občasne seknuti pc,vir rozesilajici odkazy

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz

Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Odpovědět
Zpráva
Autor
Jetyx
Návštěvník
Návštěvník
Příspěvky: 72
Registrován: 15 Pro 2010 08:18

občasne seknuti pc,vir rozesilajici odkazy

#1 Příspěvek od Jetyx »

Logfile of random's system information tool 1.09 (written by random/random)
Run by Jetyxx at 2011-11-10 11:24:22
Microsoft Windows XP Home Edition Service Pack 2
System drive C: has 112 GB (59%) free of 191 GB
Total RAM: 1023 MB (8% free)

HijackThis download failed

======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-299502267-1177238915-839522115-1004Core.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-299502267-1177238915-839522115-1004UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-06-06 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~3\Office12\GRA8E1~1.DLL [2006-10-26 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Plug-In - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-02-11 1246600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-11-09 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2011-11-09 79648]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"CHotkey"=C:\WINDOWS\mHotkey.exe [2002-07-23 477184]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2005-01-20 77824]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2006-11-17 7700480]
"nwiz"=nwiz.exe /install []
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2006-11-17 86016]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-26 31016]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-06-06 937920]
"HTC Sync Loader"=C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe [2011-03-08 585728]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2011-06-09 254696]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2011-09-08 3076144]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2004-08-18 15360]
"Google Update"=C:\Documents and Settings\Jetyxx\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe [2011-10-10 136176]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2011-08-02 4910912]
"Microsoft® Windows® Operating System"=C:\DOCUME~1\Jetyxx\LOCALS~1\Temp\System\audioadg.exe [2011-10-12 8704]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2011-03-08 17037704]
"Bpnunv"=C:\Documents and Settings\Jetyxx\Data aplikací\Bpnunv.exe []
"HKCU"=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\setting.exe []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"Microsoft® Windows® Operating System"=C:\DOCUME~1\Jetyxx\LOCALS~1\Temp\System\audioadg.exe [2011-10-12 8704]
"Policies"=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\setting.exe []

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Aktualizovat ESET licenci.lnk - C:\Program Files\ESET\MiNODLogin\MiNODLogin.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~3\Office12\GRA8E1~1.DLL [2006-10-26 2210608]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\BitTorrent\BitTorrent.exe"="C:\Program Files\BitTorrent\BitTorrent.exe:*:Enabled:BitTorrent"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Program Files\Garena Classic\Garena.exe"="C:\Program Files\Garena Classic\Garena.exe:*:Enabled:Garena"
"C:\Program Files\Garena Plus\Room\garena_room.exe"="C:\Program Files\Garena Plus\Room\garena_room.exe:*:Enabled:Garena"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"msacm.lhacm"=lhacm.acm

======List of files/folders created in the last 1 month======

2011-11-10 11:24:23 ----D---- C:\Program Files\trend micro
2011-11-10 11:24:22 ----D---- C:\rsit
2011-11-09 23:24:19 ----D---- C:\Documents and Settings\Jetyxx\Data aplikací\ESET
2011-11-09 23:23:46 ----D---- C:\WINDOWS\LastGood
2011-11-09 23:22:50 ----D---- C:\Program Files\Common Files\Java
2011-11-09 23:22:50 ----D---- C:\Documents and Settings\All Users\Data aplikací\Sun
2011-11-09 23:22:42 ----A---- C:\WINDOWS\system32\javaws.exe
2011-11-09 23:22:42 ----A---- C:\WINDOWS\system32\javaw.exe
2011-11-09 23:22:42 ----A---- C:\WINDOWS\system32\java.exe
2011-11-09 23:22:42 ----A---- C:\WINDOWS\system32\deployJava1.dll
2011-11-09 23:22:34 ----D---- C:\Program Files\Java
2011-11-09 23:21:54 ----D---- C:\Documents and Settings\Jetyxx\Data aplikací\Sun
2011-11-09 23:21:13 ----D---- C:\Program Files\ESET
2011-11-09 23:21:13 ----D---- C:\Documents and Settings\All Users\Data aplikací\ESET
2011-11-09 21:34:06 ----A---- C:\Documents and Settings\Jetyxx\Data aplikací\5.exe
2011-11-09 21:34:01 ----A---- C:\Documents and Settings\Jetyxx\Data aplikací\4.exe
2011-11-09 21:33:55 ----A---- C:\Documents and Settings\Jetyxx\Data aplikací\3.exe
2011-11-08 19:27:29 ----D---- C:\Program Files\CCleaner
2011-11-08 19:24:43 ----A---- C:\Documents and Settings\Jetyxx\Data aplikací\52D.exe
2011-11-08 19:24:37 ----A---- C:\Documents and Settings\Jetyxx\Data aplikací\52B.tmp
2011-11-08 19:24:31 ----A---- C:\Documents and Settings\Jetyxx\Data aplikací\52A.exe
2011-11-08 19:24:24 ----A---- C:\Documents and Settings\Jetyxx\Data aplikací\529.exe
2011-11-08 19:24:13 ----A---- C:\Documents and Settings\Jetyxx\Data aplikací\528.exe
2011-11-07 23:44:13 ----D---- C:\Documents and Settings\Jetyxx\Data aplikací\HTC.388BC06ACDAB6261375BCE37FBA2E023C0D7EE34.1
2011-11-06 20:30:55 ----N---- C:\WINDOWS\system32\spmsgXP_2k3.dll
2011-11-05 18:12:26 ----A---- C:\WINDOWS\system32\drivers\usb8023x.sys
2011-11-05 18:12:26 ----A---- C:\WINDOWS\system32\drivers\rndismpx.sys
2011-11-05 17:39:20 ----A---- C:\WINDOWS\system32\WdfCoInstaller01007.dll
2011-11-05 17:39:20 ----A---- C:\WINDOWS\system32\drivers\ANDROIDUSB.sys
2011-11-05 17:39:18 ----D---- C:\Program Files\Spirent Communications
2011-11-05 17:38:52 ----D---- C:\WINDOWS\system32\drivers\umdf
2011-11-05 14:55:57 ----D---- C:\Program Files\Common Files\Skype
2011-11-05 14:55:54 ----RD---- C:\Program Files\Skype
2011-11-05 14:47:42 ----D---- C:\Config.Msi
2011-11-05 13:31:36 ----AH---- C:\WINDOWS\system32\ezsidmv.dat
2011-11-05 13:31:34 ----D---- C:\Documents and Settings\Jetyxx\Data aplikací\skypePM
2011-11-05 13:30:37 ----D---- C:\Program Files\Skype(2)
2011-11-04 22:01:39 ----HDC---- C:\WINDOWS\$NtUninstallWdf01007$
2011-11-04 21:49:13 ----D---- C:\Documents and Settings\Jetyxx\Data aplikací\HTC
2011-11-04 21:47:52 ----D---- C:\Program Files\HTC
2011-11-04 21:47:50 ----D---- C:\Program Files\Common Files\Adobe AIR
2011-11-04 21:47:21 ----HDC---- C:\WINDOWS\$NtUninstallWMFDist11$
2011-11-04 21:46:57 ----D---- C:\Program Files\MSXML 4.0
2011-10-27 20:41:12 ----D---- C:\Documents and Settings\Jetyxx\Data aplikací\teamspeak2
2011-10-27 20:40:43 ----D---- C:\Program Files\Teamspeak2_RC2
2011-10-22 14:57:07 ----D---- C:\WINDOWS\InstallDir
2011-10-21 16:46:11 ----D---- C:\Documents and Settings\Jetyxx\Data aplikací\Dev-Cpp
2011-10-21 16:45:58 ----D---- C:\Dev-Cpp
2011-10-21 15:10:38 ----D---- C:\Program Files\Stardock
2011-10-21 15:02:04 ----D---- C:\Documents and Settings\Jetyxx\Data aplikací\Rainmeter
2011-10-21 14:44:03 ----A---- C:\WINDOWS\msvcr90.dll
2011-10-21 14:44:03 ----A---- C:\WINDOWS\msvcr80.dll
2011-10-21 14:44:03 ----A---- C:\WINDOWS\msvcr71.dll
2011-10-21 14:44:03 ----A---- C:\WINDOWS\msvcr70.dll
2011-10-21 14:44:03 ----A---- C:\WINDOWS\msvcr100.dll
2011-10-21 14:44:03 ----A---- C:\WINDOWS\msvcp80.dll
2011-10-21 14:44:03 ----A---- C:\WINDOWS\msvcp71.dll
2011-10-21 14:17:30 ----D---- C:\WINDOWS\SxsCaPendDel
2011-10-21 14:16:25 ----A---- C:\WINDOWS\spyxx.INI
2011-10-21 13:56:41 ----D---- C:\Documents and Settings\Jetyxx\Data aplikací\GetRightToGo
2011-10-19 14:08:35 ----D---- C:\Documents and Settings\Jetyxx\Data aplikací\GarenaPlus
2011-10-19 14:08:11 ----D---- C:\Program Files\Garena Plus
2011-10-19 14:08:09 ----D---- C:\Documents and Settings\All Users\Data aplikací\GarenaMessenger
2011-10-12 17:55:22 ----A---- C:\Documents and Settings\Jetyxx\Data aplikací\room_v3.dat
2011-10-12 11:01:47 ----RSD---- C:\WINDOWS\assembly
2011-10-12 11:01:30 ----D---- C:\WINDOWS\Microsoft.NET
2011-10-12 10:42:02 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2011-10-12 10:41:45 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2011-10-12 10:41:39 ----HDC---- C:\WINDOWS\$NtUninstallKB981350$
2011-10-12 10:41:35 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2011-10-12 10:41:31 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2011-10-12 10:40:21 ----HDC---- C:\WINDOWS\$NtUninstallKB978338$
2011-10-12 10:40:00 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2011-10-12 10:39:57 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$
2011-10-12 10:39:53 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
2011-10-12 10:39:33 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$
2011-10-12 10:39:27 ----HDC---- C:\WINDOWS\$NtUninstallKB978542$
2011-10-11 19:16:08 ----D---- C:\Program Files\Common Files\Adobe
2011-10-11 19:16:08 ----D---- C:\Program Files\Adobe
2011-10-11 19:15:34 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2011-10-11 19:11:51 ----D---- C:\Documents and Settings\All Users\Data aplikací\McAfee
2011-10-11 16:11:35 ----D---- C:\plugins
2011-10-11 15:53:32 ----D---- C:\Documents and Settings\Jetyxx\Data aplikací\WinRAR
2011-10-11 15:53:27 ----D---- C:\Program Files\WinRAR
2011-10-11 15:47:58 ----D---- C:\Program Files\Garena Classic

======List of files/folders modified in the last 1 month======

2011-11-10 11:24:23 ----RD---- C:\Program Files
2011-11-10 11:21:47 ----D---- C:\Documents and Settings\Jetyxx\Data aplikací\Skype
2011-11-10 00:54:11 ----D---- C:\WINDOWS\Prefetch
2011-11-10 00:31:17 ----D---- C:\WINDOWS\Temp
2011-11-09 23:24:05 ----SHD---- C:\WINDOWS\Installer
2011-11-09 23:23:53 ----HD---- C:\WINDOWS\inf
2011-11-09 23:23:53 ----D---- C:\WINDOWS\system32\drivers
2011-11-09 23:23:46 ----D---- C:\WINDOWS
2011-11-09 23:22:50 ----D---- C:\Program Files\Common Files
2011-11-09 23:22:42 ----D---- C:\WINDOWS\system32
2011-11-09 22:34:09 ----D---- C:\Program Files\Warcraft III Frozen Throne eSK
2011-11-09 21:37:20 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-11-09 21:35:32 ----D---- C:\WINDOWS\system32\CatRoot2
2011-11-09 21:32:24 ----N---- C:\WINDOWS\SchedLgU.Txt
2011-11-08 19:27:58 ----D---- C:\Documents and Settings\Jetyxx\Data aplikací\BitTorrent
2011-11-05 18:12:33 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-11-05 17:39:21 ----DC---- C:\WINDOWS\system32\DRVSTORE
2011-11-05 17:38:52 ----D---- C:\Program Files\Windows Media Player
2011-11-05 17:38:27 ----D---- C:\WINDOWS\WinSxS
2011-11-05 15:06:14 ----D---- C:\WINDOWS\system32\CatRoot
2011-11-05 14:55:52 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2011-11-05 14:48:27 ----D---- C:\WINDOWS\system32\config
2011-11-05 14:48:15 ----D---- C:\WINDOWS\system32\wbem
2011-11-05 14:48:14 ----D---- C:\WINDOWS\Registration
2011-11-05 13:47:31 ----D---- C:\WINDOWS\system32\drivers\etc
2011-11-05 13:26:04 ----SD---- C:\Documents and Settings\Jetyxx\Data aplikací\Microsoft
2011-11-04 21:47:51 ----D---- C:\Documents and Settings\Jetyxx\Data aplikací\Adobe
2011-11-03 19:20:01 ----D---- C:\Documents and Settings\Jetyxx\Data aplikací\DAEMON Tools Lite
2011-11-03 19:20:00 ----D---- C:\WINDOWS\Logs
2011-11-03 19:20:00 ----D---- C:\WINDOWS\Debug
2011-11-02 21:02:32 ----D---- C:\WINDOWS\system32\Restore
2011-10-28 14:06:07 ----D---- C:\WINDOWS\system32\DirectX
2011-10-28 14:05:09 ----D---- C:\Documents and Settings
2011-10-25 18:12:26 ----D---- C:\Documents and Settings\Jetyxx\Data aplikací\vlc
2011-10-21 15:01:56 ----D---- C:\Program Files\Common Files\Microsoft Shared
2011-10-21 14:42:13 ----SD---- C:\WINDOWS\Tasks
2011-10-21 14:35:52 ----D---- C:\Program Files\Microsoft Visual Studio
2011-10-21 14:35:48 ----D---- C:\WINDOWS\Help
2011-10-21 14:12:18 ----A---- C:\WINDOWS\ODBCINST.INI
2011-10-18 19:30:55 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2011-10-12 11:40:14 ----RSD---- C:\WINDOWS\Fonts
2011-10-12 11:01:31 ----D---- C:\WINDOWS\system32\mui
2011-10-12 11:01:31 ----D---- C:\Program Files\Internet Explorer
2011-10-12 10:42:00 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2011-10-12 10:39:28 ----D---- C:\Program Files\Outlook Express
2011-10-11 16:32:35 ----SD---- C:\WINDOWS\Downloaded Program Files
2011-10-11 16:00:46 ----HD---- C:\WINDOWS\$hf_mig$
2011-10-11 14:31:56 ----D---- C:\WINDOWS\system32\CatRoot_bak
2011-10-11 06:29:16 ----D---- C:\Program Files\BitTorrent

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 nv_agp;NVIDIA nForce AGP Bus Filter; C:\WINDOWS\system32\DRIVERS\nv_agp.sys [2004-04-02 21760]
R0 nvatabus;nvatabus; C:\WINDOWS\system32\DRIVERS\nvatabus.sys [2004-06-03 79360]
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI VIA; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2004-08-18 61056]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\WINDOWS\system32\DRIVERS\dtsoftbus01.sys [2011-10-10 232512]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2011-08-04 118104]
R1 epfwtdi;epfwtdi; C:\WINDOWS\system32\DRIVERS\epfwtdi.sys [2011-08-04 61936]
R2 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2011-08-09 154136]
R2 epfw;epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [2011-08-04 147480]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2005-01-28 2310272]
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2004-08-18 60800]
R3 Epfwndis;Eset Personal Firewall; C:\WINDOWS\system32\DRIVERS\Epfwndis.sys [2011-08-04 39824]
R3 GGSAFERDriver;GGSAFER Driver; \??\C:\Program Files\Garena Plus\Room\safedrv.sys []
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2004-08-18 9600]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2004-08-18 12160]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2004-08-18 61824]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2006-11-17 3994688]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\WINDOWS\system32\DRIVERS\NVENETFD.sys [2004-05-17 33280]
R3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS\system32\DRIVERS\nvnetbus.sys [2004-05-17 12928]
S3 BrScnUsb;Brother USB Still Image driver; C:\WINDOWS\system32\DRIVERS\BrScnUsb.sys [2004-10-15 15295]
S3 HTCAND32;HTC Device Driver; C:\WINDOWS\System32\Drivers\ANDROIDUSB.sys [2009-06-10 24576]
S3 htcnprot;HTC NDIS Protocol Driver; C:\WINDOWS\system32\DRIVERS\htcnprot.sys [2010-06-22 21248]
S3 usb_rndisx;Adaptér USB RNDIS; C:\WINDOWS\system32\DRIVERS\usb8023x.sys [2004-08-03 12672]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-03 31616]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-03 25856]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2008-01-19 503144]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2011-09-08 974944]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2011-11-09 153376]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2006-11-17 159811]
R2 PassThru Service;Internet Pass-Through Service; C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe [2010-09-16 80896]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2005-09-23 29896]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2005-09-23 66240]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-26 65824]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]

-----------------EOF-----------------
Předem diky
Nahoru
Avatar uživatele
JaRon
Moderátor
Moderátor
Příspěvky: 15926
Registrován: 29 Bře 2005 13:39
Místo/Bydliště: BB-SK

Re: občasne seknuti pc,vir rozesilajici odkazy

#2 Příspěvek od JaRon »

Presun ComboFix
na plochu (ak tam este nie je)

otvor si Poznamkovy blok - notepad

do neho zkopiruj skript z nasledujiceho okna:

Kód: Vybrat vše

File::
C:\DOCUME~1\Jetyxx\LOCALS~1\Temp\System\audioadg.exe
uloz vytvoreny textovy soubor ako CFScript.txt na plochu

po ulozeni uchop vytvoreny skript lavym tlacitkom mysi a presun ho nad ikonu Combofixu, nad nim skript upust:

Obrázek

po aplikacii by mal vzniknut dalsi log, ten vloz sem :)
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Nahoru
Jetyx
Návštěvník
Návštěvník
Příspěvky: 72
Registrován: 15 Pro 2010 08:18

Re: občasne seknuti pc,vir rozesilajici odkazy

#3 Příspěvek od Jetyx »

po oběvení modreho okna se oběvy že se Combofix spuští a pak vyskočít tabulka:Zkoušeli ste apliovat CFSscript? Název CSFscript se zda byt nespravně hlaskovaný.
Nahoru
Jetyx
Návštěvník
Návštěvník
Příspěvky: 72
Registrován: 15 Pro 2010 08:18

Re: občasne seknuti pc,vir rozesilajici odkazy

#4 Příspěvek od Jetyx »

aha ne moje chyba blbe čtu:)
Nahoru
Jetyx
Návštěvník
Návštěvník
Příspěvky: 72
Registrován: 15 Pro 2010 08:18

Re: občasne seknuti pc,vir rozesilajici odkazy

#5 Příspěvek od Jetyx »

ComboFix 11-11-10.01 - Jetyxx 10.11.2011 11:51:04.1.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.2.1250.420.1029.18.1023.717 [GMT 1:00]
Spuštěný z: c:\documents and settings\Jetyxx\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Jetyxx\Plocha\CFScript.txt.txt
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\All Users\Start Menu\Programs\Startup\setting.exe
c:\documents and settings\Jetyxx\Data aplikací\4.exe
c:\documents and settings\Jetyxx\Data aplikací\5.exe
c:\documents and settings\Jetyxx\Data aplikací\52A.exe
c:\documents and settings\Jetyxx\Data aplikací\52B.tmp
c:\documents and settings\Jetyxx\Data aplikací\52D.exe
c:\windows\InstallDir
c:\windows\InstallDir\Server.exe
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-10-10 do 2011-11-10 )))))))))))))))))))))))))))))))
.
.
2011-11-10 10:41 . 2011-11-10 10:41 367883 ----a-w- c:\documents and settings\Jetyxx\Data aplikací\2.exe
2011-11-10 10:41 . 2011-11-10 10:41 184320 ----a-w- c:\documents and settings\Jetyxx\Data aplikací\Bpnunv.exe
2011-11-10 10:24 . 2011-11-10 10:24 -------- d-----w- c:\program files\trend micro
2011-11-10 10:24 . 2011-11-10 10:24 -------- d-----w- C:\rsit
2011-11-09 22:24 . 2011-11-09 22:24 -------- d-----w- c:\documents and settings\Jetyxx\Local Settings\Data aplikací\ESET
2011-11-09 22:24 . 2011-11-09 22:24 -------- d-----w- c:\documents and settings\Jetyxx\Data aplikací\ESET
2011-11-09 22:23 . 2011-11-09 22:23 -------- d-----w- c:\documents and settings\LocalService\Local Settings\Data aplikací\ESET
2011-11-09 22:22 . 2011-11-09 22:22 -------- d-----w- c:\program files\Common Files\Java
2011-11-09 22:22 . 2011-11-09 22:22 73728 ----a-w- c:\windows\system32\javacpl.cpl
2011-11-09 22:22 . 2011-11-09 22:22 472808 ----a-w- c:\windows\system32\deployJava1.dll
2011-11-09 22:22 . 2011-11-09 22:22 -------- d-----w- c:\program files\Java
2011-11-09 22:21 . 2011-11-10 10:42 -------- d-----w- c:\program files\ESET
2011-11-09 20:33 . 2011-11-10 10:41 398081 ----a-w- c:\documents and settings\Jetyxx\Data aplikací\3.exe
2011-11-08 18:27 . 2011-11-08 18:27 -------- d-----w- c:\program files\CCleaner
2011-11-08 18:24 . 2011-11-08 18:24 398081 ----a-w- c:\documents and settings\Jetyxx\Data aplikací\529.exe
2011-11-08 18:24 . 2011-11-08 18:24 367883 ----a-w- c:\documents and settings\Jetyxx\Data aplikací\528.exe
2011-11-06 19:30 . 2007-11-27 02:24 14640 ------w- c:\windows\system32\spmsgXP_2k3.dll
2011-11-05 17:12 . 2004-08-03 22:04 12672 -c--a-w- c:\windows\system32\dllcache\usb8023x.sys
2011-11-05 17:12 . 2004-08-03 22:04 12672 ----a-w- c:\windows\system32\drivers\usb8023x.sys
2011-11-05 17:12 . 2004-08-03 22:04 30080 -c--a-w- c:\windows\system32\dllcache\rndismpx.sys
2011-11-05 17:12 . 2004-08-03 22:04 30080 ----a-w- c:\windows\system32\drivers\rndismpx.sys
2011-11-04 20:46 . 2011-11-04 20:46 -------- d-----w- c:\program files\MSXML 4.0
2011-10-27 20:27 . 2011-10-27 20:28 -------- d-----w- c:\documents and settings\Jetyxx\Local Settings\Data aplikací\TeamSpeak 3 Client
2011-10-27 19:41 . 2011-10-27 19:42 -------- d-----w- c:\documents and settings\Jetyxx\Data aplikací\teamspeak2
2011-10-27 19:41 . 2011-10-27 19:41 34064 ----a-w- c:\windows\system32\lhacm.acm
2011-10-27 19:40 . 2011-10-27 20:25 -------- d-----w- c:\program files\Teamspeak2_RC2
2011-10-21 15:46 . 2011-10-21 15:50 -------- d-----w- c:\documents and settings\Jetyxx\Data aplikací\Dev-Cpp
2011-10-21 15:45 . 2011-10-29 20:48 -------- d-----w- C:\Dev-Cpp
2011-10-21 14:10 . 2011-10-21 14:10 -------- d-----w- c:\program files\Stardock
2011-10-21 14:02 . 2011-10-21 14:03 -------- d-----w- c:\documents and settings\Jetyxx\Data aplikací\Rainmeter
2011-10-21 13:44 . 2009-08-24 07:15 761152 ----a-w- c:\windows\msvcr100.dll
2011-10-21 13:44 . 2007-11-06 22:19 655872 ----a-w- c:\windows\msvcr90.dll
2011-10-21 13:44 . 2007-04-05 10:16 626688 ----a-w- c:\windows\msvcr80.dll
2011-10-21 13:44 . 2005-10-20 20:31 540672 ----a-w- c:\windows\msvcp80.dll
2011-10-21 13:44 . 2004-01-11 21:00 348160 ----a-w- c:\windows\msvcr71.dll
2011-10-21 13:44 . 2003-03-19 00:14 499712 ----a-w- c:\windows\msvcp71.dll
2011-10-21 13:44 . 2000-11-29 00:07 307200 ----a-w- c:\windows\msvcr70.dll
2011-10-21 13:17 . 2011-10-21 13:37 -------- d-----w- c:\windows\SxsCaPendDel
2011-10-21 12:56 . 2011-10-21 12:57 -------- d-----w- c:\documents and settings\Jetyxx\Data aplikací\GetRightToGo
2011-10-19 13:08 . 2011-11-09 20:34 -------- d-----w- c:\documents and settings\Jetyxx\Data aplikací\GarenaPlus
2011-10-19 13:08 . 2011-11-05 15:14 -------- d-----w- c:\program files\Garena Plus
2011-10-19 13:08 . 2011-11-09 20:34 -------- d-----w- c:\documents and settings\All Users\Data aplikací\GarenaMessenger
2011-10-11 18:26 . 2011-11-04 20:47 -------- d-----w- c:\documents and settings\Jetyxx\Local Settings\Data aplikací\Adobe
2011-10-11 18:26 . 2011-10-11 18:26 -------- d-----w- c:\documents and settings\Jetyxx\Local Settings\Data aplikací\Temp
2011-10-11 18:16 . 2011-10-11 18:16 -------- d-----w- c:\program files\Common Files\Adobe
2011-10-11 18:11 . 2011-10-11 18:11 -------- d-----w- c:\documents and settings\All Users\Data aplikací\McAfee
2011-10-11 15:32 . 2011-10-11 15:32 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-10-11 15:11 . 2011-10-11 15:11 -------- d-----w- C:\plugins
2011-10-11 14:47 . 2011-10-19 13:06 -------- d-----w- c:\program files\Garena Classic
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-10-10 17:23 . 2011-10-10 17:23 232512 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2011-08-02 4910912]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2011-03-08 17037704]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2011-03-08 17037704]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CHotkey"="mHotkey.exe" [2002-07-23 477184]
"SoundMan"="SOUNDMAN.EXE" [2005-01-20 77824]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2006-11-17 7700480]
"nwiz"="nwiz.exe" [2006-11-17 1622016]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2006-11-17 86016]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-06-06 937920]
"HTC Sync Loader"="c:\program files\HTC\HTC Sync 3.0\htcUPCTLoader.exe" [2011-03-08 585728]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-18 15360]
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\BitTorrent\\BitTorrent.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\Garena Classic\\Garena.exe"=
"c:\\Program Files\\Garena Plus\\Room\\garena_room.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
.
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [10.10.2011 18:23 232512]
R2 PassThru Service;Internet Pass-Through Service;c:\program files\HTC\Internet Pass-Through\PassThruSvr.exe [16.9.2010 14:06 80896]
S3 GGSAFERDriver;GGSAFER Driver;\??\c:\program files\Garena Plus\Room\safedrv.sys --> c:\program files\Garena Plus\Room\safedrv.sys [?]
S3 HTCAND32;HTC Device Driver;c:\windows\system32\drivers\ANDROIDUSB.sys [5.11.2011 17:39 24576]
S3 htcnprot;HTC NDIS Protocol Driver;c:\windows\system32\drivers\htcnprot.sys [22.6.2010 18:01 21248]
.
Obsah adresáře 'Naplánované úlohy'
.
.
------- Doplňkový sken -------
.
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 10.0.0.1
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-11-10 11:54
Windows 5.1.2600 Service Pack 2 NTFS
.
detected NTDLL code modification:
ZwEnumerateValueKey, ZwQueryDirectoryFile
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
Bpnunv = c:\documents and settings\Jetyxx\Data aplikac?\Bpnunv.exe
.
skenování skrytých souborů ...
.
.
c:\documents and settings\Jetyxx\Data aplikací\Bpnunv.exe 184320 bytes executable
.
sken byl úspešně dokončen
skryté soubory: 1
.
**************************************************************************
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Bpnunv"="c:\\Documents and Settings\\Jetyxx\\Data aplikací\\Bpnunv.exe"
.
Celkový čas: 2011-11-10 11:55:51
ComboFix-quarantined-files.txt 2011-11-10 10:55
.
Před spuštěním: Volných bajtů: 117 396 197 376
Po spuštění: Volných bajtů: 117 375 475 712
.
WindowsXP-KB310994-SP2-Home-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect
.
- - End Of File - - 477E2DA03B2E3F4165D9291008E5BDEC
Nahoru
Avatar uživatele
JaRon
Moderátor
Moderátor
Příspěvky: 15926
Registrován: 29 Bře 2005 13:39
Místo/Bydliště: BB-SK

Re: občasne seknuti pc,vir rozesilajici odkazy

#6 Příspěvek od JaRon »

zopakuj akciu - dalsi script:

Kód: Vybrat vše

File::
c:\documents and settings\Jetyxx\Data aplikací\2.exe
c:\documents and settings\Jetyxx\Data aplikací\Bpnunv.exe
c:\documents and settings\Jetyxx\Data aplikací\3.exe
c:\documents and settings\Jetyxx\Data aplikací\529.exe
c:\documents and settings\Jetyxx\Data aplikací\528.exe

Driver::
Bpnunv
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Nahoru
Jetyx
Návštěvník
Návštěvník
Příspěvky: 72
Registrován: 15 Pro 2010 08:18

Re: občasne seknuti pc,vir rozesilajici odkazy

#7 Příspěvek od Jetyx »

ComboFix 11-11-10.01 - Jetyxx 10.11.2011 12:16:50.2.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.2.1250.420.1029.18.1023.683 [GMT 1:00]
Spuštěný z: c:\documents and settings\Jetyxx\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Jetyxx\Plocha\CFScript.txt.txt
.
FILE ::
"c:\documents and settings\Jetyxx\Data aplikací\2.exe"
"c:\documents and settings\Jetyxx\Data aplikací\3.exe"
"c:\documents and settings\Jetyxx\Data aplikací\528.exe"
"c:\documents and settings\Jetyxx\Data aplikací\529.exe"
"c:\documents and settings\Jetyxx\Data aplikací\Bpnunv.exe"
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-10-10 do 2011-11-10 )))))))))))))))))))))))))))))))
.
.
2011-11-10 10:56 . 2011-11-10 10:56 184320 ----a-w- c:\documents and settings\Jetyxx\Data aplikací\Bpnunv.exe
2011-11-10 10:41 . 2011-11-10 10:41 367883 ----a-w- c:\documents and settings\Jetyxx\Data aplikací\2.exe
2011-11-10 10:24 . 2011-11-10 10:24 -------- d-----w- c:\program files\trend micro
2011-11-10 10:24 . 2011-11-10 10:24 -------- d-----w- C:\rsit
2011-11-09 22:24 . 2011-11-09 22:24 -------- d-----w- c:\documents and settings\Jetyxx\Local Settings\Data aplikací\ESET
2011-11-09 22:24 . 2011-11-09 22:24 -------- d-----w- c:\documents and settings\Jetyxx\Data aplikací\ESET
2011-11-09 22:23 . 2011-11-09 22:23 -------- d-----w- c:\documents and settings\LocalService\Local Settings\Data aplikací\ESET
2011-11-09 22:22 . 2011-11-09 22:22 -------- d-----w- c:\program files\Common Files\Java
2011-11-09 22:22 . 2011-11-09 22:22 73728 ----a-w- c:\windows\system32\javacpl.cpl
2011-11-09 22:22 . 2011-11-09 22:22 472808 ----a-w- c:\windows\system32\deployJava1.dll
2011-11-09 22:22 . 2011-11-09 22:22 -------- d-----w- c:\program files\Java
2011-11-09 22:21 . 2011-11-10 10:42 -------- d-----w- c:\program files\ESET
2011-11-09 20:33 . 2011-11-10 10:41 398081 ----a-w- c:\documents and settings\Jetyxx\Data aplikací\3.exe
2011-11-08 18:27 . 2011-11-08 18:27 -------- d-----w- c:\program files\CCleaner
2011-11-08 18:24 . 2011-11-08 18:24 398081 ----a-w- c:\documents and settings\Jetyxx\Data aplikací\529.exe
2011-11-08 18:24 . 2011-11-08 18:24 367883 ----a-w- c:\documents and settings\Jetyxx\Data aplikací\528.exe
2011-11-06 19:30 . 2007-11-27 02:24 14640 ------w- c:\windows\system32\spmsgXP_2k3.dll
2011-11-05 17:12 . 2004-08-03 22:04 12672 -c--a-w- c:\windows\system32\dllcache\usb8023x.sys
2011-11-05 17:12 . 2004-08-03 22:04 12672 ----a-w- c:\windows\system32\drivers\usb8023x.sys
2011-11-05 17:12 . 2004-08-03 22:04 30080 -c--a-w- c:\windows\system32\dllcache\rndismpx.sys
2011-11-05 17:12 . 2004-08-03 22:04 30080 ----a-w- c:\windows\system32\drivers\rndismpx.sys
2011-11-04 20:46 . 2011-11-04 20:46 -------- d-----w- c:\program files\MSXML 4.0
2011-10-27 20:27 . 2011-10-27 20:28 -------- d-----w- c:\documents and settings\Jetyxx\Local Settings\Data aplikací\TeamSpeak 3 Client
2011-10-27 19:41 . 2011-10-27 19:42 -------- d-----w- c:\documents and settings\Jetyxx\Data aplikací\teamspeak2
2011-10-27 19:41 . 2011-10-27 19:41 34064 ----a-w- c:\windows\system32\lhacm.acm
2011-10-27 19:40 . 2011-10-27 20:25 -------- d-----w- c:\program files\Teamspeak2_RC2
2011-10-21 15:46 . 2011-10-21 15:50 -------- d-----w- c:\documents and settings\Jetyxx\Data aplikací\Dev-Cpp
2011-10-21 15:45 . 2011-10-29 20:48 -------- d-----w- C:\Dev-Cpp
2011-10-21 14:10 . 2011-10-21 14:10 -------- d-----w- c:\program files\Stardock
2011-10-21 14:02 . 2011-10-21 14:03 -------- d-----w- c:\documents and settings\Jetyxx\Data aplikací\Rainmeter
2011-10-21 13:44 . 2009-08-24 07:15 761152 ----a-w- c:\windows\msvcr100.dll
2011-10-21 13:44 . 2007-11-06 22:19 655872 ----a-w- c:\windows\msvcr90.dll
2011-10-21 13:44 . 2007-04-05 10:16 626688 ----a-w- c:\windows\msvcr80.dll
2011-10-21 13:44 . 2005-10-20 20:31 540672 ----a-w- c:\windows\msvcp80.dll
2011-10-21 13:44 . 2004-01-11 21:00 348160 ----a-w- c:\windows\msvcr71.dll
2011-10-21 13:44 . 2003-03-19 00:14 499712 ----a-w- c:\windows\msvcp71.dll
2011-10-21 13:44 . 2000-11-29 00:07 307200 ----a-w- c:\windows\msvcr70.dll
2011-10-21 13:17 . 2011-10-21 13:37 -------- d-----w- c:\windows\SxsCaPendDel
2011-10-21 12:56 . 2011-10-21 12:57 -------- d-----w- c:\documents and settings\Jetyxx\Data aplikací\GetRightToGo
2011-10-19 13:08 . 2011-11-09 20:34 -------- d-----w- c:\documents and settings\Jetyxx\Data aplikací\GarenaPlus
2011-10-19 13:08 . 2011-11-05 15:14 -------- d-----w- c:\program files\Garena Plus
2011-10-19 13:08 . 2011-11-09 20:34 -------- d-----w- c:\documents and settings\All Users\Data aplikací\GarenaMessenger
2011-10-11 18:26 . 2011-11-04 20:47 -------- d-----w- c:\documents and settings\Jetyxx\Local Settings\Data aplikací\Adobe
2011-10-11 18:26 . 2011-10-11 18:26 -------- d-----w- c:\documents and settings\Jetyxx\Local Settings\Data aplikací\Temp
2011-10-11 18:16 . 2011-10-11 18:16 -------- d-----w- c:\program files\Common Files\Adobe
2011-10-11 18:11 . 2011-10-11 18:11 -------- d-----w- c:\documents and settings\All Users\Data aplikací\McAfee
2011-10-11 15:32 . 2011-10-11 15:32 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-10-11 15:11 . 2011-10-11 15:11 -------- d-----w- C:\plugins
2011-10-11 14:47 . 2011-10-19 13:06 -------- d-----w- c:\program files\Garena Classic
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-10-10 17:23 . 2011-10-10 17:23 232512 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2011-08-02 4910912]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2011-03-08 17037704]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2011-03-08 17037704]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CHotkey"="mHotkey.exe" [2002-07-23 477184]
"SoundMan"="SOUNDMAN.EXE" [2005-01-20 77824]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2006-11-17 7700480]
"nwiz"="nwiz.exe" [2006-11-17 1622016]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2006-11-17 86016]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-06-06 937920]
"HTC Sync Loader"="c:\program files\HTC\HTC Sync 3.0\htcUPCTLoader.exe" [2011-03-08 585728]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-18 15360]
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\BitTorrent\\BitTorrent.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\Garena Classic\\Garena.exe"=
"c:\\Program Files\\Garena Plus\\Room\\garena_room.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
.
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [10.10.2011 18:23 232512]
R2 PassThru Service;Internet Pass-Through Service;c:\program files\HTC\Internet Pass-Through\PassThruSvr.exe [16.9.2010 14:06 80896]
S3 GGSAFERDriver;GGSAFER Driver;\??\c:\program files\Garena Plus\Room\safedrv.sys --> c:\program files\Garena Plus\Room\safedrv.sys [?]
S3 HTCAND32;HTC Device Driver;c:\windows\system32\drivers\ANDROIDUSB.sys [5.11.2011 17:39 24576]
S3 htcnprot;HTC NDIS Protocol Driver;c:\windows\system32\drivers\htcnprot.sys [22.6.2010 18:01 21248]
.
.
------- Doplňkový sken -------
.
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 10.0.0.1
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-11-10 12:20
Windows 5.1.2600 Service Pack 2 NTFS
.
detected NTDLL code modification:
ZwEnumerateValueKey, ZwQueryDirectoryFile
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
Bpnunv = c:\documents and settings\Jetyxx\Data aplikac?\Bpnunv.exe
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Bpnunv"="c:\\Documents and Settings\\Jetyxx\\Data aplikací\\Bpnunv.exe"
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'explorer.exe'(2584)
c:\windows\system32\msi.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
Celkový čas: 2011-11-10 12:21:14
ComboFix-quarantined-files.txt 2011-11-10 11:21
ComboFix2.txt 2011-11-10 10:55
.
Před spuštěním: Volných bajtů: 117 384 671 232
Po spuštění: Volných bajtů: 117 374 492 672
.
- - End Of File - - 4CDF58E528C76415F0153575FD206802
Nahoru
Avatar uživatele
JaRon
Moderátor
Moderátor
Příspěvky: 15926
Registrován: 29 Bře 2005 13:39
Místo/Bydliště: BB-SK

Re: občasne seknuti pc,vir rozesilajici odkazy

#8 Příspěvek od JaRon »

ten script neukladas dobre - ma byt napr. Command switches used :: c:\users\mili\Desktop\CFScript.txt
a Ty mas c:\documents and settings\Jetyxx\Plocha\CFScript.txt.txt :!:
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Nahoru
Jetyx
Návštěvník
Návštěvník
Příspěvky: 72
Registrován: 15 Pro 2010 08:18

Re: občasne seknuti pc,vir rozesilajici odkazy

#9 Příspěvek od Jetyx »

dělam to stejně jak předtim ale ten txt.txt je tam zas.Vytvořim blok vložim tam to co ste napsal at tam dam a uložim to jako CFScript.txt
Nahoru
Avatar uživatele
JaRon
Moderátor
Moderátor
Příspěvky: 15926
Registrován: 29 Bře 2005 13:39
Místo/Bydliště: BB-SK

Re: občasne seknuti pc,vir rozesilajici odkazy

#10 Příspěvek od JaRon »

uloz to ako CFScript ono si to tu koncovku txt prida same - (aj prvy bol zle ) :)
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Nahoru
Jetyx
Návštěvník
Návštěvník
Příspěvky: 72
Registrován: 15 Pro 2010 08:18

Re: občasne seknuti pc,vir rozesilajici odkazy

#11 Příspěvek od Jetyx »

ComboFix 11-11-10.01 - Jetyxx 10.11.2011 13:31:16.4.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.2.1250.420.1029.18.1023.666 [GMT 1:00]
Spuštěný z: c:\documents and settings\Jetyxx\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Jetyxx\Plocha\CFScript.txt
.
FILE ::
"c:\documents and settings\Jetyxx\Data aplikací\2.exe"
"c:\documents and settings\Jetyxx\Data aplikací\3.exe"
"c:\documents and settings\Jetyxx\Data aplikací\528.exe"
"c:\documents and settings\Jetyxx\Data aplikací\529.exe"
"c:\documents and settings\Jetyxx\Data aplikací\Bpnunv.exe"
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-10-10 do 2011-11-10 )))))))))))))))))))))))))))))))
.
.
2011-11-10 12:27 . 2011-11-10 12:27 184320 ----a-w- c:\documents and settings\Jetyxx\Data aplikací\Bpnunv.exe
2011-11-10 10:41 . 2011-11-10 10:41 367883 ----a-w- c:\documents and settings\Jetyxx\Data aplikací\2.exe
2011-11-10 10:24 . 2011-11-10 10:24 -------- d-----w- c:\program files\trend micro
2011-11-10 10:24 . 2011-11-10 10:24 -------- d-----w- C:\rsit
2011-11-09 22:24 . 2011-11-09 22:24 -------- d-----w- c:\documents and settings\Jetyxx\Local Settings\Data aplikací\ESET
2011-11-09 22:24 . 2011-11-09 22:24 -------- d-----w- c:\documents and settings\Jetyxx\Data aplikací\ESET
2011-11-09 22:23 . 2011-11-09 22:23 -------- d-----w- c:\documents and settings\LocalService\Local Settings\Data aplikací\ESET
2011-11-09 22:22 . 2011-11-09 22:22 -------- d-----w- c:\program files\Common Files\Java
2011-11-09 22:22 . 2011-11-09 22:22 73728 ----a-w- c:\windows\system32\javacpl.cpl
2011-11-09 22:22 . 2011-11-09 22:22 472808 ----a-w- c:\windows\system32\deployJava1.dll
2011-11-09 22:22 . 2011-11-09 22:22 -------- d-----w- c:\program files\Java
2011-11-09 22:21 . 2011-11-10 10:42 -------- d-----w- c:\program files\ESET
2011-11-09 20:33 . 2011-11-10 10:41 398081 ----a-w- c:\documents and settings\Jetyxx\Data aplikací\3.exe
2011-11-08 18:27 . 2011-11-08 18:27 -------- d-----w- c:\program files\CCleaner
2011-11-08 18:24 . 2011-11-08 18:24 398081 ----a-w- c:\documents and settings\Jetyxx\Data aplikací\529.exe
2011-11-08 18:24 . 2011-11-08 18:24 367883 ----a-w- c:\documents and settings\Jetyxx\Data aplikací\528.exe
2011-11-06 19:30 . 2007-11-27 02:24 14640 ------w- c:\windows\system32\spmsgXP_2k3.dll
2011-11-05 17:12 . 2004-08-03 22:04 12672 -c--a-w- c:\windows\system32\dllcache\usb8023x.sys
2011-11-05 17:12 . 2004-08-03 22:04 12672 ----a-w- c:\windows\system32\drivers\usb8023x.sys
2011-11-05 17:12 . 2004-08-03 22:04 30080 -c--a-w- c:\windows\system32\dllcache\rndismpx.sys
2011-11-05 17:12 . 2004-08-03 22:04 30080 ----a-w- c:\windows\system32\drivers\rndismpx.sys
2011-11-04 20:46 . 2011-11-04 20:46 -------- d-----w- c:\program files\MSXML 4.0
2011-10-27 20:27 . 2011-10-27 20:28 -------- d-----w- c:\documents and settings\Jetyxx\Local Settings\Data aplikací\TeamSpeak 3 Client
2011-10-27 19:41 . 2011-10-27 19:42 -------- d-----w- c:\documents and settings\Jetyxx\Data aplikací\teamspeak2
2011-10-27 19:41 . 2011-10-27 19:41 34064 ----a-w- c:\windows\system32\lhacm.acm
2011-10-27 19:40 . 2011-10-27 20:25 -------- d-----w- c:\program files\Teamspeak2_RC2
2011-10-21 15:46 . 2011-10-21 15:50 -------- d-----w- c:\documents and settings\Jetyxx\Data aplikací\Dev-Cpp
2011-10-21 15:45 . 2011-10-29 20:48 -------- d-----w- C:\Dev-Cpp
2011-10-21 14:10 . 2011-10-21 14:10 -------- d-----w- c:\program files\Stardock
2011-10-21 14:02 . 2011-10-21 14:03 -------- d-----w- c:\documents and settings\Jetyxx\Data aplikací\Rainmeter
2011-10-21 13:44 . 2009-08-24 07:15 761152 ----a-w- c:\windows\msvcr100.dll
2011-10-21 13:44 . 2007-11-06 22:19 655872 ----a-w- c:\windows\msvcr90.dll
2011-10-21 13:44 . 2007-04-05 10:16 626688 ----a-w- c:\windows\msvcr80.dll
2011-10-21 13:44 . 2005-10-20 20:31 540672 ----a-w- c:\windows\msvcp80.dll
2011-10-21 13:44 . 2004-01-11 21:00 348160 ----a-w- c:\windows\msvcr71.dll
2011-10-21 13:44 . 2003-03-19 00:14 499712 ----a-w- c:\windows\msvcp71.dll
2011-10-21 13:44 . 2000-11-29 00:07 307200 ----a-w- c:\windows\msvcr70.dll
2011-10-21 13:17 . 2011-10-21 13:37 -------- d-----w- c:\windows\SxsCaPendDel
2011-10-21 12:56 . 2011-10-21 12:57 -------- d-----w- c:\documents and settings\Jetyxx\Data aplikací\GetRightToGo
2011-10-19 13:08 . 2011-11-09 20:34 -------- d-----w- c:\documents and settings\Jetyxx\Data aplikací\GarenaPlus
2011-10-19 13:08 . 2011-11-05 15:14 -------- d-----w- c:\program files\Garena Plus
2011-10-19 13:08 . 2011-11-09 20:34 -------- d-----w- c:\documents and settings\All Users\Data aplikací\GarenaMessenger
2011-10-11 18:26 . 2011-11-04 20:47 -------- d-----w- c:\documents and settings\Jetyxx\Local Settings\Data aplikací\Adobe
2011-10-11 18:26 . 2011-10-11 18:26 -------- d-----w- c:\documents and settings\Jetyxx\Local Settings\Data aplikací\Temp
2011-10-11 18:16 . 2011-10-11 18:16 -------- d-----w- c:\program files\Common Files\Adobe
2011-10-11 18:11 . 2011-10-11 18:11 -------- d-----w- c:\documents and settings\All Users\Data aplikací\McAfee
2011-10-11 15:32 . 2011-10-11 15:32 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-10-11 15:11 . 2011-10-11 15:11 -------- d-----w- C:\plugins
2011-10-11 14:47 . 2011-10-19 13:06 -------- d-----w- c:\program files\Garena Classic
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-10-10 17:23 . 2011-10-10 17:23 232512 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2011-08-02 4910912]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2011-03-08 17037704]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2011-03-08 17037704]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CHotkey"="mHotkey.exe" [2002-07-23 477184]
"SoundMan"="SOUNDMAN.EXE" [2005-01-20 77824]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2006-11-17 7700480]
"nwiz"="nwiz.exe" [2006-11-17 1622016]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2006-11-17 86016]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-06-06 937920]
"HTC Sync Loader"="c:\program files\HTC\HTC Sync 3.0\htcUPCTLoader.exe" [2011-03-08 585728]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-18 15360]
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\BitTorrent\\BitTorrent.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\Garena Classic\\Garena.exe"=
"c:\\Program Files\\Garena Plus\\Room\\garena_room.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
.
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [10.10.2011 18:23 232512]
R2 PassThru Service;Internet Pass-Through Service;c:\program files\HTC\Internet Pass-Through\PassThruSvr.exe [16.9.2010 14:06 80896]
S3 GGSAFERDriver;GGSAFER Driver;\??\c:\program files\Garena Plus\Room\safedrv.sys --> c:\program files\Garena Plus\Room\safedrv.sys [?]
S3 HTCAND32;HTC Device Driver;c:\windows\system32\drivers\ANDROIDUSB.sys [5.11.2011 17:39 24576]
S3 htcnprot;HTC NDIS Protocol Driver;c:\windows\system32\drivers\htcnprot.sys [22.6.2010 18:01 21248]
.
.
------- Doplňkový sken -------
.
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 10.0.0.1
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-11-10 13:34
Windows 5.1.2600 Service Pack 2 NTFS
.
detected NTDLL code modification:
ZwEnumerateValueKey, ZwQueryDirectoryFile
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
Bpnunv = c:\documents and settings\Jetyxx\Data aplikac?\Bpnunv.exe
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'explorer.exe'(2392)
c:\windows\system32\msi.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
Celkový čas: 2011-11-10 13:35:55
ComboFix-quarantined-files.txt 2011-11-10 12:35
ComboFix2.txt 2011-11-10 11:42
ComboFix3.txt 2011-11-10 11:21
ComboFix4.txt 2011-11-10 10:55
.
Před spuštěním: Volných bajtů: 117 281 927 168
Po spuštění: Volných bajtů: 117 271 703 552
.
- - End Of File - - 6D7B4FF3366F7B1DD60D7E94CE99BB59

snad už je to ok:)
Nahoru
Avatar uživatele
JaRon
Moderátor
Moderátor
Příspěvky: 15926
Registrován: 29 Bře 2005 13:39
Místo/Bydliště: BB-SK

Re: občasne seknuti pc,vir rozesilajici odkazy

#12 Příspěvek od JaRon »

OK, urobil si to dobre
najprv TDSSKiller a potom MBAM rychly scan
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Nahoru
Jetyx
Návštěvník
Návštěvník
Příspěvky: 72
Registrován: 15 Pro 2010 08:18

Re: občasne seknuti pc,vir rozesilajici odkazy

#13 Příspěvek od Jetyx »

Malwarebytes' Anti-Malware 1.50
www.malwarebytes.org

Verze databáze: 8131

Windows 5.1.2600 Service Pack 2
Internet Explorer 6.0.2900.2180

10.11.2011 14:00:14
mbam-log-2011-11-10 (14-00-14).txt

Typ kontroly: Rychlý test
Testované objekty: 150447
Uplynulý čas: 2 minut, 16 sekund

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče v registru: 0
Infikované hodnoty v registru: 0
Infikované datové položky v registru: 0
Infikované složky: 0
Infikované soubory: 9

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
c:\documents and settings\Jetyxx\data aplikací\2.exe (Trojan.Dropper.SFX) -> Quarantined and deleted successfully.
c:\documents and settings\Jetyxx\data aplikací\3.exe (Trojan.BCMiner) -> Quarantined and deleted successfully.
c:\documents and settings\Jetyxx\data aplikací\528.exe (Trojan.Dropper.SFX) -> Quarantined and deleted successfully.
c:\documents and settings\Jetyxx\data aplikací\529.exe (Trojan.BCMiner) -> Quarantined and deleted successfully.
c:\documents and settings\Jetyxx\data aplikací\logs.dat (Bifrose.Trace) -> Quarantined and deleted successfully.
c:\documents and settings\Jetyxx\start menu\Programs\Startup\stepx2.exe (Trojan.BCMiner) -> Quarantined and deleted successfully.
c:\documents and settings\Jetyxx\data aplikací\microsoft\Windows\((mutex)).cfg (Malware.Trace) -> Quarantined and deleted successfully.
c:\documents and settings\Jetyxx\data aplikací\microsoft\Windows\((mutex)).dat (Malware.Trace) -> Quarantined and deleted successfully.
c:\documents and settings\Jetyxx\start menu\Programs\Startup\WINLOGOS.exe (Trojan.Agent) -> Quarantined and deleted successfully.
Nahoru
Avatar uživatele
JaRon
Moderátor
Moderátor
Příspěvky: 15926
Registrován: 29 Bře 2005 13:39
Místo/Bydliště: BB-SK

Re: občasne seknuti pc,vir rozesilajici odkazy

#14 Příspěvek od JaRon »

fajn restartni masinu a vloz aktualny log RSIT
FRST |ADWCleaner |MBAM |CCleaner |AVPTool

V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Nahoru
Jetyx
Návštěvník
Návštěvník
Příspěvky: 72
Registrován: 15 Pro 2010 08:18

Re: občasne seknuti pc,vir rozesilajici odkazy

#15 Příspěvek od Jetyx »

Logfile of random's system information tool 1.09 (written by random/random)
Run by Jetyxx at 2011-11-10 14:04:49
Microsoft Windows XP Home Edition Service Pack 2
System drive C: has 112 GB (59%) free of 191 GB
Total RAM: 1023 MB (42% free)

HijackThis download failed

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-06-06 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~3\Office12\GRA8E1~1.DLL [2006-10-26 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Plug-In - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-02-11 1246600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-11-09 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2011-11-09 79648]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"CHotkey"=C:\WINDOWS\mHotkey.exe [2002-07-23 477184]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2005-01-20 77824]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2006-11-17 7700480]
"nwiz"=nwiz.exe /install []
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2006-11-17 86016]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-26 31016]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-06-06 937920]
"HTC Sync Loader"=C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe [2011-03-08 585728]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2011-06-09 254696]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2011-08-02 4910912]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2011-03-08 17037704]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2004-08-18 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~3\Office12\GRA8E1~1.DLL [2006-10-26 2210608]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\BitTorrent\BitTorrent.exe"="C:\Program Files\BitTorrent\BitTorrent.exe:*:Enabled:BitTorrent"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Program Files\Garena Classic\Garena.exe"="C:\Program Files\Garena Classic\Garena.exe:*:Enabled:Garena"
"C:\Program Files\Garena Plus\Room\garena_room.exe"="C:\Program Files\Garena Plus\Room\garena_room.exe:*:Enabled:Garena"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"msacm.lhacm"=lhacm.acm

======List of files/folders created in the last 1 month======

2011-11-10 13:56:14 ----D---- C:\Documents and Settings\Jetyxx\Data aplikací\Malwarebytes
2011-11-10 13:56:06 ----D---- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2011-11-10 13:56:06 ----A---- C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2011-11-10 13:56:03 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2011-11-10 13:56:03 ----A---- C:\WINDOWS\system32\drivers\mbam.sys
2011-11-10 13:55:25 ----A---- C:\TDSSKiller.2.5.1.0_10.11.2011_13.55.25_log.txt
2011-11-10 13:35:55 ----A---- C:\ComboFix.txt
2011-11-10 12:47:24 ----A---- C:\WINDOWS\IE4 Error Log.txt
2011-11-10 11:50:01 ----A---- C:\Boot.bak
2011-11-10 11:49:58 ----RASHD---- C:\cmdcons
2011-11-10 11:48:14 ----A---- C:\WINDOWS\NIRCMD.exe
2011-11-10 11:38:45 ----A---- C:\WINDOWS\zip.exe
2011-11-10 11:38:45 ----A---- C:\WINDOWS\SWXCACLS.exe
2011-11-10 11:38:45 ----A---- C:\WINDOWS\SWSC.exe
2011-11-10 11:38:45 ----A---- C:\WINDOWS\SWREG.exe
2011-11-10 11:38:45 ----A---- C:\WINDOWS\sed.exe
2011-11-10 11:38:45 ----A---- C:\WINDOWS\PEV.exe
2011-11-10 11:38:45 ----A---- C:\WINDOWS\MBR.exe
2011-11-10 11:38:45 ----A---- C:\WINDOWS\grep.exe
2011-11-10 11:38:35 ----D---- C:\WINDOWS\ERDNT
2011-11-10 11:34:37 ----D---- C:\Qoobox
2011-11-10 11:24:23 ----D---- C:\Program Files\trend micro
2011-11-10 11:24:22 ----D---- C:\rsit
2011-11-09 23:24:19 ----D---- C:\Documents and Settings\Jetyxx\Data aplikací\ESET
2011-11-09 23:22:50 ----D---- C:\Program Files\Common Files\Java
2011-11-09 23:22:50 ----D---- C:\Documents and Settings\All Users\Data aplikací\Sun
2011-11-09 23:22:42 ----A---- C:\WINDOWS\system32\javaws.exe
2011-11-09 23:22:42 ----A---- C:\WINDOWS\system32\javaw.exe
2011-11-09 23:22:42 ----A---- C:\WINDOWS\system32\java.exe
2011-11-09 23:22:42 ----A---- C:\WINDOWS\system32\deployJava1.dll
2011-11-09 23:22:34 ----D---- C:\Program Files\Java
2011-11-09 23:21:54 ----D---- C:\Documents and Settings\Jetyxx\Data aplikací\Sun
2011-11-09 23:21:13 ----D---- C:\Program Files\ESET
2011-11-08 19:27:29 ----D---- C:\Program Files\CCleaner
2011-11-07 23:44:13 ----D---- C:\Documents and Settings\Jetyxx\Data aplikací\HTC.388BC06ACDAB6261375BCE37FBA2E023C0D7EE34.1
2011-11-06 20:30:55 ----N---- C:\WINDOWS\system32\spmsgXP_2k3.dll
2011-11-05 18:12:26 ----A---- C:\WINDOWS\system32\drivers\usb8023x.sys
2011-11-05 18:12:26 ----A---- C:\WINDOWS\system32\drivers\rndismpx.sys
2011-11-05 17:39:20 ----A---- C:\WINDOWS\system32\WdfCoInstaller01007.dll
2011-11-05 17:39:20 ----A---- C:\WINDOWS\system32\drivers\ANDROIDUSB.sys
2011-11-05 17:39:18 ----D---- C:\Program Files\Spirent Communications
2011-11-05 17:38:52 ----D---- C:\WINDOWS\system32\drivers\umdf
2011-11-05 14:55:57 ----D---- C:\Program Files\Common Files\Skype
2011-11-05 14:55:54 ----RD---- C:\Program Files\Skype
2011-11-05 14:47:42 ----D---- C:\Config.Msi
2011-11-05 13:31:36 ----AH---- C:\WINDOWS\system32\ezsidmv.dat
2011-11-05 13:31:34 ----D---- C:\Documents and Settings\Jetyxx\Data aplikací\skypePM
2011-11-05 13:30:37 ----D---- C:\Program Files\Skype(2)
2011-11-04 22:01:39 ----HDC---- C:\WINDOWS\$NtUninstallWdf01007$
2011-11-04 21:49:13 ----D---- C:\Documents and Settings\Jetyxx\Data aplikací\HTC
2011-11-04 21:47:52 ----D---- C:\Program Files\HTC
2011-11-04 21:47:50 ----D---- C:\Program Files\Common Files\Adobe AIR
2011-11-04 21:47:21 ----HDC---- C:\WINDOWS\$NtUninstallWMFDist11$
2011-11-04 21:46:57 ----D---- C:\Program Files\MSXML 4.0
2011-10-27 20:41:12 ----D---- C:\Documents and Settings\Jetyxx\Data aplikací\teamspeak2
2011-10-27 20:40:43 ----D---- C:\Program Files\Teamspeak2_RC2
2011-10-21 16:46:11 ----D---- C:\Documents and Settings\Jetyxx\Data aplikací\Dev-Cpp
2011-10-21 16:45:58 ----D---- C:\Dev-Cpp
2011-10-21 15:10:38 ----D---- C:\Program Files\Stardock
2011-10-21 15:02:04 ----D---- C:\Documents and Settings\Jetyxx\Data aplikací\Rainmeter
2011-10-21 14:44:03 ----A---- C:\WINDOWS\msvcr90.dll
2011-10-21 14:44:03 ----A---- C:\WINDOWS\msvcr80.dll
2011-10-21 14:44:03 ----A---- C:\WINDOWS\msvcr71.dll
2011-10-21 14:44:03 ----A---- C:\WINDOWS\msvcr70.dll
2011-10-21 14:44:03 ----A---- C:\WINDOWS\msvcr100.dll
2011-10-21 14:44:03 ----A---- C:\WINDOWS\msvcp80.dll
2011-10-21 14:44:03 ----A---- C:\WINDOWS\msvcp71.dll
2011-10-21 14:17:30 ----D---- C:\WINDOWS\SxsCaPendDel
2011-10-21 14:16:25 ----A---- C:\WINDOWS\spyxx.INI
2011-10-21 13:56:41 ----D---- C:\Documents and Settings\Jetyxx\Data aplikací\GetRightToGo
2011-10-19 14:08:35 ----D---- C:\Documents and Settings\Jetyxx\Data aplikací\GarenaPlus
2011-10-19 14:08:11 ----D---- C:\Program Files\Garena Plus
2011-10-19 14:08:09 ----D---- C:\Documents and Settings\All Users\Data aplikací\GarenaMessenger
2011-10-12 17:55:22 ----A---- C:\Documents and Settings\Jetyxx\Data aplikací\room_v3.dat
2011-10-12 11:01:47 ----RSD---- C:\WINDOWS\assembly
2011-10-12 11:01:30 ----D---- C:\WINDOWS\Microsoft.NET
2011-10-12 10:42:02 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2011-10-12 10:41:45 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2011-10-12 10:41:39 ----HDC---- C:\WINDOWS\$NtUninstallKB981350$
2011-10-12 10:41:35 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2011-10-12 10:41:31 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2011-10-12 10:40:21 ----HDC---- C:\WINDOWS\$NtUninstallKB978338$
2011-10-12 10:40:00 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2011-10-12 10:39:57 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$
2011-10-12 10:39:53 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
2011-10-12 10:39:33 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$
2011-10-12 10:39:27 ----HDC---- C:\WINDOWS\$NtUninstallKB978542$
2011-10-11 19:16:08 ----D---- C:\Program Files\Common Files\Adobe
2011-10-11 19:16:08 ----D---- C:\Program Files\Adobe
2011-10-11 19:15:34 ----D---- C:\Documents and Settings\All Users\Data aplikací\Adobe
2011-10-11 19:11:51 ----D---- C:\Documents and Settings\All Users\Data aplikací\McAfee
2011-10-11 16:11:35 ----D---- C:\plugins
2011-10-11 15:53:32 ----D---- C:\Documents and Settings\Jetyxx\Data aplikací\WinRAR
2011-10-11 15:53:27 ----D---- C:\Program Files\WinRAR
2011-10-11 15:47:58 ----D---- C:\Program Files\Garena Classic

======List of files/folders modified in the last 1 month======

2011-11-10 14:04:24 ----D---- C:\Documents and Settings\Jetyxx\Data aplikací\Skype
2011-11-10 14:01:28 ----D---- C:\WINDOWS\Temp
2011-11-10 14:00:58 ----D---- C:\WINDOWS\system32\drivers
2011-11-10 14:00:49 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-11-10 14:00:40 ----D---- C:\WINDOWS\Prefetch
2011-11-10 13:56:03 ----RD---- C:\Program Files
2011-11-10 13:34:54 ----D---- C:\WINDOWS
2011-11-10 13:34:54 ----A---- C:\WINDOWS\system.ini
2011-11-10 13:33:01 ----D---- C:\WINDOWS\system32
2011-11-10 13:33:01 ----D---- C:\WINDOWS\AppPatch
2011-11-10 13:33:00 ----D---- C:\Program Files\Common Files
2011-11-10 13:30:50 ----D---- C:\WINDOWS\system32\CatRoot2
2011-11-10 11:55:30 ----SD---- C:\WINDOWS\Tasks
2011-11-10 11:54:32 ----D---- C:\WINDOWS\system32\drivers\etc
2011-11-10 11:50:01 ----RASH---- C:\boot.ini
2011-11-10 11:44:58 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-11-10 11:37:49 ----HD---- C:\WINDOWS\inf
2011-11-10 11:36:26 ----SHD---- C:\WINDOWS\Installer
2011-11-09 22:34:09 ----D---- C:\Program Files\Warcraft III Frozen Throne eSK
2011-11-08 19:27:58 ----D---- C:\Documents and Settings\Jetyxx\Data aplikací\BitTorrent
2011-11-05 18:12:33 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-11-05 17:39:21 ----DC---- C:\WINDOWS\system32\DRVSTORE
2011-11-05 17:38:52 ----D---- C:\Program Files\Windows Media Player
2011-11-05 17:38:27 ----D---- C:\WINDOWS\WinSxS
2011-11-05 15:06:14 ----D---- C:\WINDOWS\system32\CatRoot
2011-11-05 14:55:52 ----D---- C:\Documents and Settings\All Users\Data aplikací\Skype
2011-11-05 14:48:27 ----D---- C:\WINDOWS\system32\config
2011-11-05 14:48:15 ----D---- C:\WINDOWS\system32\wbem
2011-11-05 14:48:14 ----D---- C:\WINDOWS\Registration
2011-11-05 13:26:04 ----SD---- C:\Documents and Settings\Jetyxx\Data aplikací\Microsoft
2011-11-04 21:47:51 ----D---- C:\Documents and Settings\Jetyxx\Data aplikací\Adobe
2011-11-03 19:20:01 ----D---- C:\Documents and Settings\Jetyxx\Data aplikací\DAEMON Tools Lite
2011-11-03 19:20:00 ----D---- C:\WINDOWS\Logs
2011-11-03 19:20:00 ----D---- C:\WINDOWS\Debug
2011-11-02 21:02:32 ----D---- C:\WINDOWS\system32\Restore
2011-10-28 14:06:07 ----D---- C:\WINDOWS\system32\DirectX
2011-10-28 14:05:09 ----D---- C:\Documents and Settings
2011-10-25 18:12:26 ----D---- C:\Documents and Settings\Jetyxx\Data aplikací\vlc
2011-10-21 15:01:56 ----D---- C:\Program Files\Common Files\Microsoft Shared
2011-10-21 14:35:52 ----D---- C:\Program Files\Microsoft Visual Studio
2011-10-21 14:35:48 ----D---- C:\WINDOWS\Help
2011-10-21 14:12:18 ----A---- C:\WINDOWS\ODBCINST.INI
2011-10-18 19:30:55 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2011-10-12 11:40:14 ----RSD---- C:\WINDOWS\Fonts
2011-10-12 11:01:31 ----D---- C:\WINDOWS\system32\mui
2011-10-12 11:01:31 ----D---- C:\Program Files\Internet Explorer
2011-10-12 10:42:00 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2011-10-12 10:39:28 ----D---- C:\Program Files\Outlook Express
2011-10-11 16:32:35 ----SD---- C:\WINDOWS\Downloaded Program Files
2011-10-11 16:00:46 ----HD---- C:\WINDOWS\$hf_mig$
2011-10-11 14:31:56 ----D---- C:\WINDOWS\system32\CatRoot_bak
2011-10-11 06:29:16 ----D---- C:\Program Files\BitTorrent

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 nv_agp;NVIDIA nForce AGP Bus Filter; C:\WINDOWS\system32\DRIVERS\nv_agp.sys [2004-04-02 21760]
R0 nvatabus;nvatabus; C:\WINDOWS\system32\DRIVERS\nvatabus.sys [2004-06-03 79360]
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI VIA; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2004-08-18 61056]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\WINDOWS\system32\DRIVERS\dtsoftbus01.sys [2011-10-10 232512]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2005-01-28 2310272]
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2004-08-18 60800]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2004-08-18 9600]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2004-08-18 12160]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2004-08-18 61824]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2006-11-17 3994688]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\WINDOWS\system32\DRIVERS\NVENETFD.sys [2004-05-17 33280]
R3 nvnetbus;NVIDIA Network Bus Enumerator; C:\WINDOWS\system32\DRIVERS\nvnetbus.sys [2004-05-17 12928]
S3 BrScnUsb;Brother USB Still Image driver; C:\WINDOWS\system32\DRIVERS\BrScnUsb.sys [2004-10-15 15295]
S3 catchme;catchme; \??\C:\DOCUME~1\Jetyxx\LOCALS~1\Temp\catchme.sys []
S3 GGSAFERDriver;GGSAFER Driver; \??\C:\Program Files\Garena Plus\Room\safedrv.sys []
S3 HTCAND32;HTC Device Driver; C:\WINDOWS\System32\Drivers\ANDROIDUSB.sys [2009-06-10 24576]
S3 htcnprot;HTC NDIS Protocol Driver; C:\WINDOWS\system32\DRIVERS\htcnprot.sys [2010-06-22 21248]
S3 usb_rndisx;Adaptér USB RNDIS; C:\WINDOWS\system32\DRIVERS\usb8023x.sys [2004-08-03 12672]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-03 31616]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-03 25856]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2008-01-19 503144]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2011-11-09 153376]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2006-11-17 159811]
R2 PassThru Service;Internet Pass-Through Service; C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe [2010-09-16 80896]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2005-09-23 29896]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2005-09-23 66240]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-26 65824]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]

-----------------EOF-----------------


PC se puštěl podstatně rychleji vypada že už je to lepší
Nahoru
Odpovědět

Vrátit se na „Řešení problémů, logy“