Nieco zabera strasne vela miesta

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz


Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Odpovědět
Zpráva
Autor
Avatar uživatele
PINGWIN
Návštěvník
Návštěvník
Příspěvky: 30
Registrován: 24 Říj 2010 15:52

Nieco zabera strasne vela miesta

#1 Příspěvek od PINGWIN »

ahoj potrebujem pomoc
Nieco zabera strasne vela miesta v mojom pc na C uz som pomalicky vsetko povzmazaval a stale mi chyba ale 6-7 gb.
mam pocit ze to je nieco v C:Users ale neviem tam nic najst . skusil som aj ccleaner ale nepomohlo.

Avatar uživatele
PINGWIN
Návštěvník
Návštěvník
Příspěvky: 30
Registrován: 24 Říj 2010 15:52

Re: Nieco zabera strasne vela miesta

#2 Příspěvek od PINGWIN »

Logfile of random's system information tool 1.09 (written by random/random)
Run by PINGWIN at 2011-12-30 17:39:31
Microsoft Windows 7 Ultimate
System drive C: has 3 GB (8%) free of 40 GB
Total RAM: 2559 MB (55% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:39:41, on 30. 12. 2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16912)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Program Files (x86)\Winamp\winampa.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Users\PINGWIN\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\PINGWIN\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\PINGWIN\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\PINGWIN\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\PINGWIN\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\PINGWIN.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bigseekpro.com/solidyoutube/ ... 061BA53386}
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bigseekpro.com/solidyoutube/ ... 061BA53386}
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R3 - URLSearchHook: (no name) - {ba14329e-9550-4989-b3f2-9732e92d17cc} - (no file)
R3 - URLSearchHook: ToolbarURLSearchHook Class - {CA3EB689-8F09-4026-AA10-B9534C691CE0} - C:\Program Files (x86)\Solid YouTube Downloader and Converter DB Toolbar\tbhelper.dll
O1 - Hosts: ˙ţ127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O2 - BHO: SMTTB2009 - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - C:\Program Files (x86)\Solid YouTube Downloader and Converter DB Toolbar\tbcore3.dll
O3 - Toolbar: Solid YouTube Downloader and Converter DB Toolbar - {338B4DFE-2E2C-4338-9E41-E176D497299E} - C:\Program Files (x86)\Solid YouTube Downloader and Converter DB Toolbar\tbcore3.dll
O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files (x86)\Winamp\winampa.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [DriverScanner] "C:\Program Files (x86)\Uniblue\DriverScanner\launcher.exe" delay 20000
O4 - HKCU\..\Run: [OfficeSyncProcess] "C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: Windows Media Player Network Sharing Service (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 6627 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
atieclxx
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\Alwil Software\Avast5\AvastSvc.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Windows\WindowsMobile\wmdcBase.exe"
"C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE"
"C:\Program Files\Alwil Software\Avast5\AvastUI.exe" /nogui
"C:\Program Files (x86)\Winamp\winampa.exe"
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM"
"taskhost.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\sppsvc.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\svchost.exe -k WindowsMobile
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Windows\system32\wuauclt.exe"
"C:\Users\PINGWIN\AppData\Local\Google\Chrome\Application\chrome.exe"
"C:\Users\PINGWIN\AppData\Local\Google\Chrome\Application\chrome.exe" --channel=4468.b8c100.587021363 --type=extension --lang=sk --force-fieldtest=AsyncSlowStart/_AsyncSlowStart/DnsImpact/_max_2s_queue_prefetch/GlobalSdch/_global_enable_sdch/SocketLateBinding/_disable_late_binding/ --ignored=" --type=renderer "
"C:\Users\PINGWIN\AppData\Local\Google\Chrome\Application\chrome.exe" --type=plugin --plugin-path=default_plugin --lang=sk --plugin-data-dir="C:\Users\PINGWIN\AppData\Local\Google\Chrome\User Data\Default" --channel=4468.5c00600.1340977685
"C:\Program Files\Windows Sidebar\sidebar.exe"
"C:\Users\PINGWIN\AppData\Local\Google\Chrome\Application\chrome.exe" --type=plugin --plugin-path=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll --lang=sk --plugin-data-dir="C:\Users\PINGWIN\AppData\Local\Google\Chrome\User Data\Default" --channel=4468.5c00900.1104849765
"C:\Users\PINGWIN\AppData\Local\Google\Chrome\Application\chrome.exe" --channel=4468.5bdf700.649416024 --type=renderer --lang=sk --force-fieldtest=AsyncSlowStart/_AsyncSlowStart/CacheSize/CacheSizeGroup_0/DnsImpact/_max_2s_queue_prefetch/GlobalSdch/_global_enable_sdch/SocketLateBinding/_disable_late_binding/
"D:\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2010-01-21 6723984]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2010-01-16 688528]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2010-01-16 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2011-10-18 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}]
SMTTB2009 Class - C:\Program Files (x86)\Solid YouTube Downloader and Converter DB Toolbar\tbcore3.dll [2011-06-22 2398720]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{338B4DFE-2E2C-4338-9E41-E176D497299E} - Solid YouTube Downloader and Converter DB Toolbar - C:\Program Files (x86)\Solid YouTube Downloader and Converter DB Toolbar\tbcore3.dll [2011-06-22 2398720]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Mobile-based device management"=C:\Windows\WindowsMobile\wmdcBase.exe [2007-05-31 660360]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-07-14 1475072]
"DriverScanner"=C:\Program Files (x86)\Uniblue\DriverScanner\launcher.exe delay 20000 []
"OfficeSyncProcess"=C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE [2010-01-16 717696]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"avast5"=C:\Program Files\Alwil Software\Avast5\avastUI.exe [2011-09-06 3722416]
"WinampAgent"=C:\Program Files (x86)\Winamp\winampa.exe [2010-12-07 74752]
"QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2010-11-29 421888]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-03-02 98304]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2011-06-09 254696]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2010-01-21 6723984]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2011-12-30 17:39:32 ----D---- C:\Program Files\trend micro
2011-12-30 17:39:31 ----D---- C:\rsit
2011-12-30 15:48:49 ----D---- C:\Program Files\CCleaner
2011-12-30 15:15:08 ----N---- C:\bootsqm.dat
2011-12-15 16:39:23 ----A---- C:\Windows\system32\csrsrv.dll
2011-12-15 16:39:18 ----A---- C:\Windows\system32\mshtml.dll
2011-12-15 16:39:17 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2011-12-15 16:39:15 ----A---- C:\Windows\system32\ieframe.dll
2011-12-15 16:39:12 ----A---- C:\Windows\system32\wininet.dll
2011-12-15 16:39:11 ----A---- C:\Windows\SYSWOW64\wininet.dll
2011-12-15 16:39:11 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2011-12-15 16:39:10 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2011-12-15 16:39:10 ----A---- C:\Windows\system32\urlmon.dll
2011-12-15 16:39:09 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2011-12-15 16:39:09 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2011-12-15 16:39:09 ----A---- C:\Windows\system32\iedkcs32.dll
2011-12-15 16:39:08 ----A---- C:\Windows\SYSWOW64\mstime.dll
2011-12-15 16:39:08 ----A---- C:\Windows\SYSWOW64\ieui.dll
2011-12-15 16:39:08 ----A---- C:\Windows\system32\mstime.dll
2011-12-15 16:39:08 ----A---- C:\Windows\system32\msfeeds.dll
2011-12-15 16:39:08 ----A---- C:\Windows\system32\ieui.dll
2011-12-15 16:39:08 ----A---- C:\Windows\system32\iertutil.dll
2011-12-15 16:39:07 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2011-12-15 16:39:07 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2011-12-15 16:39:07 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2011-12-15 16:39:07 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2011-12-15 16:39:07 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2011-12-15 16:39:07 ----A---- C:\Windows\system32\mshtmled.dll
2011-12-15 16:39:07 ----A---- C:\Windows\system32\msfeedsbs.dll
2011-12-15 16:39:07 ----A---- C:\Windows\system32\licmgr10.dll
2011-12-15 16:39:07 ----A---- C:\Windows\system32\iepeers.dll
2011-12-15 16:39:06 ----A---- C:\Windows\SYSWOW64\url.dll
2011-12-15 16:39:06 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2011-12-15 16:39:06 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2011-12-15 16:39:06 ----A---- C:\Windows\system32\url.dll
2011-12-15 16:39:06 ----A---- C:\Windows\system32\msfeedssync.exe
2011-12-15 16:39:06 ----A---- C:\Windows\system32\jsproxy.dll
2011-12-15 16:38:07 ----A---- C:\Windows\system32\win32k.sys
2011-12-15 16:38:06 ----A---- C:\Windows\system32\EncDec.dll
2011-12-15 16:38:05 ----A---- C:\Windows\SYSWOW64\EncDec.dll
2011-12-15 16:38:00 ----A---- C:\Windows\SYSWOW64\tzres.dll
2011-12-15 16:38:00 ----A---- C:\Windows\system32\tzres.dll
2011-12-10 15:07:00 ----D---- C:\ProgramData\Playrix Entertainment
2011-12-03 17:09:52 ----D---- C:\Users\PINGWIN\AppData\Roaming\Broad Intelligence
2011-12-03 17:09:49 ----D---- C:\Program Files (x86)\MediaCoder
2011-12-03 16:55:17 ----D---- C:\Program Files (x86)\Solid YouTube Downloader and Converter DB Toolbar

======List of files/folders modified in the last 1 month======

2011-12-30 17:39:39 ----D---- C:\Windows\Temp
2011-12-30 17:39:32 ----RD---- C:\Program Files
2011-12-30 16:54:20 ----SHD---- C:\Windows\Installer
2011-12-30 16:54:20 ----SHD---- C:\Config.Msi
2011-12-30 16:54:19 ----D---- C:\Windows\SysWOW64
2011-12-30 16:54:19 ----D---- C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2011-12-30 16:53:43 ----SHD---- C:\System Volume Information
2011-12-30 16:52:48 ----HD---- C:\ProgramData
2011-12-30 16:52:00 ----D---- C:\Users\PINGWIN\AppData\Roaming\Facebook
2011-12-30 16:05:13 ----D---- C:\Users\PINGWIN\AppData\Roaming\Raptr
2011-12-30 16:05:12 ----D---- C:\Program Files (x86)\Raptr
2011-12-30 16:04:27 ----D---- C:\Program Files\Common Files
2011-12-30 16:04:19 ----D---- C:\ProgramData\Logishrd
2011-12-30 16:03:27 ----D---- C:\Windows\system32\DriverStore
2011-12-30 16:03:27 ----D---- C:\Windows\system32\catroot
2011-12-30 16:03:27 ----D---- C:\Windows\inf
2011-12-30 16:02:46 ----D---- C:\Windows
2011-12-30 16:00:31 ----D---- C:\Windows\Prefetch
2011-12-30 15:53:50 ----D---- C:\Windows\system32\config
2011-12-30 15:52:23 ----D---- C:\Users\PINGWIN\AppData\Roaming\Winamp
2011-12-30 15:52:23 ----D---- C:\Users\PINGWIN\AppData\Roaming\Media Player Classic
2011-12-30 15:52:23 ----D---- C:\Users\PINGWIN\AppData\Roaming\DAEMON Tools Lite
2011-12-30 15:52:21 ----D---- C:\Users\PINGWIN\AppData\Roaming\Azureus
2011-12-30 15:51:14 ----D---- C:\Windows\Panther
2011-12-30 15:51:14 ----D---- C:\Windows\Logs
2011-12-30 15:51:14 ----D---- C:\Windows\debug
2011-12-30 15:45:37 ----D---- C:\Windows\System32
2011-12-30 15:45:37 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-12-30 15:36:57 ----RD---- C:\Program Files (x86)
2011-12-30 15:35:30 ----DC---- C:\Windows\system32\DRVSTORE
2011-12-30 15:35:30 ----D---- C:\Windows\system32\drivers
2011-12-30 15:32:46 ----D---- C:\Windows\Minidump
2011-12-30 15:24:09 ----D---- C:\Windows\system32\Tasks
2011-12-22 14:15:14 ----D---- C:\Windows\system32\catroot2
2011-12-16 06:47:22 ----D---- C:\Windows\winsxs
2011-12-16 06:45:10 ----D---- C:\Windows\SYSWOW64\migration
2011-12-16 06:45:10 ----D---- C:\Windows\system32\migration
2011-12-16 06:45:10 ----D---- C:\Program Files\Internet Explorer
2011-12-16 06:45:10 ----D---- C:\Program Files (x86)\Internet Explorer
2011-12-15 22:12:30 ----A---- C:\Windows\system32\MRT.exe
2011-12-15 22:11:20 ----D---- C:\Windows\SYSWOW64\en-US
2011-12-15 22:11:20 ----D---- C:\Windows\system32\en-US
2011-12-04 05:10:11 ----D---- C:\Users\PINGWIN\AppData\Roaming\Skype
2011-12-04 00:02:45 ----D---- C:\Users\PINGWIN\AppData\Roaming\skypePM

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 214096]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-04-02 834544]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys [2011-09-06 42328]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2011-09-06 601944]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2011-09-06 301912]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2011-09-06 58200]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 514048]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2011-09-06 24408]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2011-09-06 65368]
R3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\ADIHdAud.sys [2007-01-16 413184]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atipmdag.sys [2010-03-03 6402560]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2010-03-03 188928]
R3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\AtiHdmi.sys [2010-01-28 116736]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2005-03-29 8192]
R3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 165376]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2009-06-10 187392]
S0x02000000 OMSCAN;OMSCAN; \Sys []
S2 EIO;EIO; \??\C:\Windows\system32\drivers\EIO64.sys [2006-02-08 17920]
S3 auw2883h;auw2883h; C:\Windows\system32\drivers\auw2883h.sys []
S3 dc3d;MS Hardware Device Detection Driver (USB); C:\Windows\system32\DRIVERS\dc3d.sys [2010-07-07 51600]
S3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; C:\Windows\system32\DRIVERS\LHidFilt.Sys [2009-11-10 56336]
S3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; C:\Windows\system32\DRIVERS\LMouFilt.Sys [2009-11-10 58384]
S3 LUsbFilt;Logitech SetPoint KMDF USB Filter; C:\Windows\System32\Drivers\LUsbFilt.Sys [2009-11-10 40976]
S3 ManyCam;ManyCam Virtual Webcam, WDM Video Capture Driver; C:\Windows\system32\DRIVERS\ManyCam_x64.sys [2008-03-13 27136]
S3 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12352]
S3 Point64;Microsoft IntelliPoint Filter Driver; C:\Windows\system32\DRIVERS\point64.sys [2010-07-21 45456]
S3 s116bus;Sony Ericsson Device 116 driver (WDM); C:\Windows\system32\DRIVERS\s116bus.sys [2007-04-03 108296]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 6656]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 34896]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys []
S3 usb_rndisx;USB RNDIS Adapter; C:\Windows\system32\DRIVERS\usb8023x.sys [2009-07-14 19968]
S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys [2011-02-18 51712]
S3 usbscan;USB Scanner Driver; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
S3 utmymjk3;AVZ Kernel Driver; \??\C:\Windows\system32\Drivers\utmymjk3.sys []
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 200272]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 21760]
S3 WDC_SAM;WD SCSI Pass Thru driver; C:\Windows\system32\DRIVERS\wdcsam64.sys [2008-05-06 14464]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2009-07-14 40448]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2010-03-03 202752]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2011-09-06 44768]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 RapiMgr;@%windir%\WindowsMobile\rapimgr.dll,-104; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 WcesComm;@%windir%\WindowsMobile\wcescomm.dll,-40079; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Google Update Service (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-04-03 136176]
S2 NVSvc;NVIDIA Driver Helper Service; C:\Windows\system32\nvvsvc.exe []
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-04-03 136176]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-05-30 1255736]
S4 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [2010-01-21 30963576]
S4 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2010-10-07 411432]

-----------------EOF-----------------

Avatar uživatele
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 Říj 2008 08:02

Re: Nieco zabera strasne vela miesta

#3 Příspěvek od motji »

Dobrý večer :)
Zkoušel jste vypnout a zapnout obnovu systému?
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

Avatar uživatele
PINGWIN
Návštěvník
Návštěvník
Příspěvky: 30
Registrován: 24 Říj 2010 15:52

Re: Nieco zabera strasne vela miesta

#4 Příspěvek od PINGWIN »

ked sa môžem spýtať jak ho obnovym ?

Avatar uživatele
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 Říj 2008 08:02

Re: Nieco zabera strasne vela miesta

#5 Příspěvek od motji »

Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

Avatar uživatele
PINGWIN
Návštěvník
Návštěvník
Příspěvky: 30
Registrován: 24 Říj 2010 15:52

Re: Nieco zabera strasne vela miesta

#6 Příspěvek od PINGWIN »

nepomohlo to
Přílohy
Untitled.jpg
Untitled.jpg (97.94 KiB) Zobrazeno 1788 x

Avatar uživatele
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 Říj 2008 08:02

Re: Nieco zabera strasne vela miesta

#7 Příspěvek od motji »

Myslíte že byste toho místa měl mít víc?
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

lordboos
Návštěvník
Návštěvník
Příspěvky: 8
Registrován: 26 Pro 2008 19:05

Re: Nieco zabera strasne vela miesta

#8 Příspěvek od lordboos »

Doporučuji zapnout si zobrazování skrytých souborů a složek.

Avatar uživatele
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 Říj 2008 08:02

Re: Nieco zabera strasne vela miesta

#9 Příspěvek od motji »

Jak to vypadá? :)
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

Odpovědět