Skener cosi našel, prosím o kontrolu zda odstranil vše

Zpráva

13918 · #1 Příspěvek od **13918** » 26 lis 2011 09:14

Eset on-line skener, našel tři infiltrace, dvě odstranil, prosím o kontrolu logu.

Logfile of random's system information tool 1.09 (written by random/random)
Run by Ferda Mravenec at 2011-11-26 08:55:25
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 195 GB (64%) free of 305 GB
Total RAM: 2047 MB (56% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:55:34, on 26.11.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Microsoft IntelliType Pro\itype.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\Opera\opera.exe
C:\WINDOWS\system32\svchost.exe
C:\Documents and Settings\Ferda Mravenec\Plocha\RSIT.exe
C:\Program Files\trend micro\Ferda Mravenec.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: {1A03F196-9617-4CA0-842B-A83CEECB022B} - - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [itype] "C:\Program Files\Microsoft IntelliType Pro\itype.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Program Files\ICQ7.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Program Files\ICQ7.5\ICQ.exe
O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - http://download.eset.com/special/eos/OnlineScanner.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

--
End of file - 8122 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\1-Click Maintenance.job
C:\WINDOWS\tasks\Microsoft_Hardware_Launch_IType_exe.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-09-22 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll [2009-01-26 1879896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Plug-In - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-02-11 1246600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-10-18 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2011-10-18 79648]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2008-03-01 1443072]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2006-11-17 577536]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2009-09-25 98304]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2006-10-27 31016]
"HPDJ Taskbar Utility"=C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe [2005-07-23 172032]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2011-09-07 37296]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2011-03-30 937920]
"LVCOMSX"=C:\WINDOWS\system32\LVCOMSX.EXE [2004-10-08 221184]
"LogitechVideoRepair"=C:\Program Files\Logitech\Video\ISStart.exe [2004-10-08 458752]
"LogitechVideoTray"=C:\Program Files\Logitech\Video\LogiTray.exe [2004-10-08 217088]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2005-09-25 155648]
"BluetoothAuthenticationAgent"=bthprops.cpl,,BluetoothAuthenticationAgent []
"itype"=C:\Program Files\Microsoft IntelliType Pro\itype.exe [2011-08-10 1313640]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2011-06-09 254696]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2008-09-06 413696]
"KernelFaultCheck"=C:\WINDOWS\system32\dumprep 0 -k []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"LogitechSoftwareUpdate"=C:\Program Files\Logitech\Video\ManifestEngine.exe [2004-10-08 196608]
"SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [2009-03-05 2260480]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2009-09-23 155648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL [2006-10-27 2210608]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\ICQ7.5\ICQ.exe"="C:\Program Files\ICQ7.5\ICQ.exe:*:Enabled:ICQ7.5"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\ICQ7.5\ICQ.exe"="C:\Program Files\ICQ7.5\ICQ.exe:*:Enabled:ICQ7.5"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=lvcodec2.dll
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"midi"=wdmaud.drv
"wave"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave2"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer2"=wdmaud.drv
"MSVideo"=vfwwdm32.dll
"MSVideo8"=VfWWDM32.dll
"wave3"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux2"=wdmaud.drv
"wave4"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux3"=wdmaud.drv
"vidc.XVID"=xvidvfw.dll
"wave5"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer5"=wdmaud.drv
"aux4"=wdmaud.drv

======List of files/folders created in the last 1 month======

2011-11-26 08:55:26 ----D---- C:\Program Files\trend micro
2011-11-25 22:43:06 ----D---- C:\WINDOWS\LastGood
2011-11-18 12:45:53 ----D---- C:\Documents and Settings\All Users\Data aplikací\OMSI AM
2011-11-11 13:53:28 ----A---- C:\WINDOWS\system32\d3dx10_41.dll
2011-11-11 13:53:28 ----A---- C:\WINDOWS\system32\D3DCompiler_41.dll
2011-11-11 13:53:25 ----A---- C:\WINDOWS\system32\D3DX9_41.dll
2011-11-11 13:53:24 ----A---- C:\WINDOWS\system32\XAudio2_4.dll
2011-11-11 13:53:24 ----A---- C:\WINDOWS\system32\XAPOFX1_3.dll
2011-11-11 13:53:23 ----A---- C:\WINDOWS\system32\xactengine3_4.dll
2011-11-11 13:53:21 ----A---- C:\WINDOWS\system32\X3DAudio1_6.dll
2011-11-10 17:17:40 ----D---- C:\Program Files\Aerosoft
2011-11-09 11:33:34 ----D---- C:\Program Files\Common Files\Apple
2011-11-09 11:33:27 ----D---- C:\Program Files\QuickTime
2011-11-09 11:33:26 ----D---- C:\Documents and Settings\All Users\Data aplikací\Apple Computer
2011-11-08 09:56:31 ----A---- C:\WINDOWS\system32\XAudio2_1.dll
2011-11-08 09:56:31 ----A---- C:\WINDOWS\system32\XAPOFX1_0.dll
2011-11-08 09:56:30 ----A---- C:\WINDOWS\system32\xactengine3_1.dll
2011-11-08 09:56:30 ----A---- C:\WINDOWS\system32\X3DAudio1_4.dll
2011-11-08 09:56:28 ----A---- C:\WINDOWS\system32\d3dx10_38.dll
2011-11-08 09:56:28 ----A---- C:\WINDOWS\system32\D3DCompiler_38.dll
2011-11-08 09:56:26 ----A---- C:\WINDOWS\system32\D3DX9_38.dll
2011-11-08 09:56:25 ----A---- C:\WINDOWS\system32\XAudio2_0.dll
2011-11-08 09:56:24 ----A---- C:\WINDOWS\system32\xactengine3_0.dll
2011-11-08 09:56:24 ----A---- C:\WINDOWS\system32\X3DAudio1_3.dll
2011-11-08 09:56:22 ----A---- C:\WINDOWS\system32\d3dx10_37.dll
2011-11-08 09:56:22 ----A---- C:\WINDOWS\system32\D3DCompiler_37.dll
2011-11-08 09:56:20 ----A---- C:\WINDOWS\system32\D3DX9_37.dll
2011-11-08 09:56:19 ----A---- C:\WINDOWS\system32\xactengine2_10.dll
2011-11-08 09:56:16 ----A---- C:\WINDOWS\system32\d3dx10_36.dll
2011-11-08 09:56:16 ----A---- C:\WINDOWS\system32\D3DCompiler_36.dll
2011-11-08 09:56:14 ----A---- C:\WINDOWS\system32\d3dx9_36.dll
2011-11-08 09:56:13 ----A---- C:\WINDOWS\system32\xactengine2_9.dll
2011-11-08 09:56:11 ----A---- C:\WINDOWS\system32\d3dx10_35.dll
2011-11-08 09:56:11 ----A---- C:\WINDOWS\system32\D3DCompiler_35.dll
2011-11-08 09:56:09 ----A---- C:\WINDOWS\system32\d3dx9_35.dll
2011-11-08 09:56:08 ----A---- C:\WINDOWS\system32\xactengine2_8.dll
2011-11-08 09:56:08 ----A---- C:\WINDOWS\system32\X3DAudio1_2.dll
2011-11-08 09:56:07 ----A---- C:\WINDOWS\system32\d3dx10_34.dll
2011-11-08 09:56:07 ----A---- C:\WINDOWS\system32\D3DCompiler_34.dll
2011-11-08 09:56:05 ----A---- C:\WINDOWS\system32\d3dx9_34.dll
2011-11-08 09:56:04 ----A---- C:\WINDOWS\system32\xinput1_3.dll
2011-11-08 09:56:03 ----A---- C:\WINDOWS\system32\xactengine2_7.dll
2011-11-08 09:56:02 ----A---- C:\WINDOWS\system32\d3dx10_33.dll
2011-11-08 09:56:01 ----A---- C:\WINDOWS\system32\D3DCompiler_33.dll
2011-11-08 09:55:58 ----A---- C:\WINDOWS\system32\d3dx9_33.dll
2011-11-08 09:55:57 ----A---- C:\WINDOWS\system32\xactengine2_6.dll
2011-11-08 09:55:57 ----A---- C:\WINDOWS\system32\xactengine2_5.dll
2011-11-08 09:55:56 ----A---- C:\WINDOWS\system32\xactengine2_4.dll
2011-11-08 09:55:56 ----A---- C:\WINDOWS\system32\x3daudio1_1.dll
2011-11-08 09:55:56 ----A---- C:\WINDOWS\system32\d3dx9_32.dll
2011-11-08 09:55:55 ----A---- C:\WINDOWS\system32\d3dx9_31.dll
2011-11-08 09:55:54 ----A---- C:\WINDOWS\system32\xinput1_2.dll
2011-11-08 09:55:54 ----A---- C:\WINDOWS\system32\xactengine2_3.dll
2011-11-08 09:55:53 ----A---- C:\WINDOWS\system32\xinput1_1.dll
2011-11-08 09:55:53 ----A---- C:\WINDOWS\system32\xactengine2_2.dll
2011-11-08 09:55:52 ----A---- C:\WINDOWS\system32\xactengine2_1.dll
2011-11-08 09:55:41 ----A---- C:\WINDOWS\system32\xactengine2_0.dll
2011-11-08 09:55:41 ----A---- C:\WINDOWS\system32\x3daudio1_0.dll
2011-11-08 09:55:39 ----A---- C:\WINDOWS\system32\d3dx9_29.dll
2011-11-08 09:55:38 ----A---- C:\WINDOWS\system32\xinput9_1_0.dll
2011-11-08 09:55:38 ----A---- C:\WINDOWS\system32\d3dx9_28.dll
2011-11-08 09:55:36 ----A---- C:\WINDOWS\system32\d3dx9_27.dll
2011-11-08 09:55:28 ----A---- C:\WINDOWS\system32\d3dx9_24.dll
2011-11-08 09:45:08 ----D---- C:\Documents and Settings\Ferda Mravenec\Data aplikací\ProtectDisc
2011-11-08 09:40:01 ----D---- C:\Documents and Settings\Ferda Mravenec\Data aplikací\InstallShield
2011-11-02 07:57:51 ----A---- C:\WINDOWS\system32\d3d9caps.dat
2011-10-27 13:23:51 ----D---- C:\Program Files\Common Files\Java
2011-10-27 13:22:02 ----A---- C:\WINDOWS\system32\javaws.exe
2011-10-27 13:22:02 ----A---- C:\WINDOWS\system32\javaw.exe
2011-10-27 13:22:02 ----A---- C:\WINDOWS\system32\java.exe

======List of files/folders modified in the last 1 month======

2011-11-26 08:55:31 ----D---- C:\WINDOWS\Prefetch
2011-11-26 08:55:27 ----D---- C:\WINDOWS\temp
2011-11-26 08:55:26 ----RD---- C:\Program Files
2011-11-25 22:43:07 ----SD---- C:\WINDOWS\Downloaded Program Files
2011-11-25 22:43:06 ----AD---- C:\WINDOWS
2011-11-25 22:27:26 ----D---- C:\WINDOWS\system32
2011-11-25 21:52:26 ----D---- C:\WINDOWS\system32\CatRoot2
2011-11-25 21:47:26 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-11-21 23:45:20 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spybot - Search & Destroy
2011-11-19 23:03:45 ----SHD---- C:\WINDOWS\Installer
2011-11-18 10:36:07 ----D---- C:\WINDOWS\system32\drivers
2011-11-18 00:37:29 ----D---- C:\WINDOWS\Minidump
2011-11-16 15:40:55 ----D---- C:\Program Files\Opera
2011-11-16 13:58:10 ----D---- C:\WINDOWS\system32\config
2011-11-15 11:24:57 ----HD---- C:\WINDOWS\inf
2011-11-14 13:35:08 ----SD---- C:\Documents and Settings\Ferda Mravenec\Data aplikací\Microsoft
2011-11-13 21:38:15 ----D---- C:\WINDOWS\Debug
2011-11-13 18:56:08 ----A---- C:\WINDOWS\NeroDigital.ini
2011-11-13 17:46:31 ----D---- C:\Documents and Settings\Ferda Mravenec\Data aplikací\ICQ
2011-11-13 17:46:28 ----D---- C:\Documents and Settings\Ferda Mravenec\Data aplikací\Skype
2011-11-13 17:44:21 ----D---- C:\Documents and Settings\Ferda Mravenec\Data aplikací\skypePM
2011-11-11 13:53:30 ----D---- C:\WINDOWS\system32\DirectX
2011-11-11 13:53:03 ----D---- C:\Config.Msi
2011-11-11 13:53:02 ----D---- C:\WINDOWS\WinSxS
2011-11-11 12:54:33 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-11-11 12:53:15 ----HD---- C:\WINDOWS\$hf_mig$
2011-11-10 17:17:36 ----HD---- C:\Program Files\InstallShield Installation Information
2011-11-09 11:33:34 ----D---- C:\Program Files\Common Files
2011-11-09 09:59:18 ----A---- C:\WINDOWS\system32\MRT.exe
2011-11-08 09:55:52 ----RSD---- C:\WINDOWS\assembly
2011-10-30 08:57:26 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-10-27 13:22:00 ----D---- C:\Program Files\Java

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI VIA; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-14 61696]
R1 easdrv;easdrv; C:\WINDOWS\system32\DRIVERS\easdrv.sys [2008-03-01 29704]
R1 epfwtdi;epfwtdi; C:\WINDOWS\system32\DRIVERS\epfwtdi.sys [2008-03-01 54280]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R2 eamon;EAMON; C:\WINDOWS\system32\DRIVERS\eamon.sys [2008-03-01 39944]
R2 epfw;epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [2008-03-01 71176]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2007-03-08 4027840]
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-14 60800]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2009-09-23 4481024]
R3 CamDrL;Logitech QuickCam Pro 3000(CamDrl); C:\WINDOWS\system32\DRIVERS\Camdrl.sys [2004-10-08 326656]
R3 EL90XBC;3Com EtherLink XL 90XB/C Adapter Driver; C:\WINDOWS\system32\DRIVERS\el90xbc5.sys [2001-08-17 66591]
R3 Epfwndis;Eset Personal Firewall; C:\WINDOWS\system32\DRIVERS\Epfwndis.sys [2008-03-01 30728]
R3 es1371;Creative AudioPCI (ES1371,ES1373) (WDM); C:\WINDOWS\system32\drivers\es1371mp.sys [2001-08-17 40704]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 LVUSBSta;Logitech USB Monitor Filter; C:\WINDOWS\system32\drivers\lvusbsta.sys [2004-10-08 22016]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 ms_mpu401;Microsoft MPU-401 MIDI UART Driver; C:\WINDOWS\system32\drivers\msmpu401.sys [2001-08-17 2944]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-14 61824]
R3 usbaudio;Ovladač zvukové karty USB (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys [2008-04-14 60032]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
R3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
S1 InCDPass;InCDPass; C:\WINDOWS\system32\drivers\InCDPass.sys []
S1 InCDRm;InCD Reader; C:\WINDOWS\system32\drivers\InCDRm.sys []
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\WINDOWS\system32\DRIVERS\BthEnum.sys [2008-04-13 17024]
S3 BTHMODEM;Ovladač komunikace modemu Bluetooth; C:\WINDOWS\system32\DRIVERS\bthmodem.sys [2008-04-13 37888]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2008-04-13 101120]
S3 BTHPORT;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2008-06-14 272128]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2008-04-13 18944]
S3 catchme;catchme; \??\C:\DOCUME~1\FERDAM~1\LOCALS~1\Temp\catchme.sys []
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-14 17024]
S3 GT680xNT;ColorPage-Vivid 1200X; C:\WINDOWS\system32\drivers\gt680x.sys [2003-02-27 17376]
S3 h643331;h643331; C:\WINDOWS\system32\drivers\h643331.sys []
S3 hid3331;hid3331; C:\WINDOWS\system32\drivers\hid3331.sys [2008-05-19 41024]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-14 10880]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\system32\DRIVERS\rfcomm.sys [2008-04-13 59136]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-14 15104]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 vaxscsi;vaxscsi; C:\WINDOWS\System32\Drivers\vaxscsi.sys [2011-04-17 223128]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200]
S4 a347bus;a347bus; C:\WINDOWS\system32\DRIVERS\a347bus.sys [2004-04-30 160640]
S4 a347scsi;a347scsi; C:\WINDOWS\System32\Drivers\a347scsi.sys [2004-04-30 5248]
S4 InCDFs;InCD File System; C:\WINDOWS\system32\drivers\InCDFs.sys []
S4 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2009-09-23 602112]
R2 BthServ;Bluetooth Support Service; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 ekrn;Eset Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2007-12-21 468224]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2011-10-03 147456]
R2 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2004-08-11 38912]
R2 UxTuneUp;TuneUp Design Expansion; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
S2 ATI Smart;ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [2009-09-25 593920]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 EhttpSrv;Eset HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2008-03-01 19200]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-03 69632]
S3 idsvc;Windows CardSpace; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2006-10-27 65824]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

chodnik74 · #2 Příspěvek od **chodnik74** » 26 lis 2011 09:43

Dobrý den

Malwarebytes' Anti-Malware Obrázek

Stáhneme,nainstalujeme a spustíme(pokud si nevíte rady jak,klikněte ZDE)
Vybereme Úplná kontrola a klikneme na tlačítko Prohledat
Program provede kontrolu počítače a na konci se vám objeví hláska,že bylo skenování dokončeno,tak potvrdíme tlačítkem OK
Objeví se vám log,který mi sem vložte
NIC NEMAZAT!!Program mívá občas falešné detekce,takže mazat budeme až po konzultaci

13918 · #3 Příspěvek od **13918** » 26 lis 2011 12:30

Malwarebytes' Anti-Malware
www.malwarebytes.org

Verze databáze:

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

26.11.2011 12:27:54
mbam-log-2011-11-26 (12-27-49).txt

Typ: Úplná kontrola (C:\|F:\|)
Kontrolované objekty: 359926
Uplynulý čas: 57 minut, 20 sekund

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče v registru: 0
Infikované hodnoty v registru: 0
Infikované datové položky v registru: 0
Infikované složky: 0
Infikované soubory: 1

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
c:\documents and settings\ferda mravenec\Plocha\instalační\acronis true image 9.0 cz\acronis.prod.kg\keygen.exe (Riskware.Tool.CK) -> No action taken.

chodnik74 · #4 Příspěvek od **chodnik74** » 26 lis 2011 12:33

Nalezenou položku mžete smazat

Pc by měl být bez havěti... jsou s PC nějaké problémy?

Doporučuji odinstalovat program Spybot - Search & Destroy , protože už má nejlepší léta za sebou a není již tak účinný proti novým hrozbám. Doporučuji nahradit za SUPERAntispyware, který používejte zhruba 1x za 14 dní jako preventivní sken ke svému AV

Netrápí vás modré obrazovky?

13918 · #5 Příspěvek od **13918** » 26 lis 2011 16:04

Modré obrazovky mě netrápí,- PC v posledních několika dnech ztratil na rychlosti připojení k netu (problém může být i na straně připojovatele), před několika dny několikrát nereagovala po zapnutí bezdrátová klávesnice připojená přes PS/2(přestože PC nekřičel po zapnutí, že klávesnici nemá připojenou) -problém se asi vyřešil sám.V průběhu dnešní noci, jak jsem uváděl na začátku, běžel ESET on line skener, který našel původně hrozby tři a dvě automaticky smazal.V posledních dnech když ve vyhledávači kliknu na nějaký odkkaz(stránku) velmi často vyskočí:404 NOT FOUND NGINX a stránka se ani po zastavení a opětovném načtení nenačte.(tento případ se mi dnes stal i u Google překladače).
Dík za pomoc

13918 · #6 Příspěvek od **13918** » 26 lis 2011 16:20

Pro úplnost musím ještě uvést, že jsem si včera stáhl jakési ovladače pro moji bezdrátovou klávesnici,(vše bylo popsáno tak jak jsem potřeboval). Staženy soubor byl .exe a po jeho spustění a) zmizel z plochy kam jsem ho stahoval, b) žádný ovladač se neinstaloval. A od této doby otvírání většiny stránek nejde-viz výše. I proto jsem spouštěl ten skener.

13918 · #7 Příspěvek od **13918** » 26 lis 2011 17:48

Nevím na kolik je Superantispyware paranoidní, ale našel:3x Critical Threats-1x Malware Trace, 2x Trojan.Agent/Gen-Krpytik
20x Tracking Objects

chodnik74 · #8 Příspěvek od **chodnik74** » 26 lis 2011 18:45

Vložte mi jeho log klidně sem..

Stáhněte program RogueKiller

Spuste program
Stiskněte klávesu 2 a enter
Objeví se vám log a ten sem vložte
Stějně tak opakujte s volbou 3 a 4 a vložte logy

Program nepoužívejte bez doporučení Rádce a pozorně se řiďte následujících pokynu,protože program netoleruje chyby a může dojít k úplnému poškození systému!!

Stáhneme si Combofix
Program uložíme nejlépe na Plochu
Vypneme všechny rezidentní štíty.Jak antiviru,tak antispywaru a firewallu
Vypneme všechny běžící aplikace (ICQ,prohlížeč,programy) a necháme pouze Combofix
Spustíme Combofix.exe s administrátorským oprávněním
U Windows XP se přihlásíme pod účtem správce
Ve Windows 7 a Vista klikněte pravým tlačítkem myši na Combofix.exe a dejte ,,Spustit jako správce,,)
Hned po startu programu na vás vyskočí licenční podmínky,tak potvrdíme tlačítkemANO
Pokud vám Combofix nabídne instalaci Konzoly pro zotavení,tak souhlaste a nechte nainstalovat(zde je potřeba aktivní připojení na internet)
Pokračujte dle pokynů programu a během skenování na nic neklikejte,na pc nepracujte(ICQ,jiné aplikace,internet..).Nechte počítač v klidu.
Celý sken tvá mezi 5-15 min,ale pokud je v PC hodně havěti,tak se čas může lišit.
Po skončení skenování(případném restartu počítače) se vám zobrazí log z Combofixu,který mi vložte sem(Kdyby se log nezobrazil,tak jej najdete zde: C:\ComboFix.txt
(Pokud si nevíte rady s kterýmkoliv z výše uvedených kroků,tak se ptejte nebo mrkněte na detailnější návod včetně obrázků http://www.bleepingcomputer.com/combofi ... t-combofix )

13918 · #9 Příspěvek od **13918** » 26 lis 2011 18:57

SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 11/26/2011 at 05:32 PM

Application Version : 5.0.1136

Core Rules Database Version : 7515
Trace Rules Database Version: 5327

Scan type : Complete Scan
Total Scan Time : 00:57:23

Operating System Information
Windows XP Professional 32-bit, Service Pack 3 (Build 5.01.2600)
Administrator

Memory items scanned : 610
Memory threats detected : 0
Registry items scanned : 37925
Registry threats detected : 1
File items scanned : 69330
File threats detected : 22

Malware.Trace
HKU\S-1-5-21-1343024091-796845957-725345543-1003\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON#SHELL

Adware.Tracking Cookie
C:\Documents and Settings\Ferda Mravenec\Cookies\VS1IY9NR.txt [ /serving-sys.com ]
C:\Documents and Settings\Ferda Mravenec\Cookies\H7L1V15Y.txt [ /doubleclick.net ]
C:\Documents and Settings\Ferda Mravenec\Cookies\ZZOG2S0C.txt [ /atdmt.com ]
C:\Documents and Settings\Ferda Mravenec\Cookies\E8BTV34I.txt [ /cdn.jemamedia.com ]
C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\Cookies\80Q05KBE.txt [ Cookie:system@google.com/accounts/recovery/ ]
C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\Cookies\GSFHM00K.txt [ Cookie:system@myroitracking.com/ ]
C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\Cookies\4SEXDVCO.txt [ Cookie:system@google.com/support/accounts/ ]
C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\Cookies\Z86C5GX4.txt [ Cookie:system@atdmt.com/ ]
C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\Cookies\CU7LMF33.txt [ Cookie:system@doubleclick.net/ ]
C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\Cookies\8UVVL907.txt [ Cookie:system@www.google.com/accounts/recovery ]
C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\Cookies\VMZ058PU.txt [ Cookie:system@linksynergy.com/ ]
C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\Cookies\K74DQ9LG.txt [ Cookie:system@amazon-adsystem.com/ ]
C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\Cookies\0JE7FDN5.txt [ Cookie:system@www.iccserver.com/adserver/www/delivery/ ]
C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\Cookies\X65ZXT4F.txt [ Cookie:system@google.com/accounts/ ]
C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\Cookies\RW02CW4G.txt [ Cookie:system@xml.trafficengine.net/ ]
C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\Cookies\97I3GLGK.txt [ Cookie:system@clicksor.com/ ]
C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\Cookies\8WL2O3LO.txt [ Cookie:system@mm.chitika.net/ ]
C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\Cookies\78G7NYX6.txt [ Cookie:system@startmedia.gr/ ]
F:\USERS\FERDA MRAVENEC\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FERDA_MRAVENEC@2O7[1].TXT [ /2O7 ]
F:\USERS\FERDA MRAVENEC\APPDATA\ROAMING\MICROSOFT\WINDOWS\COOKIES\LOW\FERDA_MRAVENEC@ADTECH[1].TXT [ /ADTECH ]

Trojan.Agent/Gen-Krpytik
C:\SYSTEM VOLUME INFORMATION\_RESTORE{65D6B0AB-29D3-41E2-AB9C-BC86E08699A7}\RP184\A0076369.EXE
F:\INSTALAčNí-HRY\SIMS 2- ROčNí OBDOBí\CRACK\RLD-S2SA.EXE

13918 · #10 Příspěvek od **13918** » 26 lis 2011 19:00

RogueKiller V6.1.10 [11/18/2011] by Tigzy
mail: tigzyRK<at>gmail<dot>com
Feedback: http://www.geekstogo.com/forum/files/fi ... guekiller/
Blog: http://tigzyrk.blogspot.com

Operating System: Windows XP (5.1.2600 Service Pack 3) 32 bits version
Started in : Normal mode
User: Ferda Mravenec [Admin rights]
Mode: Remove -- Date : 11/26/2011 19:00:34

¤¤¤ Bad processes: 0 ¤¤¤

¤¤¤ Registry Entries: 1 ¤¤¤
[HJ] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED (0)

¤¤¤ Particular Files / Folders: ¤¤¤

¤¤¤ Driver: [LOADED] ¤¤¤

¤¤¤ Infection : ¤¤¤

¤¤¤ HOSTS File: ¤¤¤
127.0.0.1 localhost

Finished : << RKreport[1].txt >>
RKreport[1].txt

13918 · #11 Příspěvek od **13918** » 26 lis 2011 19:02

3
RogueKiller V6.1.10 [11/18/2011] by Tigzy
mail: tigzyRK<at>gmail<dot>com
Feedback: http://www.geekstogo.com/forum/files/fi ... guekiller/
Blog: http://tigzyrk.blogspot.com

Operating System: Windows XP (5.1.2600 Service Pack 3) 32 bits version
Started in : Normal mode
User: Ferda Mravenec [Admin rights]
Mode: HOSTSFix -- Date : 11/26/2011 19:01:38

¤¤¤ Bad processes: 0 ¤¤¤

¤¤¤ Driver: [LOADED] ¤¤¤

¤¤¤ HOSTS File: ¤¤¤
127.0.0.1 localhost

¤¤¤ Resetted HOSTS: ¤¤¤
127.0.0.1 localhost

Finished : << RKreport[2].txt >>
RKreport[1].txt ; RKreport[2].txt

4
RogueKiller V6.1.10 [11/18/2011] by Tigzy
mail: tigzyRK<at>gmail<dot>com
Feedback: http://www.geekstogo.com/forum/files/fi ... guekiller/
Blog: http://tigzyrk.blogspot.com

Operating System: Windows XP (5.1.2600 Service Pack 3) 32 bits version
Started in : Normal mode
User: Ferda Mravenec [Admin rights]
Mode: ProxyFix -- Date : 11/26/2011 19:02:36

¤¤¤ Bad processes: 0 ¤¤¤

¤¤¤ Driver: [LOADED] ¤¤¤

¤¤¤ Registry Entries: 0 ¤¤¤

Finished : << RKreport[3].txt >>
RKreport[1].txt ; RKreport[2].txt ; RKreport[3].txt

13918 · #12 Příspěvek od **13918** » 26 lis 2011 19:24

ComboFix 11-11-26.04 - Ferda Mravenec 26.11.2011 19:11:53.4.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.2047.1630 [GMT 1:00]
Spuštěný z: c:\documents and settings\Ferda Mravenec\Plocha\ComboFix.exe
AV: ESET Smart Security 3.0 *Disabled/Updated* {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
FW: ESET personal firewall *Enabled* {E5E70D32-0101-4340-86A3-A7B0F1C8FFE0}
* Rezidentní štít AV je zapnutý
.
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\Ferda Mravenec\Local Settings\Data aplikací\11475f6a\U\80000000.@
c:\documents and settings\Ferda Mravenec\Local Settings\Data aplikací\11475f6a\U\800000cb.@
c:\documents and settings\Ferda Mravenec\Local Settings\Data aplikací\11475f6a\U\800000cf.@
c:\documents and settings\Ferda Mravenec\Local Settings\Data aplikací\11475f6a\X
C:\Install.exe
c:\windows\$NtUninstallKB45522$
c:\windows\$NtUninstallKB45522$\289890154\@
c:\windows\$NtUninstallKB45522$\289890154\L\pcciijoa
c:\windows\$NtUninstallKB45522$\289890154\loader.tlb
c:\windows\$NtUninstallKB45522$\289890154\U\@00000001
c:\windows\$NtUninstallKB45522$\289890154\U\@000000c0
c:\windows\$NtUninstallKB45522$\289890154\U\@000000cb
c:\windows\$NtUninstallKB45522$\289890154\U\@000000cf
c:\windows\$NtUninstallKB45522$\289890154\U\@80000000
c:\windows\$NtUninstallKB45522$\289890154\U\@800000c0
c:\windows\$NtUninstallKB45522$\289890154\U\@800000cb
c:\windows\$NtUninstallKB45522$\289890154\U\@800000cf
c:\windows\$NtUninstallKB45522$\3517950348
c:\windows\assembly\GAC_MSIL\desktop.ini
c:\windows\system32\
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-10-26 do 2011-11-26 )))))))))))))))))))))))))))))))
.
.
2011-11-26 15:28 . 2011-11-26 15:28 -------- d-----w- c:\documents and settings\Ferda Mravenec\Data aplikací\SUPERAntiSpyware.com
2011-11-26 15:27 . 2011-11-26 15:27 -------- d-----w- c:\documents and settings\All Users\Data aplikací\!SASCORE
2011-11-26 15:27 . 2011-11-26 15:30 -------- d-----w- c:\program files\SUPERAntiSpyware
2011-11-26 15:27 . 2011-11-26 15:27 -------- d-----w- c:\documents and settings\All Users\Data aplikací\SUPERAntiSpyware.com
2011-11-26 09:03 . 2011-11-26 09:03 -------- d-----w- c:\documents and settings\Ferda Mravenec\Data aplikací\Malwarebytes
2011-11-26 09:03 . 2011-11-26 09:03 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Malwarebytes
2011-11-26 09:03 . 2011-11-26 09:03 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-11-26 09:03 . 2011-08-31 16:00 22216 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-11-26 07:55 . 2011-11-26 07:55 -------- d-----w- c:\program files\trend micro
2011-11-25 21:20 . 2011-11-26 18:17 -------- d-sh--w- c:\documents and settings\Ferda Mravenec\Local Settings\Data aplikací\11475f6a
2011-11-18 11:45 . 2011-11-18 11:45 -------- d-----w- c:\documents and settings\All Users\Data aplikací\OMSI AM
2011-11-18 11:45 . 2011-11-18 11:45 -------- d-----w- c:\documents and settings\Ferda Mravenec\Local Settings\Data aplikací\OMSI AM
2011-11-11 12:53 . 2009-03-09 14:27 453456 ----a-w- c:\windows\system32\d3dx10_41.dll
2011-11-11 12:53 . 2009-03-09 14:27 1846632 ----a-w- c:\windows\system32\D3DCompiler_41.dll
2011-11-11 12:53 . 2009-03-09 14:27 4178264 ----a-w- c:\windows\system32\D3DX9_41.dll
2011-11-11 12:53 . 2009-03-16 13:18 69448 ----a-w- c:\windows\system32\XAPOFX1_3.dll
2011-11-11 12:53 . 2009-03-16 13:18 517448 ----a-w- c:\windows\system32\XAudio2_4.dll
2011-11-11 12:53 . 2009-03-16 13:18 235352 ----a-w- c:\windows\system32\xactengine3_4.dll
2011-11-11 12:53 . 2009-03-16 13:18 22360 ----a-w- c:\windows\system32\X3DAudio1_6.dll
2011-11-10 16:17 . 2011-11-10 16:17 -------- d-----w- c:\program files\Aerosoft
2011-11-09 10:33 . 2011-11-09 10:33 143360 ----a-w- c:\program files\Internet Explorer\PLUGINS\npqtplugin7.dll
2011-11-09 10:33 . 2011-11-09 10:33 143360 ----a-w- c:\program files\Internet Explorer\PLUGINS\npqtplugin6.dll
2011-11-09 10:33 . 2011-11-09 10:33 143360 ----a-w- c:\program files\Internet Explorer\PLUGINS\npqtplugin5.dll
2011-11-09 10:33 . 2011-11-09 10:33 143360 ----a-w- c:\program files\Internet Explorer\PLUGINS\npqtplugin4.dll
2011-11-09 10:33 . 2011-11-09 10:33 143360 ----a-w- c:\program files\Internet Explorer\PLUGINS\npqtplugin3.dll
2011-11-09 10:33 . 2011-11-09 10:33 143360 ----a-w- c:\program files\Internet Explorer\PLUGINS\npqtplugin2.dll
2011-11-09 10:33 . 2011-11-09 10:33 143360 ----a-w- c:\program files\Internet Explorer\PLUGINS\npqtplugin.dll
2011-11-09 10:33 . 2011-11-09 10:33 -------- d-----w- c:\program files\Common Files\Apple
2011-11-09 10:33 . 2011-11-09 10:33 -------- d-----w- c:\program files\QuickTime
2011-11-09 10:33 . 2011-11-09 10:33 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Apple Computer
2011-11-09 10:33 . 2011-11-09 10:33 -------- d-----w- c:\documents and settings\Ferda Mravenec\Local Settings\Data aplikací\Apple Computer
2011-11-08 08:55 . 2007-03-12 15:42 3495784 ----a-w- c:\windows\system32\d3dx9_33.dll
2011-11-08 08:45 . 2011-11-08 08:45 -------- d-----w- c:\documents and settings\Ferda Mravenec\Data aplikací\ProtectDisc
2011-11-08 08:40 . 2011-11-08 08:40 -------- d-----w- c:\documents and settings\Ferda Mravenec\Data aplikací\InstallShield
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-11-10 16:39 . 2011-05-14 08:54 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-10-10 14:22 . 2011-03-21 18:46 692736 ----a-w- c:\windows\system32\inetcomm.dll
2011-10-03 03:06 . 2011-06-30 14:15 472808 ----a-w- c:\windows\system32\deployJava1.dll
2011-10-03 00:37 . 2011-06-30 14:15 73728 ----a-w- c:\windows\system32\javacpl.cpl
2011-09-28 07:06 . 2004-08-17 15:49 602112 ----a-w- c:\windows\system32\crypt32.dll
2011-09-26 09:41 . 2010-03-18 09:09 613376 ----a-w- c:\windows\system32\uiautomationcore.dll
2011-09-26 09:41 . 2001-10-25 15:00 22528 ----a-w- c:\windows\system32\oleaccrc.dll
2011-09-26 09:41 . 2001-10-25 15:00 220160 ----a-w- c:\windows\system32\oleacc.dll
2011-09-06 14:10 . 2004-08-17 15:44 1858944 ----a-w- c:\windows\system32\win32k.sys
2011-04-18 14:01 . 2011-04-18 13:30 1308851200 ----a-w- c:\program files\4Story_CZ_3.5.55.exe
2011-04-18 13:29 . 2011-04-18 13:29 344848 ----a-w- c:\program files\Downloader_4Story_CZ_3.5.55.exe
.
.
((((((((((((((((((((((((((((( SnapShot@2011-10-15_18.19.11 )))))))))))))))))))))))))))))))))))))))))
.
+ 2007-11-07 00:19 . 2007-11-07 00:19 54272 c:\windows\WinSxS\x86_Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_ecc42bd1\vcomp90.dll
- 2007-11-06 23:19 . 2007-11-06 23:19 54272 c:\windows\WinSxS\x86_Microsoft.VC90.OpenMP_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_ecc42bd1\vcomp90.dll
+ 2007-11-07 00:19 . 2007-11-07 00:19 46592 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90kor.dll
- 2007-11-06 23:19 . 2007-11-06 23:19 46592 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90kor.dll
- 2007-11-06 23:19 . 2007-11-06 23:19 47104 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90jpn.dll
+ 2007-11-07 00:19 . 2007-11-07 00:19 47104 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90jpn.dll
+ 2007-11-07 00:19 . 2007-11-07 00:19 59392 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90ita.dll
- 2007-11-06 23:19 . 2007-11-06 23:19 59392 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90ita.dll
- 2007-11-06 23:19 . 2007-11-06 23:19 41984 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90cht.dll
+ 2007-11-07 00:19 . 2007-11-07 00:19 41984 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90cht.dll
+ 2007-11-07 00:19 . 2007-11-07 00:19 41472 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90chs.dll
- 2007-11-06 23:19 . 2007-11-06 23:19 41472 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90chs.dll
- 2007-11-06 23:19 . 2007-11-06 23:19 60416 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90fra.dll
+ 2007-11-07 00:19 . 2007-11-07 00:19 60416 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90fra.dll
- 2007-11-06 23:19 . 2007-11-06 23:19 59392 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90esp.dll
+ 2007-11-07 00:19 . 2007-11-07 00:19 59392 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90esp.dll
- 2007-11-06 23:19 . 2007-11-06 23:19 59392 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90esn.dll
+ 2007-11-07 00:19 . 2007-11-07 00:19 59392 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90esn.dll
+ 2007-11-07 00:19 . 2007-11-07 00:19 54272 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90enu.dll
- 2007-11-06 23:19 . 2007-11-06 23:19 54272 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90enu.dll
- 2007-11-06 23:19 . 2007-11-06 23:19 60928 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90deu.dll
+ 2007-11-07 00:19 . 2007-11-07 00:19 60928 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_11f3ea3a\mfc90deu.dll
+ 2007-11-06 21:51 . 2007-11-06 21:51 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_a173767a\mfcm90u.dll
- 2007-11-06 20:51 . 2007-11-06 20:51 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_a173767a\mfcm90u.dll
+ 2007-11-06 21:51 . 2007-11-06 21:51 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_a173767a\mfcm90.dll
- 2007-11-06 20:51 . 2007-11-06 20:51 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_a173767a\mfcm90.dll
+ 2011-11-26 18:19 . 2011-11-26 18:19 16384 c:\windows\temp\Perflib_Perfdata_158.dat
+ 2011-11-08 08:55 . 2005-12-05 17:07 61136 c:\windows\system32\xinput9_1_0.dll
+ 2011-11-08 08:56 . 2007-04-04 17:53 81768 c:\windows\system32\xinput1_3.dll
+ 2011-11-08 08:55 . 2006-07-28 08:30 62744 c:\windows\system32\xinput1_2.dll
+ 2011-11-08 08:55 . 2006-03-31 11:39 62672 c:\windows\system32\xinput1_1.dll
+ 2011-11-08 08:56 . 2008-05-30 13:17 65032 c:\windows\system32\XAPOFX1_0.dll
+ 2011-11-08 08:56 . 2008-05-30 13:17 25608 c:\windows\system32\X3DAudio1_4.dll
+ 2011-11-08 08:56 . 2008-03-05 15:00 25608 c:\windows\system32\X3DAudio1_3.dll
+ 2011-11-08 08:56 . 2007-10-22 02:37 17928 c:\windows\system32\X3DAudio1_2.dll
+ 2011-11-08 08:55 . 2007-03-05 11:42 15128 c:\windows\system32\x3daudio1_1.dll
+ 2011-11-08 08:55 . 2006-02-03 07:41 14032 c:\windows\system32\x3daudio1_0.dll
+ 2001-10-25 15:00 . 2011-10-30 07:57 87912 c:\windows\system32\perfc009.dat
- 2001-10-25 15:00 . 2011-10-12 18:23 87912 c:\windows\system32\perfc009.dat
- 2011-10-12 17:54 . 2010-07-05 13:13 26488 c:\windows\SoftwareDistribution\Download\6a56fd9294415a1a220e891069400e0e\update\spcustom.dll
- 2011-10-12 17:54 . 2010-07-05 13:13 18296 c:\windows\SoftwareDistribution\Download\6a56fd9294415a1a220e891069400e0e\spmsg.dll
+ 2011-11-08 08:55 . 2011-11-08 08:55 12800 c:\windows\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Diagnostics.dll
- 2011-07-23 10:09 . 2011-07-23 10:09 12800 c:\windows\assembly\GAC\Microsoft.DirectX.Diagnostics\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Diagnostics.dll
+ 2011-11-08 08:55 . 2011-11-08 08:55 53248 c:\windows\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll
- 2011-07-23 10:09 . 2011-07-23 10:09 53248 c:\windows\assembly\GAC\Microsoft.DirectX.AudioVideoPlayback\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.AudioVideoPlayback.dll
+ 2007-11-07 00:19 . 2007-11-07 00:19 655872 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_d08d0375\msvcr90.dll
- 2007-11-06 23:19 . 2007-11-06 23:19 655872 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_d08d0375\msvcr90.dll
+ 2007-11-07 00:19 . 2007-11-07 00:19 568832 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_d08d0375\msvcp90.dll
- 2007-11-06 23:19 . 2007-11-06 23:19 568832 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_d08d0375\msvcp90.dll
+ 2007-11-06 19:23 . 2007-11-06 19:23 224768 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_d08d0375\msvcm90.dll
- 2007-11-06 18:23 . 2007-11-06 18:23 224768 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_d08d0375\msvcm90.dll
+ 2007-11-07 00:19 . 2007-11-07 00:19 161784 c:\windows\WinSxS\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_312cf0e9\atl90.dll
- 2007-11-06 23:19 . 2007-11-06 23:19 161784 c:\windows\WinSxS\x86_Microsoft.VC90.ATL_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_312cf0e9\atl90.dll
+ 2011-11-08 08:56 . 2008-05-30 13:19 507400 c:\windows\system32\XAudio2_1.dll
+ 2011-11-08 08:56 . 2008-03-05 15:03 479752 c:\windows\system32\XAudio2_0.dll
+ 2011-11-08 08:56 . 2008-05-30 13:18 238088 c:\windows\system32\xactengine3_1.dll
+ 2011-11-08 08:56 . 2008-03-05 15:03 238088 c:\windows\system32\xactengine3_0.dll
+ 2011-11-08 08:56 . 2007-07-19 23:57 267112 c:\windows\system32\xactengine2_9.dll
+ 2011-11-08 08:56 . 2007-06-20 19:46 266088 c:\windows\system32\xactengine2_8.dll
+ 2011-11-08 08:56 . 2007-04-04 17:55 261480 c:\windows\system32\xactengine2_7.dll
+ 2011-11-08 08:55 . 2007-01-24 14:27 255848 c:\windows\system32\xactengine2_6.dll
+ 2011-11-08 08:55 . 2006-12-08 11:02 251672 c:\windows\system32\xactengine2_5.dll
+ 2011-11-08 08:55 . 2006-09-28 15:05 237848 c:\windows\system32\xactengine2_4.dll
+ 2011-11-08 08:55 . 2006-07-28 08:30 236824 c:\windows\system32\xactengine2_3.dll
+ 2011-11-08 08:55 . 2006-05-31 06:24 230168 c:\windows\system32\xactengine2_2.dll
+ 2011-11-08 08:56 . 2007-10-22 02:39 267272 c:\windows\system32\xactengine2_10.dll
+ 2011-11-08 08:55 . 2006-03-31 11:39 229584 c:\windows\system32\xactengine2_1.dll
+ 2011-11-08 08:55 . 2006-02-03 07:42 230096 c:\windows\system32\xactengine2_0.dll
+ 2001-10-25 15:00 . 2011-10-30 07:57 504154 c:\windows\system32\perfh009.dat
- 2001-10-25 15:00 . 2011-10-12 18:23 504154 c:\windows\system32\perfh009.dat
+ 2001-10-25 15:00 . 2011-10-30 07:57 500272 c:\windows\system32\perfh005.dat
- 2001-10-25 15:00 . 2011-10-12 18:23 500272 c:\windows\system32\perfh005.dat
- 2001-10-25 15:00 . 2011-10-12 18:23 102926 c:\windows\system32\perfc005.dat
+ 2001-10-25 15:00 . 2011-10-30 07:57 102926 c:\windows\system32\perfc005.dat
+ 2011-11-10 16:39 . 2011-11-10 16:39 247968 c:\windows\system32\Macromed\Flash\FlashUtil11c_Plugin.exe
+ 2011-10-27 12:22 . 2011-10-03 03:06 157472 c:\windows\system32\javaws.exe
- 2011-06-30 14:15 . 2011-06-30 14:15 157472 c:\windows\system32\javaws.exe
+ 2011-10-27 12:22 . 2011-10-03 03:06 145184 c:\windows\system32\javaw.exe
- 2011-06-30 14:15 . 2011-06-30 14:15 145184 c:\windows\system32\javaw.exe
+ 2011-10-27 12:22 . 2011-10-03 03:06 145184 c:\windows\system32\java.exe
- 2011-06-30 14:15 . 2011-06-30 14:15 145184 c:\windows\system32\java.exe
+ 2010-01-29 15:01 . 2011-10-10 14:22 692736 c:\windows\system32\dllcache\inetcomm.dll
- 2010-01-29 15:01 . 2011-05-02 15:32 692736 c:\windows\system32\dllcache\inetcomm.dll
- 2011-09-03 10:17 . 2011-09-09 09:12 602112 c:\windows\system32\dllcache\crypt32.dll
+ 2011-09-03 10:17 . 2011-09-28 07:06 602112 c:\windows\system32\dllcache\crypt32.dll
+ 2011-11-08 08:56 . 2008-05-30 13:11 467984 c:\windows\system32\d3dx10_38.dll
+ 2011-11-08 08:56 . 2008-02-05 22:07 462864 c:\windows\system32\d3dx10_37.dll
+ 2011-11-08 08:56 . 2007-10-02 08:56 444776 c:\windows\system32\d3dx10_36.dll
+ 2011-11-08 08:56 . 2007-07-19 17:14 444776 c:\windows\system32\d3dx10_35.dll
+ 2011-11-08 08:56 . 2007-05-16 15:45 443752 c:\windows\system32\d3dx10_34.dll
+ 2011-11-08 08:56 . 2007-03-15 15:57 443752 c:\windows\system32\d3dx10_33.dll
- 2011-10-12 17:54 . 2010-07-05 13:13 391032 c:\windows\SoftwareDistribution\Download\6a56fd9294415a1a220e891069400e0e\update\updspapi.dll
- 2011-10-12 17:54 . 2010-07-05 13:13 759160 c:\windows\SoftwareDistribution\Download\6a56fd9294415a1a220e891069400e0e\update\update.exe
- 2011-10-12 17:54 . 2010-07-05 13:13 233848 c:\windows\SoftwareDistribution\Download\6a56fd9294415a1a220e891069400e0e\spuninst.exe
- 2011-10-12 17:54 . 2011-08-17 13:41 138496 c:\windows\SoftwareDistribution\Download\6a56fd9294415a1a220e891069400e0e\SP3QFE\afd.sys
- 2011-10-12 17:54 . 2011-08-17 13:49 138496 c:\windows\SoftwareDistribution\Download\6a56fd9294415a1a220e891069400e0e\SP3GDR\afd.sys
+ 2011-11-08 08:55 . 2006-03-31 10:27 578560 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2911.0\Microsoft.DirectX.Direct3DX.dll
+ 2011-11-08 08:55 . 2006-02-03 06:40 578560 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2910.0\Microsoft.DirectX.Direct3DX.dll
+ 2011-11-08 08:55 . 2005-12-05 16:20 577536 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2909.0\Microsoft.DirectX.Direct3DX.dll
+ 2011-11-08 08:55 . 2005-09-28 13:11 577536 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2908.0\Microsoft.DirectX.Direct3DX.dll
+ 2011-11-08 08:55 . 2005-07-22 16:21 577024 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2907.0\Microsoft.DirectX.Direct3DX.dll
- 2011-04-16 04:28 . 2005-05-26 13:15 576000 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2906.0\Microsoft.DirectX.Direct3DX.dll
+ 2011-04-16 04:28 . 2005-05-26 14:15 576000 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2906.0\Microsoft.DirectX.Direct3DX.dll
+ 2011-07-23 10:09 . 2005-03-18 16:23 567296 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2905.0\Microsoft.DirectX.Direct3DX.dll
- 2011-07-23 10:09 . 2005-03-18 15:23 567296 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2905.0\Microsoft.DirectX.Direct3DX.dll
+ 2011-11-08 08:55 . 2005-02-05 18:32 563712 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2904.0\Microsoft.DirectX.Direct3DX.dll
+ 2011-10-27 12:23 . 2011-10-27 12:23 203776 c:\windows\Installer\4a1d6b.msi
+ 2011-11-08 08:55 . 2011-11-08 08:55 223232 c:\windows\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.dll
- 2011-07-23 10:09 . 2011-07-23 10:09 223232 c:\windows\assembly\GAC\Microsoft.DirectX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.dll
+ 2011-11-08 08:55 . 2011-11-08 08:55 178176 c:\windows\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectSound.dll
- 2011-07-23 10:09 . 2011-07-23 10:09 178176 c:\windows\assembly\GAC\Microsoft.DirectX.DirectSound\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectSound.dll
+ 2011-11-08 08:55 . 2011-11-08 08:55 364544 c:\windows\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectPlay.dll
- 2011-07-23 10:09 . 2011-07-23 10:09 364544 c:\windows\assembly\GAC\Microsoft.DirectX.DirectPlay\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectPlay.dll
+ 2011-11-08 08:55 . 2011-11-08 08:55 159232 c:\windows\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectInput.dll
- 2011-07-23 10:09 . 2011-07-23 10:09 159232 c:\windows\assembly\GAC\Microsoft.DirectX.DirectInput\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectInput.dll
+ 2011-11-08 08:55 . 2011-11-08 08:55 145920 c:\windows\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll
- 2011-07-23 10:09 . 2011-07-23 10:09 145920 c:\windows\assembly\GAC\Microsoft.DirectX.DirectDraw\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.DirectDraw.dll
+ 2011-11-08 08:55 . 2011-11-08 08:55 578560 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2911.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2011-11-08 08:55 . 2011-11-08 08:55 578560 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2910.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2011-11-08 08:55 . 2011-11-08 08:55 577536 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2909.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2011-11-08 08:55 . 2011-11-08 08:55 577536 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2908.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2011-11-08 08:55 . 2011-11-08 08:55 577024 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2907.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2011-07-23 10:09 . 2011-07-23 10:09 576000 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2011-11-08 08:55 . 2011-11-08 08:55 576000 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2906.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
- 2011-07-23 10:09 . 2011-07-23 10:09 567296 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2011-11-08 08:55 . 2011-11-08 08:55 567296 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2905.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2011-11-08 08:55 . 2011-11-08 08:55 563712 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2904.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2011-11-08 08:55 . 2011-11-08 08:55 473600 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3D.dll
- 2011-07-23 10:09 . 2011-07-23 10:09 473600 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3D\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3D.dll
- 2007-11-06 23:19 . 2007-11-06 23:19 1162744 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_a173767a\mfc90u.dll
+ 2007-11-07 00:19 . 2007-11-07 00:19 1162744 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_a173767a\mfc90u.dll
+ 2007-11-07 00:19 . 2007-11-07 00:19 1156600 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_a173767a\mfc90.dll
- 2007-11-06 23:19 . 2007-11-06 23:19 1156600 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_a173767a\mfc90.dll
+ 2011-03-23 17:43 . 2011-11-10 16:39 8522400 c:\windows\system32\Macromed\Flash\NPSWF32.dll
+ 2011-11-08 08:56 . 2008-05-30 13:11 3850760 c:\windows\system32\D3DX9_38.dll
+ 2011-11-08 08:56 . 2008-03-05 14:56 3786760 c:\windows\system32\D3DX9_37.dll
+ 2011-11-08 08:56 . 2007-10-12 14:14 3734536 c:\windows\system32\d3dx9_36.dll
+ 2011-11-08 08:56 . 2007-07-19 17:14 3727720 c:\windows\system32\d3dx9_35.dll
+ 2011-11-08 08:56 . 2007-05-16 15:45 3497832 c:\windows\system32\d3dx9_34.dll
+ 2011-11-08 08:55 . 2006-11-29 12:06 3426072 c:\windows\system32\d3dx9_32.dll
+ 2011-11-08 08:55 . 2006-09-28 15:05 2414360 c:\windows\system32\d3dx9_31.dll
+ 2011-11-08 08:55 . 2006-02-03 07:43 2332368 c:\windows\system32\d3dx9_29.dll
+ 2011-11-08 08:55 . 2005-12-05 17:09 2323664 c:\windows\system32\d3dx9_28.dll
+ 2011-11-08 08:55 . 2005-07-22 18:59 2319568 c:\windows\system32\d3dx9_27.dll
- 2011-04-16 04:28 . 2005-05-26 13:34 2297552 c:\windows\system32\d3dx9_26.dll
+ 2011-04-16 04:28 . 2005-05-26 14:34 2297552 c:\windows\system32\d3dx9_26.dll
+ 2011-07-23 10:09 . 2005-03-18 16:19 2337488 c:\windows\system32\d3dx9_25.dll
- 2011-07-23 10:09 . 2005-03-18 15:19 2337488 c:\windows\system32\d3dx9_25.dll
+ 2011-11-08 08:55 . 2005-02-05 18:45 2222800 c:\windows\system32\d3dx9_24.dll
+ 2011-11-08 08:56 . 2008-05-30 13:11 1491992 c:\windows\system32\D3DCompiler_38.dll
+ 2011-11-08 08:56 . 2008-03-05 14:56 1420824 c:\windows\system32\D3DCompiler_37.dll
+ 2011-11-08 08:56 . 2007-10-12 14:14 1374232 c:\windows\system32\D3DCompiler_36.dll
+ 2011-11-08 08:56 . 2007-07-19 17:14 1358192 c:\windows\system32\D3DCompiler_35.dll
+ 2011-11-08 08:56 . 2007-05-16 15:45 1124720 c:\windows\system32\D3DCompiler_34.dll
+ 2011-11-08 08:56 . 2007-03-12 15:42 1123696 c:\windows\system32\D3DCompiler_33.dll
+ 2011-11-08 08:55 . 2004-12-01 14:53 2846720 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2903.0\Microsoft.DirectX.Direct3DX.dll
+ 2011-11-08 08:55 . 2004-09-29 11:38 2676224 c:\windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0\Microsoft.DirectX.Direct3DX.dll
+ 2011-11-09 10:33 . 2011-11-09 10:33 8990208 c:\windows\Installer\616f586.msi
+ 2011-11-08 08:55 . 2011-11-08 08:55 2846720 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2903.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2011-11-08 08:55 . 2011-11-08 08:55 2676224 c:\windows\assembly\GAC\Microsoft.DirectX.Direct3DX\1.0.2902.0__31bf3856ad364e35\Microsoft.DirectX.Direct3DX.dll
+ 2011-03-23 18:24 . 2011-11-09 08:59 50295240 c:\windows\system32\MRT.exe
.
-- Snímek resetován k současnému datu --
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LogitechSoftwareUpdate"="c:\program files\Logitech\Video\ManifestEngine.exe" [2004-10-08 196608]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2008-03-01 1443072]
"SoundMan"="SOUNDMAN.EXE" [2006-11-17 577536]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-09-25 98304]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016]
"HPDJ Taskbar Utility"="c:\windows\system32\spool\drivers\w32x86\3\hpztsb10.exe" [2005-07-23 172032]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-09-07 37296]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-03-30 937920]
"LVCOMSX"="c:\windows\system32\LVCOMSX.EXE" [2004-10-08 221184]
"LogitechVideoRepair"="c:\program files\Logitech\Video\ISStart.exe" [2004-10-08 458752]
"LogitechVideoTray"="c:\program files\Logitech\Video\LogiTray.exe" [2004-10-08 217088]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2005-09-25 155648]
"BluetoothAuthenticationAgent"="bthprops.cpl" [2008-04-14 110592]
"itype"="c:\program files\Microsoft IntelliType Pro\itype.exe" [2011-08-10 1313640]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2008-09-06 413696]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2011-07-19 113024]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2011-05-04 17:54 551296 ----a-w- c:\program files\SUPERAntiSpyware\SASWINLO.DLL
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0OODBS
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]
@=""
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Opera\\opera.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\ICQ7.5\\ICQ.exe"=
.
R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [22.7.2011 17:27 12880]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [12.7.2011 22:55 67664]
R2 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCORE.EXE [19.7.2011 1:02 116608]
R2 ekrn;Eset Service;c:\program files\ESET\ESET Smart Security\ekrn.exe [21.12.2007 8:21 468224]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [18.3.2010 13:16 130384]
S3 GT680xNT;ColorPage-Vivid 1200X;c:\windows\system32\drivers\Gt680x.sys [2.8.2011 16:49 17376]
S3 h643331;h643331;c:\windows\system32\drivers\h643331.sys --> c:\windows\system32\drivers\h643331.sys [?]
S3 hid3331;hid3331;c:\windows\system32\drivers\Hid3331.sys [16.4.2011 8:33 41024]
S3 vaxscsi;vaxscsi;c:\windows\system32\drivers\vaxscsi.sys [17.4.2011 14:01 223128]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [18.3.2010 13:16 753504]
S4 a347bus;a347bus;c:\windows\system32\drivers\a347bus.sys [23.4.2011 20:37 160640]
S4 a347scsi;a347scsi;c:\windows\system32\drivers\a347scsi.sys [23.4.2011 20:37 5248]
S4 sptd;sptd;c:\windows\system32\Drivers\sptd.sys --> c:\windows\system32\Drivers\sptd.sys [?]
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
Obsah adresáře 'Naplánované úlohy'
.
2011-11-25 c:\windows\Tasks\1-Click Maintenance.job
- c:\program files\TuneUp Utilities 2007\SystemOptimizer.exe [2006-12-19 13:13]
.
2011-09-17 c:\windows\Tasks\Microsoft_Hardware_Launch_IType_exe.job
- c:\program files\Microsoft IntelliType Pro\itype.exe [2011-08-10 14:39]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.google.cz/
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: {{7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - c:\program files\ICQ7.5\ICQ.exe
TCP: DhcpNameServer = 192.168.2.1
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
AddRemove-AuranTS2009_is1 - g:\program files\Auran\TS2009\unins000.exe
AddRemove-Family Tree Builder - g:\program files\MyHeritage\Bin\Uninstall.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-11-26 19:20
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System*]
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
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'winlogon.exe'(788)
c:\program files\SUPERAntiSpyware\SASWINLO.DLL
c:\windows\system32\Ati2evxx.dll
.
- - - - - - - > 'explorer.exe'(1936)
c:\windows\system32\webcheck.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\windows\system32\Ati2evxx.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\windows\SOUNDMAN.EXE
c:\program files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
c:\windows\system32\wdfmgr.exe
c:\windows\system32\rundll32.exe
c:\program files\Logitech\Video\FxSvr2.exe
c:\program files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
.
**************************************************************************
.
Celkový čas: 2011-11-26 19:23:37 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-11-26 18:23
ComboFix2.txt 2011-10-15 18:20
.
Před spuštěním: Volných bajtů: 204 641 943 552
Po spuštění: Volných bajtů: 204 663 365 632
.
- - End Of File - - 42ABFDF50C0214FCB8B66433F5AAE72B

chodnik74 · #13 Příspěvek od **chodnik74** » 26 lis 2011 20:13

Nalezené položky SUPERAntispyware dejte smazat

Vyčistěte pc dle návodu: http://www.viry.cz/forum/viewtopic.php?f=46&t=47040

Otevřeme si Poznámkový blok Obrázek

(stiskneme klávesovou kombinaci WIN+R a napíšeme ,,notepad,, bez úvozovek a dáme enter)

Vložíme do něj následující script:

Kód: Vybrat vše

KillAll::

Folder::
c:\documents and settings\Ferda Mravenec\Local Settings\Data aplikací\11475f6a\

Registry::
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=-
"GrooveMonitor"=-
"Adobe Reader Speed Launcher"=-
"Adobe ARM"=-
"NeroFilterCheck"=-
"SunJavaUpdateSched"=-
"QuickTime Task"=-

RegLock::
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System*]

RegNull::
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System*]

Reboot::

Soubor uložíme na Plochu jako CFScript.txt
Poté tento soubor uchopíme levým tlačítkem myši a přetáhneme na ikonu Combofixu a upustíme
Poté Combofix provede všechny operace a udělá nový log,který sem vložte

Může se stát,že po aplikaci scriptu nenaběhne Windows běžným způsobem.V tomto případě restartujte počítač a při startu mačkejte F8 a zvolte možnost Poslední známá funkční konfigurace

13918 · #14 Příspěvek od **13918** » 26 lis 2011 22:22

ComboFix 11-11-26.04 - Ferda Mravenec 26.11.2011 22:13:20.5.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.2047.1335 [GMT 1:00]
Spuštěný z: c:\documents and settings\Ferda Mravenec\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Ferda Mravenec\Plocha\CFScript.txt
AV: ESET Smart Security 3.0 *Disabled/Updated* {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
FW: ESET personal firewall *Enabled* {E5E70D32-0101-4340-86A3-A7B0F1C8FFE0}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-10-26 do 2011-11-26 )))))))))))))))))))))))))))))))
.
.
2011-11-26 15:28 . 2011-11-26 15:28 -------- d-----w- c:\documents and settings\Ferda Mravenec\Data aplikací\SUPERAntiSpyware.com
2011-11-26 15:27 . 2011-11-26 15:27 -------- d-----w- c:\documents and settings\All Users\Data aplikací\!SASCORE
2011-11-26 15:27 . 2011-11-26 15:30 -------- d-----w- c:\program files\SUPERAntiSpyware
2011-11-26 15:27 . 2011-11-26 15:27 -------- d-----w- c:\documents and settings\All Users\Data aplikací\SUPERAntiSpyware.com
2011-11-26 09:03 . 2011-11-26 09:03 -------- d-----w- c:\documents and settings\Ferda Mravenec\Data aplikací\Malwarebytes
2011-11-26 09:03 . 2011-11-26 09:03 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Malwarebytes
2011-11-26 09:03 . 2011-11-26 09:03 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2011-11-26 09:03 . 2011-08-31 16:00 22216 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-11-26 07:55 . 2011-11-26 07:55 -------- d-----w- c:\program files\trend micro
2011-11-25 21:20 . 2011-11-26 18:17 -------- d-sh--w- c:\documents and settings\Ferda Mravenec\Local Settings\Data aplikací\11475f6a
2011-11-18 11:45 . 2011-11-18 11:45 -------- d-----w- c:\documents and settings\All Users\Data aplikací\OMSI AM
2011-11-18 11:45 . 2011-11-18 11:45 -------- d-----w- c:\documents and settings\Ferda Mravenec\Local Settings\Data aplikací\OMSI AM
2011-11-11 12:53 . 2009-03-09 14:27 453456 ----a-w- c:\windows\system32\d3dx10_41.dll
2011-11-11 12:53 . 2009-03-09 14:27 1846632 ----a-w- c:\windows\system32\D3DCompiler_41.dll
2011-11-11 12:53 . 2009-03-09 14:27 4178264 ----a-w- c:\windows\system32\D3DX9_41.dll
2011-11-11 12:53 . 2009-03-16 13:18 69448 ----a-w- c:\windows\system32\XAPOFX1_3.dll
2011-11-11 12:53 . 2009-03-16 13:18 517448 ----a-w- c:\windows\system32\XAudio2_4.dll
2011-11-11 12:53 . 2009-03-16 13:18 235352 ----a-w- c:\windows\system32\xactengine3_4.dll
2011-11-11 12:53 . 2009-03-16 13:18 22360 ----a-w- c:\windows\system32\X3DAudio1_6.dll
2011-11-10 16:17 . 2011-11-10 16:17 -------- d-----w- c:\program files\Aerosoft
2011-11-09 10:33 . 2011-11-09 10:33 143360 ----a-w- c:\program files\Internet Explorer\PLUGINS\npqtplugin7.dll
2011-11-09 10:33 . 2011-11-09 10:33 143360 ----a-w- c:\program files\Internet Explorer\PLUGINS\npqtplugin6.dll
2011-11-09 10:33 . 2011-11-09 10:33 143360 ----a-w- c:\program files\Internet Explorer\PLUGINS\npqtplugin5.dll
2011-11-09 10:33 . 2011-11-09 10:33 143360 ----a-w- c:\program files\Internet Explorer\PLUGINS\npqtplugin4.dll
2011-11-09 10:33 . 2011-11-09 10:33 143360 ----a-w- c:\program files\Internet Explorer\PLUGINS\npqtplugin3.dll
2011-11-09 10:33 . 2011-11-09 10:33 143360 ----a-w- c:\program files\Internet Explorer\PLUGINS\npqtplugin2.dll
2011-11-09 10:33 . 2011-11-09 10:33 143360 ----a-w- c:\program files\Internet Explorer\PLUGINS\npqtplugin.dll
2011-11-09 10:33 . 2011-11-09 10:33 -------- d-----w- c:\program files\Common Files\Apple
2011-11-09 10:33 . 2011-11-09 10:33 -------- d-----w- c:\program files\QuickTime
2011-11-09 10:33 . 2011-11-09 10:33 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Apple Computer
2011-11-09 10:33 . 2011-11-09 10:33 -------- d-----w- c:\documents and settings\Ferda Mravenec\Local Settings\Data aplikací\Apple Computer
2011-11-08 08:55 . 2007-03-12 15:42 3495784 ----a-w- c:\windows\system32\d3dx9_33.dll
2011-11-08 08:45 . 2011-11-08 08:45 -------- d-----w- c:\documents and settings\Ferda Mravenec\Data aplikací\ProtectDisc
2011-11-08 08:40 . 2011-11-08 08:40 -------- d-----w- c:\documents and settings\Ferda Mravenec\Data aplikací\InstallShield
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-11-10 16:39 . 2011-05-14 08:54 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-10-10 14:22 . 2011-03-21 18:46 692736 ----a-w- c:\windows\system32\inetcomm.dll
2011-10-03 03:06 . 2011-06-30 14:15 472808 ----a-w- c:\windows\system32\deployJava1.dll
2011-10-03 00:37 . 2011-06-30 14:15 73728 ----a-w- c:\windows\system32\javacpl.cpl
2011-09-28 07:06 . 2004-08-17 15:49 602112 ----a-w- c:\windows\system32\crypt32.dll
2011-09-26 09:41 . 2010-03-18 09:09 613376 ----a-w- c:\windows\system32\uiautomationcore.dll
2011-09-26 09:41 . 2001-10-25 15:00 22528 ----a-w- c:\windows\system32\oleaccrc.dll
2011-09-26 09:41 . 2001-10-25 15:00 220160 ----a-w- c:\windows\system32\oleacc.dll
2011-09-06 14:10 . 2004-08-17 15:44 1858944 ----a-w- c:\windows\system32\win32k.sys
2011-04-18 14:01 . 2011-04-18 13:30 1308851200 ----a-w- c:\program files\4Story_CZ_3.5.55.exe
2011-04-18 13:29 . 2011-04-18 13:29 344848 ----a-w- c:\program files\Downloader_4Story_CZ_3.5.55.exe
.
.
((((((((((((((((((((((((((((( SnapShot_2011-11-26_18.19.51 )))))))))))))))))))))))))))))))))))))))))
.
+ 2011-11-26 21:19 . 2011-11-26 21:19 16384 c:\windows\temp\Perflib_Perfdata_37c.dat
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LogitechSoftwareUpdate"="c:\program files\Logitech\Video\ManifestEngine.exe" [2004-10-08 196608]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2008-03-01 1443072]
"SoundMan"="SOUNDMAN.EXE" [2006-11-17 577536]
"HPDJ Taskbar Utility"="c:\windows\system32\spool\drivers\w32x86\3\hpztsb10.exe" [2005-07-23 172032]
"LVCOMSX"="c:\windows\system32\LVCOMSX.EXE" [2004-10-08 221184]
"LogitechVideoRepair"="c:\program files\Logitech\Video\ISStart.exe" [2004-10-08 458752]
"LogitechVideoTray"="c:\program files\Logitech\Video\LogiTray.exe" [2004-10-08 217088]
"BluetoothAuthenticationAgent"="bthprops.cpl" [2008-04-14 110592]
"itype"="c:\program files\Microsoft IntelliType Pro\itype.exe" [2011-08-10 1313640]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2011-07-19 113024]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2011-05-04 17:54 551296 ----a-w- c:\program files\SUPERAntiSpyware\SASWINLO.DLL
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0OODBS
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]
@=""
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Opera\\opera.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Program Files\\ICQ7.5\\ICQ.exe"=
.
R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [22.7.2011 17:27 12880]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [12.7.2011 22:55 67664]
R2 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCORE.EXE [19.7.2011 1:02 116608]
R2 ekrn;Eset Service;c:\program files\ESET\ESET Smart Security\ekrn.exe [21.12.2007 8:21 468224]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [18.3.2010 13:16 130384]
S3 GT680xNT;ColorPage-Vivid 1200X;c:\windows\system32\drivers\Gt680x.sys [2.8.2011 16:49 17376]
S3 h643331;h643331;c:\windows\system32\drivers\h643331.sys --> c:\windows\system32\drivers\h643331.sys [?]
S3 hid3331;hid3331;c:\windows\system32\drivers\Hid3331.sys [16.4.2011 8:33 41024]
S3 vaxscsi;vaxscsi;c:\windows\system32\drivers\vaxscsi.sys [17.4.2011 14:01 223128]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [18.3.2010 13:16 753504]
S4 a347bus;a347bus;c:\windows\system32\drivers\a347bus.sys [23.4.2011 20:37 160640]
S4 a347scsi;a347scsi;c:\windows\system32\drivers\a347scsi.sys [23.4.2011 20:37 5248]
S4 sptd;sptd;c:\windows\system32\Drivers\sptd.sys --> c:\windows\system32\Drivers\sptd.sys [?]
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
Obsah adresáře 'Naplánované úlohy'
.
2011-11-25 c:\windows\Tasks\1-Click Maintenance.job
- c:\program files\TuneUp Utilities 2007\SystemOptimizer.exe [2006-12-19 13:13]
.
2011-09-17 c:\windows\Tasks\Microsoft_Hardware_Launch_IType_exe.job
- c:\program files\Microsoft IntelliType Pro\itype.exe [2011-08-10 14:39]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.google.cz/
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: {{7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - c:\program files\ICQ7.5\ICQ.exe
TCP: DhcpNameServer = 192.168.2.1
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-11-26 22:19
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'winlogon.exe'(788)
c:\program files\SUPERAntiSpyware\SASWINLO.DLL
c:\windows\system32\Ati2evxx.dll
.
- - - - - - - > 'explorer.exe'(916)
c:\windows\system32\webcheck.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\windows\system32\Ati2evxx.exe
c:\windows\SOUNDMAN.EXE
c:\program files\Java\jre6\bin\jqs.exe
c:\windows\system32\rundll32.exe
c:\windows\system32\wdfmgr.exe
c:\program files\Logitech\Video\FxSvr2.exe
.
**************************************************************************
.
Celkový čas: 2011-11-26 22:22:18 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-11-26 21:22
ComboFix2.txt 2011-11-26 18:23
ComboFix3.txt 2011-10-15 18:20
.
Před spuštěním: Volných bajtů: 210 328 100 864
Po spuštění: Volných bajtů: 210 308 173 824
.
- - End Of File - - CBA667C2DE1567B1D37B009290FAE854

chodnik74 · #15 Příspěvek od **chodnik74** » 26 lis 2011 23:01

Stiskněte klávesovou kombinaci WIN+R( nebo start-spustit ),čímž se vám otevře okno pro zadání příkazu pro spuštění a zkopírujte a vložte sem následujíci text: Combofix /Uninstall a dejte enter

T-Cleaner

Spustíme,zmáčkneme klávesu A a potvrdíme ENTER(některé antiviry mohou detekovat utilitu jako vir-jedá se o falešný poplach,proto IGNOROVAT nebo dočasně vypnout antivir )
po použití T-Cleaner smažte

TFC

Stáhneme a spustíme program
Klikneme na Start a potvrdíme OK
Program začne uklízet,poté restartuje pc
po použití program smažte

Údržba PC:

1)Čištění dočasných složek + neplatné registry

Ccleaner

Stáhneme a nainstalujeme program
Spustíme program
ČISTIČ
Windows zde necháme vše jak je (pokud používáme IE,tak odškrkneme jeho položky) a zaškrkneme položky Start Menu zástupci a Zástupci na ploše a odškrkneme volbu Zbytky souborů v paměti
Aplikace - necháme jak je,ale pokud používáme nějaký prohlížeč (Google chrome,Firefox,Opera..) tak odškrkneme jeho položky
>Stiskeneme tlačítko Analyzovat a poté Spustit Cleaner
Registry
>Stiskneme tlačítko Hledej problémy,program začne hledat neplatné registry..podé zvolíme Opravit vybrané problémy..
>Program se zeptá,zda chceme vytvořit zálohu registrů,zvolíme ano a uložíme si někde zálohu(kdyby byli po opravení registru s něčím problémy,tak zálohu obnovíme tak,že spustíme uloženou zálohu a potvrdíme ano),dále zvolíme Opravit všechny problémy a Zavřít
>opakujte dokud nebude registr bez problémů
Program používáme 1x 14dní (záleží na používání pc,můžeme i jednou týdně)

2)Defragmentace disku

Defraggler

Stáhneme a nainstalujeme program
Spustíme program
Vybereme disk ( C:,D:..prostě který používáme)
Pokud je ve sloupci Fragmentace více než 5% dejte Defragmentovat
Proveďte se všemi používanými disky
Provádíme 1x za měsíc

3)Aktualizace programů

FileHippo.com Update Checker

Stáhneme a nainstalujeme program(Při instalaci odškrkneme volbu Run at Startup )
Spustíme program
Program vyhledá nainstalované programy v PC a zjistí dostupné aktualizace
Poté se vám otevře internetová stránka,kde budou nabídnuté aplikace k aktualizování
>X Updates Detected..to jsou dostupné aktualizace..
> klikneme na zelenou šipečku a stáhneme program,poté nainstalujeme jeho aktuální verzi
> X Beta Updates Detected..tyto aktualizace nestahujte,jedná se o betaverze,které jsou ve vývoji a jsou nestabilní
Provádíme 1x za 14 dní nebo jednou za měsíc

Jak se chová PC

+ nový RSIT

VIRY.CZ

Skener cosi našel, prosím o kontrolu zda odstranil vše

Skener cosi našel, prosím o kontrolu zda odstranil vše

Re: Skener cosi našel, prosím o kontrolu zda odstranil vše

Re: Skener cosi našel, prosím o kontrolu zda odstranil vše

Re: Skener cosi našel, prosím o kontrolu zda odstranil vše

Re: Skener cosi našel, prosím o kontrolu zda odstranil vše

Re: Skener cosi našel, prosím o kontrolu zda odstranil vše

Re: Skener cosi našel, prosím o kontrolu zda odstranil vše

Re: Skener cosi našel, prosím o kontrolu zda odstranil vše

Re: Skener cosi našel, prosím o kontrolu zda odstranil vše

Re: Skener cosi našel, prosím o kontrolu zda odstranil vše

Re: Skener cosi našel, prosím o kontrolu zda odstranil vše

Re: Skener cosi našel, prosím o kontrolu zda odstranil vše

Re: Skener cosi našel, prosím o kontrolu zda odstranil vše

Re: Skener cosi našel, prosím o kontrolu zda odstranil vše

Re: Skener cosi našel, prosím o kontrolu zda odstranil vše