Pomalé PC

[Caroprd111]

Jak to vypadá s PC

[lukas1421992]

furt se to drží na 70%, explorer.exe má zhruba 60%

[Caroprd111]

Stáhněte MBAM http://www.viry.cz/forum/viewtopic.php?f=29&t=67229

• Podle návodu v odkazu nainstalujte, poté dejte úplný sken.
• Nic nemažte MBAM má občas falešné detekce a mohl by smazat např. systémové soubory.
• Log vložte sem.

[lukas1421992]

musel to být rychlý sken, protože plný se mi dvakrát sekl a pokaždé se to vyplo...

Malwarebytes' Anti-Malware 1.45
www.malwarebytes.org

Verze databáze: 3991

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

15.4.2010 20:38:55
mbam-log-2010-04-15 (20-38-55).txt

Typ skenu: Rychlý sken
Skenované objekty: 112200
Uplynulý čas: 7 minuta(y), 47 sekunda(y)

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče registru: 0
Infikované hodnoty registru: 0
Infikované datové položky registru: 3
Infikované složky: 0
Infikované soubory: 0

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky registru:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Search\SearchAssistant (Hijack.SearchPage) -> Bad: (http://search13.net/) Good: (http://www.Google.com/) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Search\CustomizeSearch (Hijack.SearchPage) -> Bad: (http://search13.net/) Good: (http://www.Google.com/) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main\Default_Search_URL (Hijack.SearchPage) -> Bad: (http://search13.net/) Good: (http://www.Google.com) -> No action taken.

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
(Žádné škodlivé položky nebyly zjištěny)

[Caroprd111]

Vše, co našel MBAM smažte a zkuste spustit úplný sken v nouzovém režimu.

[lukas1421992]

úplný sken nenašel žádnou hrozbu...

[Caroprd111]

Pokračujte podle návodu AVPTool http://www.viry.cz/forum/viewtopic.php?f=29&t=58179

[lukas1421992]

Autoscan: completed 4 hours ago (events: 18, objects: 635130, time: 03:56:08)
18.4.2010 22:27:32 Task started
18.4.2010 23:44:21 Detected: Trojan-Spy.Win32.Ardamax.cve C:\Documents and Settings\Luke\Downloads\Corel_VideoStudio_Pro_X2_Keygen.rar/CR-ULEAD.exe/PE_Patch.PECompact/PecBundle/PECompact
18.4.2010 23:44:21 Untreated: Trojan-Spy.Win32.Ardamax.cve C:\Documents and Settings\Luke\Downloads\Corel_VideoStudio_Pro_X2_Keygen.rar/CR-ULEAD.exe/PE_Patch.PECompact/PecBundle/PECompact Write not supported
18.4.2010 23:44:56 Detected: Trojan-Spy.Win32.Ardamax.cve C:\Documents and Settings\Luke\Downloads\Corel VideoStudio Pro X2 12\KEYGEN\KEYGEN\CR-ULEAD.exe/PE_Patch.PECompact/PecBundle/PECompact
18.4.2010 23:50:20 Deleted: Trojan-Spy.Win32.Ardamax.cve C:\Documents and Settings\Luke\Downloads\Corel VideoStudio Pro X2 12\KEYGEN\KEYGEN\CR-ULEAD.exe
19.4.2010 0:04:16 Detected: Trojan-Spy.Win32.Ardamax.cve C:\Program Files\Corel\Corel VideoStudio 12\CR-ULEAD.exe/PE_Patch.PECompact/PecBundle/PECompact
19.4.2010 0:07:56 Detected: Trojan.Win32.Qhost.mko C:\Program Files\ExeScript\console.pe
19.4.2010 0:07:59 Detected: Trojan.Win32.Qhost.mkm C:\Program Files\ExeScript\consolew.pe
19.4.2010 0:09:11 Deleted: Trojan-Spy.Win32.Ardamax.cve C:\Program Files\Corel\Corel VideoStudio 12\CR-ULEAD.exe
19.4.2010 0:09:18 Detected: Trojan.Win32.Qhost.mkp C:\Program Files\ExeScript\windows.pe
19.4.2010 0:09:49 Deleted: Trojan.Win32.Qhost.mko C:\Program Files\ExeScript\console.pe
19.4.2010 0:09:50 Deleted: Trojan.Win32.Qhost.mkp C:\Program Files\ExeScript\windows.pe
19.4.2010 0:09:50 Detected: Trojan.Win32.Qhost.mkn C:\Program Files\ExeScript\windowsw.pe
19.4.2010 0:09:50 Deleted: Trojan.Win32.Qhost.mkm C:\Program Files\ExeScript\consolew.pe
19.4.2010 0:09:51 Deleted: Trojan.Win32.Qhost.mkn C:\Program Files\ExeScript\windowsw.pe
19.4.2010 0:47:21 Detected: Trojan-Spy.Win32.Ardamax.cve C:\Users\Luke\Downloads\Corel_VideoStudio_Pro_X2_Keygen.rar/CR-ULEAD.exe/PE_Patch.PECompact/PecBundle/PECompact
19.4.2010 0:47:21 Untreated: Trojan-Spy.Win32.Ardamax.cve C:\Users\Luke\Downloads\Corel_VideoStudio_Pro_X2_Keygen.rar/CR-ULEAD.exe/PE_Patch.PECompact/PecBundle/PECompact Write not supported
19.4.2010 2:23:40 Task completed

[Caroprd111]

Jak to vypadá s PC

[lukas1421992]

stále stejné

[Caroprd111]

Tohle otestujte na http://www.virustotal.com/cs/
C:\Windows\explorer.exe

(Soubor nehledejte, jenom vložíte tučně označenou cestu, v případě hlášky "Soubor již byl testován" dejte otestovat znovu. Výsledek analýzy sem v podobě odkazu vložte.)

[lukas1421992]

http://www.virustotal.com/cs/analisis/c ... 1271706428

[Caroprd111]

Zkuste se pomocí Process Explorer http://www.viry.cz/forum/viewtopic.php?f=46&t=97573 podívat, co je "nabaleného" na explorer.exe.

[lukas1421992]

Process PID CPU Private Bytes Working Set Description Company Name
System Idle Process 0 41.55 0 K 24 K
csrss.exe 412 1 800 K 4 044 K
wininit.exe 464 1 384 K 3 884 K
csrss.exe 476 1 948 K 17 256 K
winlogon.exe 552 1 916 K 5 108 K
explorer.exe 3892 50.00 44 928 K 63 956 K Průzkumník Windows Microsoft Corporation
SynTPEnh.exe 1292 2 908 K 9 688 K Synaptics TouchPad Enhancements Synaptics, Inc.
SynTPHelper.exe 4048 600 K 2 428 K
RtHDVCpl.exe 2604 6 816 K 7 904 K HD Audio Control Panel Realtek Semiconductor
RtkBtMnt.exe 3824 1 056 K 4 088 K Realtek HD Audio Data Rerouter Realtek Semiconductor Corp.
BkupTray.exe 2640 964 K 3 632 K NTI Backup Now 5 Tray Module
egui.exe 2704 2 876 K 9 856 K ESET GUI ESET
ePower_DMC.exe 2856 20 424 K 18 312 K Acer ePower Management - DMC Acer Inc.
PLFSetI.exe 3340 1 676 K 6 212 K DefaultSettingEXE MFC Application
jusched.exe 1884 916 K 3 568 K Java(TM) Update Scheduler Sun Microsystems, Inc.
hkcmd.exe 3424 1 576 K 5 064 K hkcmd Module Intel Corporation
igfxpers.exe 2024 1 460 K 5 160 K persistence Module Intel Corporation
sidebar.exe 1012 1.41 48 556 K 44 396 K Windows Desktop Gadgets Microsoft Corporation
PCSuite.exe 960 14 016 K 25 028 K Nokia Launch Application Nokia
ICQ.exe 3772 66 992 K 35 876 K ICQ ICQ, LLC.
LManager.exe 4524 9 332 K 11 212 K
speedfan.exe 4560 4 844 K 13 604 K Almico Software (www.almico.com)
firefox.exe 4924 124 848 K 152 336 K Firefox Mozilla Corporation
WinRAR.exe 3500 10 648 K 18 140 K WinRAR archiver Alexander Roshal
procexp.exe 6108 3.52 25 280 K 44 160 K Sysinternals Process Explorer Sysinternals - www.sysinternals.com
NetSoftware.exe 3760 3 116 K 8 568 K NetSoftware Gemius SA

Process: explorer.exe Pid: 3892

Name Description Company Name Version
{67D69890-D853-4011-A87E-AA64FA83CE5A}.2.ver0x0000000000000002.db
{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000004.db
{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000001d.db
{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db
ac3filter.cpl ac3filter 1.0.1.0
Actioncenter.dll Action Center Microsoft Corporation 6.1.7600.16385
ActionCenter.dll.mui Action Center Microsoft Corporation 6.1.7600.16385
actxprxy.dll ActiveX Interface Marshaling Library Microsoft Corporation 6.1.7600.16385
ADFSMenu.dll Adobe Drive Menu Adobe Systems Incorporated 4.0.0.344
AdobeDriveCS4_NP.dll Adobe Drive Network Provider Adobe Systems Incorporated 4.0.0.344
ADVAPI32.dll Advanced Windows 32 Base API Microsoft Corporation 6.1.7600.16385
AltTab.dll Windows Shell Alt Tab Microsoft Corporation 6.1.7600.16385
apphelp.dll Application Compatibility client library Microsoft Corporation 6.1.7600.16481
ATL.DLL ATL Module for Windows XP (Unicode) Microsoft Corporation 3.5.2284.0
ATL80.DLL ATL Module for Windows (Unicode) Microsoft Corporation 8.0.50727.4053
audiodev.dll Portable Media Devices Shell Extension Microsoft Corporation 6.1.7600.16385
AUDIOSES.DLL Audio Session Microsoft Corporation 6.1.7600.16385
authui.dll Windows Authentication UI Microsoft Corporation 6.1.7600.16385
AVRT.dll Multimedia Realtime Runtime Microsoft Corporation 6.1.7600.16385
BatMeter.dll Battery Meter Helper DLL Microsoft Corporation 6.1.7600.16385
BIB.dll Bravo Interface Binder Adobe Systems Incorporated 1.2.1.1551
boost_log-vc71-mt-1_33.dll
browcli.dll Browser Service Client DLL Microsoft Corporation 6.1.7600.16385
bthprops.cpl Ovládací panel technologie Bluetooth Microsoft Corporation 6.1.7600.16385
btncopy.dll BTNCopy Module Broadcom Corporation. 6.0.1.6300
C_1252.NLS
CFGMGR32.dll Configuration Manager DLL Microsoft Corporation 6.1.7600.16385
CLBCatQ.DLL COM+ Configuration Catalog Microsoft Corporation 2001.12.8530.16385
comctl32.dll User Experience Controls Library Microsoft Corporation 6.10.7600.16385
comctl32.dll.mui User Experience Controls Library Microsoft Corporation 6.10.7600.16385
COMDLG32.dll Common Dialogs DLL Microsoft Corporation 6.1.7600.16385
CRYPT32.dll Crypto API32 Microsoft Corporation 6.1.7600.16385
CRYPTBASE.dll Base cryptographic API DLL Microsoft Corporation 6.1.7600.16385
CRYPTSP.dll Cryptographic Service Provider API Microsoft Corporation 6.1.7600.16385
CRYPTUI.dll Microsoft Trust UI Provider Microsoft Corporation 6.1.7600.16385
CSCAPI.dll Offline Files Win32 API Microsoft Corporation 6.1.7600.16385
CSCDLL.dll Offline Files Temporary Shim Microsoft Corporation 6.1.7600.16385
cscobj.dll In-proc COM object used by clients of CSC API Microsoft Corporation 6.1.7600.16385
cscui.dll Client Side Caching UI Microsoft Corporation 6.1.7600.16385
cversions.2.db
cversions.2.db
cversions.2.db
cversions.2.db
davclnt.dll Web DAV Client DLL Microsoft Corporation 6.1.7600.16385
DAVHLPR.dll DAV Helper DLL Microsoft Corporation 6.1.7600.16385
devenum.dll Device enumeration. Microsoft Corporation 6.6.7600.16385
DevicePairingFolder.dll Device Pairing Folder Microsoft Corporation 6.1.7600.16385
DEVOBJ.dll Device Information Set DLL Microsoft Corporation 6.1.7600.16385
DEVRTL.dll Device Management Run Time Library Microsoft Corporation 6.1.7600.16385
dfscli.dll Windows NT Distributed File System Client DLL Microsoft Corporation 6.1.7600.16385
dhcpcsvc.DLL DHCP Client Service Microsoft Corporation 6.1.7600.16385
dhcpcsvc6.DLL DHCPv6 Client Microsoft Corporation 6.1.7600.16385
DINPUT.dll Microsoft DirectInput Microsoft Corporation 6.1.7600.16385
dnsapi.DLL DNS Client API DLL Microsoft Corporation 6.1.7600.16385
drprov.dll Microsoft Remote Desktop Session Host Server Network Provider Microsoft Corporation 6.1.7600.16385
DUI70.dll Windows DirectUI Engine Microsoft Corporation 6.1.7600.16385
DUser.dll Windows DirectUser Engine Microsoft Corporation 6.1.7600.16385
dwmapi.dll Microsoft Desktop Window Manager API Microsoft Corporation 6.1.7600.16385
dxp.dll Device Stage Shell Extension Microsoft Corporation 6.1.7600.16385
ehSSO.dll Windows Media Center Shell Service Object Microsoft Corporation 6.1.7600.16385
EhStorAPI.dll Windows Enhanced Storage API Microsoft Corporation 6.1.7600.16385
EhStorShell.dll Windows Enhanced Storage Shell Extension DLL Microsoft Corporation 6.1.7600.16385
es.dll COM+ Microsoft Corporation 2001.12.8530.16385
Explorer.EXE Průzkumník Windows Microsoft Corporation 6.1.7600.16450
EXPLORERFRAME.dll ExplorerFrame Microsoft Corporation 6.1.7600.16385
fdproxy.dll Function Discovery Proxy Dll Microsoft Corporation 6.1.7600.16385
ffdshow.ax DirectShow and VFW video and audio decoding/encoding/processing filter 1.0.5.2861
FirewallAPI.dll Windows Firewall API Microsoft Corporation 6.1.7600.16385
FLV.ax FLV Source Filter SWiSHzone.com Pty Ltd 2006.2.28.1
FM.dll Explorer browser application for mobile devices. Popwire AB 1.1.6.164
FMb.dll Dynamicky spojená knihovna FMb Sony Ericsson Mobile Communications AB 1.0.0.1
FMLang.dll Jazykový soubor pro aplikaci Správce souborů Popwire AB 1.0.1.15
FMRes.dll Graphical resource file For File Manager Application Sony Ericsson Mobile Communications AB 1.0.1.8
framedynos.dll WMI SDK Provider Framework Microsoft Corporation 6.1.7600.16385
fwpuclnt.dll FWP/IPsec User-Mode API Microsoft Corporation 6.1.7600.16385
FXSAPI.dll Microsoft Fax API Support DLL Microsoft Corporation 6.1.7600.16385
FXSRESM.DLL Microsoft Fax Resource DLL Microsoft Corporation 6.1.7600.16385
FXSRESM.dll.mui Microsoft Fax Resource DLL Microsoft Corporation 6.1.7600.16385
fxsst.dll Fax Service Microsoft Corporation 6.1.7600.16385
gameux.dll Průzkumník her Microsoft Corporation 6.1.7600.16385
GDI32.dll GDI Client DLL Microsoft Corporation 6.1.7600.16385
gdiplus.dll Microsoft GDI+ Microsoft Corporation 6.1.7600.16385
GrooveIntlResource.dll GrooveIntlResource Module Microsoft Corporation 12.0.6414.1000
GrooveMisc.dll GrooveMisc Module Microsoft Corporation 12.0.6421.1000
GrooveNew.DLL GrooveNew Module Microsoft Corporation 12.0.6413.1000
GrooveShellExtensions.dll GrooveShellExtensions Module Microsoft Corporation 12.0.6421.1000
GrooveSystemServices.dll GrooveSystemServices Module Microsoft Corporation 12.0.6421.1000
GrooveUtil.DLL GrooveUtil Module Microsoft Corporation 12.0.6423.1000
hcproviders.dll Action Center Providers Microsoft Corporation 6.1.7600.16385
hgcpl.dll Ovládací panel Domácí skupina Microsoft Corporation 6.1.7600.16385
HID.DLL Hid User Library Microsoft Corporation 6.1.7600.16385
IconCodecService.dll Converts a PNG part of the icon to a legacy bmp icon Microsoft Corporation 6.1.7600.16385
idmmkb.dll Internet Download Manager module Tonec Inc. 5.16.1.0
ieframe.dll Internetový prohlížeč Microsoft Corporation 8.0.7600.16535
ieproxy.dll IE ActiveX Interface Marshaling Library Microsoft Corporation 8.0.7600.16535
iertutil.dll Run time utility for Internet Explorer Microsoft Corporation 8.0.7600.16385
imageres.dll Windows Image Resource Microsoft Corporation 6.1.7600.16385
imageres.dll.mui Windows Image Resource Microsoft Corporation 6.1.7600.16385
imapi2.dll IMAPI (Image Mastering API) v2 Microsoft Corporation 6.1.7600.16385
IMM32.dll Multi-User Windows IMM32 API Client DLL Microsoft Corporation 6.1.7600.16385
index.dat
index.dat
index.dat
index.dat
IPHLPAPI.DLL IP Helper API Microsoft Corporation 6.1.7600.16385
kernel32.dll Windows NT BASE API Client DLL Microsoft Corporation 6.1.7600.16481
KERNELBASE.dll Windows NT BASE API Client DLL Microsoft Corporation 6.1.7600.16385
KernelBase.dll.mui Windows NT BASE API Client DLL Microsoft Corporation 6.1.7600.16385
ksuser.dll User CSA Library Microsoft Corporation 6.1.7600.16385
LINKINFO.dll Windows Volume Tracking Microsoft Corporation 6.1.7600.16385
locale.nls
LPK.dll Language Pack Microsoft Corporation 6.1.7600.16385
mbamext.dll Malwarebytes' Anti-Malware Malwarebytes Corporation 1.4.5.0
mdnsNSP.dll Bonjour Namespace Provider Apple Inc. 1.0.6.2
mediametadatahandler.dll Media Metadata Handler Microsoft Corporation 6.1.7600.16385
MFC71U.DLL MFCDLL Shared Library - Retail Version Microsoft Corporation 7.10.3077.0
midimap.dll Microsoft MIDI Mapper Microsoft Corporation 6.1.7600.16385
MLANG.dll Multi Language Support DLL Microsoft Corporation 6.1.7600.16385
MMDevApi.dll MMDevice API Microsoft Corporation 6.1.7600.16385
MPR.dll Multiple Provider Router DLL Microsoft Corporation 6.1.7600.16385
MSACM32.dll Microsoft ACM Audio Filter Microsoft Corporation 6.1.7600.16385
msacm32.drv Microsoft Sound Mapper Microsoft Corporation 6.1.7600.16385
MSASN1.dll ASN.1 Runtime APIs Microsoft Corporation 6.1.7600.16415
MSCTF.dll MSCTF Server DLL Microsoft Corporation 6.1.7600.16385
MsftEdit.dll Rich Text Edit Control, v4.1 Microsoft Corporation 5.41.21.2509
msi.dll Windows Installer Microsoft Corporation 5.0.7600.16385
msiltcfg.dll Windows Installer Configuration API Stub Microsoft Corporation 5.0.7600.16385
MSImg32.dll GDIEXT Client DLL Microsoft Corporation 6.1.7600.16385
msls31.dll Microsoft Line Services library file Microsoft Corporation 3.10.349.0
MSVBVM60.DLL Visual Basic Virtual Machine Microsoft Corporation 6.0.98.15
MSVCP71.dll Microsoft® C++ Runtime Library Microsoft Corporation 7.10.3077.0
MSVCP80.dll Microsoft® C++ Runtime Library Microsoft Corporation 8.0.50727.4927
MSVCR71.dll Microsoft® C Runtime Library Microsoft Corporation 7.10.3052.4
MSVCR80.dll Microsoft® C Runtime Library Microsoft Corporation 8.0.50727.4927
msvcrt.dll Windows NT CRT DLL Microsoft Corporation 7.0.7600.16385
MSVFW32.dll Microsoft Video for Windows DLL Microsoft Corporation 6.1.7600.16385
mswsock.dll Poskytovatel služeb Microsoft Windows Sockets 2.0 Microsoft Corporation 6.1.7600.16385
msxml3.dll MSXML 3.0 SP11 Microsoft Corporation 8.110.7600.16385
msxml3r.dll XML Resources Microsoft Corporation 8.110.7600.16385
msxml6.dll MSXML 6.0 SP3 Microsoft Corporation 6.30.7600.16385
msxml6r.dll XML Resources Microsoft Corporation 6.30.7600.16385
netshell.dll Network Connections Shell Microsoft Corporation 6.1.7600.16385
netutils.dll Net Win32 API Helpers DLL Microsoft Corporation 6.1.7600.16385
NetworkExplorer.dll Průzkumník sítě Microsoft Corporation 6.1.7600.16385
NGSCM.DLL Next Gen Suite Common Modules Nokia 7.1.156.0
nlaapi.dll Network Location Awareness 2 Microsoft Corporation 6.1.7600.16385
Normaliz.dll Unicode Normalization DLL Microsoft Corporation 6.1.7600.16385
npmproxy.dll Network List Manager Proxy Microsoft Corporation 6.1.7600.16385
NSI.dll NSI User-mode interface DLL Microsoft Corporation 6.1.7600.16385
ntdll.dll NT Layer DLL Microsoft Corporation 6.1.7600.16385
ntlanman.dll Microsoft® Lan Manager Microsoft Corporation 6.1.7600.16385
ntmarta.dll Windows NT MARTA provider Microsoft Corporation 6.1.7600.16385
ntshrui.dll Shell extensions for sharing Microsoft Corporation 6.1.7600.16385
ntshrui.dll.mui Shell extensions for sharing Microsoft Corporation 6.1.7600.16385
ole32.dll Microsoft OLE for Windows Microsoft Corporation 6.1.7600.16385
OLEACC.dll Active Accessibility Core Component Microsoft Corporation 7.0.0.0
oleaccrc.dll Active Accessibility Resource DLL Microsoft Corporation 7.0.0.0
OLEAUT32.dll Microsoft Corporation 6.1.7600.16385
OLEPRO32.DLL Microsoft Corporation 6.1.7600.16385
PhoneBrowser.dll Phone Browser Nokia 7.1.108.0
PhoneBrowser_cze.nlr Nokia Phone Browser language resources Nokia 7.1.69.0
PhoneBrowser_Nokia.ngr Nokia Phone Browser graphics resources Nokia 7.1.21.0
pnidui.dll Ikona síťového systému Microsoft Corporation 6.1.7600.16385
PortableDeviceApi.dll Windows Portable Device API Components Microsoft Corporation 6.1.7600.16385
PortableDeviceTypes.dll Windows Portable Device (Parameter) Types Component Microsoft Corporation 6.1.7600.16385
POWRPROF.dll Power Profile Helper DLL Microsoft Corporation 6.1.7600.16385
prnfldr.dll prnfldr dll Microsoft Corporation 6.1.7600.16385
profapi.dll User Profile Basic API Microsoft Corporation 6.1.7600.16385
PROPSYS.dll Microsoft Property System Microsoft Corporation 7.0.7600.16385
provsvc.dll Windows HomeGroup Microsoft Corporation 6.1.7600.16385
PSAPI.DLL Process Status Helper Microsoft Corporation 6.1.7600.16385
PSPADS~1.DLL
QAgent.dll Quarantine Agent Proxy Microsoft Corporation 6.1.7600.16385
qedit.dll DirectShow Editing. Microsoft Corporation 6.6.7600.16385
quartz.dll DirectShow Runtime. Microsoft Corporation 6.6.7600.16490
QUtil.dll Quarantine Utilities Microsoft Corporation 6.1.7600.16385
R00000000000d.clb
rarext.dll WinRAR shell extension Alexander Roshal 3.80.0.0
rarlng.dll WinRAR shell extension Alexander Roshal 3.80.0.0
rasadhlp.dll Remote Access AutoDial Helper Microsoft Corporation 6.1.7600.16385
RPCRT4.dll Remote Procedure Call Runtime Microsoft Corporation 6.1.7600.16385
RpcRtRemote.dll Remote RPC Extension Microsoft Corporation 6.1.7600.16385
rsaenh.dll Microsoft Enhanced Cryptographic Provider Microsoft Corporation 6.1.7600.16385
samcli.dll Security Accounts Manager Client DLL Microsoft Corporation 6.1.7600.16385
SAMLIB.dll SAM Library DLL Microsoft Corporation 6.1.7600.16385
SDShelEx-win32.dll TuneUp Shredder Shell Extension TuneUp Software 9.0.3100.22
SearchFolder.dll SearchFolder Microsoft Corporation 6.1.7600.16385
Secur32.dll Security Support Provider Interface Microsoft Corporation 6.1.7600.16385
sechost.dll Host for SCM/SDDL/LSA Lookup APIs Microsoft Corporation 6.1.7600.16385
SETUPAPI.dll Windows Setup API Microsoft Corporation 6.1.7600.16385
SFC.DLL Windows File Protection Microsoft Corporation 6.1.7600.16385
sfc_os.DLL Windows File Protection Microsoft Corporation 6.1.7600.16385
shdocvw.dll Shell Doc Object and Control Library Microsoft Corporation 6.1.7600.16385
SHELL32.dll Windows Shell Common Dll Microsoft Corporation 6.1.7600.16385
SHELLEXT.DLL Zoner Photo Studio 12 ZONER software 12.0.1.6
shellExt.dll Shell Extension ESET 4.0.314.0
ShellMgr.dll Shellhandler for MyPhoneExplorer F.J. Wechselberger 1.4.0.0
SHLWAPI.dll Shell Light-weight Utility Library Microsoft Corporation 6.1.7600.16385
slc.dll Software Licensing Client Dll Microsoft Corporation 6.1.7600.16385
SndVolSSO.DLL SCA Volume Microsoft Corporation 6.1.7600.16385
SortDefault.nls
srchadmin.dll Možnosti indexování Microsoft Corporation 7.0.7600.16385
srvcli.dll Server Service Client DLL Microsoft Corporation 6.1.7600.16385
SSPICLI.DLL Security Support Provider Interface Microsoft Corporation 6.1.7600.16385
StaticCache.dat
stobject.dll Systray shell service object Microsoft Corporation 6.1.7600.16385
StructuredQuery.dll Structured Query Microsoft Corporation 7.0.7600.16385
SXS.DLL Fusion 2.5 Microsoft Corporation 6.1.7600.16385
SyncCenter.dll Microsoft Sync Center Microsoft Corporation 6.1.7600.16385
SYNCENG.dll Windows Briefcase Engine Microsoft Corporation 6.1.7600.16385
Syncreg.dll Microsoft Synchronization Framework Registration Microsoft Corporation 2007.94.7600.16385
syncui.dll Aktovka systému Windows Microsoft Corporation 6.1.7600.16385
SysHook.dll Acer ePower Management - SysHook Dynamic Link Library Acer Inc. 3.0.3000.0
thumbcache.dll Microsoft Thumbnail Cache Microsoft Corporation 6.1.7600.16385
thumbcache_1024.db
thumbcache_1024.db
thumbcache_256.db
thumbcache_256.db
thumbcache_32.db
thumbcache_32.db
thumbcache_96.db
thumbcache_96.db
thumbcache_idx.db
thumbcache_idx.db
thumbcache_sr.db
thumbcache_sr.db
timedate.cpl Time Date Control Panel Applet Microsoft Corporation 6.1.7600.16385
tiptsf.dll Microsoft Tablet PC Component Microsoft Corporation 6.1.7600.16385
tlib_log.dll Telecalib Logging, Dynamic Link Library used for logging. Popwire AB 1.1.1.139
twext.dll Previous Versions property page Microsoft Corporation 6.1.7600.16385
UIAnimation.dll Windows Animation Manager Microsoft Corporation 6.1.7600.16385
urlmon.dll OLE32 Extensions for Win32 Microsoft Corporation 8.0.7600.16535
USER32.dll Multi-User Windows USER API Client DLL Microsoft Corporation 6.1.7600.16385
USERENV.dll Userenv Microsoft Corporation 6.1.7600.16385
USP10.dll Uniscribe Unicode script processor Microsoft Corporation 1.626.7600.16385
UxTheme.dll Microsoft UxTheme Library Microsoft Corporation 6.1.7600.16385
VERSION.dll Version Checking and File Installation Libraries Microsoft Corporation 6.1.7600.16385
VersionCue.DLL VersionCue Adobe Systems, Incorporated 4.0.0.344
wdmaud.drv Winmm audio system driver Microsoft Corporation 6.1.7600.16385
wer.dll Windows Error Reporting DLL Microsoft Corporation 6.1.7600.16385
werconcpl.dll PRS CPL Microsoft Corporation 6.1.7600.16385
wercplsupport.dll Problem Reports and Solutions Microsoft Corporation 6.1.7600.16385
wevtapi.dll Eventing Consumption and Configuration API Microsoft Corporation 6.1.7600.16385
WindowsCodecs.dll Microsoft Windows Codecs Library Microsoft Corporation 6.1.7600.16385
WININET.dll Internet Extensions for Win32 Microsoft Corporation 8.0.7600.16535
WINMM.dll MCI API DLL Microsoft Corporation 6.1.7600.16385
WINNSI.DLL Network Store Information RPC interface Microsoft Corporation 6.1.7600.16385
WINSPOOL.DRV Windows Spooler Driver Microsoft Corporation 6.1.7600.16385
WINSTA.dll Winstation Library Microsoft Corporation 6.1.7600.16385
WINTRUST.dll Microsoft Trust Verification APIs Microsoft Corporation 6.1.7600.16493
wkscli.dll Workstation Service Client DLL Microsoft Corporation 6.1.7600.16385
Wlanapi.dll Windows WLAN AutoConfig Client Side API DLL Microsoft Corporation 6.1.7600.16385
wlanutil.dll Windows Wireless LAN 802.11 Utility DLL Microsoft Corporation 6.1.7600.16385
WLDAP32.dll Win32 LDAP API DLL Microsoft Corporation 6.1.7600.16385
WMASF.DLL Windows Media ASF DLL Microsoft Corporation 12.0.7600.16385
WMVCore.DLL Windows Media Playback/Authoring DLL Microsoft Corporation 12.0.7600.16385
wpdshext.dll Rozšíření prostředí přenosných zařízení Microsoft Corporation 6.1.7600.16385
wpdshserviceobj.dll Windows Portable Device Shell Service Object Microsoft Corporation 6.1.7600.16385
WS2_32.dll Windows Socket 2.0 32-Bit DLL Microsoft Corporation 6.1.7600.16385
WSCAPI.dll Windows Security Center API Microsoft Corporation 6.1.7600.16385
wscinterop.dll Windows Health Center WSC Interop Microsoft Corporation 6.1.7600.16385
wscui.cpl Centrum akcí Microsoft Corporation 6.1.7600.16385
wship6.dll Winsock2 Helper DLL (TL/IPv6) Microsoft Corporation 6.1.7600.16385
wshtcpip.dll Winsock2 Helper DLL (TL/IPv4) Microsoft Corporation 6.1.7600.16385
WTSAPI32.dll Windows Remote Desktop Session Host Server SDK APIs Microsoft Corporation 6.1.7600.16385
wwanapi.dll Mbnapi Microsoft Corporation 6.1.7600.16385
wwapi.dll WWAN API Microsoft Corporation 8.1.2.0
XmlLite.dll Microsoft XmlLite Library Microsoft Corporation 1.3.1000.0
zipfldr.dll Komprimované složky (metoda ZIP) Microsoft Corporation 6.1.7600.16385

[Caroprd111]

Podle pravidel fóra se zde nelegálním softwarem nezabýváme (nelegální programy představují bezpečnostní hrozbu).
Obstarejte si legální zabezpečení PC (antivir, firewall), poté sem vložte nový log z RSIT a log z CKScanner.

Vyberte si třeba free Aviru nebo Avast + nějaký firewall (doporučuji ZoneAlarm) http://www.viry.cz/forum/viewtopic.php?f=29&t=6152 + http://www.viry.cz/forum/viewtopic.php?f=41&t=6523

Stáhněte na plochu CKScanner http://downloads.malwareremoval.com/CKScanner.exe

• Spusťte a klikněte na "Search For Files", po dokončení skenu klikněte na "Save List to File" -> "OK"
• Log s názvem ckfiles.txt bude uložený na ploše, obsah tohoto souboru sem vložte.