SNÍŽENÍ PAMĚTI RAM

[jenda33]

dOBRÝ DEN MĚL JSEM PROBLÉMY S RAMKOU. POUŽIL JSEM PROGRAM, KTERÝ JSTE DOPORUČIL ,,COMBOFIX" A POMOHL VYMAZAL PŘEBYTEČNÝ PROCESY Z 92 NA 65, ALE NĚCO MI TO VYPSALO A NEROZUMÍM TOMU:
ComboFix 10-06-08.02 - okay 08.06.2010 21:48:27.1.2 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1250.420.1029.18.2814.1590 [GMT 2:00]
Spuštěný z: c:\users\okay\Desktop\ComboFix.exe
SP: Lavasoft Ad-Watch Live! *disabled* (Updated) {67844DAE-4F77-4D69-9457-98E8CFFDAA22}
SP: Spybot - Search and Destroy *disabled* (Outdated) {ED588FAF-1B8F-43B4-ACA8-8E3C85DADBE9}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
* Rezidentní štít AV je zapnutý

.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\users\okay\AppData\Roaming\.#
c:\users\okay\AppData\Roaming\BITS
c:\users\okay\AppData\Roaming\BITS\BITS.ini
c:\users\okay\AppData\Roaming\BITS\DHTTable.dat
c:\users\okay\AppData\Roaming\BITS\ProxyList.ini
c:\users\okay\AppData\Roaming\BITS\Torrent\20100216164627.torrent
c:\users\okay\AppData\Roaming\BITS\Torrent\20100216164627.torrent.~tmp
c:\users\okay\AppData\Roaming\BITS\Torrent\20100216164627.torrent.bits
c:\users\okay\AppData\Roaming\BITS\Torrent\20100216164627.torrent.filelist
c:\users\okay\AppData\Roaming\BITS\Torrent\20100216164627.torrent.seeds
c:\users\okay\AppData\Roaming\BITS\UPnP.ini
c:\users\okay\AppData\Roaming\Microsoft\Internet Explorer\qiPSearchbar.dll
c:\users\okay\plaster.exe
c:\windows\system32\vbzlib1.dll

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-05-08 do 2010-06-08 )))))))))))))))))))))))))))))))
.

2010-06-08 20:03 . 2010-06-08 20:06 -------- d-----w- c:\users\okay\AppData\Local\temp
2010-06-08 20:03 . 2010-06-08 20:03 -------- d-----w- c:\users\Default\AppData\Local\temp
2010-06-08 19:37 . 2010-06-08 19:37 -------- d-----w- C:\32788R22FWJFW
2010-06-08 14:19 . 2010-06-08 14:15 15688 ----a-w- c:\windows\system32\lsdelete.exe
2010-06-08 14:15 . 2010-06-08 14:14 64160 ----a-w- c:\windows\system32\drivers\Lbd.sys
2010-06-08 13:06 . 2010-06-08 13:06 -------- dc-h--w- c:\programdata\{83C91755-2546-441D-AC40-9A6B4B860800}
2010-06-08 13:06 . 2009-01-18 21:43 2892112 -c--a-w- c:\programdata\{83C91755-2546-441D-AC40-9A6B4B860800}\Ad-AwareAE.exe
2010-06-08 13:06 . 2010-06-08 13:10 -------- d-----w- c:\programdata\Lavasoft
2010-06-08 13:06 . 2010-06-08 13:06 -------- d-----w- c:\program files\Lavasoft
2010-06-07 17:03 . 2010-06-07 17:05 -------- d-----w- c:\users\okay\AppData\Local\Peter_L_Jones
2010-05-30 11:29 . 2010-06-08 12:45 -------- d-----w- c:\program files\Mad Scientist Productions
2010-05-30 11:21 . 2010-05-30 11:21 -------- d-----w- c:\program files\Smith Micro
2010-05-26 10:46 . 2010-04-23 13:55 2048 ----a-w- c:\windows\system32\tzres.dll
2010-05-25 21:13 . 2010-05-25 21:24 -------- d-----w- c:\program files\ChickenInvadersROTYXmas
2010-05-25 20:43 . 2010-05-25 20:43 -------- d-----w- c:\program files\bfgclient
2010-05-18 12:55 . 2010-05-18 13:03 -------- d-----w- c:\program files\Wise Registry Cleaner
2010-05-17 15:38 . 2010-05-17 15:38 -------- d-----w- c:\program files\TeamViewer
2010-05-17 14:16 . 2010-05-17 15:43 -------- d-----w- c:\users\okay\AppData\Roaming\TeamViewer
2010-05-17 14:16 . 2010-05-17 14:16 -------- d-----w- c:\users\okay\temp
2010-05-12 14:40 . 2010-01-29 16:21 738304 ----a-w- c:\windows\system32\inetcomm.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-06-08 19:46 . 2008-01-21 06:46 602086 ----a-w- c:\windows\system32\perfh005.dat
2010-06-08 19:46 . 2008-01-21 06:46 116182 ----a-w- c:\windows\system32\perfc005.dat
2010-06-08 16:08 . 2009-10-10 10:36 -------- d-----w- c:\program files\Softonic_English_TC
2010-06-08 12:31 . 2009-08-25 11:03 -------- d-----w- c:\users\okay\AppData\Roaming\ICQ
2010-06-06 09:36 . 2009-12-24 20:05 -------- d-----w- c:\program files\Electronic Arts
2010-06-06 09:36 . 2009-01-18 05:40 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-06-04 18:22 . 2010-03-03 14:46 439816 ----a-w- c:\users\okay\AppData\Roaming\Real\Update\setup3.10\setup.exe
2010-06-03 16:12 . 2010-02-03 17:06 1 ----a-w- c:\users\okay\AppData\Roaming\OpenOffice.org\3\user\uno_packages\cache\stamp.sys
2010-05-30 09:04 . 2010-05-30 09:04 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdRapi2_01_00_00.Wdf
2010-05-30 08:57 . 2009-07-06 17:33 680 ----a-w- c:\users\okay\AppData\Local\d3d9caps.dat
2010-05-25 21:24 . 2010-05-25 21:13 -------- d-----w- c:\program files\ChickenInvadersROTYXmas
2010-05-18 20:47 . 2010-05-18 20:47 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdRapi_01_00_00.Wdf
2010-05-18 20:37 . 2009-05-10 17:37 108928 ----a-w- c:\users\okay\AppData\Local\GDIPFONTCACHEV1.DAT
2010-05-18 12:48 . 2009-12-24 18:30 -------- d-----w- c:\program files\Pinnacle
2010-05-18 12:48 . 2009-12-24 18:28 -------- d-----w- c:\programdata\Pinnacle
2010-05-18 12:46 . 2009-12-26 22:20 -------- d-----w- c:\program files\ChrisTV Lite
2010-05-18 12:32 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2010-05-18 12:32 . 2009-01-18 05:58 -------- d-----w- c:\programdata\Microsoft Help
2010-05-16 18:35 . 2009-01-18 06:19 -------- d-----w- c:\program files\Google
2010-05-10 17:16 . 2009-01-18 06:50 -------- d-----w- c:\program files\Common Files\Adobe
2010-04-28 14:35 . 2010-04-19 16:16 22328 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2010-04-28 14:34 . 2010-04-19 16:16 103736 ----a-w- c:\windows\system32\PnkBstrB.exe
2010-04-19 17:16 . 2010-04-19 16:15 66872 ----a-w- c:\windows\system32\PnkBstrA.exe
2010-04-19 16:16 . 2010-04-19 16:16 22328 ----a-w- c:\users\okay\AppData\Roaming\PnkBstrK.sys
2010-04-19 16:16 . 2010-04-19 16:16 22328 ----a-w- c:\users\okay\AppData\Roaming\PnkBstrK.sys
2010-03-25 09:27 . 2010-05-05 13:15 1107264 ----a-w- c:\users\okay\AppData\Roaming\Mozilla\Firefox\Profiles\68dvvcp1.default\extensions\DTToolbar@toolbarnet.com\components\DTToolbarFF.dll
2009-05-01 21:02 . 2009-05-01 21:02 1044480 ----a-w- c:\program files\mozilla firefox\plugins\libdivx.dll
2009-05-01 21:02 . 2009-05-01 21:02 200704 ----a-w- c:\program files\mozilla firefox\plugins\ssldivx.dll
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}"= "c:\program files\BS_Player\tbBS_0.dll" [2010-03-13 2349080]

[HKEY_CLASSES_ROOT\clsid\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{4ff5f6ea-ffaf-43e5-9a01-361c0893c3e8}]
2008-11-23 21:03 1784856 ----a-w- c:\program files\Softonic_English_TC\tbSoft.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}]
2010-03-13 16:32 2349080 ----a-w- c:\program files\BS_Player\tbBS_0.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}"= "c:\program files\BS_Player\tbBS_0.dll" [2010-03-13 2349080]
"{4ff5f6ea-ffaf-43e5-9a01-361c0893c3e8}"= "c:\program files\Softonic_English_TC\tbSoft.dll" [2008-11-23 1784856]

[HKEY_CLASSES_ROOT\clsid\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}]

[HKEY_CLASSES_ROOT\clsid\{4ff5f6ea-ffaf-43e5-9a01-361c0893c3e8}]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{4FF5F6EA-FFAF-43E5-9A01-361C0893C3E8}"= "c:\program files\Softonic_English_TC\tbSoft.dll" [2008-11-23 1784856]
"{FED66DC5-1B74-4A04-8F5C-15C5ACE2B9A5}"= "c:\program files\BS_Player\tbBS_0.dll" [2010-03-13 2349080]

[HKEY_CLASSES_ROOT\clsid\{4ff5f6ea-ffaf-43e5-9a01-361c0893c3e8}]

[HKEY_CLASSES_ROOT\clsid\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2008-07-29 16:52 121392 ----a-w- c:\program files\Acer\Empowering Technology\eDataSecurity\x86\PSDProtect.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952]
"Skype"="c:\program files\Skype\\Phone\Skype.exe" [2009-07-16 25604904]
"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-01-26 2144088]
"Seznam Postak"="c:\program files\Seznam.cz\postak.exe" [2009-09-23 434840]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2008-12-02 3882312]
"EA Core"="c:\program files\Electronic Arts\EADM\Core.exe" [2009-03-28 3325952]
"CollaborationHost"="c:\windows\system32\p2phost.exe" [2008-01-21 192000]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240]
"ICQ"="c:\program files\ICQ7.0\ICQ.exe" [2010-03-28 133368]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-21 1008184]
"RtHDVCpl"="RtHDVCpl.exe" [2008-09-18 6294048]
"ePower_DMC"="c:\program files\Acer\Empowering Technology\ePower\ePower_DMC.exe" [2008-11-28 417792]
"eDataSecurity Loader"="c:\program files\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe" [2008-07-29 526896]
"eAudio"="c:\program files\Acer\Empowering Technology\eAudio\eAudio.exe" [2008-09-11 544768]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2008-06-12 34672]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-08-29 61440]
"Skytel"="Skytel.exe" [2008-09-18 1833504]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-04-25 1049896]
"PLFSetI"="c:\windows\PLFSetI.exe" [2008-06-30 200704]
"LManager"="c:\progra~1\LAUNCH~1\QtZgAcer.EXE" [2008-06-17 817672]
"ArcadeDeluxeAgent"="c:\program files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe" [2008-10-08 147456]
"CLMLServer"="c:\program files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe" [2008-10-08 167936]
"PlayMovie"="c:\program files\Acer Arcade Deluxe\PlayMovie\PMVService.exe" [2008-10-17 167936]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072]
"PWRISOVM.EXE"="c:\program files\PowerISO\PWRISOVM.EXE" [2009-03-15 180224]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-11-24 81000]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2009-11-29 198160]
"Sony Ericsson PC Suite"="c:\program files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" [2007-06-13 528384]
"Ad-Watch"="c:\program files\Lavasoft\Ad-Aware\AAWTray.exe" [2010-06-08 524632]

c:\users\okay\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Obsah aplikace OneNote.onetoc2 [2009-10-3 3656]
OpenOffice.org 3.0.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2009-1-15 393216]
Věýezy obrazovky a spuçtŘnˇ aplikace OneNote 2007.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2009-2-26 97680]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Adobe Reader Speed Launch.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2004-12-14 29696]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc]
@=""

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

R0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2010-01-26 691696]
R2 gupdate1ca258ab44f7060;Služba Google Update (gupdate1ca258ab44f7060);c:\program files\Google\Update\GoogleUpdate.exe [2009-08-25 133104]
R3 AOITNCTAI;AOITNCTAI;c:\users\okay\AppData\Local\Temp\AOITNCTAI.exe [x]
R3 FlyPCI;FlyPCI;c:\windows\system32\drivers\FlyPCI.sys [2003-10-10 4134]
R3 LSNKAQEO;LSNKAQEO;c:\users\okay\AppData\Local\Temp\LSNKAQEO.exe [x]
R3 Ltn_hyd7700pc;DiBcom DIB7700 based TV tuner device ;c:\windows\system32\Drivers\Ltn_hyd7700pc.sys [2007-03-02 373888]
R3 Ltn_rc;DiBcom Infrared Receiver ;c:\windows\system32\DRIVERS\Ltn_rc.sys [2006-12-27 11520]
R3 NTIBackupSvc;NTI Backup Now 5 Backup Service;c:\program files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [2008-09-23 50424]
R3 s816bus;Sony Ericsson Device 816 driver (WDM);c:\windows\system32\DRIVERS\s816bus.sys [2007-06-19 81832]
R3 s816mdfl;Sony Ericsson Device 816 USB WMC Modem Filter;c:\windows\system32\DRIVERS\s816mdfl.sys [2007-06-19 13864]
R3 s816mdm;Sony Ericsson Device 816 USB WMC Modem Driver;c:\windows\system32\DRIVERS\s816mdm.sys [2007-06-19 107304]
R3 s816mgmt;Sony Ericsson Device 816 USB WMC Device Management Drivers (WDM);c:\windows\system32\DRIVERS\s816mgmt.sys [2007-06-19 99112]
R3 s816nd5;Sony Ericsson Device 816 USB Ethernet Emulation SEMCMR7 (NDIS);c:\windows\system32\DRIVERS\s816nd5.sys [2007-06-19 21928]
R3 s816obex;Sony Ericsson Device 816 USB WMC OBEX Interface;c:\windows\system32\DRIVERS\s816obex.sys [2007-06-19 97320]
R3 s816unic;Sony Ericsson Device 816 USB Ethernet Emulation SEMCMR7 (WDM);c:\windows\system32\DRIVERS\s816unic.sys [2007-06-19 97704]
R3 VOANU;VOANU;c:\users\okay\AppData\Local\Temp\VOANU.exe [x]
S0 Lbd;Lbd;c:\windows\system32\DRIVERS\Lbd.sys [2010-06-08 64160]
S1 aswSP;avast! Self Protection; [x]
S2 aswFsBlk;aswFsBlk;c:\windows\system32\DRIVERS\aswFsBlk.sys [2009-11-24 20560]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\DRIVERS\aswMonFlt.sys [2009-11-24 53328]
S2 CLHNService;CLHNService;c:\program files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe [2008-10-04 69632]
S2 ETService;Empowering Technology Service;c:\program files\Acer\Empowering Technology\Service\ETService.exe [2008-11-28 24576]
S2 ICQ Service;ICQ Service;c:\program files\ICQ6Toolbar\ICQ Service.exe [2010-01-03 246520]
S2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [2010-06-08 1029456]
S2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service;c:\program files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [2008-09-23 144632]
S2 SBSDWSCService;SBSD Security Center Service;c:\program files\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368]
S2 TeamViewer5;TeamViewer 5;c:\program files\TeamViewer\Version5\TeamViewer_Service.exe [2010-02-11 172328]
S3 usbfilter;AMD USB Filter Driver;c:\windows\system32\DRIVERS\usbfilter.sys [2008-05-28 22072]
S3 winbondcir;Winbond IR Transceiver;c:\windows\system32\DRIVERS\winbondcir.sys [2007-03-28 43008]

.
Obsah adresáře 'Naplánované úlohy'

2010-06-08 c:\windows\Tasks\Ad-Aware Update (Weekly).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-01-18 14:13]

2010-06-08 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-08-25 13:47]

2010-06-08 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-08-25 13:47]

2009-06-14 c:\windows\Tasks\McDefragTask.job
- c:\progra~1\mcafee\mqc\QcConsol.exe [2009-10-21 10:22]

2009-06-30 c:\windows\Tasks\McQcTask.job
- c:\progra~1\mcafee\mqc\QcConsol.exe [2009-10-21 10:22]

2010-06-08 c:\windows\Tasks\User_Feed_Synchronization-{F182CDCA-DE3F-4271-9D8B-901F729A3C4B}.job
- c:\windows\system32\msfeedssync.exe [2010-03-31 04:54]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://start.icq.com/
uDefault_Search_URL = hxxp://search.qip.ru
mStart Page = hxxp://home.sweetim.com
uSearchAssistant = hxxp://search.qip.ru/ie
uSearchURL,(Default) = Root: HKCU; Subkey: Software\Microsoft\Internet Explorer\SearchUrl; ValueType: string; ValueName: '; ValueData: '; Flags: createvalueifdoesntexist noerror; Tasks: AddSearchQip
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: Stáhnout Star Downloaderem - c:\program files\Star Downloader\sdie.htm
FF - ProfilePath - c:\users\okay\AppData\Roaming\Mozilla\Firefox\Profiles\68dvvcp1.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.sweetim.com/search.asp?src=2&q=
FF - prefs.js: browser.search.selectedEngine - ICQ Search
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - prefs.js: keyword.URL - hxxp://search.icq.com/search/afe_result ... 2.0.0.1&q=
FF - prefs.js: network.proxy.type - 2
FF - component: c:\program files\Real\RealPlayer\browserrecord\firefox\ext\components\nprpffbrowserrecordext.dll
FF - component: c:\users\okay\AppData\Roaming\Mozilla\Firefox\Profiles\68dvvcp1.default\extensions\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}\components\FFExternalAlert.dll
FF - component: c:\users\okay\AppData\Roaming\Mozilla\Firefox\Profiles\68dvvcp1.default\extensions\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}\components\RadioWMPCore.dll
FF - plugin: c:\program files\Google\Google Earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\Google\Update\1.2.183.23\npGoogleOneClick8.dll
FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll
FF - plugin: c:\users\okay\AppData\Roaming\Mozilla\Firefox\Profiles\68dvvcp1.default\extensions\firefox@tvunetworks.com\plugins\npTVUAx.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

WebBrowser-{EEE6C35B-6118-11DC-9C72-001320C79847} - (no file)
WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-06-08 22:05
Windows 6.0.6001 Service Pack 1 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

HKCU\Software\Microsoft\Windows\CurrentVersion\Run
msnmsgr = "c:\program files\Windows Live\Messenger\msnmsgr.exe" /background??s

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_USERS\S-1-5-21-1906499687-2821299545-2296851287-1000\Software\SecuROM\License information*]
"datasecu"=hex:33,4d,2a,88,99,78,73,92,b6,67,b0,79,30,84,01,d6,31,f3,59,c0,50,
f6,ce,6d,1c,17,87,5a,7f,d7,36,2a,9b,4f,dd,49,74,b7,cc,53,b5,0c,88,73,ec,19,\
"rkeysecu"=hex:60,b1,85,e0,b5,34,b0,84,9c,49,54,2a,37,15,57,30

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b5

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
Celkový čas: 2010-06-08 22:10:16
ComboFix-quarantined-files.txt 2010-06-08 20:10

Před spuštěním: Volných bajtů: 50 051 502 080
Po spuštění: Volných bajtů: 50 551 181 312

- - End Of File - - 9143940F972FC14A467CA078523E57B9

[earl]

Zdravim,

ComboFix vam doporucil kdo? Vsude piseme,ze pouziti z vlastni vule ma sva rizika...

Jake jsou potize s ramkou?

otestujte na VIRUSTOTALu

c:\users\okay\AppData\Local\Temp\AOITNCTAI.exe

c:\users\okay\AppData\Local\Temp\LSNKAQEO.exe

c:\users\okay\AppData\Local\Temp\VOANU.exe

(navod prosty: po nacteni stranky kliknete na tlacitko Prochazet , najdete cestu k vyse zminenemu souboru a kliknete na tlacitko Odeslat soubor; dejte skenerum nejakych deset minut; vysledek sem vlozte)

Pokud skener napíše, že soubor již byl testován, dejte otestovat znovu.

Mate tri antispy softy - Spybot,Defender a AdAware - rezidentni stit mejte zapnuty pouze u jednoho,muze dojit k nestabilite systemu.

[jenda33]

ANO S RIZIKAMA JSEM SI BYL JIST. rAMKA BYLA VYTÍŽENA NA 56% A VÍCE A POD TUTO HODNOTU NEKLESALA. jAK JSEM POUŽIL TENTO PROGRAM JE 28%. mĚL JSEM PŘÍLIŠ PROCESŮ A TED JE JICH MÍŇ A POČÍTAČ JE RYCHLEJŠÍ.

[jenda33]

c:\users\okay\AppData\Local\Temp\AOITNCTAI.exe NEBYL NALEZEN

[jenda33]

ANI TEN DRUHÝ

[jenda33]

Ani ten 3

[earl]

Priste,az budete chtit snizit pocet procesu,tak napred odinstalujte nepotrebny soft pres Pridat odebrat programy.

Jde o to,ze rada uzivatelu ma napr. ve slozce Po spusteni radu programu,ktere se spousti po startu Windows.

Takze nejprve jdete do slozky C:\Documents and Settings\jmeno_uzivatele\Nabidka Start\Programy\Po spusteni a zde odstrante nepotrebne programy.

Pro zrychleni startu Windows stahnete a spustte program StartUpLite

Program vypise seznam zbytecnych programu spoustejicich se pri startu Windows .

K vypnuti spousteni techto programu zaskrtnete u prislusnych radku Disable a kliknete na Continue.

A jeste radikalnejsi postup je utilita Autoruns.

Stahnete a pouzijte utilitu Autoruns v mem podpisu.

Po prvnim spusteni po dokonceni nabehu zaklepnete fajfku na zalozce Options u polozky Hide Microsoft Entries

a zavrete a spustte znovu.

Pote zkontrolujte vsechny polozky,spoustejici se po startu a pomalu zacnete s

omezovanim jejich poctu.

Tim docilite minimalniho poctu polozek spoustenych po startu Windows.

Start - spustit - napiste ComboFix /Uninstall - a klepnout na OK,

pokud to takto nepujde,tak přejmenovat ComboFix.exe na Uninstall.exe a spustit ho.
-----------------------------------------------------------------------------------------------------------------

Pouzijte T-Cleaner na vycisteni pc po utilitach pouzitych pri odvirovani.

Postupujte dle instrukci na obrazovce.Pri detekci antivirem se jedna o falesny poplach.
-----------------------------------------------------------------------------------------------------------------

Vycistete pc Ccleanerem.

Vzdy nejprve Analyzovat a pak Spustit Cleaner.2x po sobe.

Windows-odskrtnout historii a historii automatickeho vyplnovani formularu - prisel byste o historii navstivenych stranek a o ulozena hesla ve formularich

(je to sice z pohledu zabezpeceni spatne,ale aspon pak uzivatel nenadava,kam ze mu to zmizelo )

Aplikace-u prohlizecu internetu odskrtnout Historii internetu.

Registry-nechat vse zaskrtle,Hledej problemy,Opravit vybrane problemy

(nechat ho udelat zalohu-ta je ulozena v Dokumentech-DULEZITE).

Taktez 2x-3x po sobe.

A hotovo.