zablokovany windows

[michalkaktus]

ComboFix 12-10-17.05 - Administrator 17.10.2012 19:57:28.12.2 - x86 NETWORK
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.3071.2620 [GMT 2:00]
Spuštěný z: c:\documents and settings\Administrator\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Administrator\Plocha\CFScript.txt
AV: Microsoft Security Essentials *Disabled/Updated* {BCF43643-A118-4432-AEDE-D861FCBCFCDF}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_MPKSL03F326C6
-------\Legacy_MPKSL04007644
-------\Legacy_MPKSL0CC2A520
-------\Legacy_MPKSL3A6DFC4A
-------\Legacy_MPKSL3D1CD803
-------\Legacy_MPKSL4F7CACFE
-------\Legacy_MPKSL52917D25
-------\Legacy_MPKSL5658B7DC
-------\Legacy_MPKSL5A0AB057
-------\Legacy_MPKSL5BB9B265
-------\Legacy_MPKSL5F0DC258
-------\Legacy_MPKSL61031707
-------\Legacy_MPKSL75D7B8C4
-------\Legacy_MPKSL760A8B3A
-------\Legacy_MPKSL7CDCF280
-------\Legacy_MPKSL7DFF7484
-------\Legacy_MPKSL81D3FBD3
-------\Legacy_MPKSL898A0807
-------\Legacy_MPKSL9C227BC4
-------\Legacy_MPKSL9D03B422
-------\Legacy_MPKSLAE57A0B2
-------\Legacy_MPKSLB0DD9CE9
-------\Legacy_MPKSLBC39ADBF
-------\Legacy_MPKSLC66EC8B4
-------\Legacy_MPKSLCE24BA4D
-------\Legacy_MPKSLE1CEA29F
-------\Legacy_MPKSLE4E301A5
-------\Legacy_MPKSLED818E7B
-------\Legacy_MPKSLF3D1D45E
-------\Legacy_MPKSLF8E56AA4
-------\Legacy_MPKSLFA2EAE8E
-------\Legacy_SPYEMRG
-------\Legacy_XAMPP
-------\Service_MpKsl03f326c6
-------\Service_MpKsl04007644
-------\Service_MpKsl0cc2a520
-------\Service_MpKsl3a6dfc4a
-------\Service_MpKsl3d1cd803
-------\Service_MpKsl4f7cacfe
-------\Service_MpKsl52917d25
-------\Service_MpKsl5658b7dc
-------\Service_MpKsl5a0ab057
-------\Service_MpKsl5bb9b265
-------\Service_MpKsl5f0dc258
-------\Service_MpKsl61031707
-------\Service_MpKsl75d7b8c4
-------\Service_MpKsl760a8b3a
-------\Service_MpKsl7cdcf280
-------\Service_MpKsl7dff7484
-------\Service_MpKsl81d3fbd3
-------\Service_MpKsl898a0807
-------\Service_MpKsl9c227bc4
-------\Service_MpKsl9d03b422
-------\Service_MpKslae57a0b2
-------\Service_MpKslb0dd9ce9
-------\Service_MpKslbc39adbf
-------\Service_MpKslc66ec8b4
-------\Service_MpKslce24ba4d
-------\Service_MpKsle1cea29f
-------\Service_MpKsle4e301a5
-------\Service_MpKsled818e7b
-------\Service_MpKslf3d1d45e
-------\Service_MpKslf8e56aa4
-------\Service_MpKslfa2eae8e
-------\Service_SpyEmrg
-------\Service_XAMPP
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-09-17 do 2012-10-17 )))))))))))))))))))))))))))))))
.
.
2012-10-15 11:42 . 2012-10-15 11:42 -------- d-----w- c:\documents and settings\Administrator\Data aplikací\ESTsoft
2012-10-15 11:42 . 2012-10-15 11:42 -------- d-----w- c:\documents and settings\Administrator\EurekaLog
2012-10-15 06:49 . 2012-10-15 06:49 -------- d-----w- c:\documents and settings\Administrator\Data aplikací\vlc
2012-10-12 16:52 . 2012-10-12 16:53 -------- d-----w- C:\rsit
2012-09-20 19:51 . 2012-09-20 19:51 -------- d-----w- c:\program files\slovesa
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-10-09 09:44 . 2012-04-12 03:50 696760 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-10-09 09:44 . 2012-01-04 01:00 73656 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-08-28 15:18 . 2004-08-18 12:00 916992 ----a-w- c:\windows\system32\wininet.dll
2012-08-28 15:18 . 2004-08-18 12:00 43520 ----a-w- c:\windows\system32\licmgr10.dll
2012-08-28 15:18 . 2004-08-18 12:00 1469440 ----a-w- c:\windows\system32\inetcpl.cpl
2012-08-28 12:07 . 2004-08-18 12:00 385024 ----a-w- c:\windows\system32\html.iec
2012-08-24 13:53 . 2004-08-18 12:00 177664 ----a-w- c:\windows\system32\wintrust.dll
2012-08-23 06:27 . 2004-08-18 12:00 2150912 ------w- c:\windows\system32\ntoskrnl.exe
2012-08-23 06:27 . 2004-08-17 15:45 2029568 ------w- c:\windows\system32\ntkrnlpa.exe
2005-09-09 17:55 . 2007-09-03 14:52 7155864 ----a-w- c:\program files\NGhost10.msi
2010-03-31 08:09 . 2010-03-31 08:09 10437264 ----a-w- c:\program files\mozilla firefox\plugins\PDFNetC.dll
2010-04-08 10:36 . 2010-04-08 10:36 107760 ----a-w- c:\program files\mozilla firefox\plugins\ScorchPDFWrapper.dll
2012-09-10 19:54 . 2011-05-29 20:00 266720 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DWQueuedReporting"="c:\progra~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" [2007-02-26 437160]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\TPSvc]
TPSvc.dll [BU]
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Service Manager.lnk]
path=c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\Service Manager.lnk
backup=c:\windows\pss\Service Manager.lnkCommon Startup
.
[HKLM\~\startupfolder\C:^Documents and Settings^Solni^Nabídka Start^Programy^Po spuštění^Password Safe.lnk]
backup=c:\windows\pss\Password Safe.lnkStartup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AcronisTimounterMonitor]
2008-11-10 19:35 962112 ----a-w- c:\program files\Acronis\TrueImageHome\TimounterMonitor.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AllShareAgent]
2012-03-01 21:59 285072 ----a-w- d:\nová složka\AllShare\AllShareAgent.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CDAServer]
2010-12-17 17:12 332288 ----a-w- c:\program files\Common Files\Common Desktop Agent\CDASrv.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTDVDDET]
2003-06-17 23:00 45056 ------w- c:\program files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDET.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTHelper]
2010-03-18 17:17 19456 ----a-w- c:\windows\system32\CtHelper.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DWQueuedReporting]
2007-02-26 00:01 437160 ----a-w- c:\progra~1\COMMON~1\MICROS~1\DW\DWTRIG20.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LchDrvKey]
2007-03-28 16:55 36864 ----a-w- c:\windows\LchDrvKey.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteCenter]
2003-10-08 14:35 139264 ----a-w- c:\program files\Creative\MediaSource\RemoteControl\RcMan.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TrueImageMonitor.exe]
2008-11-10 19:00 4366848 ----a-w- c:\program files\Acronis\TrueImageHome\TrueImageMonitor.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"AVerRemote"=2 (0x2)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\SiSoftware\\SiSoftware Sandra Lite XI.SP1a\\RpcSandraSrv.exe"=
"c:\\Program Files\\SiSoftware\\SiSoftware Sandra Lite XI.SP1a\\Win32\\RpcDataSrv.exe"=
"c:\\Program Files\\VideoLAN\\VLC\\vlc.exe"=
"c:\\Program Files\\eMule\\emule.exe"=
"d:\\hry\\red\\Redlightcenter.exe"=
"c:\\Esko\\bg_prog_egsis_v010\\bin_ix86\\egsissrv.exe"=
"c:\\Esko\\bg_prog_egsis_v010\\bin_ix86\\EGSystemInfoTool.exe"=
"c:\\Program Files\\FDRLab\\save2pc\\save2pc_light.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Java\\jre1.6.0_07\\bin\\javaw.exe"=
"d:\\hry\\Mass Effect\\MassEffectLauncher.exe"=
"c:\\Program Files\\BearShare Applications\\BearShare\\BearShare.exe"=
"d:\\hry\\Mass Effect\\Binaries\\MassEffect.exe"=
"c:\\Program Files\\FlashGet\\flashget.exe"=
"d:\\hry\\crysis\\Bin32\\Crysis.exe"=
"d:\\hry\\crysis\\Bin32\\CrysisDedicatedServer.exe"=
"c:\\WINDOWS\\system32\\PnkBstrA.exe"=
"c:\\WINDOWS\\system32\\PnkBstrB.exe"=
"d:\\hry\\wolfenstein\\MP\\Wolf2MP.exe"=
"d:\\hry\\wolfenstein\\MP\\Wolf2MPLite.exe"=
"c:\\Program Files\\Ubisoft\\Ubisoft Game Launcher\\UbisoftGameLauncher.exe"=
"d:\\hry\\medal\\mohpa.exe"=
"c:\\Program Files\\Google\\Google Earth\\plugin\\geplugin.exe"=
"d:\\Poslední zákoha disku c!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!\\Program Files\\FTP Commander\\Ftpcomm.exe"=
"c:\\Program Files\\ICQ7.4\\ICQ.exe"=
"d:\\torent\\swapper.exe"=
"d:\\emule\\emule.exe"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
"c:\\Program Files\\Logitech\\Vid HD\\Vid.exe"=
"d:\\Utherverse VWW Client\\Utherverse.exe"=
"c:\\torent\\BitComet\\BitComet.exe"=
"d:\\torent\\BitComet\\BitComet.exe"=
"c:\\Program Files\\Common Files\\Common Desktop Agent\\CDASrv.exe"=
"c:\\Program Files\\Samsung\\Easy Printer Manager\\IDS.Application.exe"=
"c:\\Program Files\\Samsung\\Easy Printer Manager\\OrderSupplies.exe"=
"c:\\Program Files\\Samsung\\Easy Printer Manager\\IDSAlert.exe"=
"c:\\Program Files\\Samsung\\Easy Printer Manager\\CDAS2PC\\CDAS2PC.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"d:\\Nová složka\\AllShare\\AllShareDMS\\AllShareDMS.exe"=
"d:\\Nová složka\\AllShare\\AllShare.exe"=
"d:\\Nová složka\\AllShare\\AllShareAgent.exe"=
"c:\\Program Files\\StrongDC++\\StrongDC.exe"=
"d:\\hry\\pes2012\\pes2012.exe"=
"c:\\Program Files\\Rhapsody\\rhapsody.exe"=
"d:\\hry\\call of juarez\\CoJBiBGame_x86.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"d:\\hry\\Call of Duty - Black Ops\\BlackOps.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"7263:TCP"= 7263:TCP:BitComet 7263 TCP
"7263:UDP"= 7263:UDP:BitComet 7263 UDP
"7326:TCP"= 7326:TCP:BitComet 7326 TCP
"7326:UDP"= 7326:UDP:BitComet 7326 UDP
"1025:TCP"= 1025:TCP:dc++
"20411:TCP"= 20411:TCP:BitComet 20411 TCP
"20411:UDP"= 20411:UDP:BitComet 20411 UDP
"26005:TCP"= 26005:TCP:BitComet 26005 TCP
"26005:UDP"= 26005:UDP:BitComet 26005 UDP
"9695:TCP"= 9695:TCP:BitComet 9695 TCP
"9695:UDP"= 9695:UDP:BitComet 9695 UDP
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\IcmpSettings]
"AllowRedirect"= 1 (0x1)
"AllowInboundEchoRequest"= 1 (0x1)
"AllowInboundTimestampRequest"= 1 (0x1)
"AllowInboundMaskRequest"= 1 (0x1)
"AllowInboundRouterRequest"= 1 (0x1)
"AllowOutboundPacketTooBig"= 1 (0x1)
.
R0 szkg5;szkg5;c:\windows\system32\drivers\SZKG.sys [7.12.2009 17:59 61328]
R0 szkgfs;szkgfs;c:\windows\system32\drivers\SZKGFS.sys [24.2.2010 15:06 173328]
R0 tdrpman147;Acronis Try&Decide and Restore Points filter (build 147);c:\windows\system32\drivers\tdrpm147.sys [1.1.2009 22:52 971232]
S0 a347scsi;a347scsi;c:\windows\system32\drivers\a347scsi.sys [28.4.2007 15:29 5248]
S0 ElbyVCD;ElbyVCD; [x]
S0 is3srv;is3srv;c:\windows\system32\drivers\is3srv.sys [7.12.2009 17:59 61328]
S2 acedrv11;acedrv11;c:\windows\system32\drivers\acedrv11.sys [19.1.2009 20:31 277544]
S2 BMJ1IG8W;BMJ1IG8W;c:\windows\system32\drivers\BZ8AC6AI.sys [2.1.2009 10:41 28384]
S2 EG Station Information Service;EG Station Information Service;c:\esko\bg_prog_egsis_v010\bin_ix86\egsissrv.exe [20.1.2008 2:27 81920]
S2 IoHw32;IoHw32 Kernel Driver;c:\program files\HInfoCPU\IoHw32.sys [1.1.2003 7:51 4609]
S2 ITPASH87;ITPASH87;c:\windows\system32\drivers\OT1Q22XN.sys [30.12.2008 16:24 28384]
S2 npf;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [27.1.2010 4:09 50704]
S2 PfDetNT;PfDetNT;c:\windows\system32\drivers\pfmodnt.sys [18.3.2010 20:50 15960]
S2 SamsungAllShareV2.0;Samsung AllShare PC;d:\nová složka\AllShare\AllShareDMS\AllShareDMS.exe [2.3.2012 17:00 25504]
S2 SSPORT;SSPORT;c:\windows\system32\drivers\SSPORT.sys [23.12.2010 8:06 5120]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [12.4.2012 5:50 250808]
S3 ArtiosLM;Artios License Manager;c:\windows\system32\artioslm.exe [10.7.2000 17:25 239616]
S3 ATICDSDr;ATICDSDr;\??\c:\docume~1\ADMINI~1\LOCALS~1\Temp\ATICDSDr.sys --> c:\docume~1\ADMINI~1\LOCALS~1\Temp\ATICDSDr.sys [?]
S3 AtiHDAudioService;ATI Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdXP3.sys [1.5.2012 13:11 99856]
S3 AVerFx2hbtv;AVerMedia USB SW Hybrid Tuner;c:\windows\system32\drivers\AVerFx2hbtv.sys [12.1.2010 21:34 220672]
S3 cmudau32;C-Media USB UDA Sound Interface;c:\windows\system32\drivers\cmudaxu.sys [2.5.2007 0:03 1391040]
S3 COMMONFX.SYS;COMMONFX.SYS;c:\windows\system32\drivers\COMMONFX.sys [18.3.2010 20:39 99416]
S3 COMMONFX;COMMONFX;c:\windows\system32\drivers\COMMONFX.sys [18.3.2010 20:39 99416]
S3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [25.6.2011 5:25 79360]
S3 CTAUDFX.SYS;CTAUDFX.SYS;c:\windows\system32\drivers\CTAUDFX.sys [18.3.2010 20:39 555096]
S3 CTAUDFX;CTAUDFX;c:\windows\system32\drivers\CTAUDFX.sys [18.3.2010 20:39 555096]
S3 CTERFXFX.SYS;CTERFXFX.SYS;c:\windows\system32\drivers\CTERFXFX.sys [18.3.2010 20:39 100952]
S3 CTERFXFX;CTERFXFX;c:\windows\system32\drivers\CTERFXFX.sys [18.3.2010 20:39 100952]
S3 CTSBLFX.SYS;CTSBLFX.SYS;c:\windows\system32\drivers\CTSBLFX.sys [18.3.2010 20:39 566360]
S3 CTSBLFX;CTSBLFX;c:\windows\system32\drivers\CTSBLFX.sys [18.3.2010 20:39 566360]
S3 Ma730c;MA730 Bluetooth Core Driver;c:\windows\system32\drivers\ma730c.sys [30.12.2008 15:44 157024]
S3 Ma730Pt;MA730 Bluetooth VCOM Driver;c:\windows\system32\drivers\ma730Pt.sys [30.12.2008 15:44 103680]
S3 Ma730VaA;MA730 Bluetooth Advanced Audio;c:\windows\system32\drivers\Ma730VaA.sys [30.12.2008 15:44 21851]
S3 Ma730Vad;MA730 Bluetooth Audio;c:\windows\system32\drivers\Ma730Vad.sys [30.12.2008 15:44 50522]
S3 MozillaMaintenance;Mozilla Maintenance Service;c:\program files\Mozilla Maintenance Service\maintenanceservice.exe [25.4.2012 22:41 114144]
S3 MSSQL$ARTIOSCADDB;MSSQL$ARTIOSCADDB;c:\program files\Microsoft SQL Server\MSSQL$ARTIOSCADDB\Binn\sqlservr.exe -sARTIOSCADDB --> c:\program files\Microsoft SQL Server\MSSQL$ARTIOSCADDB\Binn\sqlservr.exe -sARTIOSCADDB [?]
S3 SimpleSlideShowServer;SimpleSlideShowServer;d:\nová složka\AllShare\AllShareSlideShowService.exe [2.3.2012 17:00 27584]
S3 spotJ;Spot Software GPS USB Driver (spotJ);c:\windows\system32\drivers\spotJ32.sys [12.1.2010 20:44 36608]
S3 SpotVcp;NXP swGPS Spot Virtual COM port driver;c:\windows\system32\drivers\SpotVcp.sys [16.5.2007 14:19 34304]
S3 SQLAgent$ARTIOSCADDB;SQLAgent$ARTIOSCADDB;c:\program files\Microsoft SQL Server\MSSQL$ARTIOSCADDB\Binn\sqlagent.EXE -i ARTIOSCADDB --> c:\program files\Microsoft SQL Server\MSSQL$ARTIOSCADDB\Binn\sqlagent.EXE -i ARTIOSCADDB [?]
S3 USBMULCD;USB Multi-Channel Audio Device Interface;c:\windows\system32\drivers\CM106.sys [4.2.2010 1:29 1506304]
S4 a347bus;a347bus;c:\windows\system32\drivers\a347bus.sys [28.4.2007 15:29 160640]
S4 sptd;sptd;c:\windows\system32\drivers\sptd.sys [18.5.2007 8:50 721904]
.
.
------- Doplňkový sken -------
.
mStart Page = hxxp://www.google.com
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: {{73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - c:\program files\ICQ7.4\ICQ.exe
TCP: DhcpNameServer = 192.168.3.1
TCP: Interfaces\{37CE4976-1106-4A08-B9C8-54CFB8DA7ED4}: NameServer = 10.200.200.1
TCP: Interfaces\{EA208548-90E3-451D-B922-626D66366764}: NameServer = 10.200.200.1
DPF: {1F831FA2-42FC-11D4-95A6-0080AD30DCE1} - file://c:\program files\AutoCAD LT 2000i Cz\InstFred.ocx
FF - ProfilePath - c:\documents and settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\8nfqzt63.default\
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-10-17 20:05
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'winlogon.exe'(1000)
c:\windows\system32\Ati2evxx.dll
c:\windows\system32\atiadlxx.dll
.
Celkový čas: 2012-10-17 20:07:58 - počítač byl restartován
ComboFix-quarantined-files.txt 2012-10-17 18:07
ComboFix2.txt 2012-10-16 06:39
ComboFix3.txt 2012-10-15 09:05
ComboFix4.txt 2012-10-12 09:08
.
Před spuštěním: 303 247 360
Po spuštění: 281 513 984
.
- - End Of File - - 90EBC8771F77381B471C1A9C3DD4C531

[vyosek]

Jak se chova PC

[michalkaktus]

Dobry den, bohuzel porad stejne. Nejprve naskoci na 2 sekundy plocha a potom hlaska ze mam zaplatit a uz nejde nic spustit

[vyosek]

Stahnete Malwarebytes' Anti-Malware (zkracene MBAM) http://forum.viry.cz/viewtopic.php?f=29&t=115222

• Provedte aktualizaci
• Provedte uplny sken - nic nemazte
• MBAM miva obcas falesne detekce, proto vlozte log do prispevku a pockejte na posouzeni

[vyosek]

MBAM samozrejme aplikujte v nouzovem rezimu

[michalkaktus]

Malwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware) 1.65.1.1000
www.malwarebytes.org

Verze databáze: v2012.10.18.03

Windows XP Service Pack 3 x86 NTFS (Safe Mode s podporou sítě)
Internet Explorer 8.0.6001.18702
Administrator :: MICHAL [administrátor]

Ochrana: Zakázána

18.10.2012 14:03:00
mbam-log-2012-10-18 (16-06-31).txt

Typ: Úplná kontrola (C:\|D:\|F:\|)
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 618418
Uplynulý čas: 1 hodin, 39 minut, 55 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\TNod (Trojan.Agent.CK) -> Žádná instrukce nebyla provedena.

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 18
C:\Documents and Settings\Solni\Data aplikací\msconfig.dat (Trojan.Zbot) -> Žádná instrukce nebyla provedena.
C:\Documents and Settings\Solni\Local Settings\Data aplikací\Adobe\flash_player.exe (Trojan.Agent) -> Žádná instrukce nebyla provedena.
C:\Documents and Settings\Solni\Local Settings\temp\pvw9hsf3v3v62r09.exe (Trojan.Zbot) -> Žádná instrukce nebyla provedena.
C:\Documents and Settings\Solni\Local Settings\temp\wgsdgsdgdsgsd.exe (Trojan.Lameshield) -> Žádná instrukce nebyla provedena.
C:\Program Files\DAEMON Tools Pro\daemon.tools.pro.patch.exe (Trojan.Agent) -> Žádná instrukce nebyla provedena.
C:\Program Files\TNod User & Password Finder\uninst-tnod.exe (Trojan.Agent.CK) -> Žádná instrukce nebyla provedena.
D:\hry\scar\RELOADED.exe (Malware.Packer.Gen) -> Žádná instrukce nebyla provedena.
D:\install\BSplayer Pro\BSplayer.Pro.v1.32.820.Incl.Keymaker-AGAiN\Keymaker.exe (Trojan.Downloader) -> Žádná instrukce nebyla provedena.
D:\install\Nero 7\Keygen.exe (Trojan.Agent.CK) -> Žádná instrukce nebyla provedena.
D:\mozila\RemoveWGA12.exe (PUP.RemoveWGA) -> Žádná instrukce nebyla provedena.
D:\mozila\NOD-32-ESET-SMART-SECURITY-4-+-LICENCE\NOD-32-ESET-SMART-SECURITY-4-+-LICENCE\TNod-1.4.0.15-setup.exe (Trojan.Agent.CK) -> Žádná instrukce nebyla provedena.
D:\mozila\Nod-4-v4.2.64.12---Licence-32bit-a-64bit-CZ\Nod 4 v4.2.64.12 Licence 32bit a 64bit CZ\TNODUP a MiNODLogin + Hotfix\MiNODLogin 3.9.3.2\MiNODLogin 3.9.3.2.exe (Riskware.KG) -> Žádná instrukce nebyla provedena.
D:\mozila\Nod-4-v4.2.64.12---Licence-32bit-a-64bit-CZ\Nod 4 v4.2.64.12 Licence 32bit a 64bit CZ\TNODUP a MiNODLogin + Hotfix\TNODUP\TNODUP Setup.exe (Trojan.Agent.CK) -> Žádná instrukce nebyla provedena.
D:\mozila\Nod-4-v4.2.64.12---Licence-32bit-a-64bit-CZ\Nod 4 v4.2.64.12 Licence 32bit a 64bit CZ\TNODUP a MiNODLogin + Hotfix\TNODUP\TNod User & Password Finder\uninst-tnod.exe (Trojan.Agent.CK) -> Žádná instrukce nebyla provedena.
D:\mozila\StoreDivx.com_tr682\Trojan.Remover.v6.8.2.WinALL.Cracked.REPACK-BRD\brtr68r\Crack\Patch.exe (Riskware.Tool.CK) -> Žádná instrukce nebyla provedena.
D:\Poslední zákoha disku c!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!\Program Files\BitComet\Downloads\NOD32.FiX.v1.5-nsane.exe (PUP.RiskWareTool.CK) -> Žádná instrukce nebyla provedena.
F:\hry\BattleField 2\Keygenerator\vtl-bf2k.exe (Trojan.Agent) -> Žádná instrukce nebyla provedena.
F:\hry\BattleField 2\vtl-bf2k\vtl-bf2k.exe (Trojan.Agent) -> Žádná instrukce nebyla provedena.

(konec)

[vyosek]

Vsechno smazte, pak se objevi log, ten rad uvidim

nedivim se ze to mate ve stavu v jakem mate, kdyz si cracknete i antivir - tohle tu nebudeme (na zaklade pravidel ) tolerovat a pak ta hezka spousta cracku

napiste co PC

[michalkaktus]

Je super uz to naskocilo.Moc dekuji.
No kdysi jsem tam mel essential a bohuzel z niceho nic prestal fungovat

[vyosek]

Poprosim o novy log z RSIT