Asi zavirovaný HDD

Zpráva

stef.mikulics · #1 Příspěvek od **stef.mikulics** » 28 Led 2013 15:29

Zdravím, na mým HDD se místo složek zobrazují zástupci. Nebylo by prosím nějaké řešení?

#2 Příspěvek od **vyosek** » 28 Led 2013 15:33

Zdravim

Z kristalove koule se spatne vesti, to bude chtit nejake voditko, nejlepe logy

Log z RSIT http://forum.viry.cz/viewtopic.php?f=13&t=105895

Stahnete RogueKiller http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe

Ukoncete vsechny programy
Pokud pouzivate Win Vista ci W7, kliknete na RogueKiller pravym a dejte Run As Administrator ci Spustit jako spravce
Pockejte na dokonceni PreScanu
Zvolte moznost Prohledat (scan)
Po dokonceni skenu kliknete na Zpráva (Report)- otevre se log, ten sem vlozte
Detailni postup vc. obrazku mate zde http://forum.viry.cz/viewtopic.php?f=24&t=120452

Zapojte do PC vsechny USB klice (flashky, ext. disky apod.)

Stahne a ulozte na plochu UsbFix http://www.viry.cz/forum/viewtopic.php?f=24&t=102308
Spustte a kliknete na Deletion
Po dokonceni sem vlozte log, pokud na Vas nevyskoci, najdete jej zde C:\UsbFix.txt

stef.mikulics · #3 Příspěvek od **stef.mikulics** » 28 Led 2013 16:22

RSIT:
Logfile of random's system information tool 1.09 (written by random/random)
Run by Štefan at 2013-01-28 15:36:47
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 64 GB (87%) free of 74 GB
Total RAM: 2039 MB (58% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 15:36:49, on 28.1.2013
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17115)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\EeePC\ACPI\AsAcpiSvr.exe
C:\Program Files\EeePC\ACPI\AsEPCMon.exe
C:\Program Files\EeePC\ACPI\AsTray.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\System32\WScript.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\ASUS\EeePC\Super Hybrid Engine\SuperHybridEngine.exe
C:\WINDOWS\system32\igfxext.exe
C:\WINDOWS\system32\cmd.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Štefan\Dokumenty\Downloads\RSIT.exe
C:\Program Files\trend micro\Štefan.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://eeepc.asus.com/global
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.microsoft.com/fwlink/?LinkId=74005
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: Pomocník pro přihlášení ke službě Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [AsusACPIServer] C:\Program Files\EeePC\ACPI\AsAcpiSvr.exe
O4 - HKLM\..\Run: [AsusEPCMonitor] C:\Program Files\EeePC\ACPI\AsEPCMon.exe
O4 - HKLM\..\Run: [AsusTray] C:\Program Files\EeePC\ACPI\AsTray.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SynAsusAcpi] C:\Program Files\Synaptics\SynTP\SynAsusAcpi.exe
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKLM\..\RunOnce: [KB976002-v5] C:\WINDOWS\system32\browserchoice.exe
O4 - HKLM\..\RunOnce: [KB955759] rundll32.exe apphelp.dll,ShimFlushCache
O4 - HKLM\..\RunOnce: [NoIE4StubProcessing] C:\WINDOWS\system32\reg.exe DELETE "HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components" /v "NoIE4StubProcessing" /f
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: SuperHybridEngine.lnk = ?
O8 - Extra context menu item: Odeslat do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat do zařízení Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Přidat na blog - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Přidat na blog Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

--
End of file - 7087 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Podpora odkazu pro Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
Skype add-on (mastermind) - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2008-02-12 1372160]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll [2009-01-14 92504]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pro přihlášení ke službě Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
Windows Live Toolbar Helper - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2009-02-06 1068904]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2007-12-19 135168]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2007-12-19 159744]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2007-12-19 131072]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2009-04-27 17881088]
"AsusACPIServer"=C:\Program Files\EeePC\ACPI\AsAcpiSvr.exe [2009-04-16 630784]
"AsusEPCMonitor"=C:\Program Files\EeePC\ACPI\AsEPCMon.exe [2009-03-13 98304]
"AsusTray"=C:\Program Files\EeePC\ACPI\AsTray.exe [2009-04-16 118784]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2009-03-06 1434920]
"SynAsusAcpi"=C:\Program Files\Synaptics\SynTP\SynAsusAcpi.exe [2009-03-06 79144]
"MSConfig"=C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe [2008-04-14 171008]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"KB976002-v5"=C:\WINDOWS\system32\browserchoice.exe [2010-02-12 293376]
"KB955759"=apphelp.dll,ShimFlushCache []
"NoIE4StubProcessing"=C:\WINDOWS\system32\reg.exe [2008-04-14 55296]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-01-11 39792]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Eee Docking]
C:\Program Files\ASUS\Eee Docking\Eee Docking.exe [2009-05-08 395776]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe [2009-02-06 3885408]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SRS Premium Sound]
C:\Program Files\SRS Labs\SRS Premium Sound\SRSPremiumSoundBig_Small.exe /hideme []

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
SuperHybridEngine.lnk - C:\Program Files\ASUS\EeePC\Super Hybrid Engine\SuperHybridEngine.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2007-12-19 208896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"MSVideo8"=VfWWDM32.dll
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux"=wdmaud.drv
"msacm.siren"=sirenacm.dll

======List of files/folders created in the last 1 month======

2013-01-28 15:34:47 ----D---- C:\rsit
2013-01-28 15:34:47 ----D---- C:\Program Files\trend micro
2013-01-28 15:17:45 ----D---- C:\WINDOWS\system32\XPSViewer
2013-01-28 15:17:40 ----D---- C:\Program Files\MSBuild
2013-01-28 15:17:37 ----D---- C:\WINDOWS\system32\en-US
2013-01-28 15:17:31 ----D---- C:\Program Files\Reference Assemblies
2013-01-28 15:17:05 ----N---- C:\WINDOWS\system32\xpssvcs.dll
2013-01-28 15:17:05 ----N---- C:\WINDOWS\system32\xpsshhdr.dll
2013-01-28 15:17:05 ----N---- C:\WINDOWS\system32\prntvpt.dll
2013-01-27 22:19:08 ----N---- C:\WINDOWS\system32\SET6E5.tmp
2013-01-27 22:18:40 ----N---- C:\WINDOWS\system32\SET6A3.tmp
2013-01-27 22:18:40 ----N---- C:\WINDOWS\system32\SET6A2.tmp
2013-01-27 22:18:40 ----N---- C:\WINDOWS\system32\SET6A1.tmp
2013-01-27 22:18:39 ----N---- C:\WINDOWS\system32\SET6AF.tmp
2013-01-27 22:18:39 ----N---- C:\WINDOWS\system32\SET6AD.tmp
2013-01-27 22:18:39 ----N---- C:\WINDOWS\system32\SET6A9.tmp
2013-01-27 22:18:39 ----N---- C:\WINDOWS\system32\SET6A8.tmp
2013-01-27 22:17:41 ----HDC---- C:\WINDOWS\$NtUninstallKB2467659$
2013-01-27 22:17:24 ----D---- C:\WINDOWS\ie8updates
2013-01-27 22:16:39 ----HDC---- C:\WINDOWS\ie8
2013-01-27 22:12:22 ----HDC---- C:\WINDOWS\$NtUninstallKB2387149$
2013-01-27 22:12:15 ----HDC---- C:\WINDOWS\$NtUninstallKB2712808$
2013-01-27 22:12:09 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$
2013-01-27 22:12:03 ----HDC---- C:\WINDOWS\$NtUninstallKB2479943$
2013-01-27 22:11:59 ----HDC---- C:\WINDOWS\$NtUninstallKB2659262$
2013-01-27 22:11:53 ----HDC---- C:\WINDOWS\$NtUninstallKB2564958$
2013-01-27 22:11:50 ----HDC---- C:\WINDOWS\$NtUninstallKB2478971$
2013-01-27 22:11:44 ----HDC---- C:\WINDOWS\$NtUninstallKB2758857$
2013-01-27 22:11:37 ----HDC---- C:\WINDOWS\$NtUninstallKB2544893-v2$
2013-01-27 22:11:31 ----HDC---- C:\WINDOWS\$NtUninstallKB2536276-v2$
2013-01-27 22:11:19 ----HDC---- C:\WINDOWS\$NtUninstallKB2646524$
2013-01-27 22:11:14 ----HDC---- C:\WINDOWS\$NtUninstallKB2779030$
2013-01-27 22:11:07 ----HDC---- C:\WINDOWS\$NtUninstallKB2585542$
2013-01-27 22:11:01 ----HDC---- C:\WINDOWS\$NtUninstallKB2631813$
2013-01-27 22:10:55 ----HDC---- C:\WINDOWS\$NtUninstallKB2296011$
2013-01-27 22:10:47 ----HDC---- C:\WINDOWS\$NtUninstallKB2691442$
2013-01-27 22:10:40 ----HDC---- C:\WINDOWS\$NtUninstallKB2115168$
2013-01-27 22:10:34 ----HDC---- C:\WINDOWS\$NtUninstallKB975558_WM8$
2013-01-27 22:10:30 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2013-01-27 22:10:24 ----HDC---- C:\WINDOWS\$NtUninstallKB2779562$
2013-01-27 22:10:18 ----HDC---- C:\WINDOWS\$NtUninstallKB2378111_WM9$
2013-01-27 22:10:13 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2013-01-27 22:10:07 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$
2013-01-27 22:10:00 ----HDC---- C:\WINDOWS\$NtUninstallKB2443105$
2013-01-27 22:09:51 ----HDC---- C:\WINDOWS\$NtUninstallKB2655992$
2013-01-27 22:09:38 ----HDC---- C:\WINDOWS\$NtUninstallKB2724197$
2013-01-27 22:09:26 ----HDC---- C:\WINDOWS\$NtUninstallKB2229593$
2013-01-27 22:09:15 ----HDC---- C:\WINDOWS\$NtUninstallKB2481109$
2013-01-27 22:09:05 ----HDC---- C:\WINDOWS\$NtUninstallKB975713$
2013-01-27 22:08:56 ----HDC---- C:\WINDOWS\$NtUninstallKB2485663$
2013-01-27 22:08:46 ----HDC---- C:\WINDOWS\$NtUninstallKB2598479$
2013-01-27 22:08:37 ----HDC---- C:\WINDOWS\$NtUninstallKB2440591$
2013-01-27 22:08:27 ----HDC---- C:\WINDOWS\$NtUninstallKB2736233$
2013-01-27 22:08:19 ----HDC---- C:\WINDOWS\$NtUninstallKB2686509$
2013-01-27 22:08:09 ----HDC---- C:\WINDOWS\$NtUninstallKB982132$
2013-01-27 22:08:00 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$
2013-01-27 22:07:50 ----HDC---- C:\WINDOWS\$NtUninstallKB978338$
2013-01-27 22:07:40 ----HDC---- C:\WINDOWS\$NtUninstallKB954155_WM9$
2013-01-27 22:07:36 ----HDC---- C:\WINDOWS\$NtUninstallKB2507938$
2013-01-27 22:07:27 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$
2013-01-27 22:07:18 ----HDC---- C:\WINDOWS\$NtUninstallKB2510581$
2013-01-27 22:07:07 ----HDC---- C:\WINDOWS\$NtUninstallKB956744$
2013-01-27 22:06:46 ----HDC---- C:\WINDOWS\$NtUninstallKB2476490$
2013-01-27 22:06:38 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2013-01-27 22:06:29 ----HDC---- C:\WINDOWS\$NtUninstallKB2347290$
2013-01-27 22:06:21 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$
2013-01-27 22:06:08 ----HDC---- C:\WINDOWS\$NtUninstallKB2483185$
2013-01-27 22:05:58 ----HDC---- C:\WINDOWS\$NtUninstallKB2624667$
2013-01-27 22:05:49 ----HDC---- C:\WINDOWS\$NtUninstallKB979687$
2013-01-27 22:05:40 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$
2013-01-27 22:05:32 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$
2013-01-27 22:05:23 ----HDC---- C:\WINDOWS\$NtUninstallKB2719985$
2013-01-27 22:05:14 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$
2013-01-27 22:05:06 ----HDC---- C:\WINDOWS\$NtUninstallKB2592799$
2013-01-27 22:04:57 ----HDC---- C:\WINDOWS\$NtUninstallKB975560$
2013-01-27 22:04:43 ----HDC---- C:\WINDOWS\$NtUninstallKB2753842-v2$
2013-01-27 22:04:35 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
2013-01-27 22:04:26 ----HDC---- C:\WINDOWS\$NtUninstallKB2770660$
2013-01-27 22:04:18 ----HDC---- C:\WINDOWS\$NtUninstallKB941569$
2013-01-27 22:03:41 ----HDC---- C:\WINDOWS\$NtUninstallKB2535512$
2013-01-27 22:03:33 ----HDC---- C:\WINDOWS\$NtUninstallKB977816$
2013-01-27 22:03:24 ----HDC---- C:\WINDOWS\$NtUninstallKB2570947$
2013-01-27 22:02:45 ----HDC---- C:\WINDOWS\$NtUninstallKB981322$
2013-01-27 22:02:29 ----HDC---- C:\WINDOWS\$NtUninstallKB978695_WM9$
2013-01-27 22:02:21 ----HDC---- C:\WINDOWS\$NtUninstallKB2603381$
2013-01-27 22:02:03 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2013-01-27 22:01:49 ----HDC---- C:\WINDOWS\$NtUninstallKB2757638$
2013-01-27 22:01:29 ----HDC---- C:\WINDOWS\$NtUninstallKB973540_WM9$
2013-01-27 22:01:16 ----HDC---- C:\WINDOWS\$NtUninstallKB2419632$
2013-01-27 22:01:05 ----HDC---- C:\WINDOWS\$NtUninstallKB2508429$
2013-01-27 22:00:55 ----HDC---- C:\WINDOWS\$NtUninstallKB2653956$
2013-01-27 22:00:46 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2013-01-27 22:00:01 ----SHD---- C:\Config.Msi
2013-01-27 21:59:45 ----HDC---- C:\WINDOWS\$NtUninstallKB2749655$
2013-01-27 21:59:35 ----HDC---- C:\WINDOWS\$NtUninstallKB971029$
2013-01-27 21:59:29 ----HDC---- C:\WINDOWS\$NtUninstallKB2506212$
2013-01-27 21:59:20 ----HDC---- C:\WINDOWS\$NtUninstallKB977914$
2013-01-27 21:59:12 ----HDC---- C:\WINDOWS\$NtUninstallKB2698365$
2013-01-27 21:59:07 ----HDC---- C:\WINDOWS\$NtUninstallKB2619339$
2013-01-27 21:59:02 ----HDC---- C:\WINDOWS\$NtUninstallKB2705219-v2$
2013-01-27 21:58:56 ----HDC---- C:\WINDOWS\$NtUninstallKB978542$
2013-01-27 21:58:51 ----HDC---- C:\WINDOWS\$NtUninstallKB979309$
2013-01-27 21:58:46 ----HDC---- C:\WINDOWS\$NtUninstallKB2727528$
2013-01-27 21:58:41 ----HDC---- C:\WINDOWS\$NtUninstallKB979482$
2013-01-27 21:58:36 ----HDC---- C:\WINDOWS\$NtUninstallKB978706$
2013-01-27 21:58:31 ----HDC---- C:\WINDOWS\$NtUninstallKB981997$
2013-01-27 21:58:25 ----HDC---- C:\WINDOWS\$NtUninstallKB2723135-v2$
2013-01-27 21:58:19 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$
2013-01-27 21:58:14 ----HDC---- C:\WINDOWS\$NtUninstallKB2618451$
2013-01-27 21:58:09 ----HDC---- C:\WINDOWS\$NtUninstallKB2661254-v2$
2013-01-27 21:58:03 ----HDC---- C:\WINDOWS\$NtUninstallKB2509553$
2013-01-27 21:57:55 ----HDC---- C:\WINDOWS\$NtUninstallKB2676562$
2013-01-27 21:55:06 ----A---- C:\WINDOWS\system32\MRT.exe
2013-01-27 21:54:58 ----HDC---- C:\WINDOWS\$NtUninstallKB982665$
2013-01-27 21:54:49 ----HDC---- C:\WINDOWS\$NtUninstallKB2478960$
2013-01-27 21:54:36 ----HDC---- C:\WINDOWS\$NtUninstallKB2393802$
2013-01-27 21:54:27 ----HDC---- C:\WINDOWS\$NtUninstallKB2620712$
2013-01-27 21:54:18 ----HDC---- C:\WINDOWS\$NtUninstallKB2566454$
2013-01-27 21:54:11 ----HDC---- C:\WINDOWS\$NtUninstallKB2661637$
2013-01-27 21:54:03 ----HDC---- C:\WINDOWS\$NtUninstallKB2584146$
2013-01-27 21:53:54 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$
2013-01-27 21:53:45 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
2013-01-27 21:53:37 ----HDC---- C:\WINDOWS\$NtUninstallKB2423089$
2013-01-27 21:53:28 ----HDC---- C:\WINDOWS\$NtUninstallKB2360937$
2013-01-27 21:37:50 ----N---- C:\WINDOWS\system32\browserchoice.exe
2013-01-27 21:30:19 ----N---- C:\WINDOWS\system32\iacenc.dll
2013-01-27 21:29:21 ----A---- C:\WINDOWS\system32\SET1CD.tmp
2013-01-27 21:28:43 ----D---- C:\WINDOWS\system32\PreInstall
2013-01-27 21:28:41 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
2013-01-27 18:28:41 ----D---- C:\Program Files\Google
2013-01-27 17:19:17 ----D---- C:\Documents and Settings\Štefan\Data aplikací\skypePM
2013-01-27 17:19:17 ----A---- C:\Documents and Settings\All Users\Data aplikací\ezsid.dat
2013-01-27 17:14:55 ----D---- C:\Documents and Settings\Štefan\Data aplikací\Skype
2013-01-27 17:14:38 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2013-01-27 17:14:35 ----D---- C:\WINDOWS\LastGood
2013-01-27 16:11:38 ----SD---- C:\Documents and Settings\Štefan\Data aplikací\Microsoft
2013-01-27 16:11:38 ----D---- C:\Documents and Settings\Štefan\Data aplikací\InstallShield
2013-01-27 16:11:38 ----D---- C:\Documents and Settings\Štefan\Data aplikací\Identities
2013-01-27 16:11:38 ----D---- C:\Documents and Settings\Štefan\Data aplikací\Adobe
2013-01-27 16:11:38 ----ASH---- C:\Documents and Settings\Štefan\Data aplikací\desktop.ini

======List of files/folders modified in the last 1 month======

2013-01-28 15:34:47 ----RD---- C:\Program Files
2013-01-28 15:29:39 ----D---- C:\WINDOWS\Microsoft.NET
2013-01-28 15:29:38 ----RSD---- C:\WINDOWS\assembly
2013-01-28 15:26:29 ----HD---- C:\WINDOWS\inf
2013-01-28 15:26:29 ----D---- C:\WINDOWS\system32\CatRoot2
2013-01-28 15:25:49 ----HD---- C:\WINDOWS\$hf_mig$
2013-01-28 15:25:48 ----D---- C:\WINDOWS
2013-01-28 15:23:22 ----SHD---- C:\WINDOWS\Installer
2013-01-28 15:23:19 ----D---- C:\WINDOWS\Temp
2013-01-28 15:22:13 ----D---- C:\WINDOWS\system32
2013-01-28 15:22:13 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2013-01-28 15:22:01 ----D---- C:\WINDOWS\WinSxS
2013-01-28 15:17:35 ----RSD---- C:\WINDOWS\Fonts
2013-01-28 15:17:12 ----D---- C:\WINDOWS\system32\spool
2013-01-28 15:17:11 ----RSHDC---- C:\WINDOWS\system32\dllcache
2013-01-28 15:15:27 ----D---- C:\Program Files\Internet Explorer
2013-01-27 22:19:07 ----A---- C:\WINDOWS\imsins.BAK
2013-01-27 22:17:02 ----D---- C:\WINDOWS\system32\cs-cz
2013-01-27 22:16:59 ----D---- C:\WINDOWS\Media
2013-01-27 22:16:58 ----D---- C:\WINDOWS\Help
2013-01-27 22:11:33 ----D---- C:\WINDOWS\system32\drivers
2013-01-27 22:10:32 ----D---- C:\WINDOWS\AppPatch
2013-01-27 21:59:26 ----D---- C:\WINDOWS\system32\CatRoot
2013-01-27 21:58:58 ----D---- C:\Program Files\Outlook Express
2013-01-27 21:58:32 ----D---- C:\Program Files\Movie Maker
2013-01-27 21:57:31 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2013-01-27 21:41:52 ----D---- C:\WINDOWS\Prefetch
2013-01-27 18:28:42 ----SD---- C:\WINDOWS\Tasks
2013-01-27 18:28:00 ----SHD---- C:\RECYCLER
2013-01-27 17:14:47 ----D---- C:\WINDOWS\SoftwareDistribution
2013-01-27 16:12:28 ----RASH---- C:\boot.ini
2013-01-27 16:12:28 ----A---- C:\WINDOWS\win.ini
2013-01-27 16:12:28 ----A---- C:\WINDOWS\system.ini
2013-01-27 16:11:46 ----A---- C:\WINDOWS\OEWABLog.txt
2013-01-27 16:11:37 ----D---- C:\Documents and Settings
2013-01-27 16:11:06 ----A---- C:\WINDOWS\setuplog.txt
2013-01-27 16:11:02 ----SHD---- C:\System Volume Information
2013-01-27 16:09:27 ----D---- C:\WINDOWS\Registration
2013-01-27 16:08:58 ----D---- C:\WINDOWS\security
2013-01-27 16:05:30 ----A---- C:\WINDOWS\system32\DetectDevice.txt

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\WINDOWS\system32\drivers\iaStor.sys [2008-09-12 327192]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R2 fssfltr;FssFltr; C:\WINDOWS\system32\DRIVERS\fssfltr_tdi.sys [2009-02-06 55152]
R3 AR5416;Atheros AR5008 Wireless Network Adapter Service; C:\WINDOWS\system32\DRIVERS\athw.sys [2009-03-13 1528928]
R3 AsusACPI;ASUS ACPI Driver; C:\WINDOWS\system32\DRIVERS\ASUSACPI.sys [2008-04-08 10752]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-14 144384]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2007-12-19 5854688]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2009-04-27 5074944]
R3 L1c;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller; C:\WINDOWS\system32\DRIVERS\l1c51x86.sys [2009-03-02 38912]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2009-03-06 208304]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-14 32128]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 usbvideo;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2008-04-14 121984]
R3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2008-03-27 503008]
S3 Ambfilt;Ambfilt; C:\WINDOWS\system32\drivers\Ambfilt.sys [2008-08-05 1684736]
S3 btaudio;Zvukové zařízení Bluetooth; C:\WINDOWS\system32\drivers\btaudio.sys []
S3 BTDriver;Ovladač virtuálních komunikací Bluetooth; C:\WINDOWS\system32\DRIVERS\btport.sys []
S3 BTWDNDIS;Server pro přístup k síti LAN Bluetooth; C:\WINDOWS\system32\DRIVERS\btwdndis.sys []
S3 BTWUSB;WIDCOMM USB Bluetooth Driver; C:\WINDOWS\System32\Drivers\btwusb.sys []
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-14 17024]
S3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
S3 Monfilt;Monfilt; C:\WINDOWS\system32\drivers\Monfilt.sys [2006-01-04 1389056]
S3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-14 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-14 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-14 10880]
S3 RT80x86;Ralink 802.11n Wireless Driver; C:\WINDOWS\system32\DRIVERS\RT2860.sys [2009-03-24 966912]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-14 11136]
S3 SRS_PremiumSound_Service;SRS Labs Premium Sound; C:\WINDOWS\system32\drivers\srs_PremiumSound_i386.sys [2009-04-20 232872]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-14 15232]
S3 usbstor;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 uvclf;uvclf; C:\WINDOWS\system32\DRIVERS\uvclf.sys [2008-11-19 39040]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-14 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-01-14 226656]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-01-27 116648]
S2 spupdsvc;Windows Service Pack Installer update service; C:\WINDOWS\system32\spupdsvc.exe [2009-01-07 26144]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 fsssvc;Windows Live Zabezpečení rodiny; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2009-02-06 533360]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-01-27 116648]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2006-10-26 441136]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

RogueKiller:
RogueKiller V8.4.3 [Jan 27 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Podpora : http://www.geekstogo.com/forum/files/fi ... guekiller/
Webové stránky : http://tigzy.geekstogo.com/roguekiller.php
: http://tigzyrk.blogspot.com/

Operační systém : Windows XP (5.1.2600 Service Pack 3) 32 bits version
Spuštěno v : Normální režim
Uživatel : Štefan [Práva správce]
Mód : Kontrola -- Datum : 01/28/2013 15:39:20
| ARK || MBR |

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 3 ¤¤¤
[HJ] HKLM\[...]\Security Center : AntiVirusDisableNotify (1) -> NALEZENO
[HJ SMENU] HKCU\[...]\Advanced : Start_ShowRecentDocs (0) -> NALEZENO
[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NALEZENO

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač : [NAHRÁNO] ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> C:\WINDOWS\system32\drivers\etc\hosts

127.0.0.1 localhost

¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: ST9160314AS +++++
--- User ---
[MBR] d3bf99432179d6e0a6fd8c515674b497
[BSP] e450b08380108494cec32ea6654de7a9 : Windows XP MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 73790 Mo
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 151123455 | Size: 73782 Mo
2 - [XXXXXX] FAT32-LBA (0x1c) [HIDDEN!] Offset (sectors): 302230845 | Size: 5004 Mo
3 - [XXXXXX] UNKNOWN (0xef) [VISIBLE] Offset (sectors): 312480315 | Size: 47 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Dokončeno : << RKreport[2]_S_01282013_02d1539.txt >>
RKreport[1]_S_01282013_02d1538.txt ; RKreport[2]_S_01282013_02d1539.txt

UsbFix:
############################## | UsbFix V 7.096 | [Deletion]

User: Štefan (Administrator) # N-G6UPPYVBMR8VA
Updated 15/08/2012 by El Desaparecido
Started at 16:01:47 | 28/01/2013

Website: http://eldesaparecido.com
Forum: http://forum.eldesaparecido.com
Suspicious file ? : http://eldesaparecido.com/upload.php
Contact: contact@eldesaparecido.com

PC: ASUSTeK Computer INC. (1005HA) (X86-based PC) # Notebook
CPU: Intel(R) Atom(TM) CPU N270 @ 1.60GHz (1599)
RAM -> [Total : 2039 | Free : 1573]
BIOS: BIOS Date: 02/26/10 09:16:31 Ver: 08.00.12
BOOT: Normal boot

OS: Microsoft Windows XP Home Edition (5.1.2600 32-Bit) # Service Pack 3
WB: Windows Internet Explorer 8.0.6001.18702

SC: Security Center Service [Enabled]
WU: Windows Update Service [Enabled]
FW: Windows FireWall Service [Enabled]

C:\ (%systemdrive%) -> Fixed drive # 72 Gb (44 Mb free - 61%) [] # NTFS
D:\ -> Fixed drive # 72 Gb (72 Mb free - 100%) [] # NTFS
E:\ -> Fixed drive # 298 Gb (47 Mb free - 16%) [Mikulics-HDD] # NTFS

################## | Active Processes |

C:\WINDOWS\System32\smss.exe (428)
C:\WINDOWS\system32\winlogon.exe (720)
C:\WINDOWS\system32\services.exe (764)
C:\WINDOWS\system32\lsass.exe (776)
C:\WINDOWS\system32\svchost.exe (936)
C:\WINDOWS\System32\svchost.exe (1044)
C:\WINDOWS\system32\spoolsv.exe (1460)
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (1556)
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (1636)
C:\WINDOWS\Explorer.EXE (2000)
C:\WINDOWS\system32\svchost.exe (164)
C:\WINDOWS\system32\wuauclt.exe (668)
C:\WINDOWS\system32\igfxtray.exe (1752)
C:\WINDOWS\system32\hkcmd.exe (1884)
C:\WINDOWS\RTHDCPL.EXE (1980)
C:\WINDOWS\system32\igfxsrvc.exe (2040)
C:\Program Files\EeePC\ACPI\AsAcpiSvr.exe (272)
C:\Program Files\EeePC\ACPI\AsEPCMon.exe (448)
C:\Program Files\EeePC\ACPI\AsTray.exe (1820)
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (960)
C:\WINDOWS\system32\ctfmon.exe (160)
C:\Program Files\ASUS\EeePC\Super Hybrid Engine\SuperHybridEngine.exe (828)
C:\WINDOWS\system32\igfxext.exe (1924)
C:\Program Files\Google\Chrome\Application\chrome.exe (2776)
C:\Program Files\Google\Chrome\Application\chrome.exe (3024)
C:\WINDOWS\system32\wuauclt.exe (3064)
C:\Program Files\Google\Chrome\Application\chrome.exe (3288)
C:\UsbFix\Go.exe (3696)

################## | Stopped processes |

Stopped! C:\WINDOWS\system32\spoolsv.exe (1460)
Stopped! C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (1556)
Stopped! C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (1636)
Stopped! C:\WINDOWS\Explorer.EXE (2000)
Stopped! C:\WINDOWS\system32\wuauclt.exe (668)
Stopped! C:\WINDOWS\system32\igfxtray.exe (1752)
Stopped! C:\WINDOWS\system32\hkcmd.exe (1884)
Stopped! C:\WINDOWS\RTHDCPL.EXE (1980)
Stopped! C:\WINDOWS\system32\igfxsrvc.exe (2040)
Stopped! C:\Program Files\EeePC\ACPI\AsAcpiSvr.exe (272)
Stopped! C:\Program Files\EeePC\ACPI\AsEPCMon.exe (448)
Stopped! C:\Program Files\EeePC\ACPI\AsTray.exe (1820)
Stopped! C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (960)
Stopped! C:\WINDOWS\system32\ctfmon.exe (160)
Stopped! C:\Program Files\ASUS\EeePC\Super Hybrid Engine\SuperHybridEngine.exe (828)
Stopped! C:\WINDOWS\system32\igfxext.exe (1924)
Stopped! C:\Program Files\Google\Chrome\Application\chrome.exe (2776)
Stopped! C:\Program Files\Google\Chrome\Application\chrome.exe (3024)
Stopped! C:\WINDOWS\system32\wuauclt.exe (3064)
Stopped! C:\Program Files\Google\Chrome\Application\chrome.exe (3288)

################## | Files # Infected Folders |

Deleted ! E:\Recycler\S-1-5-21-3261861820-1301419545-2253476836-1006
Deleted ! E:\Recycler\S-1-5-21-3387403570-2276460900-248687129-1006
Deleted ! E:\Recycler\S-1-5-21-39533281-4179820386-4135934518-1006
Deleted ! E:\Recycler\S-1-5-21-839522115-1644491937-2147167427-1004
Deleted ! E:\autorun.inf
Deleted ! E:\syncguid.dat
Deleted ! E:\trzCD1D.tmp

(!) Temporary files deleted.

################## | Registry |

Deleted ! HKLM\Software\Microsoft\Windows\CurrentVersion\Run|MSConfig

################## | Mountpoints2 |

Deleted ! HKCU\.\.\.\.\Explorer\MountPoints2\{ae2bb9b8-45b8-11de-9a1a-806d6172696f}

################## | Listing |

[21/05/2009 - 02:48:50 | N | 0] C:\AUTOEXEC.BAT
[27/01/2013 - 16:12:28 | N | 211] C:\boot.ini
[14/04/2008 - 13:00:00 | N | 4952] C:\Bootfont.bin
[28/01/2013 - 15:59:29 | D ] C:\Config.Msi
[21/05/2009 - 02:48:50 | N | 0] C:\CONFIG.SYS
[27/01/2013 - 16:11:37 | D ] C:\Documents and Settings
[21/05/2009 - 02:57:59 | D ] C:\Intel
[21/05/2009 - 02:48:50 | N | 0] C:\IO.SYS
[21/05/2009 - 02:48:50 | N | 0] C:\MSDOS.SYS
[21/05/2009 - 03:52:52 | RHD ] C:\MSOCache
[14/04/2008 - 13:00:00 | N | 47564] C:\NTDETECT.COM
[14/04/2008 - 13:00:00 | N | 250576] C:\ntldr
[28/01/2013 - 15:59:32 | ASH | 1598029824] C:\pagefile.sys
[28/01/2013 - 15:34:47 | D ] C:\Program Files
[28/01/2013 - 16:03:55 | SHD ] C:\RECYCLER
[28/01/2013 - 15:37:28 | D ] C:\rsit
[27/01/2013 - 16:11:02 | SHD ] C:\System Volume Information
[28/01/2013 - 16:03:55 | D ] C:\UsbFix
[28/01/2013 - 16:08:08 | A | 4120] C:\UsbFix.txt
[28/01/2013 - 15:59:49 | D ] C:\WINDOWS
[28/01/2013 - 15:17:16 | D ] D:\ad57c5621fd998aba7837cc40695
[28/01/2013 - 16:03:55 | SHD ] D:\RECYCLER
[27/01/2013 - 16:11:47 | SHD ] D:\System Volume Information
[28/01/2013 - 15:51:55 | SHD ] E:\$RECYCLE.BIN
[27/01/2013 - 16:07:04 | N | 0] E:\843921.exe
[28/06/2012 - 18:17:32 | D ] E:\a5e61ce7e4fd269104d15b523693
[22/10/2011 - 19:50:10 | D ] E:\a978d926bfbf9fde22af
[24/04/2011 - 14:44:03 | N | 2283] E:\AlbumArtSmall.jpg
[25/07/2011 - 15:43:18 | D ] E:\Cell project
[29/07/2012 - 12:55:42 | D ] E:\chaotic robot tracker
[18/07/2012 - 13:58:33 | N | 2724] E:\chaotic robot2.bas
[27/07/2011 - 10:29:05 | N | 13229056] E:\Creation of cell state ontology, the.ppt
[15/03/2009 - 21:03:42 | N | 74030328] E:\debil.AVI
[19/10/2010 - 02:03:58 | SH | 85] E:\desktop.ini
[19/07/2012 - 16:57:44 | N | 3598976] E:\DSC_0018.JPG
[03/12/2011 - 18:42:48 | D ] E:\EBOOSTR
[26/09/2011 - 16:41:26 | D ] E:\ecell tutorialy
[11/11/2012 - 10:28:59 | D ] E:\Filmy
[24/04/2011 - 14:44:03 | N | 7591] E:\Folder.jpg
[27/08/2012 - 23:05:53 | D ] E:\Fotky
[27/01/2013 - 16:11:13 | D ] E:\From SAMSUNG GT-I8350
[25/12/2012 - 12:51:02 | D ] E:\Games
[27/07/2011 - 10:15:22 | D ] E:\grafy
[23/08/2012 - 22:22:22 | D ] E:\Hudba
[15/03/2009 - 06:53:18 | N | 24796468] E:\IMAG0532.AVI
[15/03/2009 - 20:03:34 | N | 61926080] E:\IMAG0533.AVI
[15/03/2009 - 21:05:18 | N | 36440936] E:\IMAG0535.AVI
[16/03/2009 - 00:20:22 | N | 37834728] E:\IMAG0536.AVI
[16/03/2009 - 01:05:10 | N | 104285812] E:\IMAG0537.AVI
[16/03/2009 - 01:07:04 | N | 28142180] E:\IMAG0538.AVI
[16/03/2009 - 01:09:22 | N | 33987168] E:\IMAG0539.AVI
[01/11/2011 - 23:19:33 | N | 301687863] E:\jumpstyle loverz.wmv
[09/12/2012 - 11:46:47 | D ] E:\Jumpstyle movie
[04/05/2012 - 21:01:56 | D ] E:\Jumpstyle videa - neupravený
[01/05/2012 - 11:36:41 | D ] E:\Kendas
[22/10/2011 - 19:15:02 | D ] E:\L2
[11/11/2012 - 22:39:02 | D ] E:\linux
[11/10/2012 - 21:41:33 | D ] E:\lovci mamutu
[11/12/2012 - 00:08:45 | D ] E:\maturak
[11/07/2011 - 19:54:13 | D ] E:\meeting ČB
[25/07/2012 - 20:53:24 | N | 31221] E:\mmmmmmm.jpg
[28/06/2012 - 20:59:42 | D ] E:\msdownld.tmp
[27/01/2013 - 16:08:22 | D ] E:\nej
[27/01/2013 - 16:08:35 | D ] E:\nj
[11/01/2012 - 13:59:05 | N | 733321216] E:\Police Academy 5.avi
[27/07/2011 - 10:10:13 | D ] E:\Presentations - Summer School
[22/07/2011 - 12:13:00 | D ] E:\Prezentace
[27/07/2011 - 10:15:23 | D ] E:\Prezentace LaTeX
[27/07/2011 - 10:31:26 | N | 7160] E:\prezentace.odt
[27/07/2011 - 09:06:15 | N | 417775] E:\prezentace.pdf
[30/07/2012 - 12:41:50 | D ] E:\PrezentaceFINAL
[30/07/2012 - 12:41:51 | D ] E:\prezentaceroboti
[22/10/2011 - 19:13:55 | D ] E:\protocolgenerator
[28/01/2013 - 16:03:55 | SHD ] E:\RECYCLER
[30/07/2012 - 12:41:53 | D ] E:\robot
[29/07/2012 - 12:55:40 | D ] E:\robot - dulezite
[30/07/2012 - 12:41:54 | D ] E:\robot videa
[12/07/2012 - 12:59:27 | D ] E:\roboti
[30/07/2012 - 12:41:55 | D ] E:\roboti prezentace
[30/07/2012 - 12:41:56 | D ] E:\schola ludus - pictures and videos
[21/05/2011 - 08:17:14 | D ] E:\sestavaaa
[27/01/2013 - 16:17:03 | D ] E:\simpsonovi 1. - 20. serie
[22/07/2011 - 12:43:41 | D ] E:\Software
[02/01/2011 - 14:40:35 | SHD ] E:\System Volume Information
[10/02/2012 - 12:39:37 | N | 85414091] E:\tektonik.wmv
[14/05/2012 - 15:30:02 | D ] E:\The Elder Scrolls V Skyrim
[30/07/2012 - 12:41:58 | ASH | 119296] E:\Thumbs.db
[23/08/2012 - 22:10:04 | N | 63343] E:\VirtualDJ Local Database v6.xml
[27/07/2011 - 09:40:36 | N | 589] E:\vysledky.txt
[22/07/2011 - 12:30:44 | D ] E:\Vystoupeni
[06/10/2011 - 16:19:30 | N | 3033585664] E:\WindowsDeveloperPreview-32bit-English.iso
[03/04/2012 - 17:39:44 | N | 88351943] E:\WP_20120403_160842Z.mp4
[03/07/2012 - 08:01:05 | N | 2039622] E:\xxx[tek2].mp3
[03/11/2012 - 17:11:01 | D ] E:\yaloha windows xp
[31/10/2012 - 19:04:51 | N | 734035968] E:\Yes Man_ Cz Dub.avi
[01/03/2012 - 20:35:35 | D ] E:\zaloha babicka
[20/01/2013 - 18:20:10 | D ] E:\zaloha netbook 2012
[27/01/2013 - 16:03:18 | D ] E:\zaloha netbook 27.1.13
[06/12/2011 - 16:55:39 | D ] E:\zaloha netbook 4.12.11
[22/07/2011 - 12:30:10 | D ] E:\Škola

################## | Vaccin |

C:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)
D:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)
E:\Autorun.inf -> Vaccine created by UsbFix (El Desaparecido)

Mimochodem složky se mi po UsbFix už zobrazili.

#4 Příspěvek od **vyosek** » 28 Led 2013 17:36

Spustte znovu RogueKiller

Pokud pouzivate Win Vista ci W7, kliknete na RogueKiller pravym a dejte Run As Administrator ci Spustit jako spravce
Zvolte moznost Prohledat a pote Smazat a nasledne Zprava - otevre se log, ten sem vlozte
Pak kliknete na Oprava Host a Zprava - otevre se log, ten sem vlozte

stef.mikulics · #5 Příspěvek od **stef.mikulics** » 28 Led 2013 17:45

1.LOG:
RogueKiller V8.4.3 [Jan 27 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Podpora : http://www.geekstogo.com/forum/files/fi ... guekiller/
Webové stránky : http://tigzy.geekstogo.com/roguekiller.php
: http://tigzyrk.blogspot.com/

Operační systém : Windows XP (5.1.2600 Service Pack 3) 32 bits version
Spuštěno v : Normální režim
Uživatel : Štefan [Práva správce]
Mód : Odebrat -- Datum : 01/28/2013 17:43:57
| ARK || MBR |

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 3 ¤¤¤
[HJ] HKLM\[...]\Security Center : AntiVirusDisableNotify (1) -> NAHRAZENO (0)
[HJ SMENU] HKCU\[...]\Advanced : Start_ShowRecentDocs (0) -> NAHRAZENO (1)
[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NAHRAZENO (0)

¤¤¤ Zvláštní soubory / Složky: ¤¤¤

¤¤¤ Ovladač : [NAHRÁNO] ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> C:\WINDOWS\system32\drivers\etc\hosts

127.0.0.1 localhost

¤¤¤ Kontrola MBR: ¤¤¤

+++++ PhysicalDrive0: ST9160314AS +++++
--- User ---
[MBR] d3bf99432179d6e0a6fd8c515674b497
[BSP] e450b08380108494cec32ea6654de7a9 : Windows XP MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 73790 Mo
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 151123455 | Size: 73782 Mo
2 - [XXXXXX] FAT32-LBA (0x1c) [HIDDEN!] Offset (sectors): 302230845 | Size: 5004 Mo
3 - [XXXXXX] UNKNOWN (0xef) [VISIBLE] Offset (sectors): 312480315 | Size: 47 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Dokončeno : << RKreport[4]_D_01282013_02d1743.txt >>
RKreport[1]_S_01282013_02d1538.txt ; RKreport[2]_S_01282013_02d1539.txt ; RKreport[3]_S_01282013_02d1743.txt ; RKreport[4]_D_01282013_02d1743.txt

2.LOG:
RogueKiller V8.4.3 [Jan 27 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Podpora : http://www.geekstogo.com/forum/files/fi ... guekiller/
Webové stránky : http://tigzy.geekstogo.com/roguekiller.php
: http://tigzyrk.blogspot.com/

Operační systém : Windows XP (5.1.2600 Service Pack 3) 32 bits version
Spuštěno v : Normální režim
Uživatel : Štefan [Práva správce]
Mód : Oprava HOSTS -- Datum : 01/28/2013 17:44:51
| ARK || MBR |

¤¤¤ Škodlivé procesy: : 0 ¤¤¤

¤¤¤ ¤¤¤ Záznamy Registrů: : 0 ¤¤¤

¤¤¤ Ovladač : [NAHRÁNO] ¤¤¤

¤¤¤ Soubor HOSTS: ¤¤¤
--> C:\WINDOWS\system32\drivers\etc\hosts

127.0.0.1 localhost

¤¤¤ Resetovaný HOSTS: ¤¤¤
127.0.0.1 localhost

Dokončeno : << RKreport[5]_H_01282013_02d1744.txt >>
RKreport[1]_S_01282013_02d1538.txt ; RKreport[2]_S_01282013_02d1539.txt ; RKreport[3]_S_01282013_02d1743.txt ; RKreport[4]_D_01282013_02d1743.txt ; RKreport[5]_H_01282013_02d1744.txt

#6 Příspěvek od **vyosek** » 28 Led 2013 17:56

Stahnete RKill http://download.bleepingcomputer.com/grinler/rkill.com

Pokud ho havet blokuje, pouzijte jeden z nasledujicich - i ty prejmenovane
Rkill EXE:
http://download.bleepingcomputer.com/grinler/rkill.exe

Rkill iExplore.exe:
http://download.bleepingcomputer.com/gr ... xplore.exe

Rkill uSeRiNiT.exe:
http://download.bleepingcomputer.com/gr ... eRiNiT.exe

Rkill WiNlOgOn.exe:
http://download.bleepingcomputer.com/gr ... NlOgOn.exe
Ulozte nejlepena plochu a ukoncete vsechny aplikace (jinak to udela RKill za Vas)
Spustte tradicne dvojklikem - program probehne do par sekund a ukonci i svou cinnost
RKill ukonci vsechny ne-systemove procesy - tedy i procesy, pod kterymi bezi havet
Na plose vznikne log Rkill.txt ten mi sem vlozte
Ted nerestartujte PC - prisli byste o ucinek RKillu

PROSIM CTETE DUKLADNE NAVOD - TATO UTILITA MA VELKOU SCHOPNOST MAZAT A JE NUTNE JI APLIKOVAT JEN NA DOPORUCENI, JINAK VAM MUZE JIT SYSTEM DO KYTEK

Stahnete a ulozte na plochu Combofix http://download.bleepingcomputer.com/sUBs/ComboFix.exe

Vypnete vsechny rezidentni bezpecnostní programy - firewally, antiviry, antispywary apod.
Pokud mate Win XP spustte pod uctem Spravce\Administratora
Pokud mate Win Vista ci Win 7, kliknete na Combofix pravym a dejte Run As Administrator ci Spustit jako spravce
Ihned po startu se zobrazi stranka s licencnim ujednanim, pokracujte kliknutim na Ano
Pokud Vam CF nabidne instalaci Konzoly pro zotaveni, tak souhlaste
Dale postupujte dle pokynu, behem scanu nechte PC naprosto v klidu - nespoustejte zadne aplikace a neklikejte do zobrazujiciho se okna
Scan by mel trvat cca 10 min, ale pokud bude PC hodne zaneseno, muze se cas prodlouzit
Po dokonceni skenu a pripadnem restartu CF zobrazi log, pripadne jej najdete zde C:\ComboFix.txt, jeho obsah sem vlozte
Detailni postup vc. obrazku mate zde http://www.bleepingcomputer.com/combofi ... t-combofix

stef.mikulics · #7 Příspěvek od **stef.mikulics** » 28 Led 2013 18:22

Rkill:
Rkill 2.4.6 by Lawrence Abrams (Grinler)
http://www.bleepingcomputer.com/
Copyright 2008-2013 BleepingComputer.com
More Information about Rkill can be found at this link:
http://www.bleepingcomputer.com/forums/topic308364.html

Program started at: 01/28/2013 06:08:55 PM in x86 mode.
Windows Version: Microsoft Windows XP Service Pack 3

Checking for Windows services to stop:

* No malware services found to stop.

Checking for processes to terminate:

* No malware processes found to kill.

Checking Registry for malware related settings:

* No issues found in the Registry.

Resetting .EXE, .COM, & .BAT associations in the Windows Registry.

Performing miscellaneous checks:

* No issues found.

Checking Windows Service Integrity:

* No issues found.

Searching for Missing Digital Signatures:

* No issues found.

Checking HOSTS File:

* HOSTS file entries found:

127.0.0.1 localhost

Program finished at: 01/28/2013 06:09:42 PM
Execution time: 0 hours(s), 0 minute(s), and 47 seconds(s)

ComboFix:
ComboFix 13-01-28.02 - Štefan 28.01.2013 18:13:50.1.2 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.2039.1492 [GMT 1:00]
Spuštěný z: c:\documents and settings\Őtefan\Plocha\ComboFix.exe
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\regopt.log
c:\windows\system32\TZLog.log
c:\windows\system32\URTTemp
c:\windows\system32\URTTemp\regtlib.exe
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-12-28 do 2013-01-28 )))))))))))))))))))))))))))))))
.
.
2013-01-28 15:36 . 2013-01-28 15:36 -------- d-----w- c:\program files\OpenOffice.org 3
2013-01-28 14:59 . 2013-01-28 14:59 -------- d-sh--w- c:\documents and settings\LocalService\IETldCache
2013-01-28 14:40 . 2013-01-28 15:08 -------- d-----w- C:\UsbFix
2013-01-28 14:34 . 2013-01-28 14:37 -------- d-----w- C:\rsit
2013-01-28 14:34 . 2013-01-28 14:36 -------- d-----w- c:\program files\trend micro
2013-01-27 21:18 . 2012-11-01 12:12 521728 -c----w- c:\windows\system32\dllcache\jsdbgui.dll
2013-01-27 21:17 . 2011-08-16 10:45 6144 -c----w- c:\windows\system32\dllcache\iecompat.dll
2013-01-27 21:17 . 2012-11-01 12:12 743424 -c----w- c:\windows\system32\dllcache\iedvtool.dll
2013-01-27 21:17 . 2012-11-01 12:12 247808 -c----w- c:\windows\system32\dllcache\ieproxy.dll
2013-01-27 21:17 . 2012-11-01 12:12 12800 -c----w- c:\windows\system32\dllcache\xpshims.dll
2013-01-27 21:16 . 2013-01-27 21:17 -------- dc-h--w- c:\windows\ie8
2013-01-27 20:37 . 2010-02-12 10:03 293376 ------w- c:\windows\system32\browserchoice.exe
2013-01-27 20:30 . 2012-01-11 19:07 3072 -c----w- c:\windows\system32\dllcache\iacenc.dll
2013-01-27 20:30 . 2012-01-11 19:07 3072 ------w- c:\windows\system32\iacenc.dll
2013-01-27 17:28 . 2013-01-27 17:29 -------- d-----w- c:\program files\Google
2013-01-27 15:11 . 2013-01-28 14:59 -------- d-----w- c:\documents and settings\Štefan
2013-01-27 15:11 . 2009-05-21 03:40 -------- d-----w- c:\windows\system32\config\systemprofile\Local Settings\Data aplikací\SRS Labs
2013-01-27 15:11 . 2009-05-21 02:53 -------- d-----w- c:\windows\system32\config\systemprofile\Local Settings\Data aplikací\Microsoft Help
2013-01-27 15:11 . 2009-05-21 02:41 -------- d-----w- c:\windows\system32\config\systemprofile\Local Settings\Data aplikací\Adobe
2013-01-27 15:11 . 2009-05-21 02:28 -------- d-----w- c:\windows\system32\config\systemprofile\Local Settings\Data aplikací\ApplicationHistory
2013-01-27 15:11 . 2009-05-21 02:09 -------- d-----w- c:\windows\system32\config\systemprofile\Data aplikací\InstallShield
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-12-16 12:23 . 2009-05-21 03:36 290560 ----a-w- c:\windows\system32\atmfd.dll
2012-11-13 11:55 . 2009-05-21 03:36 1866368 ----a-w- c:\windows\system32\win32k.sys
2012-11-06 02:00 . 2009-05-21 03:36 1371648 ----a-w- c:\windows\system32\msxml6.dll
2012-11-02 02:03 . 2009-05-21 03:36 375296 ----a-w- c:\windows\system32\dpnet.dll
2012-11-01 12:12 . 2009-05-21 03:36 916992 ----a-w- c:\windows\system32\wininet.dll
2012-11-01 12:12 . 2009-05-21 03:36 43520 ------w- c:\windows\system32\licmgr10.dll
2012-11-01 12:12 . 2009-05-21 03:36 1469440 ------w- c:\windows\system32\inetcpl.cpl
2012-11-01 00:35 . 2009-05-21 03:36 385024 ------w- c:\windows\system32\html.iec
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2007-12-19 135168]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2007-12-19 159744]
"Persistence"="c:\windows\system32\igfxpers.exe" [2007-12-19 131072]
"RTHDCPL"="RTHDCPL.EXE" [2009-04-27 17881088]
"AsusACPIServer"="c:\program files\EeePC\ACPI\AsAcpiSvr.exe" [2009-04-16 630784]
"AsusEPCMonitor"="c:\program files\EeePC\ACPI\AsEPCMon.exe" [2009-03-13 98304]
"AsusTray"="c:\program files\EeePC\ACPI\AsTray.exe" [2009-04-16 118784]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2009-03-06 1434920]
"SynAsusAcpi"="c:\program files\Synaptics\SynTP\SynAsusAcpi.exe" [2009-03-06 79144]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\
SuperHybridEngine.lnk - c:\program files\ASUS\EeePC\Super Hybrid Engine\SuperHybridEngine.exe [2009-5-21 376832]
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2008-01-11 20:16 39792 ----a-w- c:\program files\Adobe\Reader 8.0\Reader\reader_sl.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Eee Docking]
2009-05-08 08:42 395776 ----a-w- c:\program files\ASUS\Eee Docking\Eee Docking.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
2009-02-06 16:53 3885408 ----a-w- c:\program files\Windows Live\Messenger\msnmsgr.exe
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
.
R3 L1c;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller;c:\windows\system32\drivers\l1c51x86.sys [28.4.2009 2:59 38912]
S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [21.5.2009 3:07 1684736]
S3 RT80x86;Ralink 802.11n Wireless Driver;c:\windows\system32\drivers\rt2860.sys [21.5.2009 3:09 966912]
S3 SRS_PremiumSound_Service;SRS Labs Premium Sound;c:\windows\system32\drivers\SRS_PremiumSound_i386.sys [21.5.2009 4:40 232872]
S3 uvclf;uvclf;c:\windows\system32\drivers\uvclf.sys [28.4.2009 6:47 39040]
.
--- Ostatní služby/ovladače v paměti ---
.
*Deregistered* - TrueSight
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-01-27 17:29 1607120 ----a-w- c:\program files\Google\Chrome\Application\24.0.1312.56\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2013-01-28 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-01-27 17:28]
.
2013-01-28 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-01-27 17:28]
.
.
------- Doplňkový sken -------
.
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: Odeslat do zařízení &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Odeslat do zařízení Bluetooth - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
TCP: DhcpNameServer = 192.168.0.1
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
MSConfigStartUp-SRS Premium Sound - c:\program files\SRS Labs\SRS Premium Sound\SRSPremiumSoundBig_Small.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2013-01-28 18:18
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
Celkový čas: 2013-01-28 18:20:11
ComboFix-quarantined-files.txt 2013-01-28 17:20
.
Před spuštěním: Volných bajtů: 34 322 104 320
Po spuštění: Volných bajtů: 34 298 810 368
.
WindowsXP-KB310994-SP2-Home-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect
.
- - End Of File - - AA5A9BD102389C175A05DFE2F95272E8

stef.mikulics · #8 Příspěvek od **stef.mikulics** » 29 Led 2013 08:30

Uz je to ok?:)

#9 Příspěvek od **vyosek** » 29 Led 2013 08:32

Dejte mi minutku, uz pisu dalsi postup

#10 Příspěvek od **vyosek** » 29 Led 2013 08:36

Pokud nemate, tak presunte Combofix primo na disk c:\

Spustte poznamkovy blok (Start-spustit-notepad)
Zkopirujte skript nize

Kód: Vybrat vše

KillAll::

Registry::
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=-
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]

File::
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

ClearJavaCache::

Reboot::

Ulozte vytvoreny TXT jako CFScript.txt tez primo na c:\
Pretahnete vytvoreny CFScript.txt nad Combofix a pustte (viz obrazek nize)
Po aplikaci skriptu (a pripadnem restartu) na Vas vypadne log, jeho obsah sem vlozte

Pokud vyskoci hlaska "Pokus pouzit neplatnou operaci na klic registru, ktery je oznacen pro odstraneni", tak jen restartujte PC - registr se da do kupy - jedna se o vnitrni chybu, kterou zpusobuje CF a autor ji zatim neumi bohuzel opravit

Muze se stat, ze po aplikaci skriptu nenabehnou windows, v tomto pripade restartuje PC a mackejte F8 a zvolte Posledni znamou konfiguraci

stef.mikulics · #11 Příspěvek od **stef.mikulics** » 29 Led 2013 17:27

Omlouvam se, ze to posilam tak pozde, nemel jsem cas.

ComboFix 13-01-28.02 - Štefan 29.01.2013 17:17:44.2.2 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1250.420.1029.18.2039.1579 [GMT 1:00]
Spuštěný z: C:\ComboFix.exe
Použité ovládací přepínače :: C:\CFScript.txt
.
FILE ::
"c:\windows\Tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineUA.job"
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-12-28 do 2013-01-29 )))))))))))))))))))))))))))))))
.
.
2013-01-29 16:12 . 2013-01-29 16:12 -------- d-----w- c:\program files\Common Files\Skype
2013-01-28 15:36 . 2013-01-28 15:36 -------- d-----w- c:\program files\OpenOffice.org 3
2013-01-28 14:59 . 2013-01-28 14:59 -------- d-sh--w- c:\documents and settings\LocalService\IETldCache
2013-01-28 14:40 . 2013-01-28 15:08 -------- d-----w- C:\UsbFix
2013-01-28 14:34 . 2013-01-28 14:37 -------- d-----w- C:\rsit
2013-01-28 14:34 . 2013-01-28 14:36 -------- d-----w- c:\program files\trend micro
2013-01-27 21:18 . 2012-11-01 12:12 521728 -c----w- c:\windows\system32\dllcache\jsdbgui.dll
2013-01-27 21:17 . 2011-08-16 10:45 6144 -c----w- c:\windows\system32\dllcache\iecompat.dll
2013-01-27 21:17 . 2012-11-01 12:12 743424 -c----w- c:\windows\system32\dllcache\iedvtool.dll
2013-01-27 21:17 . 2012-11-01 12:12 247808 -c----w- c:\windows\system32\dllcache\ieproxy.dll
2013-01-27 21:17 . 2012-11-01 12:12 12800 -c----w- c:\windows\system32\dllcache\xpshims.dll
2013-01-27 21:16 . 2013-01-27 21:17 -------- dc-h--w- c:\windows\ie8
2013-01-27 20:37 . 2010-02-12 10:03 293376 ------w- c:\windows\system32\browserchoice.exe
2013-01-27 20:30 . 2012-01-11 19:07 3072 -c----w- c:\windows\system32\dllcache\iacenc.dll
2013-01-27 20:30 . 2012-01-11 19:07 3072 ------w- c:\windows\system32\iacenc.dll
2013-01-27 17:28 . 2013-01-27 17:29 -------- d-----w- c:\program files\Google
2013-01-27 15:11 . 2013-01-28 14:59 -------- d-----w- c:\documents and settings\Štefan
2013-01-27 15:11 . 2009-05-21 03:40 -------- d-----w- c:\windows\system32\config\systemprofile\Local Settings\Data aplikací\SRS Labs
2013-01-27 15:11 . 2009-05-21 02:53 -------- d-----w- c:\windows\system32\config\systemprofile\Local Settings\Data aplikací\Microsoft Help
2013-01-27 15:11 . 2009-05-21 02:41 -------- d-----w- c:\windows\system32\config\systemprofile\Local Settings\Data aplikací\Adobe
2013-01-27 15:11 . 2009-05-21 02:28 -------- d-----w- c:\windows\system32\config\systemprofile\Local Settings\Data aplikací\ApplicationHistory
2013-01-27 15:11 . 2009-05-21 02:09 -------- d-----w- c:\windows\system32\config\systemprofile\Data aplikací\InstallShield
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-12-16 12:23 . 2009-05-21 03:36 290560 ----a-w- c:\windows\system32\atmfd.dll
2012-11-13 11:55 . 2009-05-21 03:36 1866368 ----a-w- c:\windows\system32\win32k.sys
2012-11-06 02:00 . 2009-05-21 03:36 1371648 ----a-w- c:\windows\system32\msxml6.dll
2012-11-02 02:03 . 2009-05-21 03:36 375296 ----a-w- c:\windows\system32\dpnet.dll
2012-11-01 12:12 . 2009-05-21 03:36 916992 ----a-w- c:\windows\system32\wininet.dll
2012-11-01 12:12 . 2009-05-21 03:36 43520 ------w- c:\windows\system32\licmgr10.dll
2012-11-01 12:12 . 2009-05-21 03:36 1469440 ------w- c:\windows\system32\inetcpl.cpl
2012-11-01 00:35 . 2009-05-21 03:36 385024 ------w- c:\windows\system32\html.iec
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2013-01-08 18705664]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2007-12-19 135168]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2007-12-19 159744]
"Persistence"="c:\windows\system32\igfxpers.exe" [2007-12-19 131072]
"RTHDCPL"="RTHDCPL.EXE" [2009-04-27 17881088]
"AsusACPIServer"="c:\program files\EeePC\ACPI\AsAcpiSvr.exe" [2009-04-16 630784]
"AsusEPCMonitor"="c:\program files\EeePC\ACPI\AsEPCMon.exe" [2009-03-13 98304]
"AsusTray"="c:\program files\EeePC\ACPI\AsTray.exe" [2009-04-16 118784]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2009-03-06 1434920]
"SynAsusAcpi"="c:\program files\Synaptics\SynTP\SynAsusAcpi.exe" [2009-03-06 79144]
.
c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\
SuperHybridEngine.lnk - c:\program files\ASUS\EeePC\Super Hybrid Engine\SuperHybridEngine.exe [2009-5-21 376832]
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Eee Docking]
2009-05-08 08:42 395776 ----a-w- c:\program files\ASUS\Eee Docking\Eee Docking.exe
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
.
R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [8.1.2013 12:55 161536]
R3 L1c;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller;c:\windows\system32\drivers\l1c51x86.sys [28.4.2009 2:59 38912]
S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [21.5.2009 3:07 1684736]
S3 RT80x86;Ralink 802.11n Wireless Driver;c:\windows\system32\drivers\rt2860.sys [21.5.2009 3:09 966912]
S3 SRS_PremiumSound_Service;SRS Labs Premium Sound;c:\windows\system32\drivers\SRS_PremiumSound_i386.sys [21.5.2009 4:40 232872]
S3 uvclf;uvclf;c:\windows\system32\drivers\uvclf.sys [28.4.2009 6:47 39040]
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-01-27 17:29 1607120 ----a-w- c:\program files\Google\Chrome\Application\24.0.1312.56\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2013-01-29 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-01-27 17:28]
.
2013-01-29 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2013-01-27 17:28]
.
.
------- Doplňkový sken -------
.
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: Odeslat do zařízení &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Odeslat do zařízení Bluetooth - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
TCP: DhcpNameServer = 192.168.0.1
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2013-01-29 17:24
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'explorer.exe'(596)
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
c:\windows\system32\wscntfy.exe
c:\windows\RTHDCPL.EXE
c:\windows\system32\igfxsrvc.exe
c:\windows\system32\igfxext.exe
.
**************************************************************************
.
Celkový čas: 2013-01-29 17:26:38 - počítač byl restartován
ComboFix-quarantined-files.txt 2013-01-29 16:26
ComboFix2.txt 2013-01-28 17:20
.
Před spuštěním: Volných bajtů: 32 845 549 568
Po spuštění: Volných bajtů: 32 941 346 816
.
- - End Of File - - C1E2AA5BF443460F21B49785D9DAA6FE

#12 Příspěvek od **vyosek** » 29 Led 2013 18:11

Fajn, jak se chova PC

stef.mikulics · #13 Příspěvek od **stef.mikulics** » 29 Led 2013 18:19

všechno je super

tak moc děkuji

#14 Příspěvek od **vyosek** » 29 Led 2013 18:20

Tak jeste uklidime

Odinstalujte Combofix

Prejmenujte ComboFix na Uninstall
Spustte jej
Tohle smaze Combofix a jeho slozky

T-Cleaner http://vyosek.ic.cz/pro_usery/T-Cleaner.exe

Stahnete a spustte
Pro potvrzeni volby mackejte A, Enter
Po pouziti utilitu smazte
Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

OTC http://oldtimer.geekstogo.com/OTC.exe

Stahnete a spustte
Kliknete na CleanUp a potvrdte YES
Program uklidi a restartuje PC

TFC http://oldtimer.geekstogo.com/TFC.exe

Stahnete a spustte
Kliknete na Start a potvrdte OK
Program uklidi a restartuje pc
Po pouziti utilitu smazte

Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel čistič

Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

dejte Hledej problémy
nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za tyden

A pokud nejsou problemy ci dotazy, je to z me strany vse

stef.mikulics · #15 Příspěvek od **stef.mikulics** » 29 Led 2013 19:53

hotovo. tak jeste jen dekuji

VIRY.CZ

Asi zavirovaný HDD

Asi zavirovaný HDD

Re: Asi zavirovaný HDD

Re: Asi zavirovaný HDD

Re: Asi zavirovaný HDD

Re: Asi zavirovaný HDD

Re: Asi zavirovaný HDD

Re: Asi zavirovaný HDD

Re: Asi zavirovaný HDD

Re: Asi zavirovaný HDD

Re: Asi zavirovaný HDD

Re: Asi zavirovaný HDD

Re: Asi zavirovaný HDD

Re: Asi zavirovaný HDD

Re: Asi zavirovaný HDD

Re: Asi zavirovaný HDD