kryptik ZJ, ZY - prosim o pomoc

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz


Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Zpráva
Autor
mila123
Návštěvník
Návštěvník
Příspěvky: 10
Registrován: 23 Črc 2009 15:53

Re: kryptik ZJ, ZY - prosim o pomoc

#16 Příspěvek od mila123 »

log z combofixu je nahore a log z Rsitu tady/pocitac pracuje bez problemu, NOD nic nehlasi
(opet dik :)

Logfile of random's system information tool 1.06 (written by random/random)
Run by Antonovičová at 2009-08-06 18:46:46
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 45 GB (59%) free of 76 GB
Total RAM: 959 MB (48% free)


======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Podpora odkazu pro Adobe PDF Reader - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
Skype add-on (mastermind) - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL [2006-12-18 726568]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll [2008-01-12 370296]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2005-05-31 853672]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
SSVHelper Class - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll [2007-09-25 501136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-08-03 259696]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.15642\swg.dll [2009-08-06 669168]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C84D72FE-E17D-4195-BB24-76C02E2E7C4E}]
Google Dictionary Compression sdch - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll [2009-08-03 470512]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4fe6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2008-06-12 958712]
{BFC32E1D-EE75-4A48-BC60-104E11EE2431} - WebTranslator - C:\PROGRA~1\WEBIE.DLL []
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll [2009-08-03 259696]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"nod32kui"=C:\Program Files\Eset\nod32kui.exe [2007-09-21 917504]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"SiS Tray"=C:\WINDOWS\system32\sistray.EXE [2003-10-30 667648]
"SiSUSBRG"=C:\WINDOWS\SiSUSBrg.exe [2002-07-12 106496]
"HPDJ Taskbar Utility"=C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe [2002-03-28 188416]
"SunJavaUpdateSched"=C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe [2007-09-25 132496]
"TkBellExe"=C:\Program Files\Common Files\Real\Update_OB\realsched.exe [2008-01-12 185896]
"WinampAgent"=C:\Program Files\Winamp\winampa.exe [2007-02-13 35328]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-01-11 39792]
"Samsung PanelMgr"=C:\WINDOWS\Samsung\PanelMgr\SSMMgr.exe [2008-03-03 536576]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2007-12-11 286720]
"Nikon Transfer Monitor"=C:\Program Files\Common Files\Nikon\Monitor\NkMonitor.exe [2008-09-30 485208]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2009-08-03 39408]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SiS Windows KeyHook]
C:\WINDOWS\system32\keyhook.exe [2003-10-30 249856]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
NkvMon.exe.lnk - C:\Program Files\Nikon\NkView6\NkvMon.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\totalcmd\TOTALCMD.EXE"="C:\Program Files\totalcmd\TOTALCMD.EXE:*:Disabled:Total Commander 32 bit international version, file manager replacement for Windows"
"C:\Program Files\ICQ6\ICQ.exe"="C:\Program Files\ICQ6\ICQ.exe:*:Enabled:ICQ6"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox"
"C:\Program Files\ASUS\WL-520GU Wireless Router Utilities\Discovery.exe"="C:\Program Files\ASUS\WL-520GU Wireless Router Utilities\Discovery.exe:*:Enabled:ASUS Device Discovery Application"
"C:\Program Files\ASUS\Printer Utilities\UsbService.exe"="C:\Program Files\ASUS\Printer Utilities\UsbService.exe:*:Enabled:ASUS Virtual USB Service"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

======List of files/folders created in the last 1 months======

2009-08-04 15:05:16 ----SHD---- C:\RECYCLER
2009-08-04 14:46:45 ----D---- C:\WINDOWS\temp
2009-08-04 14:46:43 ----A---- C:\ComboFix.txt
2009-08-03 20:55:47 ----D---- C:\Documents and Settings\All Users\Data aplikací\NOS
2009-08-03 20:55:46 ----D---- C:\Program Files\NOS
2009-08-02 16:25:30 ----D---- C:\Program Files\Common Files\muvee Technologies
2009-08-02 16:25:21 ----D---- C:\Documents and Settings\All Users\Data aplikací\Nikon
2009-08-02 16:24:45 ----D---- C:\Documents and Settings\All Users\Data aplikací\Ultima_T15
2009-08-02 16:24:45 ----D---- C:\Documents and Settings\All Users\Data aplikací\EnterNHelp
2009-08-02 16:24:45 ----D---- C:\Documents and Settings\All Users\Data aplikací\Distortion
2009-08-02 16:22:21 ----D---- C:\Program Files\QuickTime
2009-08-02 16:22:17 ----D---- C:\Documents and Settings\All Users\Data aplikací\Apple Computer
2009-08-02 16:15:19 ----A---- C:\WINDOWS\system32\ptpusb.dll
2009-08-02 16:15:17 ----A---- C:\WINDOWS\system32\ptpusd.dll
2009-08-02 16:10:32 ----A---- C:\WINDOWS\system32\udaprop.dll
2009-08-02 16:10:31 ----A---- C:\WINDOWS\system32\cmuda.dll
2009-08-02 16:10:30 ----A---- C:\WINDOWS\system32\cmirmdrv.exe
2009-08-02 16:10:30 ----A---- C:\WINDOWS\system32\cmirmdrv.dll
2009-08-02 16:10:29 ----A---- C:\WINDOWS\system32\Audio3D.dll
2009-08-02 16:10:27 ----D---- C:\Program Files\C-Media 3D Audio
2009-08-02 16:10:27 ----A---- C:\WINDOWS\CmiRmRedundDir.exe
2009-08-02 13:02:46 ----D---- C:\Program Files\Lavalys
2009-08-01 22:58:41 ----D---- C:\Documents and Settings\Antonovičová\Data aplikací\Malwarebytes
2009-08-01 22:58:32 ----D---- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2009-08-01 22:58:31 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-07-23 23:27:36 ----A---- C:\Boot.bak
2009-07-23 23:27:23 ----RASHD---- C:\cmdcons
2009-07-23 23:23:29 ----A---- C:\WINDOWS\NIRCMD.exe
2009-07-23 23:23:24 ----A---- C:\WINDOWS\PEV.exe
2009-07-23 23:23:23 ----A---- C:\WINDOWS\zip.exe
2009-07-23 23:23:23 ----A---- C:\WINDOWS\SWREG.exe
2009-07-23 23:23:22 ----A---- C:\WINDOWS\sed.exe
2009-07-23 23:23:22 ----A---- C:\WINDOWS\grep.exe
2009-07-23 23:23:21 ----A---- C:\WINDOWS\SWSC.exe
2009-07-23 23:23:20 ----A---- C:\WINDOWS\SWXCACLS.exe
2009-07-23 23:16:53 ----D---- C:\WINDOWS\ERDNT
2009-07-23 22:56:26 ----D---- C:\Qoobox
2009-07-23 16:49:53 ----D---- C:\Program Files\trend micro
2009-07-23 16:49:51 ----D---- C:\rsit
2009-07-15 21:37:05 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
2009-07-15 21:36:49 ----HDC---- C:\WINDOWS\$NtUninstallKB973346$
2009-07-15 21:36:34 ----HDC---- C:\WINDOWS\$NtUninstallKB971633$
2009-07-15 21:36:23 ----HDC---- C:\WINDOWS\$NtUninstallKB954459$
2009-07-15 21:34:00 ----HDC---- C:\WINDOWS\$NtUninstallKB961371$
2009-07-15 21:23:14 ----A---- C:\WINDOWS\system32\wpa.bak
2009-07-15 21:23:06 ----A---- C:\WINDOWS\system32\pidgen.dll.wga
2009-07-15 21:23:05 ----A---- C:\WINDOWS\system32\dpcdll.dll.wga
2009-07-15 03:07:19 ----D---- C:\WINDOWS\Prefetch
2009-07-14 20:25:30 ----HDC---- C:\WINDOWS\$NtUninstallKB970238$
2009-07-14 20:25:09 ----HDC---- C:\WINDOWS\$NtUninstallKB968537$
2009-07-14 20:24:52 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2009-07-14 20:24:38 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2009-07-14 20:24:24 ----HDC---- C:\WINDOWS\$NtUninstallKB961373$
2009-07-14 20:24:12 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2009-07-14 20:23:58 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$
2009-07-14 20:23:45 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2009-07-14 20:23:31 ----HDC---- C:\WINDOWS\$NtUninstallKB958687$
2009-07-14 20:23:16 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2009-07-14 20:23:02 ----HDC---- C:\WINDOWS\$NtUninstallKB957097$
2009-07-14 20:22:48 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2009-07-14 20:22:34 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2009-07-14 20:22:08 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2009-07-14 20:21:50 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2009-07-14 20:21:37 ----HDC---- C:\WINDOWS\$NtUninstallKB954600$
2009-07-14 20:21:26 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2009-07-14 20:21:13 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2009-07-14 20:20:58 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2009-07-14 20:20:41 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2009-07-14 20:20:28 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2009-07-14 20:20:16 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
2009-07-14 20:20:04 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2009-07-14 20:19:51 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2009-07-14 20:19:37 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2009-07-14 20:19:26 ----HDC---- C:\WINDOWS\$NtUninstallKB938464-v2$
2009-07-14 20:19:08 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2009-07-14 20:11:35 ----D---- C:\WINDOWS\system32\cs
2009-07-14 20:11:35 ----D---- C:\WINDOWS\l2schemas
2009-07-14 20:11:34 ----D---- C:\WINDOWS\system32\bits
2009-07-14 20:05:24 ----D---- C:\WINDOWS\ServicePackFiles
2009-07-14 20:00:10 ----D---- C:\WINDOWS\network diagnostic
2009-07-14 19:50:48 ----HDC---- C:\WINDOWS\$NtServicePackUninstall$
2009-07-13 15:34:36 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2_0$
2009-07-13 15:34:23 ----HDC---- C:\WINDOWS\$NtUninstallKB952954_0$
2009-07-13 15:34:06 ----HDC---- C:\WINDOWS\$NtUninstallKB959426_0$
2009-07-13 15:33:53 ----HDC---- C:\WINDOWS\$NtUninstallKB946648_0$
2009-07-13 15:33:33 ----HDC---- C:\WINDOWS\$NtUninstallKB961373_0$
2009-07-13 15:33:12 ----HDC---- C:\WINDOWS\$NtUninstallKB956803_0$
2009-07-13 15:32:45 ----HDC---- C:\WINDOWS\$NtUninstallKB955839$
2009-07-13 15:31:25 ----HDC---- C:\WINDOWS\$NtUninstallKB950974_0$
2009-07-13 15:30:43 ----HDC---- C:\WINDOWS\$NtUninstallKB960225_0$
2009-07-13 15:29:31 ----HDC---- C:\WINDOWS\$NtUninstallKB956572_0$
2009-07-13 15:28:49 ----HDC---- C:\WINDOWS\$NtUninstallKB961501_0$
2009-07-13 15:28:35 ----HDC---- C:\WINDOWS\$NtUninstallKB938464-v2_0$
2009-07-13 15:28:02 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
2009-07-13 15:26:11 ----HDC---- C:\WINDOWS\$NtUninstallKB952004_0$
2009-07-13 15:25:57 ----HDC---- C:\WINDOWS\$NtUninstallKB969898$
2009-07-13 15:25:43 ----HDC---- C:\WINDOWS\$NtUninstallKB941569$
2009-07-13 15:24:11 ----HDC---- C:\WINDOWS\$NtUninstallKB950762_0$
2009-07-13 15:23:36 ----HDC---- C:\WINDOWS\$NtUninstallKB957097_0$
2009-07-13 15:23:22 ----HDC---- C:\WINDOWS\$NtUninstallKB923689$
2009-07-13 15:21:30 ----HDC---- C:\WINDOWS\$NtUninstallKB958687_0$
2009-07-13 15:21:03 ----HDC---- C:\WINDOWS\$NtUninstallKB952287_0$
2009-07-13 15:20:36 ----HDC---- C:\WINDOWS\$NtUninstallKB967715_0$
2009-07-13 15:20:16 ----HDC---- C:\WINDOWS\$NtUninstallKB950760$
2009-07-13 15:20:02 ----HDC---- C:\WINDOWS\$NtUninstallKB951066_0$
2009-07-13 15:18:40 ----D---- C:\WINDOWS\ie8updates
2009-07-13 15:13:45 ----HDC---- C:\WINDOWS\ie8
2009-07-13 15:07:47 ----HDC---- C:\WINDOWS\$NtUninstallKB951748_0$
2009-07-13 15:03:38 ----A---- C:\WINDOWS\system32\MRT.exe
2009-07-13 15:03:01 ----HDC---- C:\WINDOWS\$NtUninstallKB970238_0$
2009-07-13 15:00:58 ----D---- C:\WINDOWS\ie7updates
2009-07-13 15:00:15 ----HDC---- C:\WINDOWS\$NtUninstallKB960803_0$
2009-07-13 14:59:56 ----HDC---- C:\WINDOWS\$NtUninstallKB968537_0$
2009-07-13 14:59:19 ----HDC---- C:\WINDOWS\$NtUninstallKB954600_0$
2009-07-13 14:58:56 ----HDC---- C:\WINDOWS\$NtUninstallKB958644_0$
2009-07-13 14:58:30 ----HDC---- C:\WINDOWS\$NtUninstallKB955069_0$
2009-07-13 14:58:15 ----HDC---- C:\WINDOWS\$NtUninstallKB956802_0$
2009-07-13 14:57:59 ----D---- C:\Program Files\MSXML 4.0
2009-07-13 14:53:03 ----HDC---- C:\WINDOWS\$NtUninstallKB923561_0$
2009-07-13 12:03:18 ----D---- C:\WINDOWS\system32\PreInstall
2009-07-13 12:03:15 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
2009-07-13 12:01:33 ----HDC---- C:\WINDOWS\$MSI31Uninstall_KB893803v2$
2009-07-13 11:54:46 ----D---- C:\WINDOWS\system32\SoftwareDistribution
2009-07-12 19:56:58 ----D---- C:\WINDOWS\system32\appmgmt
2009-07-12 19:27:44 ----D---- C:\WINDOWS\Minidump
2009-07-11 22:46:53 ----A---- C:\WINDOWS\IE4 Error Log.txt
2009-07-08 22:09:31 ----A---- C:\WINDOWS\CONTEXT.INI

======List of files/folders modified in the last 1 months======

2009-08-06 17:21:34 ----D---- C:\Program Files\Mozilla Firefox
2009-08-06 09:10:14 ----A---- C:\WINDOWS\SchedLgU.Txt
2009-08-06 08:57:28 ----D---- C:\Documents and Settings
2009-08-04 14:46:46 ----D---- C:\WINDOWS\system32\drivers
2009-08-04 14:46:46 ----D---- C:\WINDOWS\system32
2009-08-04 14:46:45 ----D---- C:\WINDOWS
2009-08-04 14:44:31 ----D---- C:\WINDOWS\system32\CatRoot2
2009-08-04 14:41:23 ----A---- C:\WINDOWS\system.ini
2009-08-04 14:39:22 ----D---- C:\WINDOWS\system32\config
2009-08-04 14:37:52 ----D---- C:\WINDOWS\AppPatch
2009-08-04 14:37:43 ----D---- C:\Program Files\Common Files
2009-08-04 14:14:42 ----D---- C:\Program Files\ESET
2009-08-04 08:51:02 ----SD---- C:\WINDOWS\Downloaded Program Files
2009-08-03 20:56:25 ----SHD---- C:\WINDOWS\Installer
2009-08-03 20:56:11 ----D---- C:\Program Files\Google
2009-08-03 20:56:11 ----D---- C:\Documents and Settings\All Users\Data aplikací\Google
2009-08-03 20:55:46 ----RD---- C:\Program Files
2009-08-03 14:43:32 ----D---- C:\LigaVozicKlient
2009-08-02 16:44:13 ----D---- C:\Documents and Settings\Antonovičová\Data aplikací\Nikon
2009-08-02 16:44:11 ----D---- C:\Program Files\Common Files\Nikon
2009-08-02 16:26:22 ----SD---- C:\Documents and Settings\Antonovičová\Data aplikací\Microsoft
2009-08-02 16:25:41 ----D---- C:\WINDOWS\WinSxS
2009-08-02 16:25:18 ----D---- C:\Program Files\Nikon
2009-08-02 16:24:39 ----A---- C:\WINDOWS\system32\ATL71.DLL
2009-08-02 16:24:29 ----D---- C:\Program Files\Common Files\InstallShield
2009-08-02 16:23:55 ----D---- C:\Program Files\Common Files\Microsoft Shared
2009-08-02 16:15:09 ----HD---- C:\WINDOWS\inf
2009-08-02 16:14:21 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2009-08-02 16:14:14 ----D---- C:\WINDOWS\system32\inetsrv
2009-08-02 16:11:06 ----RSHDC---- C:\WINDOWS\system32\dllcache
2009-08-02 16:11:01 ----D---- C:\WINDOWS\system
2009-08-02 16:10:33 ----A---- C:\WINDOWS\CMISETUP.INI
2009-08-02 16:10:33 ----A---- C:\WINDOWS\CMCDPLAY.INI
2009-08-02 13:25:23 ----HD---- C:\Program Files\InstallShield Installation Information
2009-07-29 14:34:48 ----A---- C:\WINDOWS\imsins.BAK
2009-07-29 14:34:35 ----D---- C:\Program Files\Internet Explorer
2009-07-29 14:34:12 ----HD---- C:\WINDOWS\$hf_mig$
2009-07-23 23:27:37 ----RASH---- C:\boot.ini
2009-07-22 16:16:59 ----SHD---- C:\System Volume Information
2009-07-22 16:16:59 ----D---- C:\WINDOWS\system32\Restore
2009-07-19 22:24:47 ----A---- C:\WINDOWS\WDICT32.INI
2009-07-19 18:46:58 ----A---- C:\WINDOWS\system32\ieframe.dll
2009-07-19 15:16:59 ----A---- C:\WINDOWS\system32\mshtml.dll
2009-07-15 22:33:02 ----D---- C:\Program Files\TC PowerPack
2009-07-15 22:31:07 ----D---- C:\WINDOWS\Help
2009-07-15 21:56:24 ----D---- C:\Documents and Settings\Antonovičová\Data aplikací\Skype
2009-07-15 21:23:21 ----A---- C:\WINDOWS\setuplog.txt
2009-07-15 08:21:35 ----A---- C:\WINDOWS\OEWABLog.txt
2009-07-15 03:06:53 ----D---- C:\WINDOWS\system32\Setup
2009-07-15 03:06:53 ----D---- C:\Program Files\Messenger
2009-07-15 03:06:52 ----D---- C:\WINDOWS\system32\wbem
2009-07-15 03:06:52 ----D---- C:\Program Files\Outlook Express
2009-07-15 03:06:52 ----D---- C:\Program Files\Common Files\System
2009-07-15 03:06:51 ----RSD---- C:\WINDOWS\Fonts
2009-07-15 03:06:11 ----D---- C:\WINDOWS\security
2009-07-14 20:25:33 ----D---- C:\WINDOWS\system32\CatRoot
2009-07-14 20:12:29 ----D---- C:\Program Files\Windows Media Player
2009-07-14 20:12:04 ----D---- C:\WINDOWS\ehome
2009-07-14 20:11:58 ----D---- C:\WINDOWS\ime
2009-07-14 20:11:37 ----D---- C:\WINDOWS\system32\usmt
2009-07-14 20:11:37 ----D---- C:\WINDOWS\system32\cs-cz
2009-07-14 20:11:34 ----D---- C:\WINDOWS\PeerNet
2009-07-14 20:11:34 ----D---- C:\Program Files\Movie Maker
2009-07-14 20:04:31 ----D---- C:\WINDOWS\system32\npp
2009-07-14 20:04:29 ----D---- C:\WINDOWS\msagent
2009-07-14 20:04:26 ----D---- C:\WINDOWS\srchasst
2009-07-14 20:04:25 ----D---- C:\Program Files\NetMeeting
2009-07-14 20:04:21 ----D---- C:\WINDOWS\system32\Com
2009-07-14 20:04:12 ----D---- C:\Program Files\Windows NT
2009-07-14 20:03:09 ----D---- C:\WINDOWS\system32\oobe
2009-07-14 19:56:01 ----D---- C:\WINDOWS\system32\ReinstallBackups
2009-07-13 19:24:42 ----SD---- C:\WINDOWS\Tasks
2009-07-13 19:21:39 ----D---- C:\WINDOWS\Media
2009-07-13 15:03:48 ----D---- C:\WINDOWS\Debug
2009-07-13 11:55:47 ----D---- C:\WINDOWS\SoftwareDistribution
2009-07-13 10:24:35 ----A---- C:\WINDOWS\NeroDigital.ini
2009-07-12 22:29:42 ----D---- C:\Program Files\Common Files\ACD Systems
2009-07-12 20:30:54 ----D---- C:\Documents and Settings\Antonovičová\Data aplikací\Zoner

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AmdK7;Ovladač procesoru AMD K7; C:\WINDOWS\system32\DRIVERS\amdk7.sys [2008-04-14 41600]
R1 SiSkp;SiSkp; C:\WINDOWS\system32\DRIVERS\srvkp.sys [2003-10-29 11264]
R1 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-25 12032]
R2 AMON;AMON; \??\C:\WINDOWS\system32\drivers\amon.sys []
R2 DgiVecp;DgiVecp; \??\C:\WINDOWS\system32\Drivers\DgiVecp.sys []
R2 irda;Protokol IrDA; C:\WINDOWS\system32\DRIVERS\irda.sys [2008-04-13 88192]
R3 cmuda;C-Media WDM Audio Interface; C:\WINDOWS\system32\drivers\cmuda.sys [2003-10-17 754560]
R3 irsir;Microsoft Serial Infrared Driver; C:\WINDOWS\system32\DRIVERS\irsir.sys [2001-08-17 18688]
R3 ms_mpu401;Microsoft MPU-401 MIDI UART Driver; C:\WINDOWS\system32\drivers\msmpu401.sys [2001-08-18 2944]
R3 Rasirda;WAN Miniport (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]
R3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-03 20992]
R3 SiS315;SiS315; C:\WINDOWS\system32\DRIVERS\sisgrp.sys [2003-10-29 427776]
R3 SISNIC;SiS PCI Fast Ethernet Adapter Driver; C:\WINDOWS\system32\DRIVERS\sisnic.sys [2002-07-10 32256]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2008-04-13 30208]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbohci;Ovladač Miniport otevřeného hostitelského řadiče Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbohci.sys [2008-04-13 17152]
R3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
R3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
R3 vuhub;Virtual Usb Hub; C:\WINDOWS\system32\DRIVERS\vuhub.sys [2007-12-20 66432]
S1 InCDPass;InCDPass; C:\WINDOWS\system32\drivers\InCDPass.sys []
S1 InCDRm;InCD Reader; C:\WINDOWS\system32\drivers\InCDRm.sys []
S3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS []
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
S3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-25 12160]
S3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2004-08-04 1897408]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S4 InCDFs;InCD File System; C:\WINDOWS\system32\drivers\InCDFs.sys []
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2008-06-10 222456]
R2 Irmon;Sledování infračerveného přenosu; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 MDM;Machine Debug Manager; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R2 NOD32krn;NOD32 Kernel Service; C:\Program Files\Eset\nod32krn.exe [2007-09-21 495616]
R2 UsbService;ASUS Virtual MFP Service; C:\Program Files\ASUS\Printer Utilities\UsbService.exe [2008-07-21 217088]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-08-03 182768]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2005-01-28 38912]

-----------------EOF-----------------

Avatar uživatele
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 Říj 2008 08:02

Re: kryptik ZJ, ZY - prosim o pomoc

#17 Příspěvek od motji »

:arrow: Odinstalujte combofix přes
Start >> Spustit zkopírujte do okénka:

ComboFix /u

stiskněte Enter
-To odinstaluje ComboFix a smaže s ním související soubory a složky.


:arrow: Stáhněte T-Cleaner
http://sweb.cz/Marinus/T-Cleaner.exe

-Spusťte,pro potvrzení volby mačkejte klávesu A, Enter
-po použití prográmek vymažte.Pozor,antiviry ho mohou falešně označit za vir

:arrow: Stáhněte Ccleaner,viz můj podpis
-nainstalujte a vyčištěte dočasné soubory, i registry

:arrow: Nemáte firewall,k čemu je užitečný se dozvíte zde http://www.viry.cz/forum/viewtopic.php?f=41&t=20980

:arrow: Jsou nějaké problémy s počítačem?
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

mila123
Návštěvník
Návštěvník
Příspěvky: 10
Registrován: 23 Črc 2009 15:53

Re: kryptik ZJ, ZY - prosim o pomoc

#18 Příspěvek od mila123 »

všechno jsem to provedla, nainstalovala jsem Sunbelt, mám pro jistotu všechno zazálohované a PC funguje jak švýcarské hodinky :-) díky za rady a trpělivost

Avatar uživatele
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 Říj 2008 08:02

Re: kryptik ZJ, ZY - prosim o pomoc

#19 Příspěvek od motji »

Není zač , Kdyby byli problémy, ozvěte se :) :bye: .
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

Avatar uživatele
Kecal7
Návštěvník
Návštěvník
Příspěvky: 36
Registrován: 18 Zář 2011 13:25

Re: kryptik ZJ, ZY - prosim o pomoc

#20 Příspěvek od Kecal7 »

ComboFix 11-09-17.04 - Lukas 18.09.2011 14:06:50.1.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.3327.2578 [GMT 2:00]
Spuštěný z: c:\documents and settings\Lukas\Plocha\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\QIP 2010\Core\MousePhone.dll
c:\windows\system32\d3d9caps.dat
c:\windows\system32\TZLog.log
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-08-18 do 2011-09-18 )))))))))))))))))))))))))))))))
.
.
2011-09-11 20:14 . 2011-09-11 20:14 -------- d-----w- C:\NST
2011-09-11 18:55 . 2011-09-11 18:55 -------- d-----w- C:\Boot
2011-09-09 13:47 . 2011-09-09 13:47 -------- d-----w- c:\windows\system32\config\systemprofile\Local Settings\Data aplikací\Google
2011-09-07 12:39 . 2011-09-10 17:43 -------- d-----w- c:\documents and settings\Lukas\Data aplikací\Tropico 4
2011-09-07 12:38 . 2011-09-07 12:38 -------- d-----w- c:\documents and settings\Lukas\Data aplikací\Kalypso Media
2011-09-07 12:29 . 2011-09-07 12:29 -------- d-----w- c:\program files\Kalypso Media
2011-09-04 19:03 . 2011-09-04 19:03 -------- d-----w- c:\program files\Microsoft Synchronization Services
2011-09-04 19:02 . 2011-09-04 19:02 -------- d-----w- c:\program files\Microsoft.NET
2011-09-04 19:02 . 2011-09-04 19:02 -------- d-----w- c:\program files\Microsoft Sync Framework
2011-09-04 19:02 . 2011-09-04 19:02 -------- d-----w- c:\program files\Microsoft SQL Server Compact Edition
2011-09-04 19:02 . 2011-09-04 19:02 -------- d-----w- c:\documents and settings\All Users\Microsoft
2011-09-04 19:01 . 2011-09-04 19:01 -------- d-----w- c:\program files\Microsoft Visual Studio 8
2011-09-04 19:00 . 2011-09-04 19:00 -------- d-----w- c:\windows\SHELLNEW
2011-09-04 19:00 . 2011-09-04 19:00 -------- d-----w- c:\program files\Microsoft Analysis Services
2011-09-04 19:00 . 2011-09-04 19:00 -------- d-----w- c:\documents and settings\Lukas\Local Settings\Data aplikací\Microsoft Help
2011-09-04 19:00 . 2011-09-04 19:07 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Microsoft Help
2011-09-04 18:59 . 2011-09-04 18:59 -------- d-----r- C:\MSOCache
2011-09-01 14:46 . 2009-05-06 07:53 30813416 ----a-w- c:\windows\system32\t3apstp.exe
2011-09-01 14:45 . 2011-09-01 14:45 -------- d-----w- c:\program files\Common Files\Creative Labs Shared
2011-09-01 14:02 . 1999-12-12 23:01 44032 ------w- c:\windows\system32\CTSVCCDA.EXE
2011-09-01 14:02 . 1999-11-17 23:00 25088 ------w- c:\windows\system32\CTSVCCTL.EXE
2011-09-01 14:00 . 2006-11-28 00:14 782336 ----a-r- c:\windows\system32\tmp61.tmp
2011-09-01 13:07 . 2011-09-01 13:08 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Skype
2011-09-01 11:47 . 2011-09-01 11:47 -------- d-----w- c:\documents and settings\Lukas\Data aplikací\Creative
2011-09-01 11:41 . 2003-06-12 21:25 7062 ----a-w- c:\windows\system32\audiopid.vxd
2011-09-01 11:40 . 2000-05-22 00:58 647872 ------w- c:\windows\system32\Mscomct2.ocx
2011-09-01 11:40 . 2006-10-05 22:17 53248 ------w- c:\windows\Ctregrun.exe
2011-09-01 11:39 . 2011-09-01 11:39 -------- d-----w- c:\program files\Common Files\Creative
2011-09-01 11:39 . 2011-09-01 14:45 -------- d--h--w- c:\program files\Creative Installation Information
2011-09-01 11:37 . 2009-02-27 08:45 171008 ----a-w- c:\windows\system32\drivers\ctusfsyn.sys
2011-09-01 11:37 . 2009-01-14 08:47 21504 ----a-w- c:\windows\system32\sfman32.dll
2011-09-01 11:37 . 2009-01-14 08:47 142336 ----a-w- c:\windows\system32\drivers\ctsfm2k.sys
2011-09-01 11:37 . 2009-01-14 08:47 120832 ----a-w- c:\windows\system32\sfms32.dll
2011-09-01 11:37 . 2009-01-14 08:47 114688 ----a-w- c:\windows\system32\drivers\ctoss2k.sys
2011-09-01 11:37 . 2005-04-22 03:27 73728 ----a-r- c:\windows\MIDIDEF.EXE
2011-09-01 11:37 . 2011-09-01 17:27 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Creative
2011-09-01 11:37 . 2011-09-01 14:47 444952 ----a-w- c:\windows\system32\wrap_oal.dll
2011-09-01 11:37 . 2011-09-01 14:47 109080 ----a-w- c:\windows\system32\OpenAL32.dll
2011-09-01 11:37 . 2006-11-27 18:14 782336 ----a-r- c:\windows\system32\tmp4C.tmp
2011-09-01 11:37 . 2008-09-30 09:23 181760 ----a-w- c:\windows\system32\CtDvInst.dll
2011-09-01 11:34 . 2011-09-01 14:48 -------- d-----w- c:\program files\Creative
2011-08-20 15:41 . 2011-08-20 15:41 -------- d-----w- c:\documents and settings\NetworkService\Local Settings\Data aplikací\Apple
2011-08-20 12:24 . 2011-08-20 12:24 13584 ----a-w- c:\program files\Microsoft Games\Age of Empires Online\rmdll\Final\RandomMapBinder.dll
2011-08-20 12:24 . 2011-08-20 12:24 51472 ----a-w- c:\program files\Microsoft Games\Age of Empires Online\rmdll\Final\RandomMap.dll
2011-08-20 12:24 . 2011-08-20 12:24 19216 ----a-w- c:\program files\Microsoft Games\Age of Empires Online\rmdll\Final\CLRBinder.dll
2011-08-20 11:34 . 2011-08-20 11:34 -------- d-----w- c:\documents and settings\Lukas\Data aplikací\NVIDIA
2011-08-19 18:06 . 2011-08-21 13:09 -------- d-----w- c:\documents and settings\All Users\Data aplikací\NVIDIA
2011-08-19 18:06 . 2011-08-19 18:06 -------- d-----w- c:\documents and settings\All Users\Data aplikací\NVIDIA Corporation
2011-08-19 18:05 . 2011-08-03 11:49 600680 ----a-w- c:\windows\system32\easyupdatusapiu.dll
2011-08-19 18:05 . 2011-08-21 13:10 280276 ----a-w- c:\windows\system32\nvdrsdb0.bin
2011-08-19 18:05 . 2011-08-21 13:10 1 ----a-w- c:\windows\system32\nvdrssel.bin
2011-08-19 18:05 . 2011-08-21 13:10 280276 ----a-w- c:\windows\system32\nvdrsdb1.bin
2011-08-19 18:05 . 2011-08-03 11:49 61440 ----a-w- c:\windows\system32\OpenCL.dll
2011-08-19 18:05 . 2011-08-03 11:49 914024 ----a-w- c:\windows\system32\nvdispco32.dll
2011-08-19 18:05 . 2011-08-03 11:49 875112 ----a-w- c:\windows\system32\nvgenco32.dll
2011-08-19 18:05 . 2011-08-03 11:49 5427200 ----a-w- c:\windows\system32\nvcuda.dll
2011-08-19 18:05 . 2011-08-03 11:49 2387560 ----a-w- c:\windows\system32\nvcuvid.dll
2011-08-19 18:05 . 2011-08-03 11:49 2090088 ----a-w- c:\windows\system32\nvcuvenc.dll
2011-08-19 18:05 . 2011-08-03 11:49 17186816 ----a-w- c:\windows\system32\nvcompiler.dll
2011-08-19 18:04 . 2011-08-21 13:10 -------- d-----w- c:\program files\NVIDIA Corporation
2011-08-19 18:04 . 2011-08-19 18:04 -------- d-----w- C:\NVIDIA
2011-08-19 17:40 . 2006-01-15 00:38 162304 ----a-w- c:\windows\system32\everest_cpl.cpl
2011-08-19 15:21 . 2011-08-22 13:28 -------- d-----w- c:\documents and settings\Lukas\Local Settings\Data aplikací\Ubisoft Game Launcher
2011-08-19 15:07 . 2011-08-19 15:07 -------- d-----w- c:\program files\CCleaner
2011-08-19 15:00 . 2011-08-19 15:00 -------- d-----w- C:\Ubisoft Game Launcher
2011-08-19 14:47 . 2011-09-05 17:04 -------- d-----w- c:\program files\Ubisoft
2011-08-19 14:23 . 2011-08-21 11:47 -------- d-----w- c:\program files\Microsoft Silverlight
2011-08-19 14:19 . 2011-08-19 14:19 -------- d-----w- c:\documents and settings\Lukas\Local Settings\Data aplikací\OpenCandy
2011-08-19 14:19 . 2011-08-19 14:19 -------- d-----w- c:\documents and settings\Lukas\Data aplikací\OpenCandy
2011-08-19 14:19 . 2011-08-19 14:19 232512 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2011-08-19 14:19 . 2011-08-19 14:19 -------- d-----w- c:\program files\DAEMON Tools Lite
2011-08-19 14:18 . 2011-08-19 15:10 -------- d-----w- c:\documents and settings\Lukas\Data aplikací\DAEMON Tools Lite
2011-08-19 14:18 . 2011-08-19 14:18 -------- d-----w- c:\documents and settings\All Users\Data aplikací\DAEMON Tools Lite
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-08-17 11:07 . 2009-08-18 09:30 564632 ----a-w- c:\documents and settings\All Users\Data aplikací\Microsoft\IdentityCRL\production\wlidui.dll
2011-08-17 11:07 . 2009-08-18 09:24 18328 ----a-w- c:\documents and settings\All Users\Data aplikací\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2011-08-12 10:02 . 2011-07-21 12:09 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-08-03 11:49 . 2007-10-25 09:17 54272 ----a-w- c:\windows\system32\nvwddi.dll
2011-08-03 11:49 . 2007-10-25 09:17 4210816 ----a-w- c:\windows\system32\nv4_disp.dll
2011-08-03 11:49 . 2007-10-25 09:17 335872 ----a-w- c:\windows\system32\nvrsar.dll
2011-08-03 11:49 . 2007-10-25 09:17 331776 ----a-w- c:\windows\system32\nvrshe.dll
2011-08-03 11:49 . 2007-10-25 09:17 286720 ----a-w- c:\windows\system32\nvrsfr.dll
2011-08-03 11:49 . 2007-10-25 09:17 282624 ----a-w- c:\windows\system32\nvrsit.dll
2011-08-03 11:49 . 2007-10-25 09:17 282624 ----a-w- c:\windows\system32\nvrses.dll
2011-08-03 11:49 . 2007-10-25 09:17 282624 ----a-w- c:\windows\system32\nvrsel.dll
2011-08-03 11:49 . 2007-10-25 09:17 278528 ----a-w- c:\windows\system32\nvrsde.dll
2011-08-03 11:49 . 2007-10-25 09:17 274432 ----a-w- c:\windows\system32\nvrspt.dll
2011-08-03 11:49 . 2007-10-25 09:17 274432 ----a-w- c:\windows\system32\nvrsnl.dll
2011-08-03 11:49 . 2007-10-25 09:17 274432 ----a-w- c:\windows\system32\nvrsesm.dll
2011-08-03 11:49 . 2007-10-25 09:17 270336 ----a-w- c:\windows\system32\nvrsru.dll
2011-08-03 11:49 . 2007-10-25 09:17 270336 ----a-w- c:\windows\system32\nvrsptb.dll
2011-08-03 11:49 . 2007-10-25 09:17 270336 ----a-w- c:\windows\system32\nvrsja.dll
2011-08-03 11:49 . 2007-10-25 09:17 266240 ----a-w- c:\windows\system32\nvrsko.dll
2011-08-03 11:49 . 2007-10-25 09:17 262144 ----a-w- c:\windows\system32\nvrshu.dll
2011-08-03 11:49 . 2007-10-25 09:17 258048 ----a-w- c:\windows\system32\nvrstr.dll
2011-08-03 11:49 . 2007-10-25 09:17 258048 ----a-w- c:\windows\system32\nvrssl.dll
2011-08-03 11:49 . 2007-10-25 09:17 258048 ----a-w- c:\windows\system32\nvrssk.dll
2011-08-03 11:49 . 2007-10-25 09:17 258048 ----a-w- c:\windows\system32\nvrspl.dll
2011-08-03 11:49 . 2007-10-25 09:17 253952 ----a-w- c:\windows\system32\nvrsth.dll
2011-08-03 11:49 . 2007-10-25 09:17 253952 ----a-w- c:\windows\system32\nvrssv.dll
2011-08-03 11:49 . 2007-10-25 09:17 253952 ----a-w- c:\windows\system32\nvrsno.dll
2011-08-03 11:49 . 2007-10-25 09:17 253952 ----a-w- c:\windows\system32\nvrsda.dll
2011-08-03 11:49 . 2007-10-25 09:17 249856 ----a-w- c:\windows\system32\nvrsfi.dll
2011-08-03 11:49 . 2007-10-25 09:17 249856 ----a-w- c:\windows\system32\nvrseng.dll
2011-08-03 11:49 . 2007-10-25 09:17 249856 ----a-w- c:\windows\system32\nvrscs.dll
2011-08-03 11:49 . 2007-10-25 09:17 2404864 ----a-w- c:\windows\system32\nvapi.dll
2011-08-03 11:49 . 2007-10-25 09:17 229376 ----a-w- c:\windows\system32\nvrszhc.dll
2011-08-03 11:49 . 2007-10-25 09:17 16191488 ----a-w- c:\windows\system32\nvoglnt.dll
2011-08-03 11:49 . 2007-10-25 09:17 146024 ----a-w- c:\windows\system32\nvsvc32.exe
2011-08-03 11:49 . 2007-10-25 09:17 145000 ----a-w- c:\windows\system32\nvcolor.exe
2011-08-03 11:49 . 2007-10-25 09:17 13892200 ----a-w- c:\windows\system32\nvcpl.dll
2011-08-03 11:49 . 2007-10-25 09:17 126976 ----a-w- c:\windows\system32\nvrszht.dll
2011-08-03 11:49 . 2007-10-25 09:17 12542592 ----a-w- c:\windows\system32\drivers\nv4_mini.sys
2011-08-03 11:49 . 2007-10-25 09:17 111208 ----a-w- c:\windows\system32\nvmctray.dll
2011-07-21 12:23 . 2011-07-21 12:23 73728 ----a-w- c:\windows\system32\javacpl.cpl
2011-07-21 12:23 . 2011-07-21 12:23 472808 ----a-w- c:\windows\system32\deployJava1.dll
2011-07-21 08:18 . 2011-07-21 08:18 315392 ----a-w- c:\windows\HideWin.exe
2011-07-15 13:29 . 2008-04-14 00:47 456320 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2011-07-08 14:02 . 2008-04-14 00:27 10496 ----a-w- c:\windows\system32\drivers\ndistapi.sys
2011-07-04 11:43 . 2011-07-21 08:36 40112 ----a-w- c:\windows\avastSS.scr
2011-07-04 11:43 . 2011-07-21 08:36 199304 ----a-w- c:\windows\system32\aswBoot.exe
2011-07-04 11:36 . 2011-07-21 08:36 441176 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2011-07-04 11:36 . 2011-07-21 08:36 309848 ----a-w- c:\windows\system32\drivers\aswSP.sys
2011-07-04 11:35 . 2011-07-21 08:36 43608 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2011-07-04 11:35 . 2011-07-21 08:36 102616 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2011-07-04 11:35 . 2011-07-21 08:36 96344 ----a-w- c:\windows\system32\drivers\aswmon.sys
2011-07-04 11:32 . 2011-07-21 08:36 25432 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2011-07-04 11:32 . 2011-07-21 08:36 30808 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2011-07-04 11:32 . 2011-07-21 08:36 19544 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2011-06-24 14:10 . 2011-07-20 19:36 139656 ----a-w- c:\windows\system32\drivers\rdpwd.sys
2011-06-21 18:18 . 2008-04-14 08:52 668160 ----a-w- c:\windows\system32\wininet.dll
2011-06-21 18:18 . 2008-04-14 08:50 61952 ----a-w- c:\windows\system32\tdc.ocx
2011-06-21 18:18 . 2008-04-14 08:51 81920 ----a-w- c:\windows\system32\ieencode.dll
2011-06-21 18:16 . 2008-04-14 07:50 370176 ----a-w- c:\windows\system32\html.iec
2011-06-20 17:44 . 2008-04-14 08:52 293376 ----a-w- c:\windows\system32\winsrv.dll
2011-09-07 12:05 . 2011-07-21 08:43 134104 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-07-04 11:43 122512 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2011-08-02 4910912]
"SetDefaultMIDI"="MIDIDef.exe" [2005-04-22 73728]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"="RTHDCPL.EXE" [2007-03-21 16126464]
"SQ931STI"="c:\windows\SQ931STI.EXE" [2007-01-24 151552]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2011-07-04 3493720]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-04-08 254696]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2010-11-29 421888]
"LogMeIn Hamachi Ui"="c:\program files\Hamachi\hamachi-2-ui.exe" [2011-08-04 1955208]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2011-08-03 13892200]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2011-08-03 111208]
"nwiz"="c:\program files\NVIDIA Corporation\nView\nwiz.exe" [2011-07-05 1632360]
"CTAPR2"="c:\program files\Creative\Sound Blaster X-Fi\Console Launcher\CTAPR2.exe" [2007-01-16 57344]
"VolPanel"="c:\program files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe" [2007-04-17 184320]
"SPIRun"="SPIRun.dll" [2006-11-29 8704]
"BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 91520]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
c:\documents and settings\All Users\Nabˇdka Start\Programy\Po spuçtŘnˇ\
McAfee Security Scan Plus.lnk - c:\program files\McAfee Security Scan\2.0.181\SSScheduler.exe [2010-1-15 255536]
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\QIP 2010\\qip.exe"=
"c:\\Program Files\\Google\\Google Earth\\client\\googleearth.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\Steam\\SteamApps\\kecal7\\team fortress 2\\hl2.exe"=
"c:\\Program Files\\Opera\\opera.exe"=
"c:\\Program Files\\Microsoft Games\\Age of Empires Online\\Spartan.exe"=
"c:\\Program Files\\Ubisoft\\Ubisoft Game Launcher\\UbisoftGameLauncher.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Microsoft Office\\Office14\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office14\\ONENOTE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office14\\OUTLOOK.EXE"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
"c:\\Program Files\\Steam\\SteamApps\\kecal7\\counter-strike source\\hl2.exe"=
.
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [21.7.2011 10:36 441176]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [21.7.2011 10:36 309848]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [19.8.2011 16:19 232512]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [21.7.2011 10:36 19544]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files\Hamachi\hamachi-2.exe [4.8.2011 14:34 1361288]
R3 AtcL001;NDIS Miniport Driver for Atheros L1 Gigabit Ethernet Controller;c:\windows\system32\drivers\l151x86.sys [21.7.2011 10:24 36864]
R3 t3;SB Xtreme Audio Notebook;c:\windows\system32\drivers\t3.sys [1.9.2011 13:36 742936]
R3 t3filt;t3filt;c:\windows\system32\drivers\t3filt.sys [1.9.2011 13:36 1803136]
S2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [21.7.2011 10:36 136176]
S3 Creative Audio Engine Licensing Service;Creative Audio Engine Licensing Service;c:\program files\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [1.9.2011 16:48 79360]
S3 Creative Media Toolbox 6 Licensing Service;Creative Media Toolbox 6 Licensing Service;c:\program files\Common Files\Creative Labs Shared\Service\MT6Licensing.exe [1.9.2011 16:45 79360]
S3 EverestDriver;Lavalys EVEREST Kernel Driver;\??\c:\docume~1\Lukas\LOCALS~1\Temp\EverestDriver.sys --> c:\docume~1\Lukas\LOCALS~1\Temp\EverestDriver.sys [?]
S3 gupdatem;Služba Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [21.7.2011 10:36 136176]
S3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\McAfee Security Scan\2.0.181\McCHSvc.exe [15.1.2010 14:49 227232]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files\Microsoft Office\Office14\GROOVE.EXE [25.3.2010 10:25 30969208]
S3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [9.1.2010 21:37 4640000]
.
Obsah adresáře 'Naplánované úlohy'
.
2011-09-10 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 10:34]
.
2011-09-18 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-07-21 13:18]
.
2011-09-18 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-07-21 13:18]
.
2011-09-18 c:\windows\Tasks\WGASetup.job
- c:\windows\system32\KB905474\wgasetup.exe [2011-07-21 20:18]
.
.
------- Doplňkový sken -------
.
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MI1933~1\Office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~1\MI1933~1\Office14\ONBttnIE.dll/105
TCP: DhcpNameServer = 81.19.5.10 81.19.5.11
DPF: {E705A591-DA3C-4228-B0D5-A356DBA42FBF} - hxxp://ccfiles.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab
FF - ProfilePath - c:\documents and settings\Lukas\Data aplikací\Mozilla\Firefox\Profiles\xd9emqi6.default\
FF - prefs.js: browser.startup.homepage - google.cz
FF - prefs.js: network.proxy.type - 0
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
HKCU-Run-Cpsqss - c:\documents and settings\Lukas\Data aplikací\Cpsqss.exe
HKCU-Run-PCSpeedUp - c:\program files\Zrychleni Pocitace\PCSpeedUp.lnk
HKCU-Run-EVEREST AutoStart - c:\documents and settings\Lukas\Plocha\EVEREST Ultimate Edition 4.60.1540 Beta(hodnoty PC)\everest.exe
AddRemove-Sound Blaster X-Fi Windows Drivers - c:\program files\Creative\Sound Blaster X-Fi\Program\SETUP.EXE
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-09-18 14:16
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
SPIRun = Rundll32 SPIRun.dll,RunDLLEntry?
.
skenování skrytých souborů ...
.
.
C:\## aswSnx private storage
.
sken byl úspešně dokončen
skryté soubory: 1
.
**************************************************************************
.
Celkový čas: 2011-09-18 14:21:19
ComboFix-quarantined-files.txt 2011-09-18 12:21
.
Před spuštěním: Volných bajtů: 53 955 514 368
Po spuštění: Volných bajtů: 53 961 863 168
.
- - End Of File - - 3F84442F0CD70B13AFF179393A6C3C94

Předem děkuji za pomoc :)

Avatar uživatele
Kecal7
Návštěvník
Návštěvník
Příspěvky: 36
Registrován: 18 Zář 2011 13:25

Re: kryptik ZJ, ZY - prosim o pomoc

#21 Příspěvek od Kecal7 »

ještě se chci zeptat, pokud mám naformátovanou flash, tak může tam být někde ten vir skryt? Děkuji :)

Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: kryptik ZJ, ZY - prosim o pomoc

#22 Příspěvek od vyosek »

Zdravim Kecal7 a pekny vecer preji :)

:arrow: Prectete si prosim pravidla fora

:arrow: Zalozte si na svuj problem nove tema, tohle tema je uzavrene a jen by se to tu pletlo


Omlouvam se kolegyne za vstup :oops:

Zde :closed:
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.

Zamčeno