Facebook vir

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz


Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Odpovědět
Zpráva
Autor
Alrex
Návštěvník
Návštěvník
Příspěvky: 6
Registrován: 19 Led 2012 10:40

Facebook vir

#1 Příspěvek od Alrex »

Zdravím všechny přítomné,
chtěla bych poprosit o pomoc se zavirovaným počítačem.
Nejedná se o můj počítač, ale kamarád jehož počítač je zavirovaný nemá prakticky přístup na internet,
takže to řešíme přes mě.
Má problém s facebook virem - klikl na nějaký odkaz na fbooku - přesměrovalo ho to na "youtube" a pro spuštění videa měl kliknout na odkaz na instalaci nějakého flashe, či tak.
Jeho popis:
"Virus se nejdřív projevoval tím, že mi občas přeskakovaly stránky v prohlížeči na aplikace na facebooku a nešel mi flash player. To bylo ve všech prohlížečích tedy chrome a explorer. Zhruba po 3 dnech mi to začalo blokovat stránky, hodně odkazů vyhledaných na vyhledavači. Nejde stáhnout hodně skoro nic z internetu, nejde stáhnout třeba ten Flash player, nějaký nástroje do avg a další. to samé se děje vedle na stolním počítači, který je připojený pod jednou místní sítí. Odinstaloval jsem flash player a chrom, myslel jsem že to třeba pomůže, ale bohužel."

Předem moc děkujeme za pomoc všem
Ája

Nechala jsem ho udělat log z RSitu, vše by měl mít legální, tady je

Logfile of random's system information tool 1.09 (written by random/random)
Run by Admin at 2012-01-19 10:29:22
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 147 GB (52%) free of 280 GB
Total RAM: 3886 MB (46% free)

HijackThis download failed

======Listing Processes======

\SystemRoot\System32\smss.exe
C:\PROGRA~2\AVG\AVG2012\avgrsa.exe /boot
C:\Program Files (x86)\AVG\AVG2012\avgcsrva.exe /pipeName=150b7515-eefe-4f63-abda-323dd0c01557 /coreSdkOptions=286 /logConfFile="C:\ProgramData\AVG2012\temp\d22fa10c-76bb-4819-8eb4-1e31b0f4841e-1a0-oopp.tmp" /loggerName=AVG.RS.Core /binaryPath="C:\Program Files (x86)\AVG\AVG2012\" /registryPath="SYSTEM\CurrentControlSet\Services\Avg\Avg2012" /tempPath="C:\ProgramData\AVG2012\temp\"
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\lsm.exe
winlogon.exe
C:\windows\system32\svchost.exe -k DcomLaunch
C:\windows\system32\nvvsvc.exe
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\windows\system32\svchost.exe -k netsvcs
C:\windows\system32\svchost.exe -k LocalService
C:\windows\system32\svchost.exe -k NetworkService
C:\windows\system32\nvvsvc.exe -session -first
C:\windows\System32\spoolsv.exe
C:\windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\windows\SysWOW64\svchost.exe -k Akamai
"C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe"
"C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe"
"C:\Program Files\Motorola\Bluetooth\devmgrsrv.exe"
"C:\Program Files (x86)\AVG\AVG2012\avgnsa.exe"
"C:\Program Files (x86)\AVG\AVG2012\avgemca.exe"
"C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe" /DisableUI
"C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files (x86)\System Control Manager\MSIService.exe"
"C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe"
C:\windows\system32\svchost.exe -k imgsvc
"C:\windows\System32\Drivers\WTSRV.EXE"
"C:\Program Files\Motorola\Bluetooth\obexsrv.exe"
"C:\Program Files (x86)\AVG\AVG2012\AVGIDSAgent.exe"
"C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe"
"taskhost.exe"
"C:\windows\system32\Dwm.exe"
C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Windows\System32\rundll32.exe" "C:\Program Files\Motorola\Bluetooth\btmshell.dll",TrayApp
"C:\Windows\System32\rundll32.exe" C:\windows\system32\THXCfg64.dll,RunDLLEntry THXCfg64
"C:\Program Files\Elantech\ETDCtrl.exe"
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files (x86)\SetPoint\SetPoint.exe"
"C:\Program Files (x86)\McAfee Security Scan\2.0.189\SSScheduler.exe"
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe"
"C:\Program Files (x86)\SetPoint\x86\SetPoint32.exe"
"C:\Program Files (x86)\System Control Manager\MGSysCtrl.exe"
C:\windows\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\Creative\THX TruStudio Pro\THXAudioCP\THXAudio.exe" /r
"C:\Program Files (x86)\AVG\AVG2012\avgtray.exe"
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
C:\windows\system32\wbem\wmiprvse.exe
"C:\Windows\System32\WTClient.exe"
C:\windows\system32\wbem\unsecapp.exe -Embedding
KHALMNPR.EXE /API
C:\windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Elantech\ETDCtrlHelper.exe"
"C:\Program Files\Motorola\Bluetooth\audiosrv.exe"
C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\windows\Explorer.EXE"
"C:\Program Files (x86)\ICQ7.5\ICQ.exe"
"C:\Program Files (x86)\Internet Explorer\iexplore.exe" http://www.viry.cz/forum/viewtopic.php?f=13&t=105895
"C:\Program Files (x86)\Internet Explorer\iexplore.exe" SCODEF:4912 CREDAT:203009
"C:\Program Files (x86)\Internet Explorer\iexplore.exe" SCODEF:4912 CREDAT:203010
C:\windows\system32\msiexec.exe /V
"C:\Program Files (x86)\Skype\Phone\Skype.exe"
"C:\Program Files (x86)\Skype\Plugin Manager\skypePM.exe" /SILENT
"C:\Users\Admin\Desktop\RSITx64.exe"
C:\windows\system32\wbem\wmiprvse.exe

======Scheduled tasks folder======

C:\windows\tasks\GoogleUpdateTaskMachineCore.job
C:\windows\tasks\GoogleUpdateTaskMachineUA.job
C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-1360441433-710779429-883209405-1001Core.job
C:\windows\tasks\GoogleUpdateTaskUserS-1-5-21-1360441433-710779429-883209405-1001UA.job
C:\windows\tasks\{22116563-108C-42c0-A7CE-60161B75E508}.job
C:\windows\tasks\{35DC3473-A719-4d14-B7C1-FD326CA84A0C}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files (x86)\AVG\AVG2012\avgssiea.dll [2011-11-11 1942368]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2011-06-12 6721936]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL [2010-12-21 689040]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11BF46C6-B3DE-48BD-BF70-3AD85CAB80B5}]
C:\PROGRA~2\SITERA~1\SiteRank.dll [2011-09-12 413400]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-01-03 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files (x86)\AVG\AVG2012\avgssie.dll [2011-11-11 1378144]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{57cc715d-37ca-44e4-9ec2-8c2cbddb25ec}]
Free Lunch Design Toolbar - C:\Program Files (x86)\Free_Lunch_Design\tbFree.dll [2009-05-20 2085400]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll [2009-01-14 92504]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2011-06-12 4221328]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pro přihlášení ke službě Windows Live - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Plug-In - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-09-27 1250696]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2010-12-21 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2011-10-18 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
Windows Live Toolbar Helper - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files (x86)\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]
{855F3B16-6D32-4FE6-8A56-BBB695989046} - ICQToolBar - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll [2010-11-21 1054520]
{57cc715d-37ca-44e4-9ec2-8c2cbddb25ec} - Free Lunch Design Toolbar - C:\Program Files (x86)\Free_Lunch_Design\tbFree.dll [2009-05-20 2085400]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2010-05-26 10816544]
"BTMTrayAgent"=C:\Program Files\Motorola\Bluetooth\btmshell.dll [2010-02-13 20433160]
"THXCfg64"=C:\windows\system32\THXCfg64.dll [2009-10-15 17920]
"ETDWare"=C:\Program Files\Elantech\ETDCtrl.exe [2010-01-13 635784]
"IgfxTray"=C:\windows\system32\igfxtray.exe [2010-08-25 161304]
"HotKeysCmds"=C:\windows\system32\hkcmd.exe [2010-08-25 386584]
"Persistence"=C:\windows\system32\igfxpers.exe [2010-08-25 415256]
"Kernel and Hardware Abstraction Layer"=C:\windows\KHALMNPR.EXE [2009-06-17 130576]
"AdobeAAMUpdater-1.0"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06 500208]
"BCSSync"=C:\Program Files\Microsoft Office\Office14\BCSSync.exe [2010-03-13 112512]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"=C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [2010-04-13 284696]
"MGSysCtrl"=C:\Program Files (x86)\System Control Manager\MGSysCtrl.exe [2010-06-05 2486272]
"THX Audio Control Panel"=C:\Program Files (x86)\Creative\THX TruStudio Pro\THXAudioCP\THXAudio.exe [2010-05-16 1349632]
"UpdReg"=C:\windows\UpdReg.EXE [2000-05-11 90112]
"AVG_TRAY"=C:\Program Files (x86)\AVG\AVG2012\avgtray.exe [2011-12-03 2415456]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2011-06-09 254696]
"SwitchBoard"=C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"AdobeCS5ServiceManager"=C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [2010-02-22 406992]
"WTClient"=C:\windows\system32\WTClient.exe [2009-10-05 32768]
"Adobe Reader Speed Launcher"=C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [2012-01-03 37296]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-01-02 843712]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Logitech SetPoint.lnk - C:\Program Files (x86)\SetPoint\SetPoint.exe
McAfee Security Scan Plus.lnk - C:\Program Files (x86)\McAfee Security Scan\2.0.189\SSScheduler.exe
Start 3DxWare.lnk - C:\Program Files\3Dconnexion\3Dconnexion 3DxSoftware\3DxWare64\3dxsrv.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\windows\system32\nvinitx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\windows\system32\igfxdev.dll [2010-08-25 271360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\LBTWlgn]
c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll [2009-07-20 76816]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL [2011-06-12 6721936]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2011-06-12 4221328]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
.scr - open - C:\windows\system32\notepad.exe "%1"
.scr - install -
.scr - config -

======List of files/folders created in the last 1 month======

2012-01-19 10:29:23 ----D---- C:\Program Files\trend micro
2012-01-19 10:29:22 ----D---- C:\rsit
2012-01-19 10:26:41 ----D---- C:\Users\Admin\AppData\Roaming\skypePM
2012-01-19 10:26:05 ----D---- C:\Users\Admin\AppData\Roaming\Skype
2012-01-19 09:41:14 ----D---- C:\Users\Admin\AppData\Roaming\ICQ
2012-01-18 22:06:25 ----N---- C:\windows\system32\MpSigStub.exe
2012-01-11 08:36:30 ----A---- C:\windows\SYSWOW64\quartz.dll
2012-01-11 08:36:30 ----A---- C:\windows\SYSWOW64\qdvd.dll
2012-01-11 08:36:30 ----A---- C:\windows\system32\quartz.dll
2012-01-11 08:36:29 ----A---- C:\windows\system32\qdvd.dll
2012-01-11 08:36:28 ----A---- C:\windows\SYSWOW64\ntdll.dll
2012-01-11 08:36:28 ----A---- C:\windows\system32\ntdll.dll
2012-01-11 08:36:26 ----A---- C:\windows\SYSWOW64\packager.dll
2012-01-11 08:36:26 ----A---- C:\windows\system32\packager.dll
2012-01-06 22:29:28 ----D---- C:\Program Files\Common Files\DESIGNER
2012-01-06 22:28:34 ----D---- C:\Program Files\Microsoft Synchronization Services
2012-01-06 22:27:56 ----D---- C:\windows\PCHEALTH
2012-01-06 22:27:56 ----D---- C:\Program Files\Microsoft Sync Framework
2012-01-06 22:27:56 ----D---- C:\Program Files\Microsoft SQL Server Compact Edition
2012-01-06 22:24:48 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 8
2012-01-06 22:23:35 ----D---- C:\Program Files\Microsoft Analysis Services
2012-01-06 22:23:35 ----D---- C:\Program Files (x86)\Microsoft Analysis Services
2012-01-06 22:22:49 ----D---- C:\Program Files\Microsoft Office
2012-01-06 22:21:31 ----RHD---- C:\MSOCache
2012-01-02 14:55:25 ----AH---- C:\windows\SYSWOW64\psProxy.dll
2012-01-02 14:55:25 ----AH---- C:\windows\SYSWOW64\EncryptedFolder.dll
2012-01-02 14:55:20 ----AH---- C:\windows\SYSWOW64\pSOAP32.dll
2012-01-02 14:55:20 ----AH---- C:\windows\SYSWOW64\psDime.dll
2012-01-02 14:55:19 ----AH---- C:\windows\SYSWOW64\pocketHTTP.dll
2012-01-02 14:55:01 ----D---- C:\Program Files (x86)\FILERECOVERY-PRO
2011-12-26 22:17:57 ----D---- C:\Program Files (x86)\OGG to MP3 Plus
2011-12-25 20:07:12 ----A---- C:\windows\PenSign.INI
2011-12-25 20:05:12 ----D---- C:\Program Files (x86)\TABLET SOFTWARE
2011-12-24 21:13:51 ----A---- C:\windows\Tablet8000x5000M.ini
2011-12-24 20:50:21 ----D---- C:\windows\SYSWOW64\TabletPmt
2011-12-24 20:50:21 ----D---- C:\Program Files (x86)\MEDIA TABLET

======List of files/folders modified in the last 1 month======

2012-01-19 10:29:23 ----RD---- C:\Program Files
2012-01-19 10:29:23 ----D---- C:\windows\Prefetch
2012-01-19 10:26:12 ----SHD---- C:\windows\Installer
2012-01-19 09:30:45 ----D---- C:\windows\system32\config
2012-01-19 09:21:55 ----D---- C:\windows\Temp
2012-01-19 09:20:40 ----D---- C:\windows\system32\catroot
2012-01-19 09:20:37 ----D---- C:\windows\system32\catroot2
2012-01-19 09:20:35 ----D---- C:\windows\winsxs
2012-01-19 09:08:05 ----A---- C:\windows\SYSWOW64\log.txt
2012-01-19 05:43:21 ----SHD---- C:\System Volume Information
2012-01-18 23:00:30 ----D---- C:\Program Files (x86)\Autodesk
2012-01-18 22:58:32 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2012-01-18 22:58:32 ----D---- C:\Program Files (x86)\ArcSoft
2012-01-18 22:36:45 ----D---- C:\windows\SysWOW64
2012-01-18 22:06:25 ----D---- C:\windows\System32
2012-01-18 20:28:29 ----D---- C:\windows\system32\NDF
2012-01-18 19:48:39 ----D---- C:\ProgramData\MFAData
2012-01-18 19:48:37 ----D---- C:\windows\system32\drivers\AVG
2012-01-17 07:54:52 ----D---- C:\windows\inf
2012-01-17 07:54:52 ----A---- C:\windows\system32\PerfStringBackup.INI
2012-01-15 13:49:34 ----D---- C:\ProgramData\Adobe
2012-01-12 05:04:49 ----D---- C:\windows\ehome
2012-01-12 00:13:48 ----D---- C:\ProgramData\Microsoft Help
2012-01-12 00:11:06 ----A---- C:\windows\system32\MRT.exe
2012-01-11 09:07:03 ----RSD---- C:\windows\assembly
2012-01-11 09:07:03 ----D---- C:\windows\Microsoft.NET
2012-01-11 01:17:43 ----A---- C:\windows\SYSWOW64\PerfStringBackup.INI
2012-01-06 22:38:44 ----D---- C:\Program Files\Common Files\System
2012-01-06 22:38:44 ----A---- C:\windows\win.ini
2012-01-06 22:34:32 ----D---- C:\windows\system32\Tasks
2012-01-06 22:29:44 ----RSD---- C:\windows\Fonts
2012-01-06 22:29:29 ----D---- C:\windows\ShellNew
2012-01-06 22:29:28 ----D---- C:\Program Files\Common Files\Microsoft Shared
2012-01-06 22:29:28 ----D---- C:\Program Files\Common Files
2012-01-06 22:28:20 ----D---- C:\Program Files (x86)\MSBuild
2012-01-06 22:27:56 ----SD---- C:\ProgramData\Microsoft
2012-01-06 22:27:56 ----D---- C:\Windows
2012-01-06 22:24:48 ----RD---- C:\Program Files (x86)
2012-01-06 21:54:59 ----D---- C:\Program Files (x86)\Microsoft Office
2012-01-06 21:54:58 ----D---- C:\Program Files (x86)\Microsoft Works
2012-01-02 14:56:06 ----D---- C:\windows\SYSWOW64\drivers
2011-12-24 20:50:38 ----D---- C:\windows\system32\DriverStore
2011-12-24 20:50:37 ----D---- C:\windows\system32\drivers

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AVGIDSEH;AVGIDSEH; C:\windows\system32\DRIVERS\AVGIDSEH.Sys [2011-07-11 26704]
R0 Avgrkx64;AVG Anti-Rootkit Driver; C:\windows\system32\DRIVERS\avgrkx64.sys [2011-09-13 37456]
R0 iaStor;Intel AHCI Controller; C:\windows\system32\DRIVERS\iaStor.sys [2010-04-13 540696]
R0 nvpciflt;nvpciflt; C:\windows\system32\DRIVERS\nvpciflt.sys [2010-07-09 24680]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R1 Avgldx64;AVG AVI Loader Driver; C:\windows\system32\DRIVERS\avgldx64.sys [2011-10-07 283728]
R1 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield; C:\windows\system32\DRIVERS\avgmfx64.sys [2011-08-08 46672]
R1 Avgtdia;AVG TDI Driver; C:\windows\system32\DRIVERS\avgtdia.sys [2011-07-11 375376]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R3 AVGIDSDriver;AVGIDSDriver; C:\windows\system32\DRIVERS\AVGIDSDriver.Sys [2011-07-11 120400]
R3 AVGIDSFilter;AVGIDSFilter; C:\windows\system32\DRIVERS\AVGIDSFilter.Sys [2011-07-11 29776]
R3 ETD;ELAN PS/2 Port Input Device; C:\windows\system32\DRIVERS\ETD.sys [2010-01-18 128512]
R3 HECIx64;Intel(R) Management Engine Interface; C:\windows\system32\DRIVERS\HECIx64.sys [2009-09-17 56344]
R3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd64.sys [2010-08-25 10611552]
R3 Impcd;Impcd; C:\windows\system32\DRIVERS\Impcd.sys [2010-02-26 158976]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\windows\system32\drivers\RTKVHD64.sys [2010-05-26 2374560]
R3 IntcDAud;Intel(R) Display Audio; C:\windows\system32\DRIVERS\IntcDAud.sys [2010-02-03 271872]
R3 MBfilt;MBfilt; C:\windows\system32\drivers\MBfilt64.sys [2009-11-18 32344]
R3 NETw5s64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit; C:\windows\system32\DRIVERS\NETw5s64.sys [2010-01-13 7675392]
R3 PTSimBus;PenTablet Bus Enumerator; C:\windows\system32\DRIVERS\PTSimBus.sys [2009-06-18 27304]
R3 RTL8167;Realtek 8167 NT Driver; C:\windows\system32\DRIVERS\Rt64win7.sys [2010-03-04 346144]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\windows\System32\Drivers\BTHport.sys [2011-04-28 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 BTMCOM;Bluetooth Serial Port; C:\windows\System32\Drivers\btmcom.sys [2009-12-14 51200]
S3 BTMHID;BTMHID; C:\windows\system32\DRIVERS\btmhid.sys [2010-01-14 34048]
S3 BTMUSB;Motorola Bluetooth Radio Service; C:\windows\System32\Drivers\btmusb.sys [2010-01-27 461312]
S3 EUCR;EUCR; C:\windows\system32\DRIVERS\EUCR6SK.SYS [2009-12-05 87888]
S3 LGPBTDD;LGPBTDD.sys Display Driver; C:\windows\System32\Drivers\LGPBTDD.sys [2009-07-01 30728]
S3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; C:\windows\system32\DRIVERS\LHidFilt.Sys [2009-06-17 55312]
S3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; C:\windows\system32\DRIVERS\LMouFilt.Sys [2009-06-17 57872]
S3 LUsbFilt;Logitech SetPoint KMDF USB Filter; C:\windows\System32\Drivers\LUsbFilt.Sys [2009-06-17 40976]
S3 MGHwCtrl;MGHwCtrl; \??\C:\Program Files\msi\msi Software Install\MGHwCtrl.sys []
S3 pciide;pciide; C:\windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 PTSimHid;PenTablet Simulated HID MiniDriver; C:\windows\system32\DRIVERS\PTSimHid.sys [2009-06-18 17064]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 sdbus;sdbus; C:\windows\system32\drivers\sdbus.sys [2010-11-20 109056]
S3 smserial;smserial; C:\windows\system32\DRIVERS\SmSerl64.sys [2009-06-10 1227776]
S3 Tablet2k;Serial Tablet Port Driver; C:\windows\System32\Drivers\Tablet2k.sys []
S3 TClass2k;Tablet Class Driver; C:\windows\system32\DRIVERS\TClass2k.sys [2009-06-18 27304]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\windows\System32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 UCTblHid;HID Tablet Port Driver; C:\windows\system32\DRIVERS\UCTblHid.sys [2009-06-18 22696]
S3 WinUsb;WinUsb; C:\windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Akamai;Akamai NetSession Interface; C:\windows\System32\svchost.exe [2009-07-14 27136]
R2 Autodesk Content Service;Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [2011-02-02 18656]
R2 AVGIDSAgent;AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2012\AVGIDSAgent.exe [2011-10-12 4433248]
R2 avgwd;AVG WatchDog; C:\Program Files (x86)\AVG\AVG2012\avgwdsvc.exe [2011-08-02 192776]
R2 Bluetooth OBEX Service;Bluetooth OBEX Service; C:\Program Files\Motorola\Bluetooth\obexsrv.exe [2009-12-21 637192]
R2 Fabs;FABS - Helping agent for MAGIX media database; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [2009-08-27 1253376]
R2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology; C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-04-13 13336]
R2 ICQ Service;ICQ Service; C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe [2010-11-21 247608]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2009-09-30 268824]
R2 Micro Star SCM;Micro Star SCM; C:\Program Files (x86)\System Control Manager\MSIService.exe [2009-07-09 160768]
R2 nvsvc;NVIDIA Display Driver Service; C:\windows\system32\nvvsvc.exe [2010-07-09 159336]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2010-07-09 1620584]
R2 SeaPort;SeaPort; C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-01-14 226656]
R2 UNS;Intel(R) Management & Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2009-09-30 2320920]
R2 WinTabService;WinTab Service; C:\windows\System32\Drivers\WTSRV.EXE [2009-10-06 73728]
R3 Bluetooth Device Manager;Bluetooth Device Manager; C:\Program Files\Motorola\Bluetooth\devmgrsrv.exe [2010-01-25 4154120]
R3 Bluetooth Media Service;Bluetooth Media Service; C:\Program Files\Motorola\Bluetooth\audiosrv.exe [2010-01-26 1029896]
R3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2011-06-01 1431888]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-02-27 136176]
S3 ACDaemon;ArcSoft Connect Daemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe []
S3 aspnet_state;Stavová služba ASP.NET; C:\windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 Autodesk Network Licensing Service;Autodesk Network Licensing Service; C:\Program Files (x86)\Common Files\Autodesk Shared\Service\AdskNetSrv.exe [2008-06-13 1539224]
S3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [2008-08-07 3276800]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2011-03-24 1045256]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-02-27 136176]
S3 LBTServ;Logitech Bluetooth Service; C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe [2009-07-20 160784]
S3 McComponentHostService;McAfee Security Scan Component Host Service; C:\Program Files (x86)\McAfee Security Scan\2.0.189\McCHSvc.exe [2010-09-02 227232]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2011-06-12 51740536]
S3 ose64;Office 64 Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\windows\system32\Wat\WatAdminSvc.exe [2010-08-16 1255736]
S4 msvsmon90;Visual Studio 2008 Remote Debugger; c:\Program Files\Microsoft Visual Studio 9.0\Common7\IDE\Remote Debugger\x64\msvsmon.exe [2008-07-29 4737024]
S4 NetMsmqActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

Alrex
Návštěvník
Návštěvník
Příspěvky: 6
Registrován: 19 Led 2012 10:40

Re: Facebook vir

#2 Příspěvek od Alrex »

A ještě jedna věc - je doma na společné wifi a na domácím desktopu mu také nejde zobrazit velké množství internetových stránek, ačkoliv po dobu od nakažení byl vypnutý a tvrdí, že nepřetahoval žádné soubory mezi notebookem a desktopem ani na desktopu neklikal na žádné podezřelé odkazy.
Je možné, že by vir z notebooku zablokoval celou wifi, nebo je napadený i desktop? Děkuju :)

Alrex
Návštěvník
Návštěvník
Příspěvky: 6
Registrován: 19 Led 2012 10:40

Re: Facebook vir

#3 Příspěvek od Alrex »

Napadlo mě to s tím přispíváním si pod sebe, ale říkala jsem si, že den počkám a eventuelně to pak napíšu znovu :)
Hned nainstruuju kamaráda a pošlu výsledek.

Alrex
Návštěvník
Návštěvník
Příspěvky: 6
Registrován: 19 Led 2012 10:40

Re: Facebook vir

#4 Příspěvek od Alrex »

Tak bohužel všechny prohlížeče krom ie prý odinstaloval a v ie žádné doplňky nemá.

log z comba tady

ComboFix 12-01-19.01 - Martínek 19.01.2012 22:36:36.1.4 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.3886.2170 [GMT 1:00]
Spuštěný z: c:\users\MartÝnek\Desktop\ComboFix.exe
AV: AVG Anti-Virus Free Edition 2012 *Disabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
SP: AVG Anti-Virus Free Edition 2012 *Disabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-12-19 do 2012-01-19 )))))))))))))))))))))))))))))))
.
.
2012-01-19 21:46 . 2012-01-19 21:46 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2012-01-19 21:46 . 2012-01-19 21:46 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-01-19 21:46 . 2012-01-19 21:46 -------- d-----w- c:\users\Admin\AppData\Local\temp
2012-01-19 12:20 . 2012-01-19 12:20 -------- d-----w- c:\users\Admin\AppData\Roaming\dvdcss
2012-01-19 12:14 . 2012-01-19 12:14 -------- d-----w- c:\users\Admin\AppData\Local\GHISLER
2012-01-19 10:41 . 2012-01-19 10:41 -------- d-----w- c:\users\Admin\AppData\Roaming\GHISLER
2012-01-19 10:37 . 2012-01-19 10:37 -------- d-----w- c:\users\Admin\AppData\Roaming\IrfanView
2012-01-19 09:29 . 2012-01-19 09:29 -------- d-----w- c:\program files\trend micro
2012-01-19 09:29 . 2012-01-19 09:29 -------- d-----w- C:\rsit
2012-01-19 09:26 . 2012-01-19 15:06 -------- d-----w- c:\users\Admin\AppData\Roaming\skypePM
2012-01-19 09:26 . 2012-01-19 15:09 -------- d-----w- c:\users\Admin\AppData\Roaming\Skype
2012-01-19 08:41 . 2012-01-19 15:11 -------- d-----w- c:\users\Admin\AppData\Roaming\ICQ
2012-01-18 21:06 . 2011-11-30 01:21 8822856 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{50CF2A12-E0DF-493D-92EA-5AE3CD7905E6}\mpengine.dll
2012-01-18 21:06 . 2011-11-15 13:29 270720 ------w- c:\windows\system32\MpSigStub.exe
2012-01-11 07:36 . 2011-10-26 05:25 1572864 ----a-w- c:\windows\system32\quartz.dll
2012-01-11 07:36 . 2011-10-26 04:32 514560 ----a-w- c:\windows\SysWow64\qdvd.dll
2012-01-11 07:36 . 2011-10-26 04:32 1328128 ----a-w- c:\windows\SysWow64\quartz.dll
2012-01-11 07:36 . 2011-10-26 05:25 366592 ----a-w- c:\windows\system32\qdvd.dll
2012-01-11 07:36 . 2011-11-17 06:41 1731920 ----a-w- c:\windows\system32\ntdll.dll
2012-01-11 07:36 . 2011-11-17 05:38 1292080 ----a-w- c:\windows\SysWow64\ntdll.dll
2012-01-11 07:36 . 2011-11-19 14:58 77312 ----a-w- c:\windows\system32\packager.dll
2012-01-11 07:36 . 2011-11-19 14:01 67072 ----a-w- c:\windows\SysWow64\packager.dll
2012-01-06 21:28 . 2012-01-06 21:28 -------- d-----w- c:\program files\Microsoft Synchronization Services
2012-01-06 21:27 . 2012-01-06 21:27 -------- d-----w- c:\windows\PCHEALTH
2012-01-06 21:27 . 2012-01-06 21:27 -------- d-----w- c:\program files\Microsoft Sync Framework
2012-01-06 21:27 . 2012-01-06 21:27 -------- d-----w- c:\program files\Microsoft SQL Server Compact Edition
2012-01-06 21:24 . 2012-01-06 21:24 -------- d-----w- c:\program files (x86)\Microsoft Visual Studio 8
2012-01-06 21:23 . 2012-01-06 21:23 -------- d-----w- c:\program files\Microsoft Analysis Services
2012-01-06 21:23 . 2012-01-06 21:23 -------- d-----w- c:\program files (x86)\Microsoft Analysis Services
2012-01-06 21:21 . 2012-01-06 21:21 -------- d-----r- C:\MSOCache
2012-01-06 20:33 . 2012-01-06 20:33 -------- d-----w- c:\users\Martínek\AppData\Roaming\e-academy Inc
2012-01-06 20:33 . 2012-01-06 20:33 -------- d-----w- c:\users\Martínek\AppData\Local\e-academy Inc
2012-01-02 13:55 . 2012-01-02 13:54 73728 ---ha-w- c:\windows\SysWow64\psProxy.dll
2012-01-02 13:55 . 2012-01-02 13:54 266240 ---ha-w- c:\windows\SysWow64\EncryptedFolder.dll
2012-01-02 13:55 . 2012-01-02 13:54 380928 ---ha-w- c:\windows\SysWow64\pSOAP32.dll
2012-01-02 13:55 . 2012-01-02 13:54 110676 ---ha-w- c:\windows\SysWow64\psDime.dll
2012-01-02 13:55 . 2012-01-02 13:54 188416 ---ha-w- c:\windows\SysWow64\pocketHTTP.dll
2012-01-02 13:55 . 2012-01-02 13:55 -------- d-----w- c:\program files (x86)\FILERECOVERY-PRO
2011-12-26 21:17 . 2011-12-26 21:29 -------- d-----w- c:\program files (x86)\OGG to MP3 Plus
2011-12-25 19:05 . 2011-12-25 19:05 -------- d-----w- c:\program files (x86)\TABLET SOFTWARE
2011-12-24 19:50 . 2011-12-24 19:51 -------- d-----w- c:\program files (x86)\MEDIA TABLET
2011-12-24 19:50 . 2011-12-24 19:50 -------- d-----w- c:\windows\SysWow64\TabletPmt
2011-12-23 19:52 . 2011-12-23 19:52 -------- d-----w- c:\users\Martínek\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
2011-12-23 19:52 . 2011-12-23 19:52 -------- d-----w- c:\users\Martínek\AppData\Roaming\Adobe Mini Bridge CS5
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-11-24 04:52 . 2011-12-14 07:50 3145216 ----a-w- c:\windows\system32\win32k.sys
2011-11-20 09:25 . 2011-11-20 09:25 74752 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe
2011-11-20 09:25 . 2011-11-20 09:25 161792 ----a-w- c:\windows\SysWow64\msls31.dll
2011-11-20 09:25 . 2011-11-20 09:25 76800 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2011-11-20 09:25 . 2011-11-20 09:25 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2011-11-20 09:25 . 2011-11-20 09:25 86528 ----a-w- c:\windows\SysWow64\iesysprep.dll
2011-11-20 09:25 . 2011-11-20 09:25 63488 ----a-w- c:\windows\SysWow64\tdc.ocx
2011-11-20 09:25 . 2011-11-20 09:25 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2011-11-20 09:25 . 2011-11-20 09:25 367104 ----a-w- c:\windows\SysWow64\html.iec
2011-11-20 09:25 . 2011-11-20 09:25 74752 ----a-w- c:\windows\SysWow64\iesetup.dll
2011-11-20 09:25 . 2011-11-20 09:25 23552 ----a-w- c:\windows\SysWow64\licmgr10.dll
2011-11-20 09:25 . 2011-11-20 09:25 152064 ----a-w- c:\windows\SysWow64\wextract.exe
2011-11-20 09:25 . 2011-11-20 09:25 150528 ----a-w- c:\windows\SysWow64\iexpress.exe
2011-11-20 09:25 . 2011-11-20 09:25 420864 ----a-w- c:\windows\SysWow64\vbscript.dll
2011-11-20 09:25 . 2011-11-20 09:25 142848 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2011-11-20 09:25 . 2011-11-20 09:25 89088 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2011-11-20 09:25 . 2011-11-20 09:25 35840 ----a-w- c:\windows\SysWow64\imgutil.dll
2011-11-20 09:25 . 2011-11-20 09:25 222208 ----a-w- c:\windows\system32\msls31.dll
2011-11-20 09:25 . 2011-11-20 09:25 11776 ----a-w- c:\windows\SysWow64\mshta.exe
2011-11-20 09:25 . 2011-11-20 09:25 101888 ----a-w- c:\windows\SysWow64\admparse.dll
2011-11-20 09:25 . 2011-11-20 09:25 173056 ----a-w- c:\windows\system32\ieUnatt.exe
2011-11-20 09:25 . 2011-11-20 09:25 12288 ----a-w- c:\windows\system32\mshta.exe
2011-11-20 09:25 . 2011-11-20 09:25 49664 ----a-w- c:\windows\system32\imgutil.dll
2011-11-20 09:25 . 2011-11-20 09:25 135168 ----a-w- c:\windows\system32\IEAdvpack.dll
2011-11-20 09:25 . 2011-11-20 09:25 114176 ----a-w- c:\windows\system32\admparse.dll
2011-11-20 09:25 . 2011-11-20 09:25 91648 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2011-11-20 09:25 . 2011-11-20 09:25 48640 ----a-w- c:\windows\system32\mshtmler.dll
2011-11-20 09:25 . 2011-11-20 09:25 111616 ----a-w- c:\windows\system32\iesysprep.dll
2011-11-20 09:25 . 2011-11-20 09:25 85504 ----a-w- c:\windows\system32\iesetup.dll
2011-11-20 09:25 . 2011-11-20 09:25 76800 ----a-w- c:\windows\system32\tdc.ocx
2011-11-20 09:25 . 2011-11-20 09:25 448512 ----a-w- c:\windows\system32\html.iec
2011-11-20 09:25 . 2011-11-20 09:25 30720 ----a-w- c:\windows\system32\licmgr10.dll
2011-11-20 09:25 . 2011-11-20 09:25 165888 ----a-w- c:\windows\system32\iexpress.exe
2011-11-20 09:25 . 2011-11-20 09:25 160256 ----a-w- c:\windows\system32\wextract.exe
2011-11-20 09:25 . 2011-11-20 09:25 603648 ----a-w- c:\windows\system32\vbscript.dll
2011-11-20 09:08 . 2009-07-14 02:36 152576 ----a-w- c:\windows\SysWow64\msclmd.dll
2011-11-20 09:08 . 2009-07-14 02:36 175616 ----a-w- c:\windows\system32\msclmd.dll
2011-11-05 05:32 . 2011-12-14 07:50 2048 ----a-w- c:\windows\system32\tzres.dll
2011-11-05 04:26 . 2011-12-14 07:50 2048 ----a-w- c:\windows\SysWow64\tzres.dll
2011-11-04 01:53 . 2011-12-15 06:41 2309120 ----a-w- c:\windows\system32\jscript9.dll
2011-11-04 01:44 . 2011-12-15 06:41 1390080 ----a-w- c:\windows\system32\wininet.dll
2011-11-04 01:44 . 2011-12-15 06:41 1493504 ----a-w- c:\windows\system32\inetcpl.cpl
2011-11-04 01:34 . 2011-12-15 06:41 2382848 ----a-w- c:\windows\system32\mshtml.tlb
2011-11-03 22:47 . 2011-12-15 06:41 1798144 ----a-w- c:\windows\SysWow64\jscript9.dll
2011-11-03 22:40 . 2011-12-15 06:41 1427456 ----a-w- c:\windows\SysWow64\inetcpl.cpl
2011-11-03 22:39 . 2011-12-15 06:41 1127424 ----a-w- c:\windows\SysWow64\wininet.dll
2011-11-03 22:31 . 2011-12-15 06:41 2382848 ----a-w- c:\windows\SysWow64\mshtml.tlb
2011-10-26 05:21 . 2011-12-14 07:50 43520 ----a-w- c:\windows\system32\csrsrv.dll
2010-06-10 13:37 . 2010-06-10 13:37 455168 ----a-w- c:\program files\setup.exe
2010-06-10 13:37 . 2010-06-10 13:37 3074560 ----a-w- c:\program files\openofficeorg32.msi
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{57cc715d-37ca-44e4-9ec2-8c2cbddb25ec}"= "c:\program files (x86)\Free_Lunch_Design\tbFree.dll" [2009-05-20 2085400]
.
[HKEY_CLASSES_ROOT\clsid\{57cc715d-37ca-44e4-9ec2-8c2cbddb25ec}]
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{11BF46C6-B3DE-48BD-BF70-3AD85CAB80B5}]
2011-09-12 06:06 413400 ----a-w- c:\progra~2\SITERA~1\SiteRank.dll
.
[HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{57cc715d-37ca-44e4-9ec2-8c2cbddb25ec}]
2009-05-20 17:05 2085400 ----a-w- c:\program files (x86)\Free_Lunch_Design\tbFree.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{57cc715d-37ca-44e4-9ec2-8c2cbddb25ec}"= "c:\program files (x86)\Free_Lunch_Design\tbFree.dll" [2009-05-20 2085400]
.
[HKEY_CLASSES_ROOT\clsid\{57cc715d-37ca-44e4-9ec2-8c2cbddb25ec}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Akamai NetSession Interface"="c:\users\Martínek\AppData\Local\Akamai\netsession_win.exe" [2011-12-12 3305760]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2010-04-13 284696]
"MGSysCtrl"="c:\program files (x86)\System Control Manager\MGSysCtrl.exe" [2010-06-05 2486272]
"THX Audio Control Panel"="c:\program files (x86)\Creative\THX TruStudio Pro\THXAudioCP\THXAudio.exe" [2010-05-16 1349632]
"UpdReg"="c:\windows\UpdReg.EXE" [2000-05-11 90112]
"AVG_TRAY"="c:\program files (x86)\AVG\AVG2012\avgtray.exe" [2011-12-03 2415456]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696]
"SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"AdobeCS5ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" [2010-02-22 406992]
"WTClient"="WTClient.exe" [2009-10-05 32768]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2012-01-03 37296]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-02 843712]
.
c:\users\Martínek\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 3.2.lnk - c:\program files (x86)\OpenOffice.org 3\program\quickstart.exe [2010-6-7 1195520]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Logitech SetPoint.lnk - c:\program files (x86)\SetPoint\SetPoint.exe [2011-7-24 1207312]
McAfee Security Scan Plus.lnk - c:\program files (x86)\McAfee Security Scan\2.0.189\SSScheduler.exe [2010-9-2 255536]
Start 3DxWare.lnk - c:\program files\3Dconnexion\3Dconnexion 3DxSoftware\3DxWare64\3dxsrv.exe [2011-4-1 129536]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0c:\progra~2\AVG\AVG2012\avgrsa.exe /sync /restart
.
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 gupdate;Služba Google Update (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-02-27 136176]
R3 AVGIDSAgent;AVGIDSAgent;c:\program files (x86)\AVG\AVG2012\AVGIDSAgent.exe [2011-10-12 4433248]
R3 BTMCOM;Bluetooth Serial Port;c:\windows\System32\Drivers\btmcom.sys [x]
R3 BTMHID;BTMHID;c:\windows\system32\DRIVERS\btmhid.sys [x]
R3 BTMUSB;Motorola Bluetooth Radio Service;c:\windows\system32\Drivers\btmusb.sys [x]
R3 EUCR;EUCR;c:\windows\system32\DRIVERS\EUCR6SK.SYS [x]
R3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;c:\program files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [2008-08-07 3276800]
R3 gupdatem;Služba Google Update (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-02-27 136176]
R3 LGPBTDD;LGPBTDD.sys Display Driver;c:\windows\system32\Drivers\LGPBTDD.sys [x]
R3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files (x86)\McAfee Security Scan\2.0.189\McCHSvc.exe [2010-09-02 227232]
R3 MGHwCtrl;MGHwCtrl;c:\program files\msi\msi Software Install\MGHwCtrl.sys [x]
R3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files\Microsoft Office\Office14\GROOVE.EXE [2011-06-12 51740536]
R3 ose64;Office 64 Source Engine;c:\program files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 174440]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
R3 PTSimHid;PenTablet Simulated HID MiniDriver;c:\windows\system32\DRIVERS\PTSimHid.sys [x]
R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
S0 AVGIDSEH;AVGIDSEH;c:\windows\system32\DRIVERS\AVGIDSEH.Sys [x]
S0 Avgrkx64;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx64.sys [x]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys [x]
S1 Avgldx64;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx64.sys [x]
S1 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\DRIVERS\avgmfx64.sys [x]
S1 Avgtdia;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdia.sys [x]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 Akamai;Akamai NetSession Interface;c:\windows\System32\svchost.exe [2009-07-14 27136]
S2 Autodesk Content Service;Autodesk Content Service;c:\program files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [2011-02-02 18656]
S2 avgwd;AVG WatchDog;c:\program files (x86)\AVG\AVG2012\avgwdsvc.exe [2011-08-02 192776]
S2 Bluetooth OBEX Service;Bluetooth OBEX Service;c:\program files\Motorola\Bluetooth\obexsrv.exe [2009-12-21 637192]
S2 Fabs;FABS - Helping agent for MAGIX media database;c:\program files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [2009-08-27 1253376]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-04-13 13336]
S2 ICQ Service;ICQ Service;c:\program files (x86)\ICQ6Toolbar\ICQ Service.exe [2010-11-21 247608]
S2 Micro Star SCM;Micro Star SCM;c:\program files (x86)\System Control Manager\MSIService.exe [2009-07-09 160768]
S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2010-07-09 1620584]
S2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2009-09-30 2320920]
S3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\AVGIDSDriver.Sys [x]
S3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\DRIVERS\AVGIDSFilter.Sys [x]
S3 Bluetooth Device Manager;Bluetooth Device Manager;c:\program files\Motorola\Bluetooth\devmgrsrv.exe [2010-01-25 4154120]
S3 Bluetooth Media Service;Bluetooth Media Service;c:\program files\Motorola\Bluetooth\audiosrv.exe [2010-01-26 1029896]
S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys [x]
S3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2011-06-01 1431888]
S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [x]
S3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys [x]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys [x]
S3 MBfilt;MBfilt;c:\windows\system32\drivers\MBfilt64.sys [x]
S3 NETw5s64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit;c:\windows\system32\DRIVERS\NETw5s64.sys [x]
S3 PTSimBus;PenTablet Bus Enumerator;c:\windows\system32\DRIVERS\PTSimBus.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
Akamai REG_MULTI_SZ Akamai
.
Obsah adresáře 'Naplánované úlohy'
.
2012-01-19 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-02-27 18:43]
.
2012-01-19 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-02-27 18:43]
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-05-26 10816544]
"BTMTrayAgent"="c:\program files\Motorola\Bluetooth\btmshell.dll" [2010-02-13 20433160]
"THXCfg64"="c:\windows\system32\RunDLL32.exe" [2009-07-14 45568]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-08-25 161304]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-08-25 386584]
"Persistence"="c:\windows\system32\igfxpers.exe" [2010-08-25 415256]
"Kernel and Hardware Abstraction Layer"="KHALMNPR.EXE" [2009-06-17 130576]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-03-06 500208]
"BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 112512]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x1
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.fsv.cvut.cz/
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xport to Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~1\MICROS~2\Office14\ONBttnIE.dll/105
IE: {{7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - c:\program files (x86)\ICQ7.5\ICQ.exe
TCP: DhcpNameServer = 192.168.0.1
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Toolbar-Locked - (no file)
Toolbar-Locked - (no file)
WebBrowser-{57CC715D-37CA-44E4-9EC2-8C2CBDDB25EC} - (no file)
HKLM-Run-ETDWare - c:\program files (x86)\Elantech\ETDCtrl.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Akamai]
"ServiceDll"="c:\program files (x86)\common files\akamai/netsession_win_b427739.dll"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2012-01-19 22:51:09
ComboFix-quarantined-files.txt 2012-01-19 21:51
.
Před spuštěním: Volných bajtů: 153 275 449 344
Po spuštění: Volných bajtů: 155 432 890 368
.
- - End Of File - - 7817AD1421A5C3AE8E1D16C4CAE17688

Alrex
Návštěvník
Návštěvník
Příspěvky: 6
Registrován: 19 Led 2012 10:40

Re: Facebook vir

#5 Příspěvek od Alrex »

Tady addons v ie
Přílohy
addony ie.jpg
addony ie.jpg (97.79 KiB) Zobrazeno 780 x

Alrex
Návštěvník
Návštěvník
Příspěvky: 6
Registrován: 19 Led 2012 10:40

Re: Facebook vir

#6 Příspěvek od Alrex »

Tak zrovna mi ten kamarád psal, že byl o víkendu na horách a zjistil, že co se týče otevírání oken s aplikacemi fbook tak to přestalo a veškeré ostaní problémy (nemožnost stahování a otevírání velkého množství stránek) byly vázány na domácí wifi.
Nějaké nápady, čím by to mohlo být?
I tak moc děkuju za kontrolu logu z comba. Alespoň ví, že notebook má čistý.

Odpovědět