http://www.viry.cz/forum/viewtopic.php?f=13&t=105895

Zpráva

#16 Příspěvek od **vyosek** » 22 srp 2011 22:23

Stahnete OTM (viz muj podpis)

Pokud pouzivate Win Vista ci W7, kliknete na OTM pravym a dejte Run As Administrator ci Spustit jako spravce
Do leveho okna Paste Instructions for Items to be Moved (pod zlutou caru) vlozte obsah, ktery mate nize

:files
c:\windows\l1rezerv.exe
c:\windows\systemup.exe
c:\windows\unrar.exe
c:\windows\sysdriver32.exe
c:\windows\update.tray-12-0-lnk
%windir%\system32\*.tmp.dll /s
%windir%\system32\SET*.tmp /s
%windir%\*.tmp

:commands
[RESETHOSTS]
[EMPTYTEMP]
[EMPTYFLASH]

Kliknete na cervene tlacitko MoveIt!
Budete vyzvani na restart, dejte Yes, log pote najdete C:\_OTM\MovedFiles, obsah sem vlozte

rengra · #17 Příspěvek od **rengra** » 22 srp 2011 22:28

Můžu se prosím zeptat kde ho mám stáhnout?

#18 Příspěvek od **vyosek** » 22 srp 2011 22:29

Zde http://oldtimer.geekstogo.com/OTM.exe

rengra · #19 Příspěvek od **rengra** » 22 srp 2011 22:29

asi už spím

,už to za chvíli budu mít

#20 Příspěvek od **vyosek** » 22 srp 2011 22:32

v pohode

rengra · #21 Příspěvek od **rengra** » 22 srp 2011 22:37

zajímalo by mě,jestli se pc sám nerestartuje kvůli těm problémům

All processes killed
========== FILES ==========
c:\windows\l1rezerv.exe moved successfully.
c:\windows\systemup.exe moved successfully.
c:\windows\unrar.exe moved successfully.
c:\windows\sysdriver32.exe moved successfully.
c:\windows\update.tray-12-0-lnk folder moved successfully.
File/Folder C:\WINDOWS\system32\*.tmp.dll not found.
C:\WINDOWS\system32\SET17A.tmp moved successfully.
C:\WINDOWS\system32\SET17F.tmp moved successfully.
C:\WINDOWS\system32\SET186.tmp moved successfully.
C:\WINDOWS\system32\SET1CE.tmp moved successfully.
C:\WINDOWS\002630_.tmp moved successfully.
C:\WINDOWS\002633_.tmp moved successfully.
C:\WINDOWS\002703_.tmp moved successfully.
C:\WINDOWS\A5B5A16D277A476B8F621029A2F23072.TMP folder moved successfully.
C:\WINDOWS\SET3.tmp moved successfully.
C:\WINDOWS\SET4.tmp moved successfully.
C:\WINDOWS\SET8.tmp moved successfully.
========== COMMANDS ==========
C:\WINDOWS\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: foxxx
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes
->FireFox cache emptied: 41990139 bytes
->Google Chrome cache emptied: 71090415 bytes
->Flash cache emptied: 1458 bytes

User: Guest
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 114755 bytes

User: Lukas
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32902 bytes
->FireFox cache emptied: 44505108 bytes
->Google Chrome cache emptied: 0 bytes
->Flash cache emptied: 717 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 67 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 2504 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 150,00 mb

OTM by OldTimer - Version 3.1.18.0 log created on 08222011_233129

Files moved on Reboot...

Registry entries deleted on Reboot...

#22 Příspěvek od **vyosek** » 22 srp 2011 22:39

Ted uz by mel byt cisty, restarty jsou stale

rengra · #23 Příspěvek od **rengra** » 22 srp 2011 22:41

mě se ale restart dvakrát za sebou nevyvedl.........jak na obrazovce naskočil nápis vypínání tak se zastavil,čekala jsem a čekala,cca 5 minut a dokončila restart ručně.
Ještě jedna důležitá otázečka:jakým programem mám čistit pc a jak často?

#24 Příspěvek od **vyosek** » 22 srp 2011 22:48

Odinstalujte Combofix

Prejmenujte ComboFix na Uninstall
Spustte jej
Tohle smaze Combofix a jeho slozky

T-Cleaner http://vyosek.ic.cz/pro_usery/T-Cleaner.exe

Stahnete a spustte
Pro potvrzeni volby mackejte A, Enter
Po pouziti utilitu smazte
Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

OTC http://oldtimer.geekstogo.com/OTC.exe

Stahnete a spustte
Kliknete na CleanUp a potvrdte YES
Program uklidi a restartuje PC

TFC http://oldtimer.geekstogo.com/TFC.exe

Stahnete a spustte
Kliknete na Start a potvrdte OK
Program uklidi a restartuje pc
Po pouziti utilitu smazte

Stahnete Ccleaner (viz muj podpis)
Panel čistič

Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

dejte Hledej problémy
nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za tyden

vycistete PC timto http://files.avast.com/files/eng/aswclear.exe a timto http://files.avast.com/files/eng/aswclear.exe

Nainstalujte Avast Free http://www.avast.com/cs-cz/free-antivirus-download

Napiste jak se chova PC

rengra · #25 Příspěvek od **rengra** » 23 srp 2011 08:04

Hezké ráno,
vše dle nápovědy splněno.Počítač je o něco rychlejší,už ho netrápí viróza

Jen ráno při zapnutí mi naskočila tabulka,že počítač není chráněn,a to jsem nainstalovala avast! Musí být zapnuté aktualizace pro antivirus?A brána firewall?

Já jsem opravdu amatérka na pc

Posílám RSIT pro kontrolu,moc děkuji

Logfile of random's system information tool 1.09 (written by random/random)
Run by Lukas at 2011-08-23 09:02:18
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 34 GB (57%) free of 60 GB
Total RAM: 255 MB (24% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:02:37, on 23.8.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17099)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Ontrack\ZipMagic\zm32nt.exe
C:\Program Files\AVAST Software\Avast\avastUI.exe
C:\WINDOWS\system32\devldr32.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Documents and Settings\Lukas\Dokumenty\Stažené soubory\RSIT.exe
C:\Program Files\trend micro\Lukas.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: (no name) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - (no file)
O1 - Hosts: ˙ţ127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O3 - Toolbar: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - (no file)
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [ZipMagic] C:\Program Files\Ontrack\ZipMagic\zm32nt.exe
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: WikiKomentáře Google... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html
O9 - Extra button: Click to call with Skype - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Click to call with Skype - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - (no file)
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - (no file)
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: SF FrontLine Drivers Auto Removal (v1) (sfrem01) - Protection Technology (StarForce) - C:\WINDOWS\system32\sfrem01.exe

--
End of file - 5047 bytes

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Lukas\Data aplikací\Mozilla\Firefox\Profiles\sdh7bfk3.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "www.seznam.cz"
prefs.js - "extensions.enabledItems" - "{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}:5.5.0.8013, toolbar@ask.com:3.12.2.100006, wrc@avast.com:6.0.1203, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.17"

"m3ffxtbr@mywebsearch.com"=C:\Program Files\MyWebSearch\bar\1.bin
"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll

C:\Program Files\Mozilla Firefox\extensions\
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files\Mozilla Firefox\components\
browser.xpt
browserdirprovider.dll
brwsrcmp.dll
components.list
compreg.dat
FeedConverter.js
FeedProcessor.js
FeedWriter.js
fuelApplication.js
GPSDGeolocationProvider.js
jsconsole-clhandler.js
NetworkGeolocationProvider.js
nsAddonRepository.js
nsBadCertHandler.js
nsBlocklistService.js
nsBrowserContentHandler.js
nsBrowserGlue.js
nsContentDispatchChooser.js
nsContentPrefService.js
nsDefaultCLH.js
nsDownloadManagerUI.js
nsExtensionManager.js
nsFormAutoComplete.js
nsHandlerService.js
nsHelperAppDlg.js
nsINIProcessor.js
nsLivemarkService.js
nsLoginInfo.js
nsLoginManager.js
nsLoginManagerPrompter.js
nsMicrosummaryService.js
nsPlacesAutoComplete.js
nsPlacesDBFlush.js
nsPlacesTransactionsService.js
nsPrivateBrowsingService.js
nsProxyAutoConfig.js
nsSafebrowsingApplication.js
nsSearchService.js
nsSearchSuggestions.js
nsSessionStartup.js
nsSessionStore.js
nsSetDefaultBrowser.js
nsSidebar.js
nsTaggingService.js
nsTryToClose.js
nsUpdateService.js
nsUpdateServiceStub.js
nsUpdateTimerManager.js
nsUrlClassifierLib.js
nsUrlClassifierListManager.js
nsURLFormatter.js
nsWebHandlerApp.js
pluginGlue.js
storage-Legacy.js
storage-mozStorage.js
txEXSLTRegExFunctions.js
WebContentConverter.js
xpti.dat

C:\Program Files\Mozilla Firefox\plugins\
npnul32.dll
nppdf32.dll

C:\Program Files\Mozilla Firefox\searchplugins\
google.xml
jyxo-cz.xml
mall-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Documents and Settings\Lukas\Data aplikací\Mozilla\Firefox\Profiles\sdh7bfk3.default\extensions\
toolbar@ask.com

C:\Documents and Settings\Lukas\Data aplikací\Mozilla\Firefox\Profiles\sdh7bfk3.default\searchplugins\
askcom.xml
mywebsearch.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2011-07-04 820864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-07-11 3821568]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{32099AAC-C132-4136-9E9A-4E364A424E17}
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2011-07-04 820864]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"ZipMagic"=C:\Program Files\Ontrack\ZipMagic\zm32nt.exe [2011-08-22 90112]
"avast"=C:\Program Files\AVAST Software\Avast\avastUI.exe [2011-07-04 3493720]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableSecureUIAPaths"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Valve\hl.exe"="C:\Program Files\Valve\hl.exe:*:Disabled:Half-Life Launcher"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Metin2\metin2.bin"="C:\Program Files\Metin2\metin2.bin:*:Enabled:metin2"
"C:\Program Files\Metin2\metin2client.bin"="C:\Program Files\Metin2\metin2client.bin:*:Enabled:metin2client"
"C:\Documents and Settings\foxxx\Local Settings\Data aplikací\Skype\Phone\Skype.exe"="C:\Documents and Settings\foxxx\Local Settings\Data aplikací\Skype\Phone\Skype.exe:*:Disabled:Skype "
"C:\Program Files\www.Cstr1k3rs.uCoz.Com\CarbonCS v1.1\cstrike.exe"="C:\Program Files\www.Cstr1k3rs.uCoz.Com\CarbonCS v1.1\cstrike.exe:*:Enabled:CarbonCS v1.1"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=ctwdm32.dll
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"VIDC.FPS1"=frapsvid.dll

======List of files/folders created in the last 1 month======

2011-08-23 09:02:18 ----D---- C:\rsit
2011-08-23 00:27:12 ----A---- C:\WINDOWS\system32\drivers\aswFsBlk.sys
2011-08-23 00:27:11 ----A---- C:\WINDOWS\system32\drivers\aswSP.sys
2011-08-23 00:27:07 ----A---- C:\WINDOWS\system32\drivers\aswRdr.sys
2011-08-23 00:27:06 ----A---- C:\WINDOWS\system32\drivers\aswTdi.sys
2011-08-23 00:27:06 ----A---- C:\WINDOWS\system32\drivers\aswmon2.sys
2011-08-23 00:27:06 ----A---- C:\WINDOWS\system32\drivers\aswmon.sys
2011-08-23 00:27:05 ----A---- C:\WINDOWS\system32\drivers\aavmker4.sys
2011-08-23 00:26:26 ----A---- C:\WINDOWS\system32\aswBoot.exe
2011-08-23 00:26:09 ----D---- C:\Program Files\AVAST Software
2011-08-23 00:26:09 ----D---- C:\Documents and Settings\All Users\Data aplikací\AVAST Software
2011-08-23 00:11:17 ----D---- C:\Program Files\CCleaner
2011-08-22 23:52:14 ----SD---- C:\Uninstall
2011-08-22 23:31:38 ----SHD---- C:\RECYCLER
2011-08-22 23:11:33 ----D---- C:\WINDOWS\temp
2011-08-22 21:49:48 ----A---- C:\Boot.bak
2011-08-22 21:49:41 ----RASHD---- C:\cmdcons
2011-08-22 19:48:48 ----D---- C:\Program Files\trend micro
2011-08-22 15:21:13 ----ASH---- C:\hiberfil.sys
2011-08-22 15:09:27 ----A---- C:\WINDOWS\system32\drivers\aswSnx.sys
2011-08-22 15:08:49 ----A---- C:\WINDOWS\avastSS.scr
2011-08-22 15:01:15 ----D---- C:\SOPHTEMP
2011-08-22 14:47:04 ----A---- C:\WINDOWS\system32\drivers\ZmNTMon.sys
2011-08-22 14:46:39 ----D---- C:\Documents and Settings\Lukas\Data aplikací\Ontrack
2011-08-22 14:46:29 ----D---- C:\Program Files\Ontrack
2011-08-22 13:59:20 ----D---- C:\Program Files\AMD APP
2011-08-22 13:58:52 ----D---- C:\Program Files\ATI
2011-08-22 13:57:44 ----D---- C:\Program Files\ATI Technologies
2011-08-22 13:53:11 ----D---- C:\Fraps
2011-08-22 12:37:42 ----D---- C:\ATI
2011-08-22 12:26:09 ----A---- C:\WINDOWS\iecheck_iplist.txt
2011-08-22 12:26:08 ----A---- C:\WINDOWS\btc_client_iplist.txt
2011-08-22 12:23:23 ----A---- C:\WINDOWS\iplist.txt
2011-08-22 12:22:40 ----A---- C:\WINDOWS\front_ip_list.txt
2011-08-22 11:59:04 ----A---- C:\WINDOWS\winlog-ids.txt
2011-08-22 11:59:04 ----A---- C:\WINDOWS\winlog-dirs.txt
2011-08-22 11:10:30 ----A---- C:\WINDOWS\system32\f3PSSavr.scr
2011-08-09 14:54:51 ----A---- C:\WINDOWS\system32\wbhelp2.dll
2011-08-09 14:54:51 ----A---- C:\WINDOWS\system32\W95INF32.DLL
2011-08-09 14:54:51 ----A---- C:\WINDOWS\system32\W95INF16.DLL
2011-08-09 14:54:51 ----A---- C:\WINDOWS\system32\unicows.dll
2011-08-09 14:54:51 ----A---- C:\WINDOWS\system32\gdiplus.dll
2011-08-09 14:54:51 ----A---- C:\WINDOWS\system32\anim.dll
2011-08-09 14:54:49 ----D---- C:\Program Files\WinUtilities
2011-08-08 19:55:19 ----A---- C:\WINDOWS\system32\drivers\usbser.sys
2011-07-31 10:32:44 ----D---- C:\Program Files\Football Game
2011-07-31 09:35:46 ----A---- C:\WINDOWS\system32\frapsvid.dll
2011-07-28 17:49:12 ----A---- C:\WINDOWS\system32\OVDecode.dll
2011-07-28 17:48:54 ----A---- C:\WINDOWS\system32\OpenCL.dll
2011-07-28 17:48:36 ----A---- C:\WINDOWS\system32\amdocl.dll
2011-07-28 15:50:17 ----RD---- C:\Program Files\Skype

======List of files/folders modified in the last 1 month======

2011-08-23 09:02:25 ----D---- C:\WINDOWS\Prefetch
2011-08-23 08:32:10 ----D---- C:\WINDOWS\system32\ias
2011-08-23 08:31:06 ----A---- C:\WINDOWS\ModemLog_Sériový kabel mezi dvěma počítači.txt
2011-08-23 08:30:52 ----D---- C:\WINDOWS
2011-08-23 00:38:27 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-08-23 00:27:12 ----D---- C:\WINDOWS\system32\drivers
2011-08-23 00:26:48 ----SHD---- C:\WINDOWS\Installer
2011-08-23 00:26:47 ----D---- C:\WINDOWS\WinSxS
2011-08-23 00:26:26 ----D---- C:\WINDOWS\system32
2011-08-23 00:26:09 ----RD---- C:\Program Files
2011-08-23 00:12:14 ----D---- C:\Documents and Settings\Lukas\Data aplikací\Skype
2011-08-23 00:12:14 ----D---- C:\Documents and Settings\Lukas\Data aplikací\DAEMON Tools Lite
2011-08-22 23:52:48 ----D---- C:\WINDOWS\system32\Restore
2011-08-22 23:31:34 ----D---- C:\WINDOWS\system32\drivers\etc
2011-08-22 23:09:46 ----SD---- C:\WINDOWS\Tasks
2011-08-22 23:06:19 ----A---- C:\WINDOWS\system.ini
2011-08-22 22:58:36 ----D---- C:\WINDOWS\system32\config
2011-08-22 22:54:57 ----D---- C:\WINDOWS\AppPatch
2011-08-22 22:54:54 ----D---- C:\Program Files\Common Files
2011-08-22 22:45:01 ----D---- C:\WINDOWS\system32\CatRoot2
2011-08-22 21:49:48 ----RASH---- C:\boot.ini
2011-08-22 15:47:28 ----D---- C:\Program Files\Mozilla Firefox
2011-08-22 14:56:12 ----D---- C:\WINDOWS\Minidump
2011-08-22 14:56:12 ----D---- C:\WINDOWS\Debug
2011-08-22 14:46:52 ----HD---- C:\WINDOWS\inf
2011-08-22 13:03:51 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2011-08-22 12:55:42 ----DC---- C:\WINDOWS\system32\DRVSTORE
2011-08-22 12:55:10 ----D---- C:\WINDOWS\system32\Macromed
2011-08-22 12:55:10 ----D---- C:\WINDOWS\system32\Adobe
2011-08-22 12:55:10 ----D---- C:\Documents and Settings\Lukas\Data aplikací\Macromedia
2011-08-22 12:55:10 ----D---- C:\Documents and Settings\Lukas\Data aplikací\Adobe
2011-08-22 12:32:45 ----SHD---- C:\System Volume Information
2011-08-22 12:19:22 ----D---- C:\Documents and Settings
2011-08-22 09:54:25 ----D---- C:\WINDOWS\system32\drivers\AVG
2011-08-22 09:18:36 ----A---- C:\WINDOWS\NeroDigital.ini
2011-08-17 10:57:08 ----D---- C:\Program Files\Metin2
2011-08-14 09:27:27 ----D---- C:\Program Files\Gothic II
2011-08-13 12:09:34 ----D---- C:\Program Files\Valve
2011-08-10 10:37:54 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-08-10 10:37:31 ----HD---- C:\WINDOWS\$hf_mig$
2011-08-10 10:37:08 ----D---- C:\WINDOWS\system32\cs-cz
2011-08-10 10:36:50 ----D---- C:\Program Files\Internet Explorer
2011-08-10 10:36:32 ----D---- C:\WINDOWS\ie7updates
2011-08-10 10:32:12 ----A---- C:\WINDOWS\system32\MRT.exe
2011-08-10 09:36:39 ----D---- C:\WINDOWS\system32\CatRoot
2011-08-02 10:21:19 ----D---- C:\Program Files\MASHED
2011-08-02 10:11:04 ----D---- C:\Program Files\Slovak Racer
2011-07-29 08:52:17 ----D---- C:\Documents and Settings\Lukas\Data aplikací\skypePM
2011-07-28 16:00:41 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype Extras
2011-07-27 11:08:19 ----D---- C:\Documents and Settings\All Users\Data aplikací\AlawarWrapper

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AVGIDSEH;AVGIDSEH; C:\WINDOWS\system32\DRIVERS\AVGIDSEH.Sys [2011-02-22 22992]
R0 Avgrkx86;AVG Anti-Rootkit Driver; C:\WINDOWS\system32\DRIVERS\avgrkx86.sys [2011-03-16 32592]
R0 prohlp02;StarForce Protection Helper Driver v2; C:\WINDOWS\System32\drivers\prohlp02.sys [2004-05-13 111808]
R0 prosync1;StarForce Protection Synchronization Driver v1; C:\WINDOWS\System32\drivers\prosync1.sys [2003-09-06 6944]
R0 sfdrv01;StarForce Protection Environment Driver (version 1.x); C:\WINDOWS\system32\drivers\sfdrv01.sys [2006-05-10 51200]
R0 sfhlp01;StarForce Protection Helper Driver; C:\WINDOWS\System32\drivers\sfhlp01.sys [2003-12-01 4832]
R0 sfhlp02;StarForce Protection Helper Driver (version 2.x); C:\WINDOWS\system32\drivers\sfhlp02.sys [2006-05-10 6656]
R0 sfsync04;StarForce Protection Synchronization Driver (version 4.x); C:\WINDOWS\system32\drivers\sfsync04.sys [2006-05-10 52224]
R0 viaagp;Filtr VIA sběrnice AGP ; C:\WINDOWS\system32\DRIVERS\viaagp.sys [2008-04-13 42240]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
R0 zmNTMon;zmNTMon; C:\WINDOWS\system32\drivers\zmNTMon.sys [2011-08-22 5760]
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2011-07-04 30808]
R1 AmdK7;Ovladač procesoru AMD K7; C:\WINDOWS\system32\DRIVERS\amdk7.sys [2008-04-14 41600]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2011-07-04 25432]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2011-07-04 309848]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2011-07-04 43608]
R1 Avgldx86;AVG AVI Loader Driver; C:\WINDOWS\system32\DRIVERS\avgldx86.sys [2011-01-07 248656]
R1 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield; C:\WINDOWS\system32\DRIVERS\avgmfx86.sys [2011-03-01 34896]
R1 Avgtdix;AVG TDI Driver; C:\WINDOWS\system32\DRIVERS\avgtdix.sys [2011-04-05 297168]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\WINDOWS\system32\DRIVERS\dtsoftbus01.sys [2011-03-26 218688]
R1 InCDPass;Nero InCDPass; C:\WINDOWS\system32\drivers\InCDPass.sys [2008-02-18 36648]
R1 incdrm;Nero InCD MRW Remapper; C:\WINDOWS\system32\drivers\InCDRm.sys [2008-02-18 38312]
R1 prodrv06;StarForce Protection Environment Driver v6; C:\WINDOWS\System32\drivers\prodrv06.sys [2004-05-13 79488]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2011-07-04 19544]
R2 aswMon2;aswMon2; C:\WINDOWS\system32\drivers\aswMon2.sys [2011-07-04 102616]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2004-08-17 701440]
R3 ctljystk;Game port pro zařízení Creative SB Live!; C:\WINDOWS\system32\DRIVERS\ctljystk.sys [2001-08-17 3712]
R3 EL90XBC;3Com EtherLink XL 90XB/C Adapter Driver; C:\WINDOWS\system32\DRIVERS\el90xbc5.sys [2001-08-17 66591]
R3 emu10k;Creative SB Live! (WDM); C:\WINDOWS\system32\drivers\emu10k1m.sys [2001-08-17 283904]
R3 emu10k1;Creative Interface Manager Driver (WDM); C:\WINDOWS\system32\drivers\ctlfacem.sys [2001-08-17 6912]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINDOWS\System32\Drivers\RootMdm.sys [2004-08-18 5888]
R3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-03 20992]
R3 sfman;Creative SoundFont Manager Driver (WDM); C:\WINDOWS\system32\drivers\sfmanm.sys [2001-08-17 36480]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R4 InCDfs;Nero InCD File System; C:\WINDOWS\system32\drivers\InCDFs.sys [2008-02-18 118952]
S1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
S3 AVGIDSDriver;AVGIDSDriver; C:\WINDOWS\system32\DRIVERS\AVGIDSDriver.Sys [2011-04-14 134480]
S3 AVGIDSFilter;AVGIDSFilter; C:\WINDOWS\system32\DRIVERS\AVGIDSFilter.Sys [2011-02-10 24144]
S3 AVGIDSShim;AVGIDSShim; C:\WINDOWS\system32\DRIVERS\AVGIDSShim.Sys [2011-02-10 27216]
S3 EagleNT;EagleNT; \??\C:\WINDOWS\system32\drivers\EagleNT.sys []
S3 nmwcd;Nokia USB Phone Parent; C:\WINDOWS\system32\drivers\ccdcmb.sys [2008-05-02 17536]
S3 nmwcdc;Nokia USB Generic; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2008-05-02 20864]
S3 rtl8185;Realtek RTL8185 54M Wireless LAN Network Adapter Driver; C:\WINDOWS\system32\DRIVERS\rtl8185.sys [2007-07-18 306688]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2008-05-02 8064]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\drivers\usbser.sys [2008-04-13 26112]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2008-05-02 8064]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2006-11-02 492000]
S3 WpdUsb;WpdUsb; C:\WINDOWS\System32\Drivers\wpdusb.sys [2006-10-18 38528]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S3 zmNTZip;zmNTZip; \??\C:\Program Files\Ontrack\ZipMagic\zmNTZip.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2011-07-04 42184]
R2 InCDsrv;InCD Helper; C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe [2008-02-18 1553704]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-20 322120]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S1 InCDrec;Nero InCD File System Recognizer; C:\WINDOWS\system32\drivers\InCDRec.sys [2008-02-18 16040]
S2 sfrem01;SF FrontLine Drivers Auto Removal (v1); C:\WINDOWS\system32\sfrem01.exe [2006-05-10 353912]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe [2007-06-27 279848]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]

-----------------EOF-----------------

#26 Příspěvek od **vyosek** » 23 srp 2011 08:35

Hezke rano princezno

Avast je velmi dobra volba, je to asi nejlepsi free antivir. Samozrejme musi mit zapnute aktualizace, aby mel aktualni databazi haveti

Takze firewall je jeden z bezpecnostnich prvku

Ale nejdulezitejsi pro bezpecnost je rozum = neklikat na kdejakou blikajici a skakajici blbinu, premyslet nez neco stahnut atd. Zkratka at nejsou prsty rychlejsi nez rozum.

Spustte HJT a provedeme fixnuti polozek

HJT najdete zde C:\Program Files\trend micro\Lukas.exe/b]
Otevre se Vam okno, kliknete na Do a system scan only
V dalsim okne najdete radky které jsem Vam vypsal nize, vedle nich je ctverecek, do ktereho udelate zatrzitko
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: (no name) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - (no file)
O3 - Toolbar: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - (no file)
O18 - Protocol: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - (no file)
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - (no file)
Kliknete na Fix checked (vlevo dole)
HJT se Vas zepta zda opravdu ANO, s tim souhlasite a je hotovo

On ten PC ani rychly nikdy nebude - je tam velmi malo RAM pameti, pro pohodovy beh by to chtelo asi tak 4nasobek

rengra · #27 Příspěvek od **rengra** » 23 srp 2011 08:56

Hotovo

mám ještě poslat něco pro kontrolu?

#28 Příspěvek od **vyosek** » 23 srp 2011 13:40

Uz neni treba, videl jsem toho dost

rengra · #29 Příspěvek od **rengra** » 23 srp 2011 19:40

Mockrát děkuji za pomoc,jste úplně suprovní

#30 Příspěvek od **vyosek** » 23 srp 2011 20:14

Nemate zac, rad jsem pomohl

VIRY.CZ

http://www.viry.cz/forum/viewtopic.php?f=13&t=105895

Re: http://www.viry.cz/forum/viewtopic.php?f=13&t=105895

Re: http://www.viry.cz/forum/viewtopic.php?f=13&t=105895

Re: http://www.viry.cz/forum/viewtopic.php?f=13&t=105895

Re: http://www.viry.cz/forum/viewtopic.php?f=13&t=105895

Re: http://www.viry.cz/forum/viewtopic.php?f=13&t=105895

Re: http://www.viry.cz/forum/viewtopic.php?f=13&t=105895

Re: http://www.viry.cz/forum/viewtopic.php?f=13&t=105895

Re: http://www.viry.cz/forum/viewtopic.php?f=13&t=105895

Re: http://www.viry.cz/forum/viewtopic.php?f=13&t=105895

Re: http://www.viry.cz/forum/viewtopic.php?f=13&t=105895

Re: http://www.viry.cz/forum/viewtopic.php?f=13&t=105895

Re: http://www.viry.cz/forum/viewtopic.php?f=13&t=105895

Re: http://www.viry.cz/forum/viewtopic.php?f=13&t=105895

Re: http://www.viry.cz/forum/viewtopic.php?f=13&t=105895

Re: http://www.viry.cz/forum/viewtopic.php?f=13&t=105895