citat:
http://oldtimer.geekstogo.com/TFC.exe
• Stahnete a spustte
• Kliknete na Start a potvrdte OK
• Program uklidi a restartuje pc
• Po pouziti utilitu smazte
+ zopakuj ComboFix - ZA je silny nepriatel
Kontrola notebooku
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Re: Kontrola notebooku
FRST |ADWCleaner |MBAM |CCleaner |AVPTool
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Re: Kontrola notebooku
Provedeno a já frčím do práce:
ComboFix 12-06-05.01 - Jirka 05.06.2012 13:04:29.2.1 - x86
Spuštěný z: c:\documents and settings\Jirka\Plocha\ComboFix.exe
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-05-05 do 2012-06-05 )))))))))))))))))))))))))))))))
.
.
2012-06-04 07:31 . 2012-06-04 07:31 -------- d-----w- C:\rsit
2012-05-31 19:30 . 2008-04-14 06:51 27648 -c--a-w- c:\windows\system32\dllcache\irmon.dll
2012-05-31 19:30 . 2008-04-14 06:51 27648 ----a-w- c:\windows\system32\irmon.dll
2012-05-31 19:30 . 2008-04-14 06:52 152064 -c--a-w- c:\windows\system32\dllcache\irftp.exe
2012-05-31 19:30 . 2008-04-14 06:52 152064 ----a-w- c:\windows\system32\irftp.exe
2012-05-31 19:30 . 2008-04-14 06:52 8192 -c--a-w- c:\windows\system32\dllcache\wshirda.dll
2012-05-31 19:30 . 2008-04-14 06:52 8192 ----a-w- c:\windows\system32\wshirda.dll
2012-05-19 18:47 . 2012-05-19 18:47 -------- d-----w- c:\program files\Pano2VR
2012-05-12 20:37 . 2012-05-12 20:37 -------- d-----w- c:\documents and settings\Jirka\Local Settings\Data aplikací\PCHealth
2012-05-12 20:01 . 2012-05-12 20:01 -------- d-----w- c:\documents and settings\Jirka\Local Settings\Data aplikací\fontconfig
2012-05-12 20:00 . 2012-05-12 20:54 -------- d-----w- c:\documents and settings\Jirka\.gimp-2.8
2012-05-12 20:00 . 2012-05-12 20:00 -------- d-----w- c:\documents and settings\Jirka\Local Settings\Data aplikací\gegl-0.2
2012-05-12 15:47 . 2012-03-06 23:03 337880 ----a-w- c:\windows\system32\drivers\aswSP.sys
2012-05-12 15:47 . 2012-03-06 23:01 20696 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2012-05-12 15:47 . 2012-03-06 23:02 35672 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2012-05-12 15:47 . 2012-03-06 23:01 53848 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2012-05-12 15:47 . 2012-03-06 23:03 612184 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2012-05-12 15:47 . 2012-03-06 23:01 95704 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2012-05-12 15:47 . 2012-03-06 23:01 89048 ----a-w- c:\windows\system32\drivers\aswmon.sys
2012-05-12 15:47 . 2012-03-06 22:58 24920 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2012-05-12 15:46 . 2012-03-06 23:15 41184 ----a-w- c:\windows\avastSS.scr
2012-05-12 15:46 . 2012-03-06 23:15 201352 ----a-w- c:\windows\system32\aswBoot.exe
2012-05-12 14:33 . 2008-04-14 06:52 294912 ------w- c:\program files\Windows Media Player\dlimport.exe
2012-05-12 14:30 . 2008-04-13 21:53 11868 ------w- c:\windows\system32\drivers\mdmxsdk.sys
2012-05-12 13:16 . 2012-05-12 13:16 -------- d-----w- c:\windows\system32\wbem\Repository
2012-05-12 12:33 . 2012-05-12 12:33 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Common Files
2012-05-12 12:33 . 2012-05-12 13:08 -------- d-----w- c:\documents and settings\All Users\Data aplikací\MFAData
2012-05-11 23:11 . 2010-05-06 10:35 12800 -c----w- c:\windows\system32\dllcache\xpshims.dll
2012-05-11 23:11 . 2010-05-06 10:35 599040 -c----w- c:\windows\system32\dllcache\msfeeds.dll
2012-05-11 23:11 . 2010-05-06 10:35 55296 -c----w- c:\windows\system32\dllcache\msfeedsbs.dll
2012-05-11 23:11 . 2010-05-06 10:35 1985536 -c----w- c:\windows\system32\dllcache\iertutil.dll
2012-05-11 23:11 . 2010-05-06 10:35 247808 -c----w- c:\windows\system32\dllcache\ieproxy.dll
2012-05-11 23:11 . 2010-05-06 10:35 11076096 -c----w- c:\windows\system32\dllcache\ieframe.dll
2012-05-11 23:11 . 2010-05-06 10:35 743424 -c----w- c:\windows\system32\dllcache\iedvtool.dll
2012-05-11 22:30 . 2012-05-12 11:18 -------- d-----w- c:\windows\ServicePackFiles
2012-05-11 22:22 . 2009-12-31 16:50 353792 -c----w- c:\windows\system32\dllcache\srv.sys
2012-05-11 22:21 . 2010-02-24 13:11 455680 -c----w- c:\windows\system32\dllcache\mrxsmb.sys
2012-05-11 22:21 . 2009-10-15 16:32 81920 -c----w- c:\windows\system32\dllcache\fontsub.dll
2012-05-11 22:21 . 2009-10-15 16:32 119808 -c----w- c:\windows\system32\dllcache\t2embed.dll
2012-05-11 22:21 . 2010-06-14 14:31 744448 -c----w- c:\windows\system32\dllcache\helpsvc.exe
2012-05-11 22:20 . 2009-11-21 16:03 471552 -c----w- c:\windows\system32\dllcache\aclayers.dll
2012-05-11 22:18 . 2009-02-06 10:10 227840 -c----w- c:\windows\system32\dllcache\wmiprvse.exe
2012-05-11 22:18 . 2010-02-17 12:09 2192128 -c----w- c:\windows\system32\dllcache\ntoskrnl.exe
2012-05-11 22:18 . 2009-03-06 14:23 284160 -c----w- c:\windows\system32\dllcache\pdh.dll
2012-05-11 22:18 . 2009-02-09 11:25 111104 -c----w- c:\windows\system32\dllcache\services.exe
2012-05-11 22:18 . 2009-02-09 10:56 401408 -c----w- c:\windows\system32\dllcache\rpcss.dll
2012-05-11 22:18 . 2009-06-25 08:27 729088 -c----w- c:\windows\system32\dllcache\lsasrv.dll
2012-05-11 22:18 . 2009-02-09 10:56 684032 -c----w- c:\windows\system32\dllcache\advapi32.dll
2012-05-11 22:18 . 2009-02-09 10:56 473600 -c----w- c:\windows\system32\dllcache\fastprox.dll
2012-05-11 22:18 . 2009-02-09 10:56 453120 -c----w- c:\windows\system32\dllcache\wmiprvsd.dll
2012-05-11 22:18 . 2010-02-16 19:08 2148352 -c----w- c:\windows\system32\dllcache\ntkrnlmp.exe
2012-05-11 22:18 . 2009-02-09 10:56 709632 -c----w- c:\windows\system32\dllcache\ntdll.dll
2012-05-11 22:17 . 2010-02-16 19:08 2026496 -c----w- c:\windows\system32\dllcache\ntkrpamp.exe
2012-05-11 22:15 . 2008-06-14 17:35 272128 -c----w- c:\windows\system32\dllcache\bthport.sys
2012-05-11 22:14 . 2008-05-08 14:02 203136 -c----w- c:\windows\system32\dllcache\rmcast.sys
2012-05-11 22:11 . 2008-10-15 16:38 337408 -c----w- c:\windows\system32\dllcache\netapi32.dll
2012-05-11 22:09 . 2010-02-12 10:03 293376 ------w- c:\windows\system32\browserchoice.exe
2012-05-11 22:09 . 2008-04-21 21:15 216576 -c----w- c:\windows\system32\dllcache\wordpad.exe
2012-05-11 20:25 . 2012-05-12 14:36 -------- d-----w- c:\windows\system32\bits
2012-05-11 20:13 . 2009-03-08 02:24 68608 -c--a-w- c:\windows\system32\dllcache\hmmapi.dll
2012-05-11 20:12 . 2008-05-01 14:37 331776 -c--a-w- c:\windows\system32\dllcache\msadce.dll
2012-05-11 19:53 . 2012-05-12 13:17 -------- d-sh--w- c:\documents and settings\LocalService.NT AUTHORITY
2012-05-11 19:53 . 2012-05-12 13:17 -------- d-sh--w- c:\documents and settings\NetworkService.NT AUTHORITY
2012-05-11 19:49 . 2004-08-18 12:00 92416 -c--a-w- c:\windows\system32\dllcache\mga.sys
2012-05-11 19:48 . 2004-08-18 12:00 57399 -c--a-w- c:\windows\system32\dllcache\cplexe.exe
2012-05-11 19:47 . 2008-04-14 06:52 221184 ----a-w- c:\windows\system32\wmpns.dll
2012-05-11 19:46 . 2004-08-18 12:00 16384 -c--a-w- c:\windows\system32\dllcache\isignup.exe
2012-05-11 19:46 . 2004-08-18 12:00 16384 ----a-w- c:\program files\Internet Explorer\Connection Wizard\isignup.exe
2012-05-11 19:43 . 2004-08-18 12:00 44544 -c--a-w- c:\windows\system32\dllcache\tscupgrd.exe
2012-05-11 19:43 . 2004-08-18 12:00 44544 ----a-w- c:\windows\system32\tscupgrd.exe
2012-05-11 19:33 . 2004-08-18 12:00 24661 -c--a-w- c:\windows\system32\dllcache\spxcoins.dll
2012-05-11 19:33 . 2004-08-18 12:00 24661 ----a-w- c:\windows\system32\spxcoins.dll
2012-05-11 19:33 . 2004-08-18 12:00 13312 -c--a-w- c:\windows\system32\dllcache\irclass.dll
2012-05-11 19:33 . 2004-08-18 12:00 13312 ----a-w- c:\windows\system32\irclass.dll
2012-05-07 21:44 . 2012-05-07 21:44 -------- d-----w- c:\windows\system32\config\systemprofile\Data aplikací\Apple Computer
2012-05-07 11:30 . 2012-05-07 11:30 -------- d-----w- c:\documents and settings\Jirka\Data aplikací\BabylonToolbar
2012-05-07 11:28 . 2012-05-07 11:28 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Premium
2012-05-07 11:28 . 2012-05-07 11:29 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Bcool
2012-05-07 10:22 . 2012-05-07 11:28 -------- d-----w- c:\documents and settings\All Users\Data aplikací\InstallMate
2012-05-06 16:25 . 2012-05-06 16:25 -------- d-----w- c:\program files\BabylonToolbar
2012-05-06 16:24 . 2012-05-06 16:44 -------- d-----w- c:\program files\1ClickDownload
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-05-12 19:39 . 2012-03-31 09:46 419488 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-05-12 19:39 . 2011-11-12 16:18 70304 -c--a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-03-12 18:56 . 2012-03-12 18:56 947472 ----a-w- c:\windows\system32\msjava.dll
.
.
((((((((((((((((((((((((((((( SnapShot@2012-06-05_07.32.27 )))))))))))))))))))))))))))))))))))))))))
.
+ 2012-06-05 10:56 . 2012-06-05 10:56 16384 c:\windows\Temp\Perflib_Perfdata_694.dat
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2012-03-06 23:15 123536 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2012-01-18 18:49 94208 ----a-w- c:\documents and settings\Jirka\Data aplikací\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2012-01-18 18:49 94208 ----a-w- c:\documents and settings\Jirka\Data aplikací\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2012-01-18 18:49 94208 ----a-w- c:\documents and settings\Jirka\Data aplikací\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2012-01-18 18:49 94208 ----a-w- c:\documents and settings\Jirka\Data aplikací\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SiSPower"="SiSPower.dll" [2005-02-25 49152]
"SiS Windows KeyHook"="c:\windows\system32\keyhook.exe" [2005-03-04 32768]
"AGRSMMSG"="AGRSMMSG.exe" [2004-10-08 88363]
"BluetoothAuthenticationAgent"="bthprops.cpl" [2008-04-14 110592]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2006-02-19 49152]
"APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-02-20 59240]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2011-10-24 421888]
"MacrokeyManager"="WTMKM.exe" [2010-12-24 7134952]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-01-18 254696]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2012-03-27 421736]
"SoundMan"="SOUNDMAN.EXE" [2005-02-23 77824]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2012-03-06 4241512]
"AdobeAAMUpdater-1.0"="c:\program files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2012-04-04 446392]
"AdobeCS6ServiceManager"="c:\program files\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" [2012-03-09 1073312]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
c:\documents and settings\Jirka\Nabídka Start\Programy\Po spuštění\
Dropbox.lnk - c:\documents and settings\Jirka\Data aplikací\Dropbox\bin\Dropbox.exe [2012-2-15 24246216]
OpenOffice.org 3.3.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2010-12-13 1198592]
.
c:\documents and settings\Míša\Nabídka Start\Programy\Po spuštění\
OpenOffice.org 3.3.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2010-12-13 1198592]
.
c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\
Bluetooth.lnk - c:\program files\Belkin\Bluetooth Software\BTTray.exe [2005-8-24 577597]
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2006-2-19 288472]
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk /k:C *
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Opera\\opera.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe"=
"c:\\Program Files\\ICQ7.7\\ICQ.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\WINDOWS\\system32\\regsvr32.exe"=
"c:\\Program Files\\HP\\HP Software Update\\HPWUCli.exe"=
"c:\\Program Files\\Common Files\\Adobe\\OOBE\\PDApp\\UWA\\AAM Updates Notifier.exe"=
"c:\\Program Files\\Common Files\\Adobe\\OOBE\\PDApp\\core\\PDapp.exe"=
"c:\\Program Files\\TeamViewer\\Version7\\TeamViewer.exe"=
"c:\\Program Files\\TeamViewer\\Version7\\TeamViewer_Service.exe"=
"c:\\Documents and Settings\\Jirka\\Data aplikací\\Dropbox\\bin\\Dropbox.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\Common Files\\Apple\\Apple Application Support\\WebKit2WebProcess.exe"=
"c:\\Program Files\\Remote Mouse\\server\\server.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
.
R1 MpKsle0f6afbc;MpKsle0f6afbc;c:\documents and settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{337218AD-965B-4088-887D-CF29E16DA88B}\MpKsle0f6afbc.sys [x]
R1 pfrctxsi;pfrctxsi;c:\windows\system32\drivers\pfrctxsi.sys [x]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2011-12-10 136176]
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-12 257696]
R3 gupdatem;Služba Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2011-12-10 136176]
R3 HTCAND32;HTC Device Driver;c:\windows\system32\Drivers\ANDROIDUSB.sys [x]
R3 ioFakDrv;ioVirtual Device;c:\windows\system32\DRIVERS\ioFakDrv.sys [x]
R3 ioFakMap;MiniHid Driver Service for ioFakeDrv Interface layer;c:\windows\system32\DRIVERS\ioFakMap.sys [2010-12-15 10624]
R3 ioTablet;Tablet Minidriver for ioTablet;c:\windows\system32\DRIVERS\ioTablet.sys [x]
R3 ioTblMap;Mini Mapper for ioCentre;c:\windows\system32\DRIVERS\ioTblMap.sys [2011-03-03 10632]
R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S2 aswFsBlk;aswFsBlk; [x]
S2 WTService;WTService;c:\windows\system32\atwtusb.exe [2011-01-26 870120]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2012-06-05 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-03-31 19:39]
.
2012-05-31 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2011-06-01 16:57]
.
2012-06-05 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-12-10 12:20]
.
2012-06-05 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-12-10 12:20]
.
2012-06-05 c:\windows\Tasks\User_Feed_Synchronization-{44C349FF-D8F9-401D-ADFA-C5B2B1A5670F}.job
- c:\windows\system32\msfeedssync.exe [2009-03-08 03:31]
.
2012-06-05 c:\windows\Tasks\User_Feed_Synchronization-{A3DA582C-173D-4643-864F-D0AD95AE0BD8}.job
- c:\windows\system32\msfeedssync.exe [2009-03-08 03:31]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
uInternet Settings,ProxyOverride = *.local
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Free YouTube Download - c:\documents and settings\Jirka\Data aplikací\DVDVideoSoftIEHelpers\freeyoutubedownload.htm
IE: Free YouTube to MP3 Converter - c:\documents and settings\Jirka\Data aplikací\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
IE: Send To &Bluetooth - c:\program files\Belkin\Bluetooth Software\btsendto_ie_ctx.htm
IE: {{77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - c:\program files\ICQ7.7\ICQ.exe
TCP: DhcpNameServer = 192.168.1.1
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-06-05 13:18
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'explorer.exe'(1744)
c:\windows\system32\msi.dll
c:\documents and settings\Jirka\Data aplikací\Dropbox\bin\DropboxExt.14.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
Celkový čas: 2012-06-05 13:20:51
ComboFix-quarantined-files.txt 2012-06-05 11:20
ComboFix2.txt 2012-06-05 07:41
.
Před spuštěním: 1 650 954 240
Po spuštění: 1 633 079 296
.
- - End Of File - - 585356E22348A62FC5273A43C99CAE37
ComboFix 12-06-05.01 - Jirka 05.06.2012 13:04:29.2.1 - x86
Spuštěný z: c:\documents and settings\Jirka\Plocha\ComboFix.exe
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-05-05 do 2012-06-05 )))))))))))))))))))))))))))))))
.
.
2012-06-04 07:31 . 2012-06-04 07:31 -------- d-----w- C:\rsit
2012-05-31 19:30 . 2008-04-14 06:51 27648 -c--a-w- c:\windows\system32\dllcache\irmon.dll
2012-05-31 19:30 . 2008-04-14 06:51 27648 ----a-w- c:\windows\system32\irmon.dll
2012-05-31 19:30 . 2008-04-14 06:52 152064 -c--a-w- c:\windows\system32\dllcache\irftp.exe
2012-05-31 19:30 . 2008-04-14 06:52 152064 ----a-w- c:\windows\system32\irftp.exe
2012-05-31 19:30 . 2008-04-14 06:52 8192 -c--a-w- c:\windows\system32\dllcache\wshirda.dll
2012-05-31 19:30 . 2008-04-14 06:52 8192 ----a-w- c:\windows\system32\wshirda.dll
2012-05-19 18:47 . 2012-05-19 18:47 -------- d-----w- c:\program files\Pano2VR
2012-05-12 20:37 . 2012-05-12 20:37 -------- d-----w- c:\documents and settings\Jirka\Local Settings\Data aplikací\PCHealth
2012-05-12 20:01 . 2012-05-12 20:01 -------- d-----w- c:\documents and settings\Jirka\Local Settings\Data aplikací\fontconfig
2012-05-12 20:00 . 2012-05-12 20:54 -------- d-----w- c:\documents and settings\Jirka\.gimp-2.8
2012-05-12 20:00 . 2012-05-12 20:00 -------- d-----w- c:\documents and settings\Jirka\Local Settings\Data aplikací\gegl-0.2
2012-05-12 15:47 . 2012-03-06 23:03 337880 ----a-w- c:\windows\system32\drivers\aswSP.sys
2012-05-12 15:47 . 2012-03-06 23:01 20696 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2012-05-12 15:47 . 2012-03-06 23:02 35672 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2012-05-12 15:47 . 2012-03-06 23:01 53848 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2012-05-12 15:47 . 2012-03-06 23:03 612184 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2012-05-12 15:47 . 2012-03-06 23:01 95704 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2012-05-12 15:47 . 2012-03-06 23:01 89048 ----a-w- c:\windows\system32\drivers\aswmon.sys
2012-05-12 15:47 . 2012-03-06 22:58 24920 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2012-05-12 15:46 . 2012-03-06 23:15 41184 ----a-w- c:\windows\avastSS.scr
2012-05-12 15:46 . 2012-03-06 23:15 201352 ----a-w- c:\windows\system32\aswBoot.exe
2012-05-12 14:33 . 2008-04-14 06:52 294912 ------w- c:\program files\Windows Media Player\dlimport.exe
2012-05-12 14:30 . 2008-04-13 21:53 11868 ------w- c:\windows\system32\drivers\mdmxsdk.sys
2012-05-12 13:16 . 2012-05-12 13:16 -------- d-----w- c:\windows\system32\wbem\Repository
2012-05-12 12:33 . 2012-05-12 12:33 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Common Files
2012-05-12 12:33 . 2012-05-12 13:08 -------- d-----w- c:\documents and settings\All Users\Data aplikací\MFAData
2012-05-11 23:11 . 2010-05-06 10:35 12800 -c----w- c:\windows\system32\dllcache\xpshims.dll
2012-05-11 23:11 . 2010-05-06 10:35 599040 -c----w- c:\windows\system32\dllcache\msfeeds.dll
2012-05-11 23:11 . 2010-05-06 10:35 55296 -c----w- c:\windows\system32\dllcache\msfeedsbs.dll
2012-05-11 23:11 . 2010-05-06 10:35 1985536 -c----w- c:\windows\system32\dllcache\iertutil.dll
2012-05-11 23:11 . 2010-05-06 10:35 247808 -c----w- c:\windows\system32\dllcache\ieproxy.dll
2012-05-11 23:11 . 2010-05-06 10:35 11076096 -c----w- c:\windows\system32\dllcache\ieframe.dll
2012-05-11 23:11 . 2010-05-06 10:35 743424 -c----w- c:\windows\system32\dllcache\iedvtool.dll
2012-05-11 22:30 . 2012-05-12 11:18 -------- d-----w- c:\windows\ServicePackFiles
2012-05-11 22:22 . 2009-12-31 16:50 353792 -c----w- c:\windows\system32\dllcache\srv.sys
2012-05-11 22:21 . 2010-02-24 13:11 455680 -c----w- c:\windows\system32\dllcache\mrxsmb.sys
2012-05-11 22:21 . 2009-10-15 16:32 81920 -c----w- c:\windows\system32\dllcache\fontsub.dll
2012-05-11 22:21 . 2009-10-15 16:32 119808 -c----w- c:\windows\system32\dllcache\t2embed.dll
2012-05-11 22:21 . 2010-06-14 14:31 744448 -c----w- c:\windows\system32\dllcache\helpsvc.exe
2012-05-11 22:20 . 2009-11-21 16:03 471552 -c----w- c:\windows\system32\dllcache\aclayers.dll
2012-05-11 22:18 . 2009-02-06 10:10 227840 -c----w- c:\windows\system32\dllcache\wmiprvse.exe
2012-05-11 22:18 . 2010-02-17 12:09 2192128 -c----w- c:\windows\system32\dllcache\ntoskrnl.exe
2012-05-11 22:18 . 2009-03-06 14:23 284160 -c----w- c:\windows\system32\dllcache\pdh.dll
2012-05-11 22:18 . 2009-02-09 11:25 111104 -c----w- c:\windows\system32\dllcache\services.exe
2012-05-11 22:18 . 2009-02-09 10:56 401408 -c----w- c:\windows\system32\dllcache\rpcss.dll
2012-05-11 22:18 . 2009-06-25 08:27 729088 -c----w- c:\windows\system32\dllcache\lsasrv.dll
2012-05-11 22:18 . 2009-02-09 10:56 684032 -c----w- c:\windows\system32\dllcache\advapi32.dll
2012-05-11 22:18 . 2009-02-09 10:56 473600 -c----w- c:\windows\system32\dllcache\fastprox.dll
2012-05-11 22:18 . 2009-02-09 10:56 453120 -c----w- c:\windows\system32\dllcache\wmiprvsd.dll
2012-05-11 22:18 . 2010-02-16 19:08 2148352 -c----w- c:\windows\system32\dllcache\ntkrnlmp.exe
2012-05-11 22:18 . 2009-02-09 10:56 709632 -c----w- c:\windows\system32\dllcache\ntdll.dll
2012-05-11 22:17 . 2010-02-16 19:08 2026496 -c----w- c:\windows\system32\dllcache\ntkrpamp.exe
2012-05-11 22:15 . 2008-06-14 17:35 272128 -c----w- c:\windows\system32\dllcache\bthport.sys
2012-05-11 22:14 . 2008-05-08 14:02 203136 -c----w- c:\windows\system32\dllcache\rmcast.sys
2012-05-11 22:11 . 2008-10-15 16:38 337408 -c----w- c:\windows\system32\dllcache\netapi32.dll
2012-05-11 22:09 . 2010-02-12 10:03 293376 ------w- c:\windows\system32\browserchoice.exe
2012-05-11 22:09 . 2008-04-21 21:15 216576 -c----w- c:\windows\system32\dllcache\wordpad.exe
2012-05-11 20:25 . 2012-05-12 14:36 -------- d-----w- c:\windows\system32\bits
2012-05-11 20:13 . 2009-03-08 02:24 68608 -c--a-w- c:\windows\system32\dllcache\hmmapi.dll
2012-05-11 20:12 . 2008-05-01 14:37 331776 -c--a-w- c:\windows\system32\dllcache\msadce.dll
2012-05-11 19:53 . 2012-05-12 13:17 -------- d-sh--w- c:\documents and settings\LocalService.NT AUTHORITY
2012-05-11 19:53 . 2012-05-12 13:17 -------- d-sh--w- c:\documents and settings\NetworkService.NT AUTHORITY
2012-05-11 19:49 . 2004-08-18 12:00 92416 -c--a-w- c:\windows\system32\dllcache\mga.sys
2012-05-11 19:48 . 2004-08-18 12:00 57399 -c--a-w- c:\windows\system32\dllcache\cplexe.exe
2012-05-11 19:47 . 2008-04-14 06:52 221184 ----a-w- c:\windows\system32\wmpns.dll
2012-05-11 19:46 . 2004-08-18 12:00 16384 -c--a-w- c:\windows\system32\dllcache\isignup.exe
2012-05-11 19:46 . 2004-08-18 12:00 16384 ----a-w- c:\program files\Internet Explorer\Connection Wizard\isignup.exe
2012-05-11 19:43 . 2004-08-18 12:00 44544 -c--a-w- c:\windows\system32\dllcache\tscupgrd.exe
2012-05-11 19:43 . 2004-08-18 12:00 44544 ----a-w- c:\windows\system32\tscupgrd.exe
2012-05-11 19:33 . 2004-08-18 12:00 24661 -c--a-w- c:\windows\system32\dllcache\spxcoins.dll
2012-05-11 19:33 . 2004-08-18 12:00 24661 ----a-w- c:\windows\system32\spxcoins.dll
2012-05-11 19:33 . 2004-08-18 12:00 13312 -c--a-w- c:\windows\system32\dllcache\irclass.dll
2012-05-11 19:33 . 2004-08-18 12:00 13312 ----a-w- c:\windows\system32\irclass.dll
2012-05-07 21:44 . 2012-05-07 21:44 -------- d-----w- c:\windows\system32\config\systemprofile\Data aplikací\Apple Computer
2012-05-07 11:30 . 2012-05-07 11:30 -------- d-----w- c:\documents and settings\Jirka\Data aplikací\BabylonToolbar
2012-05-07 11:28 . 2012-05-07 11:28 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Premium
2012-05-07 11:28 . 2012-05-07 11:29 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Bcool
2012-05-07 10:22 . 2012-05-07 11:28 -------- d-----w- c:\documents and settings\All Users\Data aplikací\InstallMate
2012-05-06 16:25 . 2012-05-06 16:25 -------- d-----w- c:\program files\BabylonToolbar
2012-05-06 16:24 . 2012-05-06 16:44 -------- d-----w- c:\program files\1ClickDownload
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-05-12 19:39 . 2012-03-31 09:46 419488 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-05-12 19:39 . 2011-11-12 16:18 70304 -c--a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-03-12 18:56 . 2012-03-12 18:56 947472 ----a-w- c:\windows\system32\msjava.dll
.
.
((((((((((((((((((((((((((((( SnapShot@2012-06-05_07.32.27 )))))))))))))))))))))))))))))))))))))))))
.
+ 2012-06-05 10:56 . 2012-06-05 10:56 16384 c:\windows\Temp\Perflib_Perfdata_694.dat
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2012-03-06 23:15 123536 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2012-01-18 18:49 94208 ----a-w- c:\documents and settings\Jirka\Data aplikací\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2012-01-18 18:49 94208 ----a-w- c:\documents and settings\Jirka\Data aplikací\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2012-01-18 18:49 94208 ----a-w- c:\documents and settings\Jirka\Data aplikací\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2012-01-18 18:49 94208 ----a-w- c:\documents and settings\Jirka\Data aplikací\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SiSPower"="SiSPower.dll" [2005-02-25 49152]
"SiS Windows KeyHook"="c:\windows\system32\keyhook.exe" [2005-03-04 32768]
"AGRSMMSG"="AGRSMMSG.exe" [2004-10-08 88363]
"BluetoothAuthenticationAgent"="bthprops.cpl" [2008-04-14 110592]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2006-02-19 49152]
"APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-02-20 59240]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2011-10-24 421888]
"MacrokeyManager"="WTMKM.exe" [2010-12-24 7134952]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-01-18 254696]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2012-03-27 421736]
"SoundMan"="SOUNDMAN.EXE" [2005-02-23 77824]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2012-03-06 4241512]
"AdobeAAMUpdater-1.0"="c:\program files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2012-04-04 446392]
"AdobeCS6ServiceManager"="c:\program files\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" [2012-03-09 1073312]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
c:\documents and settings\Jirka\Nabídka Start\Programy\Po spuštění\
Dropbox.lnk - c:\documents and settings\Jirka\Data aplikací\Dropbox\bin\Dropbox.exe [2012-2-15 24246216]
OpenOffice.org 3.3.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2010-12-13 1198592]
.
c:\documents and settings\Míša\Nabídka Start\Programy\Po spuštění\
OpenOffice.org 3.3.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2010-12-13 1198592]
.
c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\
Bluetooth.lnk - c:\program files\Belkin\Bluetooth Software\BTTray.exe [2005-8-24 577597]
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2006-2-19 288472]
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk /k:C *
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Opera\\opera.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"c:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe"=
"c:\\Program Files\\ICQ7.7\\ICQ.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\WINDOWS\\system32\\regsvr32.exe"=
"c:\\Program Files\\HP\\HP Software Update\\HPWUCli.exe"=
"c:\\Program Files\\Common Files\\Adobe\\OOBE\\PDApp\\UWA\\AAM Updates Notifier.exe"=
"c:\\Program Files\\Common Files\\Adobe\\OOBE\\PDApp\\core\\PDapp.exe"=
"c:\\Program Files\\TeamViewer\\Version7\\TeamViewer.exe"=
"c:\\Program Files\\TeamViewer\\Version7\\TeamViewer_Service.exe"=
"c:\\Documents and Settings\\Jirka\\Data aplikací\\Dropbox\\bin\\Dropbox.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\Common Files\\Apple\\Apple Application Support\\WebKit2WebProcess.exe"=
"c:\\Program Files\\Remote Mouse\\server\\server.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
.
R1 MpKsle0f6afbc;MpKsle0f6afbc;c:\documents and settings\All Users\Data aplikací\Microsoft\Microsoft Antimalware\Definition Updates\{337218AD-965B-4088-887D-CF29E16DA88B}\MpKsle0f6afbc.sys [x]
R1 pfrctxsi;pfrctxsi;c:\windows\system32\drivers\pfrctxsi.sys [x]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2011-12-10 136176]
R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-12 257696]
R3 gupdatem;Služba Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2011-12-10 136176]
R3 HTCAND32;HTC Device Driver;c:\windows\system32\Drivers\ANDROIDUSB.sys [x]
R3 ioFakDrv;ioVirtual Device;c:\windows\system32\DRIVERS\ioFakDrv.sys [x]
R3 ioFakMap;MiniHid Driver Service for ioFakeDrv Interface layer;c:\windows\system32\DRIVERS\ioFakMap.sys [2010-12-15 10624]
R3 ioTablet;Tablet Minidriver for ioTablet;c:\windows\system32\DRIVERS\ioTablet.sys [x]
R3 ioTblMap;Mini Mapper for ioCentre;c:\windows\system32\DRIVERS\ioTblMap.sys [2011-03-03 10632]
R3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S2 aswFsBlk;aswFsBlk; [x]
S2 WTService;WTService;c:\windows\system32\atwtusb.exe [2011-01-26 870120]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2012-06-05 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-03-31 19:39]
.
2012-05-31 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2011-06-01 16:57]
.
2012-06-05 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-12-10 12:20]
.
2012-06-05 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-12-10 12:20]
.
2012-06-05 c:\windows\Tasks\User_Feed_Synchronization-{44C349FF-D8F9-401D-ADFA-C5B2B1A5670F}.job
- c:\windows\system32\msfeedssync.exe [2009-03-08 03:31]
.
2012-06-05 c:\windows\Tasks\User_Feed_Synchronization-{A3DA582C-173D-4643-864F-D0AD95AE0BD8}.job
- c:\windows\system32\msfeedssync.exe [2009-03-08 03:31]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
uInternet Settings,ProxyOverride = *.local
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Free YouTube Download - c:\documents and settings\Jirka\Data aplikací\DVDVideoSoftIEHelpers\freeyoutubedownload.htm
IE: Free YouTube to MP3 Converter - c:\documents and settings\Jirka\Data aplikací\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
IE: Send To &Bluetooth - c:\program files\Belkin\Bluetooth Software\btsendto_ie_ctx.htm
IE: {{77F665FD-3F60-4B0A-AE14-EC124B7A7FCE} - c:\program files\ICQ7.7\ICQ.exe
TCP: DhcpNameServer = 192.168.1.1
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-06-05 13:18
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'explorer.exe'(1744)
c:\windows\system32\msi.dll
c:\documents and settings\Jirka\Data aplikací\Dropbox\bin\DropboxExt.14.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
Celkový čas: 2012-06-05 13:20:51
ComboFix-quarantined-files.txt 2012-06-05 11:20
ComboFix2.txt 2012-06-05 07:41
.
Před spuštěním: 1 650 954 240
Po spuštění: 1 633 079 296
.
- - End Of File - - 585356E22348A62FC5273A43C99CAE37
Re: Kontrola notebooku
kedze pocitac je odvireny a problemy ostavaju, nenapada ma uz nic, len skusit opravnu instlaciu Windows z CD
FRST |ADWCleaner |MBAM |CCleaner |AVPTool
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Re: Kontrola notebooku
Dobře. Zkusím to dát kolegovi, ať na to mrkne. Děkuji za snahu.
Re: Kontrola notebooku
za malo 
FRST |ADWCleaner |MBAM |CCleaner |AVPTool
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/


Přispějete na provoz fóra?