296]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2008-04-27 77568]
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2011-07-04 30808]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2011-07-04 25432]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2011-07-04 441176]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2011-07-04 309848]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2011-07-04 43608]
R1 ElbyCDIO;ElbyCDIO Driver; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [2008-07-21 24392]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS []
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS []
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2011-07-04 19544]
R2 aswMon2;aswMon2; C:\WINDOWS\system32\drivers\aswMon2.sys [2011-07-04 102616]
R2 EAPPkt;Realtek EAPPkt Protocol; C:\WINDOWS\system32\DRIVERS\EAPPkt.sys [2006-11-15 38144]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-14 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2007-11-06 5761760]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2007-11-06 4608000]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ATKACPI.sys [2007-11-06 5760]
R3 RTL8023xp;Realtek 10/100/1000 PCI NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys [2007-11-06 85120]
R3 RTL8187B;Realtek RTL8187B Wireless 802.11g 54Mbps USB 2.0 Network Adapter; C:\WINDOWS\system32\DRIVERS\RTL8187B.sys [2007-11-06 264576]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2007-11-06 209280]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv; \??\C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesDriver32.sys []
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 VClone;VClone; C:\WINDOWS\system32\DRIVERS\VClone.sys [2008-09-24 29184]
S1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
S3 aj10uupa;aj10uupa; C:\WINDOWS\system32\drivers\aj10uupa.sys []
S3 GarenaPEngine;GarenaPEngine; \??\C:\DOCUME~1\Will\LOCALS~1\Temp\KQU5.tmp []
S3 GGSAFERDriver;GGSAFER Driver; \??\C:\Program Files\Garena\safedrv.sys []
S3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2009-03-18 26176]
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys [2005-10-28 49664]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys [2005-10-28 16496]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys [2005-10-28 21568]
S3 KMWDFILTER;HIDUASDesc; C:\WINDOWS\system32\DRIVERS\KMWDFILTER.sys [2008-10-09 17408]
S3 RT73;D-Link USB Wireless LAN Card Driver; C:\WINDOWS\system32\DRIVERS\Dr71WU.sys [2005-11-03 245504]
S3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2008-04-13 20992]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 VMnetAdapter;VMware Virtual Ethernet Adapter Driver; C:\WINDOWS\system32\DRIVERS\vmnetadapter.sys []
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2008-04-27 38528]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2008-04-27 82944]
S4 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-25 12032]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 !SASCORE;SAS Core Service; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE [2011-08-18 116608]
R2 Ashampoo Defrag Service;Ashampoo Defrag Service; C:\Program Files\Ashampoo\Ashampoo Magical Defrag 3\defragservice.exe [2009-12-16 890208]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2011-07-04 42184]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [2005-03-14 69632]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service; C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe [2011-06-06 1524544]
R2 UxTuneUp;TuneUp Theme Extension; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate1c9859260829cc;Google Update Service (gupdate1c9859260829cc); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-02-03 133104]
S2 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-03-26 183280]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2009-02-03 133104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2010-01-21 30963576]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S4 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S4 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2011-05-04 153376]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Zavirován notebook

#18 Příspěvek od vyosek »

Zdravim,

nalezy SASu jste nechal smazat :???: Nastala pak nejake zmena :???:
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
Hajadlo
Návštěvník
Návštěvník
Příspěvky: 28
Registrován: 19 črc 2011 19:58

Re: Zavirován notebook

#19 Příspěvek od Hajadlo »

smazání jsem provedl, nic se nezměnilo, jediné co mohu říct je to že jednou za 10 minut se mi přestane zasekávat myška a na 5 minut jede v pořádku... myš jsem zkoušel jinou, usb sem se snazil vycistit.
edit:znovu jsem udělal prohlídku SAS a jak se zdá, tak se haved nevymazala...
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Zavirován notebook

#20 Příspěvek od vyosek »

PROSIM CTETE DUKLADNE NAVOD - TATO UTILITA MA VELKOU SCHOPNOST MAZAT A JE NUTNE JI APLIKOVAT JEN NA DOPORUCENI, JINAK VAM MUZE JIT SYSTEM DO KYTEK
:arrow: Stahnete a ulozte na plochu Combofix http://download.bleepingcomputer.com/sUBs/ComboFix.exe
  • Vypnete vsechny rezidentni bezpecnostní programy - firewally, antiviry, antispywary apod.
  • Pokud mate Win XP spustte pod uctem Spravce\Administratora
  • Pokud mate Win Vista ci Win 7, kliknete na Combofix pravym a dejte Run As Administrator ci Spustit jako spravce
  • Ihned po startu se zobrazi stranka s licencnim ujednanim, pokracujte kliknutim na Ano
  • Pokud Vam CF nabidne instalaci Konzoly pro zotaveni, tak souhlaste
  • Dale postupujte dle pokynu, behem scanu nechte PC naprosto v klidu - nespoustejte zadne aplikace a neklikejte do zobrazujiciho se okna
  • Scan by mel trvat cca 10 min, ale pokud bude PC hodne zaneseno, muze se cas prodlouzit
  • Po dokonceni skenu a pripadnem restartu CF zobrazi log, pripadne jej najdete zde C:\ComboFix.txt, jeho obsah sem vlozte
  • Detailni postup vc. obrazku mate zde http://www.bleepingcomputer.com/combofi ... t-combofix
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
Hajadlo
Návštěvník
Návštěvník
Příspěvky: 28
Registrován: 19 črc 2011 19:58

Re: Zavirován notebook

#21 Příspěvek od Hajadlo »

Restart nebyl proveden, nic se zatím nezlepšilo, zde je log:
ComboFix 11-08-18.02 - Administrator 18.08.2011 19:58:09.3.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.1015.549 [GMT 2:00]
Spuštěný z: c:\documents and settings\Vera\Dokumenty\Downloads\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-07-18 do 2011-08-18 )))))))))))))))))))))))))))))))
.
.
2011-08-18 16:29 . 2011-08-18 16:29 -------- d-----w- C:\rsit
2011-08-18 15:41 . 2011-08-18 15:42 -------- d-----w- c:\documents and settings\Vera\Data aplikací\vlc
2011-08-18 09:19 . 2011-08-18 09:19 -------- d-----w- c:\documents and settings\Vera\Data aplikací\SUPERAntiSpyware.com
2011-08-18 09:18 . 2011-08-18 09:18 -------- d-----w- c:\windows\system32\AppLogs
2011-08-18 09:17 . 2011-08-18 09:17 -------- d-----w- c:\documents and settings\All Users\Data aplikací\!SASCORE
2011-08-18 09:17 . 2011-08-18 10:01 -------- d-----w- c:\program files\SUPERAntiSpyware
2011-08-18 09:17 . 2011-08-18 09:17 -------- d-----w- c:\documents and settings\All Users\Data aplikací\SUPERAntiSpyware.com
2011-08-18 09:17 . 2011-08-18 09:17 -------- d-----w- c:\documents and settings\All Users\Data aplikací\SUPERSetup
2011-08-15 18:30 . 2010-06-02 02:55 74072 ----a-w- c:\windows\system32\XAPOFX1_5.dll
2011-08-15 18:30 . 2010-06-02 02:55 527192 ----a-w- c:\windows\system32\XAudio2_7.dll
2011-08-15 18:30 . 2010-06-02 02:55 239960 ----a-w- c:\windows\system32\xactengine3_7.dll
2011-08-15 18:30 . 2010-05-26 09:41 2106216 ----a-w- c:\windows\system32\D3DCompiler_43.dll
2011-08-15 18:30 . 2010-05-26 09:41 1868128 ----a-w- c:\windows\system32\d3dcsx_43.dll
2011-08-15 18:30 . 2010-05-26 09:41 470880 ----a-w- c:\windows\system32\d3dx10_43.dll
2011-08-15 18:30 . 2010-05-26 09:41 248672 ----a-w- c:\windows\system32\d3dx11_43.dll
2011-08-15 18:30 . 2010-05-26 09:41 1998168 ----a-w- c:\windows\system32\D3DX9_43.dll
2011-08-15 18:26 . 2011-08-15 18:27 -------- d-----w- c:\program files\directx
2011-08-15 18:05 . 2011-08-18 09:31 -------- d-----w- c:\program files\World of Warcraft
2011-08-15 18:05 . 2011-08-15 18:30 -------- d-----w- c:\program files\Common Files\Blizzard Entertainment
2011-08-15 17:46 . 2011-08-15 18:33 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Blizzard Entertainment
2011-08-15 15:21 . 2011-08-15 15:21 -------- d-----w- c:\documents and settings\Vera\Local Settings\Data aplikací\uTorrent
2011-08-15 10:02 . 2011-07-04 11:36 309848 ----a-w- c:\windows\system32\drivers\aswSP.sys
2011-08-15 10:02 . 2011-07-04 11:32 19544 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2011-08-15 10:02 . 2011-07-04 11:36 441176 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2011-08-15 10:02 . 2011-07-04 11:35 43608 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2011-08-15 10:02 . 2011-07-04 11:35 102616 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2011-08-15 10:02 . 2011-07-04 11:35 96344 ----a-w- c:\windows\system32\drivers\aswmon.sys
2011-08-15 10:02 . 2011-07-04 11:32 25432 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2011-08-15 10:02 . 2011-07-04 11:32 30808 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2011-08-15 10:02 . 2011-07-04 11:43 40112 ----a-w- c:\windows\avastSS.scr
2011-08-15 10:02 . 2011-07-04 11:43 199304 ----a-w- c:\windows\system32\aswBoot.exe
2011-08-15 10:01 . 2011-08-15 10:01 -------- d-----w- c:\program files\AVAST Software
2011-08-15 10:01 . 2011-08-15 10:01 -------- d-----w- c:\documents and settings\All Users\Data aplikací\AVAST Software
2011-08-02 17:09 . 2011-08-02 17:09 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Data aplikací\Opera
2011-08-02 17:08 . 2011-08-02 17:08 -------- d-----w- c:\documents and settings\Administrator\Data aplikací\TuneUp Software
2011-08-02 16:31 . 2011-08-18 16:29 -------- d-----w- c:\program files\trend micro
2011-08-02 12:03 . 2011-08-02 12:03 -------- d-----w- c:\program files\CCleaner
2011-08-02 11:44 . 2011-08-02 11:44 -------- d-----w- c:\documents and settings\Vera\Local Settings\Data aplikací\Opera
2011-07-30 23:30 . 2011-07-30 23:30 -------- d-----w- c:\documents and settings\Pavla\Local Settings\Data aplikací\uTorrent
2011-07-30 23:30 . 2011-08-18 09:07 -------- d-----w- c:\documents and settings\Pavla\Data aplikací\uTorrent
2011-07-30 23:11 . 2011-07-30 23:11 -------- d-----w- c:\documents and settings\Pavla\Local Settings\Data aplikací\ashampoo
2011-07-30 22:02 . 2011-07-30 22:02 -------- d-----w- c:\documents and settings\Pavla\.gimp-2.6
2011-07-30 22:02 . 2011-07-30 22:02 -------- d-----w- c:\documents and settings\Pavla\.gegl-0.0
2011-07-30 22:01 . 2011-07-30 22:01 -------- d-----w- c:\documents and settings\Pavla\Local Settings\Data aplikací\Opera
2011-07-30 22:01 . 2011-07-30 22:01 -------- d-----w- c:\program files\Opera
2011-07-30 21:26 . 2011-08-18 09:07 -------- d-----w- c:\documents and settings\Pavla\Data aplikací\Dropbox
2011-07-30 21:13 . 2011-07-30 21:13 -------- d-----w- c:\documents and settings\Pavla\Data aplikací\Mobipocket
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-07-30 23:27 . 2011-07-05 20:06 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-07-15 13:29 . 2008-04-14 00:47 456320 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2011-07-08 14:02 . 2008-04-14 00:27 10496 ----a-w- c:\windows\system32\drivers\ndistapi.sys
2011-06-24 14:10 . 2008-10-20 17:24 139656 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2011-06-21 18:39 . 2008-03-01 13:02 832512 ----a-w- c:\windows\system32\wininet.dll
2011-06-21 18:39 . 2008-03-01 13:02 1830912 ----a-w- c:\windows\system32\inetcpl.cpl
2011-06-21 18:39 . 2010-08-03 16:53 78336 ----a-w- c:\windows\system32\ieencode.dll
2011-06-21 18:39 . 2008-04-27 10:08 17408 ----a-w- c:\windows\system32\corpol.dll
2011-06-21 11:47 . 2008-04-27 10:08 389120 ----a-w- c:\windows\system32\html.iec
2011-06-20 17:44 . 2008-04-14 08:52 293376 ----a-w- c:\windows\system32\winsrv.dll
2011-06-17 17:16 . 2011-06-17 17:16 5120 ----a-w- c:\windows\Spawn.dll
2011-06-17 17:16 . 2011-06-17 17:16 243200 ----a-w- c:\windows\SmallBasicLibrary.dll
2011-06-17 17:16 . 2011-06-17 17:16 174080 ----a-w- c:\windows\FC.dll
2011-06-17 17:16 . 2011-06-17 17:16 6656 ----a-w- c:\windows\system-provider.exe
2011-06-06 16:29 . 2011-01-06 16:33 31552 ----a-w- c:\windows\system32\TURegOpt.exe
2011-06-06 16:23 . 2011-07-17 19:01 29504 ----a-w- c:\windows\system32\uxtuneup.dll
2011-06-06 11:35 . 2008-04-14 07:45 1858944 ----a-w- c:\windows\system32\win32k.sys
2010-04-04 09:50 203776 --sh--w- c:\windows\system32\unrar.exe
.
.
------- Sigcheck -------
Note: Unsigned files aren't necessarily malware.
.
[-] 2008-10-20 . 1E603EA2A3FDBAE9E5B88A8CB3C03124 . 1571840 . . [5.1.2600.5512] . . c:\windows\system32\sfcfiles.dll
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-07-04 11:43 122512 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2011-07-04 3493720]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"nltide_2"="shell32" [X]
.
c:\documents and settings\Pavla\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Dropbox.lnk - c:\documents and settings\Administrator\Data aplikacˇ\Dropbox\bin\Dropbox.exe [N/A]
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2011-07-19 113024]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2011-05-04 17:54 551296 ----a-w- c:\program files\SUPERAntiSpyware\SASWINLO.DLL
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]
@=""
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"Persistence"=c:\windows\system32\igfxpers.exe
"IgfxTray"=c:\windows\system32\igfxtray.exe
"HotKeysCmds"=c:\windows\system32\hkcmd.exe
"SkyTel"=SkyTel.EXE
"RTHDCPL"=RTHDCPL.EXE
"Alcmtr"=ALCMTR.EXE
"KernelFaultCheck"=%systemroot%\system32\dumprep 0 -k
"VirtualCloneDrive"="c:\program files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
"BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" /DelayServices
"ATKHOTKEY"="c:\program files\ATK Hotkey\Hcontrol.exe"
"SynTPEnh"=c:\program files\Synaptics\SynTP\SynTPEnh.exe
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe"
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\uTorrent\\utorrent.exe"=
"c:\\WINDOWS\\system32\\dpnsvr.exe"=
"c:\\Program Files\\Java\\jre6\\bin\\javaw.exe"=
"c:\\Program Files\\Garena\\Garena.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\Microsoft Office\\Office14\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office14\\ONENOTE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office14\\OUTLOOK.EXE"=
"c:\\Program Files\\mIRC\\mirc.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Documents and Settings\\Pavla\\Data aplikací\\Dropbox\\bin\\Dropbox.exe"=
"c:\\Program Files\\Opera\\opera.exe"=
"c:\\Program Files\\World of Warcraft\\Launcher.exe"=
"c:\\Program Files\\World of Warcraft\\BackgroundDownloader.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009
"57625:TCP"= 57625:TCP:Pando Media Booster
"57625:UDP"= 57625:UDP:Pando Media Booster
"8394:TCP"= 8394:TCP:League of Legends Launcher
"8394:UDP"= 8394:UDP:League of Legends Launcher
"6931:TCP"= 6931:TCP:League of Legends Launcher
"6931:UDP"= 6931:UDP:League of Legends Launcher
"6981:TCP"= 6981:TCP:League of Legends Launcher
"6981:UDP"= 6981:UDP:League of Legends Launcher
"6885:TCP"= 6885:TCP:League of Legends Launcher
"6885:UDP"= 6885:UDP:League of Legends Launcher
"6911:TCP"= 6911:TCP:League of Legends Launcher
"6911:UDP"= 6911:UDP:League of Legends Launcher
"6884:TCP"= 6884:TCP:League of Legends Launcher
"6884:UDP"= 6884:UDP:League of Legends Launcher
"6907:TCP"= 6907:TCP:League of Legends Launcher
"6907:UDP"= 6907:UDP:League of Legends Launcher
"6913:TCP"= 6913:TCP:League of Legends Launcher
"6913:UDP"= 6913:UDP:League of Legends Launcher
"6989:TCP"= 6989:TCP:League of Legends Launcher
"6989:UDP"= 6989:UDP:League of Legends Launcher
"8395:TCP"= 8395:TCP:League of Legends Launcher
"8395:UDP"= 8395:UDP:League of Legends Launcher
"6892:TCP"= 6892:TCP:League of Legends Launcher
"6892:UDP"= 6892:UDP:League of Legends Launcher
"6894:TCP"= 6894:TCP:League of Legends Launcher
"6894:UDP"= 6894:UDP:League of Legends Launcher
"6993:TCP"= 6993:TCP:League of Legends Launcher
"6993:UDP"= 6993:UDP:League of Legends Launcher
"8396:TCP"= 8396:TCP:League of Legends Launcher
"8396:UDP"= 8396:UDP:League of Legends Launcher
"8393:TCP"= 8393:TCP:League of Legends Lobby
"8393:UDP"= 8393:UDP:League of Legends Lobby
"8390:TCP"= 8390:TCP:League of Legends Game Client
"8390:UDP"= 8390:UDP:League of Legends Game Client
"6975:TCP"= 6975:TCP:League of Legends Launcher
"6975:UDP"= 6975:UDP:League of Legends Launcher
"6881:TCP"= 6881:TCP:Blizzard Downloader: 6881
.
R0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [10.2.2009 1:21 717296]
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [15.8.2011 12:02 441176]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [15.8.2011 12:02 309848]
R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [22.7.2011 18:27 12880]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [12.7.2011 23:55 67664]
R2 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCORE.EXE [19.7.2011 2:02 116608]
R2 Ashampoo Defrag Service;Ashampoo Defrag Service;c:\program files\Ashampoo\Ashampoo Magical Defrag 3\defragservice.exe [31.7.2011 0:47 890208]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [15.8.2011 12:02 19544]
R2 EAPPkt;Realtek EAPPkt Protocol;c:\windows\system32\drivers\EAPPkt.sys [20.10.2008 19:38 38144]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [9.1.2010 21:37 4640000]
R3 RTL8187B;Realtek RTL8187B Wireless 802.11g 54Mbps USB 2.0 Network Adapter;c:\windows\system32\drivers\RTL8187B.sys [20.10.2008 21:29 264576]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files\TuneUp Utilities 2011\TuneUpUtilitiesDriver32.sys [29.11.2010 20:27 10064]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [18.3.2010 13:16 130384]
S2 gupdate1c9859260829cc;Google Update Service (gupdate1c9859260829cc);c:\program files\Google\Update\GoogleUpdate.exe [3.2.2009 1:57 133104]
S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe [6.6.2011 18:26 1524544]
S3 GarenaPEngine;GarenaPEngine;\??\c:\docume~1\Will\LOCALS~1\Temp\KQU5.tmp --> c:\docume~1\Will\LOCALS~1\Temp\KQU5.tmp [?]
S3 GGSAFERDriver;GGSAFER Driver;\??\c:\program files\Garena\safedrv.sys --> c:\program files\Garena\safedrv.sys [?]
S3 gupdatem;Služba Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [3.2.2009 1:57 133104]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files\Microsoft Office\Office14\GROOVE.EXE [21.1.2010 18:51 30963576]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [18.3.2010 13:16 753504]
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
Obsah adresáře 'Naplánované úlohy'
.
2011-08-18 c:\windows\Tasks\Google Software Updater.job
- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2008-10-20 18:16]
.
2011-08-18 c:\windows\Tasks\GoogleUpdateTaskMachineCore1cc53364d9a1fec.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-02-02 23:57]
.
2011-08-18 c:\windows\Tasks\User_Feed_Synchronization-{73A007AF-4A83-4C06-8201-BDFD13A41A04}.job
- c:\windows\system32\msfeedssync.exe [2008-04-27 10:09]
.
.
------- Doplňkový sken -------
.
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: {{230D1201-7607-4CF6-A11F-9E4BF0A333E0} - {0DB13731-CEFD-43CF-A8FD-B61DCBC4D5B8} - c:\program files\Verdict Free\etnxp.dll
IE: {{2C73F784-D2DE-4422-B070-2E3332FE5744} - {0320AC26-52C8-4316-B2C4-24BB6FA73C9A} - c:\program files\Verdict Free\etnxp.dll
TCP: DhcpNameServer = 10.11.255.254 0.0.0.0
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-08-18 20:07
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\GarenaPEngine]
"ImagePath"="\??\c:\docume~1\Will\LOCALS~1\Temp\KQU5.tmp"
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'winlogon.exe'(1116)
c:\program files\SUPERAntiSpyware\SASWINLO.DLL
c:\windows\system32\COMRes.dll
.
- - - - - - - > 'explorer.exe'(2836)
c:\windows\system32\msi.dll
c:\progra~1\COMMON~1\MICROS~1\OFFICE14\Cultures\office.odf
c:\progra~1\MICROS~2\Office14\1033\GrooveIntlResource.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
Celkový čas: 2011-08-18 20:10:20
ComboFix-quarantined-files.txt 2011-08-18 18:10
.
Před spuštěním: Volných bajtů: 13 793 808 384
Po spuštění: Volných bajtů: 13 778 206 720
.
- - End Of File - - 1D6CAFA03225D44477F3167773C66FB4
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Zavirován notebook

#22 Příspěvek od vyosek »

:arrow: Stahnete OTM (viz muj podpis)
  • Pokud pouzivate Win Vista ci W7, kliknete na OTM pravym a dejte Run As Administrator ci Spustit jako spravce
  • Do leveho okna Paste Instructions for Items to be Moved (pod zlutou caru) vlozte obsah, ktery mate nize

  • Kód: Vybrat vše

    :files
%windir%\system32\*.tmp.dll /s
%windir%\system32\SET*.tmp /s
%windir%\*.tmp

:commands
[RESETHOSTS]
[EMPTYTEMP]
[EMPTYFLASH]
  • Kliknete na cervene tlacitko MoveIt!
  • Budete vyzvani na restart, dejte Yes, log pote najdete C:\_OTM\MovedFiles, obsah sem vlozte
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
Hajadlo
Návštěvník
Návštěvník
Příspěvky: 28
Registrován: 19 črc 2011 19:58

Re: Zavirován notebook

#23 Příspěvek od Hajadlo »

Prohrabuji se internetem a nějak jsem nenašel odkaz na stáhnutí...
edit: už to mám
Nahoru
Hajadlo
Návštěvník
Návštěvník
Příspěvky: 28
Registrován: 19 črc 2011 19:58

Re: Zavirován notebook

#24 Příspěvek od Hajadlo »

Zde je log:

All processes killed
========== FILES ==========
File/Folder C:\WINDOWS\system32\*.tmp.dll not found.
C:\WINDOWS\system32\SET11.tmp moved successfully.
C:\WINDOWS\system32\SET12.tmp moved successfully.
C:\WINDOWS\system32\SET13.tmp moved successfully.
C:\WINDOWS\system32\SET173.tmp moved successfully.
C:\WINDOWS\system32\SET174.tmp moved successfully.
C:\WINDOWS\system32\SET178.tmp moved successfully.
C:\WINDOWS\system32\SET179.tmp moved successfully.
C:\WINDOWS\system32\SET17A.tmp moved successfully.
C:\WINDOWS\system32\SET17E.tmp moved successfully.
C:\WINDOWS\system32\SET180.tmp moved successfully.
C:\WINDOWS\system32\SET5A.tmp moved successfully.
C:\WINDOWS\system32\SET67.tmp moved successfully.
C:\WINDOWS\system32\SET6C.tmp moved successfully.
C:\WINDOWS\system32\SETA.tmp moved successfully.
C:\WINDOWS\system32\SETD52.tmp moved successfully.
File/Folder C:\WINDOWS\*.tmp not found.
========== COMMANDS ==========
C:\WINDOWS\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 16384 bytes
->Temporary Internet Files folder emptied: 32902 bytes
->Opera cache emptied: 12708598 bytes
->Flash cache emptied: 497 bytes

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes
->Flash cache emptied: 41 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32835 bytes

User: Michal
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 6318354 bytes
->Java cache emptied: 2023 bytes
->Flash cache emptied: 1430 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: Pavla
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 1266027 bytes
->Java cache emptied: 0 bytes
->Google Chrome cache emptied: 208990532 bytes
->Opera cache emptied: 8505257 bytes
->Flash cache emptied: 12244 bytes

User: Vera
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes
->Java cache emptied: 0 bytes
->Google Chrome cache emptied: 124354092 bytes
->Opera cache emptied: 0 bytes
->Flash cache emptied: 2500 bytes

User: Will
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 3026263 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 2504 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 348,00 mb


OTM by OldTimer - Version 3.1.18.0 log created on 08182011_202702

Files moved on Reboot...
C:\WINDOWS\temp\_avast_\Webshlock.txt moved successfully.

Registry entries deleted on Reboot...
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Zavirován notebook

#25 Příspěvek od vyosek »

Nejaka zmena? Na havet vypada PC cisty, co nasel SAS jsou jen neskodne cookies
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
Hajadlo
Návštěvník
Návštěvník
Příspěvky: 28
Registrován: 19 črc 2011 19:58

Re: Zavirován notebook

#26 Příspěvek od Hajadlo »

hádám že teď už to je v pohodě, doufám že to teda není ta chvíle kdy to jede, a že už to bude v pořádku. Děkuju
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Zavirován notebook

#27 Příspěvek od vyosek »

:arrow: Odinstalujte Combofix
  • Start - Spustit (nebo pouzijte klavesobou zkratku Win+R)
  • Napiste ComboFix /Uninstall
  • Stisknete Enter
  • Tohle smaze Combofix a jeho slozky
:arrow: T-Cleaner http://vyosek.ic.cz/pro_usery/T-Cleaner.exe
  • Stahnete a spustte
  • Pro potvrzeni volby mackejte A, Enter
  • Po pouziti utilitu smazte
  • Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)
:arrow: OTC http://oldtimer.geekstogo.com/OTC.exe
  • Stahnete a spustte
  • Kliknete na CleanUp a potvrdte YES
  • Program uklidi a restartuje PC

:arrow: TFC http://oldtimer.geekstogo.com/TFC.exe
  • Stahnete a spustte
  • Kliknete na Start a potvrdte OK
  • Program uklidi a restartuje pc
  • Po pouziti utilitu smazte
:arrow: Stahnete Ccleaner (viz muj podpis)
Panel čistič
  • Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner
Panel registry
  • dejte Hledej problémy
  • nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
  • postup opakujte dokud nebude bez problemu - vetsinou cca 3x
Panel nástroje
  • Zde muzete odinstalovat nepotrebne programy
CCleaner doporucuji pouzivat cca jednou za 14 dni

:arrow: A melo by to byt z me strany vse :|
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
Odpovědět

Zpět na „Řešení problémů, logy“