Pomalý internet

[ElHyno]

ComboFix 10-07-05.03 - standard 06.07.2010 17:45:03.5.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1033.18.1022.522 [GMT 2:00]
Spuštěný z: c:\documents and settings\standard\Desktop\ComboFix.exe
AV: avast! antivirus 4.8.0 [VPS 091230-0] *On-access scanning disabled* (Outdated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
* Vytvořen nový Bod Obnovení
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\standard\Application Data\Dealio
c:\documents and settings\standard\Application Data\Dealio\res\widgets.xml
c:\documents and settings\standard\Application Data\Dealio\temp\http___www_dealio_com_rss_coupons-deals_dotd_.xml
c:\windows\system32\_000005_.tmp.dll

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-06-06 do 2010-07-06 )))))))))))))))))))))))))))))))
.

2010-07-05 08:21 . 2010-07-05 08:21 -------- d-----w- c:\documents and settings\standard\Application Data\Malwarebytes
2010-07-05 08:21 . 2010-04-29 13:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-07-05 08:21 . 2010-07-05 08:37 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-07-05 08:21 . 2010-07-05 08:21 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
2010-07-05 08:21 . 2010-04-29 13:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-07-05 08:00 . 2010-07-05 08:00 -------- d-----w- c:\program files\CCleaner
2010-06-23 11:26 . 2010-06-23 12:34 -------- d-----w- c:\program files\trend micro
2010-06-23 11:24 . 2009-11-24 22:49 48560 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2010-06-23 11:24 . 2009-11-24 22:48 23120 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2010-06-23 11:24 . 2009-11-24 22:47 27408 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2010-06-23 11:24 . 2009-11-24 22:51 93424 ----a-w- c:\windows\system32\drivers\aswmon.sys
2010-06-23 11:24 . 2009-11-24 22:50 94160 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2010-06-23 11:24 . 2009-11-24 22:50 114768 ----a-w- c:\windows\system32\drivers\aswSP.sys
2010-06-23 11:24 . 2009-11-24 22:50 20560 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2010-06-23 11:24 . 2009-11-24 22:47 97480 ----a-w- c:\windows\system32\AvastSS.scr
2010-06-23 11:23 . 2009-11-24 22:54 1280480 ------w- c:\windows\system32\aswBoot.exe

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-07-05 09:15 . 2010-07-05 09:13 7786 ----a-w- C:\UsbFix_Upload_Me_STANDARD.zip
2010-07-05 07:24 . 2008-03-29 19:58 -------- d-----w- c:\program files\LifeView DTV
2010-07-02 14:58 . 2007-02-08 17:03 -------- d-----w- c:\program files\Google
2010-07-02 14:57 . 2009-07-15 04:15 -------- d-----w- c:\program files\ICQ6Toolbar
2010-07-02 14:57 . 2010-01-16 14:35 -------- d-----w- c:\program files\Application Updater
2010-07-02 14:43 . 2008-07-24 17:06 -------- d-----w- c:\program files\Common Files\Symantec Shared
2010-07-02 14:43 . 2006-11-28 18:09 -------- d-----w- c:\program files\Symantec
2010-06-29 17:50 . 2010-03-26 17:03 439816 ----a-w- c:\documents and settings\standard\Application Data\Real\Update\setup3.10\setup.exe
2010-06-28 17:33 . 2007-06-19 13:06 -------- d-----w- c:\program files\Common Files\Macromedia
2010-06-26 13:51 . 2007-06-04 14:18 -------- d-----w- c:\documents and settings\standard\Application Data\ICQ
2010-06-17 19:12 . 2009-07-15 04:13 -------- d-----w- c:\program files\ICQ6.5
2010-05-13 07:14 . 2007-10-25 08:28 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help
2010-05-11 19:57 . 2006-12-24 21:03 -------- d-----w- c:\documents and settings\standard\Application Data\Skype
2010-04-14 07:12 . 2009-11-16 17:48 79488 ----a-w- c:\documents and settings\standard\Application Data\Sun\Java\jre1.6.0_17\gtapi.dll
2006-05-03 10:06 . 2008-09-02 11:43 163328 --sh--r- c:\windows\system32\flvDX.dll
2007-02-21 11:47 . 2008-09-02 11:43 31232 --sh--r- c:\windows\system32\msfDX.dll
2008-03-16 13:30 . 2010-01-09 19:11 216064 --sh--r- c:\windows\system32\nbDX.dll
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SmpcSys"="c:\apps\SMP\SmpSys.exe" [2005-12-08 975360]
"mRouterConfig"="c:\program files\Intuwave\Shared\mRouterRuntime\mRouterConfig.exe" [2006-03-02 290816]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PHIME2002ASync"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-10 455168]
"PHIME2002A"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-10 455168]
"ehTray"="c:\windows\ehome\ehtray.exe" [2005-08-05 64512]
"SMSERIAL"="sm56hlpr.exe" [2005-10-18 557056]
"RTHDCPL"="RTHDCPL.EXE" [2006-05-18 16207872]
"SkyTel"="SkyTel.EXE" [2006-05-16 2879488]
"ATICCC"="c:\program files\ATI Technologies\ATI.ACE\CLIStart.exe" [2006-05-10 90112]
"DetectorApp"="c:\program files\Sonic\DigitalMedia LE v7\MyDVD LE\DetectorApp.exe" [2005-10-20 102400]
"IMJPMIG8.1"="c:\windows\IME\imjp8_1\IMJPMIG.EXE" [2004-08-10 208952]
"mouseElf"="c:\progra~1\TWINTO~1\MouseElf.EXE" [2004-08-26 192512]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2006-11-28 98304]
"NeroCheck"="c:\windows\system32\\NeroCheck.exe" [2001-07-09 155648]
"Sony Ericsson PC Suite"="c:\program files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" [2006-11-24 487424]
"DTVRemote"="c:\program files\LifeView DTV\RemoteControl.exe" [2004-12-02 36864]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2008-06-13 185896]
"PC Suite for Smartphones"="c:\program files\Sony Ericsson\Mobile4\Application Launcher\Application Launcher.exe" [2007-11-08 528384]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-10-15 39792]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-03-09 148888]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\All Users\Start Menu\Programs\Startup\
Adobe Gamma Loader.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2007-2-18 113664]
DSLMON.lnk - c:\program files\SAGEM\SAGEM F@st 800-840\dslmon.exe [2006-12-27 966756]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\WBSrv]
2007-03-05 14:36 140976 ----a-w- c:\progra~1\Stardock\OBJECT~1\WINDOW~1\WbSrv.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Authentication Packages REG_MULTI_SZ msv1_0 nwprovau

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\Intuwave\\Shared\\mRouterRuntime\\mRouterRuntime.exe"=
"c:\\Program Files\\BitLord\\BitLord.exe"=
"c:\\Program Files\\PES08\\Pro Evolution Soccer 2008\\PES2008.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\QIP Infium\\infium.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\Real\\RealPlayer\\realplay.exe"=
"c:\\Program Files\\Java\\jdk1.6.0_07\\jre\\bin\\java.exe"=
"c:\\Program Files\\ICQ6.5\\ICQ.exe"=
"c:\\Program Files\\Opera\\opera.exe"=
"c:\\APPS\\skype\\phone\\Skype.exe"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"9918:TCP"= 9918:TCP:BitComet 9918 TCP
"9918:UDP"= 9918:UDP:BitComet 9918 UDP

R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [23.6.2010 13:24 114768]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [23.6.2010 13:24 20560]
R3 genmcmnUSB;USB Scroll Mouse Driver;c:\windows\system32\drivers\gflmouhid.sys [25.12.2006 16:40 6656]
R3 LVHybrid;LVHybrid service;c:\windows\system32\drivers\LVHybrid.sys [29.3.2008 21:49 660736]
S4 sptd;sptd;c:\windows\system32\drivers\sptd.sys [30.12.2006 16:11 682232]
.
Obsah adresáře 'Naplánované úlohy'

2010-07-06 c:\windows\Tasks\Extended Warranty.job
- c:\apps\SMP\PBCARNOT.EXE [2005-11-09 12:55]

2010-07-06 c:\windows\Tasks\Master CD_DVD Creator.job
- c:\apps\SMP\MCDCHECK.EXE [2005-11-08 14:26]

2010-07-06 c:\windows\Tasks\User_Feed_Synchronization-{AD4007AC-1D73-4F72-AD10-FDAD23C6E17E}.job
- c:\windows\system32\msfeedssync.exe [2007-08-13 02:31]
.
.
------- Doplňkový sken -------
.
uLocal Page =
uSearchMigratedDefaultUrl =
IE: &ICQ Toolbar Search - c:\program files\ICQToolbar\toolbaru.dll/SEARCH.HTML
IE: Add to AMV Converter... - c:\program files\MP3 Player Utilities 4.15\AMVConverter\grab.html
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: MediaManager tool grab multimedia file - c:\program files\MP3 Player Utilities 4.15\MediaManager\grab.html
Trusted Zone: stahuj.cz
FF - ProfilePath - c:\documents and settings\standard\Application Data\Mozilla\Firefox\Profiles\bwgedfj5.default\
FF - prefs.js: browser.search.defaulturl -
FF - prefs.js: browser.search.selectedEngine - ICQ Search
FF - prefs.js: browser.startup.homepage - hxxp://www.google.cz/
FF - prefs.js: keyword.URL - hxxp://search.icq.com/search/afe_results.php?ch_id=afex&q=
FF - component: c:\documents and settings\standard\Application Data\Mozilla\Firefox\Profiles\bwgedfj5.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\frozen.dll
FF - component: c:\documents and settings\standard\Application Data\Mozilla\Firefox\Profiles\bwgedfj5.default\extensions\{32a1fd71-835e-4b11-8e54-886fda0b4c89}\components\qippipe.dll
FF - plugin: c:\documents and settings\standard\Application Data\Mozilla\Firefox\Profiles\bwgedfj5.default\extensions\firefox@tvunetworks.com\plugins\npTVUAx.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npmozax.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
.
.
------- Asociace souborů -------
.
.scr=AutoCADScriptFile
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-07-06 17:50
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(1120)
c:\windows\system32\Ati2evxx.dll
c:\progra~1\Stardock\OBJECT~1\WINDOW~1\wbsrv.dll
.
Celkový čas: 2010-07-06 17:52:09
ComboFix-quarantined-files.txt 2010-07-06 15:52
ComboFix2.txt 2010-07-05 09:21

Před spuštěním: 159 969 484 800 bytes free
Po spuštění: 159 939 919 872 bytes free

- - End Of File - - CD5A538E3CA419B345A2AF7724D09D46

[stell]

ok,uz to vyzera dobre,,este sprav toto a napis ako sa chova pc.
Pri tejto akcii je nutné mať ComboFix na ploche.

Vypni>FIREWALL>Antivir>Antispyware>vsetko rezidentne.

Otvor Notepad (Poznámkový blok) a zkopíruj do neho celý zeleny tex:

Kód: Vybrat vše

KILLALL::
Folder::
c:\program files\Common Files\Symantec Shared
c:\program files\Symantec
Registry::
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"QuickTime Task"=-
"NeroCheck"=-
"Adobe Reader Speed Launcher"=-
"SunJavaUpdateSched"=-
File::
c:\windows\Tasks\Extended Warranty.job
DDS::
IE: &ICQ Toolbar Search - c:\program files\ICQToolbar\toolbaru.dll/SEARCH.HTML
Extra::
FireFox::
FF - ProfilePath - c:\documents and settings\standard\Application Data\Mozilla\Firefox\Profiles\bwgedfj5.default\
FF - prefs.js: browser.search.selectedEngine - ICQ Search
FF - prefs.js: keyword.URL - hxxp://search.icq.com/search/afe_result ... id=afex&q=

Potom klik na Subor -> Uložiť ako.. .. -> Ako je Názov souboru tak do toho riadku napiš:CFScript.txt
Typ súboru tak tam vyberies *všetky súbory
A ulož ho na plochu.> Pozor CFScript.txt>Neotvarat a nemoze byt ani>CFScript.txt.txt A Urobis Toto :


Po skonceni skenu vlož log čo ComboFix vytvorí

[ElHyno]

internet se nepatrně zrychlil, ale stále to neni ono. Načítání trvá stále dlouho


ComboFix 10-07-05.03 - standard 06.07.2010 19:12:43.6.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1033.18.1022.541 [GMT 2:00]
Spuštěný z: c:\documents and settings\standard\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\standard\Desktop\CFScript.txt
AV: avast! antivirus 4.8.0 [VPS 091230-0] *On-access scanning disabled* (Outdated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
* Vytvořen nový Bod Obnovení

FILE ::
"c:\windows\Tasks\Extended Warranty.job"
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\program files\Common Files\Symantec Shared
c:\program files\Common Files\Symantec Shared\AntiVirus\TBDC6.tmp
c:\program files\Common Files\Symantec Shared\AntiVirus\TBDC7.tmp
c:\program files\Common Files\Symantec Shared\AntiVirus\TBDC8.tmp
c:\program files\Common Files\Symantec Shared\AntiVirus\TBDC9.tmp
c:\program files\Common Files\Symantec Shared\AntiVirus\TBDCA.tmp
c:\program files\Common Files\Symantec Shared\CCPD-LC\symlcrst.dll
c:\program files\Common Files\Symantec Shared\COH\COHClean.dll
c:\program files\Common Files\Symantec Shared\COH\sH0007.dll
c:\program files\Common Files\Symantec Shared\COH\TBDB6.tmp
c:\program files\Common Files\Symantec Shared\Default.rul
c:\program files\Common Files\Symantec Shared\Firewall.BAK
c:\program files\Common Files\Symantec Shared\Firewall.rul
c:\program files\Common Files\Symantec Shared\Firewall\TBDBD.tmp
c:\program files\Common Files\Symantec Shared\Firewall\TBDBE.tmp
c:\program files\Common Files\Symantec Shared\HomeNet\TBDBC.tmp
c:\program files\Common Files\Symantec Shared\LocationMap.dat
c:\program files\Common Files\Symantec Shared\NFWEVT.LOG
c:\program files\Common Files\Symantec Shared\Persist.BAK
c:\program files\Common Files\Symantec Shared\Persist.Dat
c:\program files\Common Files\Symantec Shared\PIF\{96E26A03-A25A-400b-B9B4-564C9BD00F46}\TBDD1.tmp
c:\program files\Common Files\Symantec Shared\SEVINST.EXE
c:\program files\Common Files\Symantec Shared\SNDALRT.log
c:\program files\Common Files\Symantec Shared\SNDCON.log
c:\program files\Common Files\Symantec Shared\SNDDBG.log
c:\program files\Common Files\Symantec Shared\SNDFW.log
c:\program files\Common Files\Symantec Shared\SNDIDS.log
c:\program files\Common Files\Symantec Shared\SNDSvc.dll
c:\program files\Common Files\Symantec Shared\SNDSYS.log
c:\program files\Common Files\Symantec Shared\SNDunin.dll
c:\program files\Common Files\Symantec Shared\SPManifests\Snd.grd
c:\program files\Common Files\Symantec Shared\SPManifests\Snd.sig
c:\program files\Common Files\Symantec Shared\SPManifests\Snd.spm
c:\program files\Common Files\Symantec Shared\SPManifests\SYMEVNT.GRD
c:\program files\Common Files\Symantec Shared\SPManifests\SYMEVNT.SIG
c:\program files\Common Files\Symantec Shared\SPManifests\SYMEVNT.SPM
c:\program files\Common Files\Symantec Shared\SymcData\ipsdefs\20090715.003\SymIDSI.dll
c:\program files\Common Files\Symantec Shared\SymHTML\2.0\SymHTML.dll
c:\program files\Common Files\Symantec Shared\SymNetDrv\symIM.cat
c:\program files\Common Files\Symantec Shared\SymNetDrv\SymIM.sys
c:\program files\Common Files\Symantec Shared\SymNetDrv\SymIM_m.inf
c:\program files\Common Files\Symantec Shared\SymNetDrv\SymIM_p.inf
c:\program files\Common Files\Symantec Shared\SymNetDrv\symIMv.cat
c:\program files\Common Files\Symantec Shared\SymNetDrv\SymIMv.inf
c:\program files\Common Files\Symantec Shared\SymNetDrv\SymIMv.sys
c:\program files\Common Files\Symantec Shared\SymTheme\1.0\SymTheme.dll
c:\program files\Common Files\Symantec Shared\TBDC5.tmp
c:\program files\Common Files\Symantec Shared\TModule.dat
c:\program files\Common Files\Symantec Shared\TParent.dat
c:\program files\Symantec
c:\program files\Symantec\S32EVNT1.DLL
c:\program files\Symantec\SYMEVENT.CAT
c:\program files\Symantec\SYMEVENT.INF
c:\program files\Symantec\SYMEVENT.SYS
c:\windows\Tasks\Extended Warranty.job

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-06-06 do 2010-07-06 )))))))))))))))))))))))))))))))
.

2010-07-05 08:21 . 2010-07-05 08:21 -------- d-----w- c:\documents and settings\standard\Application Data\Malwarebytes
2010-07-05 08:21 . 2010-04-29 13:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-07-05 08:21 . 2010-07-05 08:37 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-07-05 08:21 . 2010-07-05 08:21 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
2010-07-05 08:21 . 2010-04-29 13:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-07-05 08:00 . 2010-07-05 08:00 -------- d-----w- c:\program files\CCleaner
2010-06-23 11:26 . 2010-06-23 12:34 -------- d-----w- c:\program files\trend micro
2010-06-23 11:24 . 2009-11-24 22:49 48560 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2010-06-23 11:24 . 2009-11-24 22:48 23120 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2010-06-23 11:24 . 2009-11-24 22:47 27408 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2010-06-23 11:24 . 2009-11-24 22:51 93424 ----a-w- c:\windows\system32\drivers\aswmon.sys
2010-06-23 11:24 . 2009-11-24 22:50 94160 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2010-06-23 11:24 . 2009-11-24 22:50 114768 ----a-w- c:\windows\system32\drivers\aswSP.sys
2010-06-23 11:24 . 2009-11-24 22:50 20560 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2010-06-23 11:24 . 2009-11-24 22:47 97480 ----a-w- c:\windows\system32\AvastSS.scr
2010-06-23 11:23 . 2009-11-24 22:54 1280480 ------w- c:\windows\system32\aswBoot.exe

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-07-05 09:15 . 2010-07-05 09:13 7786 ----a-w- C:\UsbFix_Upload_Me_STANDARD.zip
2010-07-05 07:24 . 2008-03-29 19:58 -------- d-----w- c:\program files\LifeView DTV
2010-07-02 14:58 . 2007-02-08 17:03 -------- d-----w- c:\program files\Google
2010-07-02 14:57 . 2009-07-15 04:15 -------- d-----w- c:\program files\ICQ6Toolbar
2010-07-02 14:57 . 2010-01-16 14:35 -------- d-----w- c:\program files\Application Updater
2010-06-29 17:50 . 2010-03-26 17:03 439816 ----a-w- c:\documents and settings\standard\Application Data\Real\Update\setup3.10\setup.exe
2010-06-28 17:33 . 2007-06-19 13:06 -------- d-----w- c:\program files\Common Files\Macromedia
2010-06-26 13:51 . 2007-06-04 14:18 -------- d-----w- c:\documents and settings\standard\Application Data\ICQ
2010-06-17 19:12 . 2009-07-15 04:13 -------- d-----w- c:\program files\ICQ6.5
2010-05-13 07:14 . 2007-10-25 08:28 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help
2010-05-11 19:57 . 2006-12-24 21:03 -------- d-----w- c:\documents and settings\standard\Application Data\Skype
2010-04-14 07:12 . 2009-11-16 17:48 79488 ----a-w- c:\documents and settings\standard\Application Data\Sun\Java\jre1.6.0_17\gtapi.dll
2006-05-03 10:06 . 2008-09-02 11:43 163328 --sh--r- c:\windows\system32\flvDX.dll
2007-02-21 11:47 . 2008-09-02 11:43 31232 --sh--r- c:\windows\system32\msfDX.dll
2008-03-16 13:30 . 2010-01-09 19:11 216064 --sh--r- c:\windows\system32\nbDX.dll
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SmpcSys"="c:\apps\SMP\SmpSys.exe" [2005-12-08 975360]
"mRouterConfig"="c:\program files\Intuwave\Shared\mRouterRuntime\mRouterConfig.exe" [2006-03-02 290816]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PHIME2002ASync"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-10 455168]
"PHIME2002A"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-10 455168]
"ehTray"="c:\windows\ehome\ehtray.exe" [2005-08-05 64512]
"SMSERIAL"="sm56hlpr.exe" [2005-10-18 557056]
"RTHDCPL"="RTHDCPL.EXE" [2006-05-18 16207872]
"SkyTel"="SkyTel.EXE" [2006-05-16 2879488]
"ATICCC"="c:\program files\ATI Technologies\ATI.ACE\CLIStart.exe" [2006-05-10 90112]
"DetectorApp"="c:\program files\Sonic\DigitalMedia LE v7\MyDVD LE\DetectorApp.exe" [2005-10-20 102400]
"IMJPMIG8.1"="c:\windows\IME\imjp8_1\IMJPMIG.EXE" [2004-08-10 208952]
"mouseElf"="c:\progra~1\TWINTO~1\MouseElf.EXE" [2004-08-26 192512]
"Sony Ericsson PC Suite"="c:\program files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" [2006-11-24 487424]
"DTVRemote"="c:\program files\LifeView DTV\RemoteControl.exe" [2004-12-02 36864]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2008-06-13 185896]
"PC Suite for Smartphones"="c:\program files\Sony Ericsson\Mobile4\Application Launcher\Application Launcher.exe" [2007-11-08 528384]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\All Users\Start Menu\Programs\Startup\
Adobe Gamma Loader.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2007-2-18 113664]
DSLMON.lnk - c:\program files\SAGEM\SAGEM F@st 800-840\dslmon.exe [2006-12-27 966756]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\WBSrv]
2007-03-05 14:36 140976 ----a-w- c:\progra~1\Stardock\OBJECT~1\WINDOW~1\WbSrv.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Authentication Packages REG_MULTI_SZ msv1_0 nwprovau

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\Intuwave\\Shared\\mRouterRuntime\\mRouterRuntime.exe"=
"c:\\Program Files\\BitLord\\BitLord.exe"=
"c:\\Program Files\\PES08\\Pro Evolution Soccer 2008\\PES2008.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\QIP Infium\\infium.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\Real\\RealPlayer\\realplay.exe"=
"c:\\Program Files\\Java\\jdk1.6.0_07\\jre\\bin\\java.exe"=
"c:\\Program Files\\ICQ6.5\\ICQ.exe"=
"c:\\Program Files\\Opera\\opera.exe"=
"c:\\APPS\\skype\\phone\\Skype.exe"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"9918:TCP"= 9918:TCP:BitComet 9918 TCP
"9918:UDP"= 9918:UDP:BitComet 9918 UDP

R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [23.6.2010 13:24 114768]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [23.6.2010 13:24 20560]
R3 genmcmnUSB;USB Scroll Mouse Driver;c:\windows\system32\drivers\gflmouhid.sys [25.12.2006 16:40 6656]
R3 LVHybrid;LVHybrid service;c:\windows\system32\drivers\LVHybrid.sys [29.3.2008 21:49 660736]
S4 sptd;sptd;c:\windows\system32\drivers\sptd.sys [30.12.2006 16:11 682232]
.
Obsah adresáře 'Naplánované úlohy'

2010-07-06 c:\windows\Tasks\Master CD_DVD Creator.job
- c:\apps\SMP\MCDCHECK.EXE [2005-11-08 14:26]

2010-07-06 c:\windows\Tasks\User_Feed_Synchronization-{AD4007AC-1D73-4F72-AD10-FDAD23C6E17E}.job
- c:\windows\system32\msfeedssync.exe [2007-08-13 02:31]
.
.
------- Doplňkový sken -------
.
uLocal Page =
uSearchMigratedDefaultUrl =
IE: Add to AMV Converter... - c:\program files\MP3 Player Utilities 4.15\AMVConverter\grab.html
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: MediaManager tool grab multimedia file - c:\program files\MP3 Player Utilities 4.15\MediaManager\grab.html
Trusted Zone: stahuj.cz
FF - ProfilePath - c:\documents and settings\standard\Application Data\Mozilla\Firefox\Profiles\bwgedfj5.default\
FF - prefs.js: browser.search.defaulturl -
FF - prefs.js: browser.startup.homepage - hxxp://www.google.cz/
FF - component: c:\documents and settings\standard\Application Data\Mozilla\Firefox\Profiles\bwgedfj5.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\frozen.dll
FF - component: c:\documents and settings\standard\Application Data\Mozilla\Firefox\Profiles\bwgedfj5.default\extensions\{32a1fd71-835e-4b11-8e54-886fda0b4c89}\components\qippipe.dll
FF - plugin: c:\documents and settings\standard\Application Data\Mozilla\Firefox\Profiles\bwgedfj5.default\extensions\firefox@tvunetworks.com\plugins\npTVUAx.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npmozax.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
.
.
------- Asociace souborů -------
.
.scr=AutoCADScriptFile
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-07-06 19:22
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(1128)
c:\windows\system32\Ati2evxx.dll
c:\progra~1\Stardock\OBJECT~1\WINDOW~1\wbsrv.dll

- - - - - - - > 'explorer.exe'(2636)
c:\windows\system32\WININET.dll
c:\progra~1\WINDOW~3\wmpband.dll
c:\windows\system32\WhoRU.dll
c:\windows\system32\ieframe.dll
c:\program files\TwinTouch LuxeMate\emhook.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\program files\WinSCP\DragExt.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\windows\system32\Ati2evxx.exe
c:\program files\Alwil Software\Avast4\aswUpdSv.exe
c:\windows\system32\DRIVERS\CDANTSRV.EXE
c:\windows\eHome\ehRecvr.exe
c:\windows\eHome\ehSched.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
c:\program files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
c:\program files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe
c:\windows\ehome\mcrdsvc.exe
c:\windows\sm56hlpr.exe
c:\windows\RTHDCPL.EXE
c:\program files\ATI Technologies\ATI.ACE\CLI.EXE
c:\program files\Intuwave\Shared\mRouterRuntime\mRouterRuntime.exe
c:\program files\Real\RealPlayer\RealPlay.exe
c:\windows\system32\dllhost.exe
c:\program files\TwinTouch LuxeMate\EMouse.exe
c:\windows\system32\wscntfy.exe
c:\windows\eHome\ehmsas.exe
c:\program files\Common Files\Teleca Shared\Generic.exe
c:\program files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
c:\progra~1\Symbian\Shared\SYMBIA~1\SYMBIA~1.EXE
c:\progra~1\Symbian\Shared\SYMBIA~1\SCBAL.exe
c:\program files\ATI Technologies\ATI.ACE\cli.exe
c:\program files\ATI Technologies\ATI.ACE\cli.exe
.
**************************************************************************
.
Celkový čas: 2010-07-06 19:27:35 - počítač byl restartován
ComboFix-quarantined-files.txt 2010-07-06 17:27
ComboFix2.txt 2010-07-06 15:52
ComboFix3.txt 2010-07-05 09:21

Před spuštěním: 159 915 143 168 bytes free
Po spuštění: 159 886 893 056 bytes free

- - End Of File - - A92495242C57C790DFDFE2FA7CAED0D0

[stell]

> Stáhni si a spusť program StartUpLite - http://www.malwarebytes.org/StartUpLite.exe
- Program vypíše seznam zbytečných programů spouštějících se při startu Windows
- K vypnutí spouštění těchto programů zaškrtni u příslušných řádků Disable a klikni na Continue.
Smažte cache Opery/Firefoxu bud ručně nebo ATF Cleanerem
http://www.slunecnice.cz/sw/atf-cleaner/
- v menu nahoře vyberte záložku Firefox / Opera a klikněte na ni
zatrhněte Select All a pak klikněte na Empty Selected

pozor - přijdete o všechna hesla uložená ve FF /Opere![saved paswords-nezafajknut]

- Na záložce main zaškrtněte select all.-empty selected.
sprav z malwarebytes UPLNY skan,nakolko doteraz si robil-len- Rychlý sken-akl nieco najde zmaz-log vloz sem.
sprav kontrolu s programom AVP-tool-bude to trvat dlhsie,,ale treba to spravit,log vloz sem-navod:
http://www.viry.cz/forum/viewtopic.php?f=29&t=58179
Po skene treba odinstalovat.

[ElHyno]

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Verze databáze: 4052

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

6.7.2010 20:52:08
mbam-log-2010-07-06 (20-52-08).txt

Typ skenu: Úplný sken (C:\|)
Skenované objekty: 240595
Uplynulý čas: 37 minuta(y), 1 sekunda(y)

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče registru: 0
Infikované hodnoty registru: 0
Infikované datové položky registru: 0
Infikované složky: 0
Infikované soubory: 2

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
C:\Program Files\Aplikace\SmileyCentralPFSetup2.2.60.11-2.ZNfox000(2).exe (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\Aplikace\SmileyCentralPFSetup2.2.60.11-2.ZNfox000.exe (Adware.MyWebSearch) -> Quarantined and deleted successfully.

[stell]

a co AVP-tool-??nasiel nieco??

[ElHyno]

Autoscan: completed 2 hours ago (events: 19, objects: 460958, time: 01:00:12)
9.7.2010 14:28:20 Task started
9.7.2010 14:33:15 Detected: Trojan.Win32.DelFiles.mj C:\Documents and Settings\standard\Desktop\T-Cleaner.exe
9.7.2010 14:33:18 Deleted: Trojan.Win32.DelFiles.mj C:\Documents and Settings\standard\Desktop\T-Cleaner.exe
9.7.2010 14:33:18 Deleted: Trojan.Win32.DelFiles.mj C:\Documents and Settings\standard\Desktop\T-Cleaner.exe
9.7.2010 14:55:56 Detected: not-a-virus:AdWare.Win32.Excite.a C:\Program Files\Aplikace\freeripmp3.exe/data0038/data0000.res/data0001.res
9.7.2010 14:56:07 Detected: not-a-virus:AdWare.Win32.MyWay.f C:\Program Files\Aplikace\freeripmp3.exe/data0038/data0000.res/data0005.res
9.7.2010 14:56:07 Detected: not-a-virus:AdWare.Win32.Excite.a C:\Program Files\Aplikace\freeripmp3.exe/data0038/#/data0001.res
9.7.2010 14:56:07 Detected: not-a-virus:AdWare.Win32.MyWay.f C:\Program Files\Aplikace\freeripmp3.exe/data0038/#/data0005.res
9.7.2010 14:56:07 Deleted: not-a-virus:AdWare.Win32.MyWay.f C:\Program Files\Aplikace\freeripmp3.exe
9.7.2010 15:11:51 Detected: not-a-virus:AdWare.Win32.Excite.a C:\System Volume Information\_restore{5FED904E-6E1E-4B49-8681-D5C017BB5784}\RP5\A0001638.exe/data0038/data0000.res/data0001.res
9.7.2010 15:11:52 Detected: Trojan.Win32.DelFiles.mj C:\System Volume Information\_restore{5FED904E-6E1E-4B49-8681-D5C017BB5784}\RP5\A0001637.exe
9.7.2010 15:11:58 Detected: not-a-virus:AdWare.Win32.MyWay.f C:\System Volume Information\_restore{5FED904E-6E1E-4B49-8681-D5C017BB5784}\RP5\A0001638.exe/data0038/data0000.res/data0005.res
9.7.2010 15:11:58 Detected: not-a-virus:AdWare.Win32.Excite.a C:\System Volume Information\_restore{5FED904E-6E1E-4B49-8681-D5C017BB5784}\RP5\A0001638.exe/data0038/#/data0001.res
9.7.2010 15:11:58 Detected: not-a-virus:AdWare.Win32.MyWay.f C:\System Volume Information\_restore{5FED904E-6E1E-4B49-8681-D5C017BB5784}\RP5\A0001638.exe/data0038/#/data0005.res
9.7.2010 15:11:58 Deleted: Trojan.Win32.DelFiles.mj C:\System Volume Information\_restore{5FED904E-6E1E-4B49-8681-D5C017BB5784}\RP5\A0001637.exe
9.7.2010 15:11:58 Deleted: not-a-virus:AdWare.Win32.MyWay.f C:\System Volume Information\_restore{5FED904E-6E1E-4B49-8681-D5C017BB5784}\RP5\A0001638.exe
9.7.2010 15:26:52 Processing error D:\VIDEO_TS\VTS_01_3.VOB Read error
9.7.2010 15:28:31 Processing error D:\VIDEO_TS\VTS_01_0.BUP Read error
9.7.2010 15:28:32 Task completed

[stell]

ok,odinstaluj avptool podla navodu,,a napis ako sa chova pc,,

[ElHyno]

odinstalovaal jsem, ale nyní, možná už delší dobu se připojit nelze vůbec, píše to omezené nebo žádné připojení.

[stell]

> Jestliže nepoužíváte pevnou IP adresu, proxy atd., v sekci Start - Nastavení - Ovládací panely - Síťová připojení - Připojení k místní síti - Vlastnosti - Protokol sítě Internet (TCP/IP) - Vlastnosti zvolíme Získat adresu IP ze serveru DHCP automaticky a Získat adresu serveru DNS automaticky. V opačném případě zadáme do volných řádků nastavení od poskytovatele internetu.

skontrolovat kable od modemu,po pc.

[ElHyno]

Takhle už to mám.

[stell]

Takhle už to mám.

sice neviem ze naco myslis,,ale treba skontrolovat vsetko,,neviem ake pripojenie mas.router.modem,..atd,,
moze byt na pricine:
vadne kable
vadna sietovka
Router
Modem
atd,,

[ElHyno]

Zkusil jsem znova nainstalovat router s novým kabelem, běží to o poznání rychleji, ale zdaleka né tak jako notebooky přes wifi. Mám připojení O2 internet extra za 655kč, mělo by to být 4Mb/s a stahování 512kB/s.

[stell]

nj,ale stale ti vypisuje chybu obmedzene alebo ziadne pripojenie?/ak nie tak sprav Test rychlosti pripojenia.

[ElHyno]

Ne, už to jde. Ale ta rychlost připojení je pouhých 115kb/s a stahování 14kB/s.