Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Problém s internetem - padá připojení

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
mad_doc
Návštěvník
Návštěvník
Příspěvky: 25
Registrován: 13 lis 2006 22:25

Problém s internetem - padá připojení

#1 Příspěvek od mad_doc »

Dobrý den přátelé,
mám menší problém s internetovým připojením - občas mi v prohlížeči nenajedou některé stránky, občas vypadne komplet připojení k internetu. Stačí chvílui počkat a je zase vše ok, vyjímečně musím restartovat PC. Problém se objevil zničehonic, zkoušel jsem měnit router, switch, kabel (na okolních PC ve stejné síti vše funkční bez problému). Jinak žádné další problémy nepozoruji. PC (WIN7) skenuji mbam, případně spyware terminator, rezidentně je tu avira a comodo firewall.

Přilkádám log a děkuji za ochotu (a případnou pomoc).

Logfile of random's system information tool 1.08 (written by random/random)
Run by doktor at 2010-08-02 13:17:37
Microsoft Windows 7 Ultimate
System drive C: has 46 GB (30%) free of 153 GB
Total RAM: 2047 MB (65% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:17:56, on 2.8.2010
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Adobe\Acrobat 9.0\Acrobat\acrotray.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe
C:\totalcmd\TOTALCMD.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\doktor\Desktop\RSIT.exe
C:\Program Files\trend micro\doktor.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: ContributeBHO Class - {074C1DC5-9320-4A9A-947D-C042949C6216} - C:\Program Files\Adobe\/Adobe Contribute CS4/contributeieplugin.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: Pomocník pro přihlášení ke službě Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: kikin Plugin - {E601996F-E400-41CA-804B-CD6373A7EEE2} - C:\Program Files\kikin\ie_kikin.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - C:\Program Files\Adobe\/Adobe Contribute CS4/contributeieplugin.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [Adobe Acrobat Speed Launcher] "C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKLM\..\Run: [AdobeCS5ServiceManager] "C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\ipoint.exe"
O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] "C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - HKCU\..\Run: [SandboxieControl] "C:\Program Files\Sandboxie\SbieCtrl.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - Startup: _uninst_setup_9.0.0.722_06.07.2010_15-53.exe.lnk = doktor\AppData\Local\temp\_uninst_setup_9.0.0.722_06.07.2010_15-53.exe.bat
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: Append Link Target to Existing PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Append to Existing PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert Link Target to Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {0F7195C2-6713-4d93-A1BC-DA5FA33F0A65} - C:\Program Files\kikin\ie_kikin.dll
O9 - Extra 'Tools' menuitem: My kikin - {0F7195C2-6713-4d93-A1BC-DA5FA33F0A65} - C:\Program Files\kikin\ie_kikin.dll
O9 - Extra button: Přidat na blog - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Přidat na blog Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL
O16 - DPF: {D1278801-B2C0-4332-BD3E-2F64D2204EDF} (Windows Live Mesh Upload Tool) - https://www.mesh.com/0.9.4014.39/TSWeb.cab
O20 - AppInit_DLLs: C:\Windows\System32\guard32.dll
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: AST Service (astcc) - Nalpeiron Ltd. - C:\Windows\system32\astsrv.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Nalpeiron Licensing Service (nlsX86cc) - Nalpeiron Ltd. - C:\Windows\system32\nlssrv32.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: Sandboxie Service (SbieSvc) - tzuk - C:\Program Files\Sandboxie\SbieSvc.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Unknown owner - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe (file missing)
O23 - Service: Acronis Try And Decide Service (TryAndDecideService) - Unknown owner - C:\Program Files\Common Files\Acronis\Fomatik\TrueImageTryStartService.exe

--
End of file - 8112 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{074C1DC5-9320-4A9A-947D-C042949C6216}]
ContributeBHO Class - C:\Program Files\Adobe\/Adobe Contribute CS4/contributeieplugin.dll [2008-09-10 136560]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll [2009-01-14 92504]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocník pro přihlášení ke službě Windows Live - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22 408448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe PDF Conversion Toolbar Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-06-19 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}]
Windows Live Toolbar Helper - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2010-04-16 1067872]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E601996F-E400-41CA-804B-CD6373A7EEE2}]
kikin Plugin - C:\Program Files\kikin\ie_kikin.dll [2010-05-06 777904]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F4971EE7-DAA0-4053-9964-665D8EE6A077}]
SmartSelect Class - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2008-06-11 345480]
{517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - Contribute Toolbar - C:\Program Files\Adobe\/Adobe Contribute CS4/contributeieplugin.dll [2008-09-10 136560]
{21FA44EF-376D-4D53-9B0F-8A89D3229068} - &Windows Live Toolbar - C:\Program Files\Windows Live\Toolbar\wltcore.dll [2010-04-16 1067872]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AdobeCS4ServiceManager"=C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [2008-08-14 611712]
"Adobe Acrobat Speed Launcher"=C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe [2008-06-12 37232]
"Acrobat Assistant 8.0"=C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe [2008-06-11 640376]
"Malwarebytes Anti-Malware (reboot)"=C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe [2010-04-29 1090952]
"AdobeCS5ServiceManager"=C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [2010-02-22 406992]
"IntelliPoint"=C:\Program Files\Microsoft IntelliPoint\ipoint.exe [2009-11-11 1468256]
"AdobeAAMUpdater-1.0"=C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06 500208]
"avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [2010-03-02 282792]
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cfp.exe [2010-06-01 2039240]
"JMB36X IDE Setup"=C:\Windows\RaidTool\xInsIDE.exe [2007-03-20 36864]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"=C:\Program Files\Windows Live\Messenger\msnmsgr.exe [2010-04-16 3872080]
"PC Suite Tray"=C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe [2009-11-11 1451520]
"SandboxieControl"=C:\Program Files\Sandboxie\SbieCtrl.exe [2010-07-04 398568]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-07-14 1173504]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acronis Scheduler2 Service]
C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe [2007-10-23 140568]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AcronisTimounterMonitor]
C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe [2007-10-23 906648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Malwarebytes Anti-Malware (reboot)]
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe [2010-04-29 1090952]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TrueImageMonitor.exe]
C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe [2007-10-23 2615624]

C:\Users\doktor\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
_uninst_setup_9.0.0.722_06.07.2010_15-53.exe.lnk - C:\Users\doktor\AppData\Local\temp\_uninst_setup_9.0.0.722_06.07.2010_15-53.exe.bat

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\System32\guard32.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\Windows\system32\webcheck.dll [2009-07-14 229376]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"= []

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"authentication packages"=msv1_0
relog_ap

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 months======

2010-08-02 13:17:41 ----D---- C:\Program Files\trend micro
2010-08-02 13:17:37 ----D---- C:\rsit
2010-07-31 12:46:58 ----SHD---- C:\$RECYCLE.BIN
2010-07-31 12:46:53 ----D---- C:\Windows\temp
2010-07-31 12:46:51 ----A---- C:\ComboFix.txt
2010-07-31 12:30:52 ----A---- C:\Windows\SWXCACLS.exe
2010-07-31 00:38:11 ----D---- C:\!_mov+music
2010-07-24 16:26:46 ----D---- C:\Program Files\Ubisoft
2010-07-24 10:02:52 ----D---- C:\RaidTool
2010-07-24 10:02:52 ----A---- C:\Windows\system32\xRaidSetup.exe
2010-07-24 10:02:52 ----A---- C:\Windows\system32\xRaidAPI.dll
2010-07-24 10:02:37 ----D---- C:\Windows\RaidTool
2010-07-24 10:01:50 ----D---- C:\Program Files\Intel
2010-07-24 10:01:50 ----A---- C:\Windows\system32\CSVer.dll
2010-07-24 10:01:39 ----D---- C:\Intel
2010-07-24 10:01:36 ----A---- C:\Windows\Language_trs.ini
2010-07-24 10:00:36 ----A---- C:\Windows\system32\drivers\jraid.sys
2010-07-24 09:55:07 ----D---- C:\Users\doktor\AppData\Roaming\Download Manager
2010-07-24 09:50:03 ----D---- C:\Program Files\CPUID
2010-07-24 09:50:03 ----A---- C:\Windows\system32\drivers\cpuz134_x32.sys
2010-07-22 13:27:09 ----D---- C:\IExp1.tmp
2010-07-22 13:27:06 ----D---- C:\Windows\RegisteredPackages
2010-07-22 13:27:06 ----D---- C:\IExp0.tmp
2010-07-22 13:27:05 ----HD---- C:\Windows\msdownld.tmp
2010-07-22 13:27:01 ----D---- C:\Program Files\Windows Media Components
2010-07-21 16:42:48 ----A---- C:\Windows\zip.exe
2010-07-21 16:42:48 ----A---- C:\Windows\SWSC.exe
2010-07-21 16:42:48 ----A---- C:\Windows\SWREG.exe
2010-07-21 16:42:48 ----A---- C:\Windows\sed.exe
2010-07-21 16:42:48 ----A---- C:\Windows\PEV.exe
2010-07-21 16:42:48 ----A---- C:\Windows\NIRCMD.exe
2010-07-21 16:42:48 ----A---- C:\Windows\MBR.exe
2010-07-21 16:42:48 ----A---- C:\Windows\grep.exe
2010-07-21 16:42:41 ----D---- C:\Windows\ERDNT
2010-07-21 16:42:34 ----D---- C:\Qoobox
2010-07-20 16:22:59 ----A---- C:\SRStatus.txt
2010-07-15 21:43:32 ----D---- C:\ProgramData\Alien Skin
2010-07-15 21:42:09 ----D---- C:\Program Files\Alien Skin
2010-07-15 21:38:25 ----A---- C:\Windows\Sandboxie.ini
2010-07-15 20:56:01 ----D---- C:\Users\doktor\AppData\Roaming\Tropico 3
2010-07-15 20:51:32 ----D---- C:\Program Files\Kalypso
2010-07-15 10:45:56 ----HD---- C:\Program Files\InstallJammer Registry
2010-07-15 10:45:41 ----D---- C:\Program Files\Esmska
2010-07-14 15:45:37 ----D---- C:\Users\doktor\AppData\Roaming\vlc
2010-07-14 15:13:06 ----A---- C:\Windows\system32\drivers\pcouffin.sys
2010-07-14 15:13:06 ----A---- C:\Users\doktor\AppData\Roaming\pcouffin.sys
2010-07-14 15:13:05 ----D---- C:\Users\doktor\AppData\Roaming\Vso
2010-07-14 15:12:58 ----D---- C:\Program Files\DVDFab 7
2010-07-14 15:03:33 ----D---- C:\ProgramData\DVD Shrink
2010-07-12 16:25:40 ----D---- C:\Program Files\Euro Truck Simulator
2010-07-10 00:06:40 ----D---- C:\Users\doktor\AppData\Roaming\Alien Skin
2010-07-06 15:53:14 ----D---- C:\ProgramData\Kaspersky Lab
2010-07-06 14:32:36 ----A---- C:\Windows\system32\drivers\sp_rsdrv2.sys
2010-07-06 14:32:35 ----D---- C:\Users\doktor\AppData\Roaming\Spyware Terminator
2010-07-06 14:32:34 ----D---- C:\ProgramData\Spyware Terminator
2010-07-06 14:32:33 ----D---- C:\Program Files\Spyware Terminator
2010-07-05 16:16:49 ----D---- C:\Program Files\OpenAL
2010-07-05 14:55:34 ----ASH---- C:\Users\doktor\AppData\Roaming\Sys6925.Config Collection.sys
2010-07-05 14:55:20 ----D---- C:\Program Files\jv16 PowerTools 2010
2010-07-04 23:48:21 ----D---- C:\ProgramData\WinZip
2010-07-04 23:48:18 ----D---- C:\Program Files\WinZip
2010-07-04 23:37:26 ----A---- C:\Windows\system32\ASTSRV.EXE
2010-07-04 23:37:22 ----D---- C:\Users\doktor\AppData\Roaming\onOne Software
2010-07-04 23:36:38 ----D---- C:\ProgramData\onOne Software
2010-07-03 16:08:26 ----D---- C:\Program Files\Electronic Arts
2010-07-03 14:42:37 ----D---- C:\Users\doktor\AppData\Roaming\Avira
2010-07-03 14:38:21 ----D---- C:\ProgramData\COMODO
2010-07-03 14:36:26 ----D---- C:\Program Files\COMODO
2010-07-03 14:30:58 ----A---- C:\Windows\system32\drivers\ssmdrv.sys
2010-07-03 14:30:57 ----A---- C:\Windows\system32\drivers\avipbb.sys
2010-07-03 14:30:57 ----A---- C:\Windows\system32\drivers\avgntmgr.sys
2010-07-03 14:30:57 ----A---- C:\Windows\system32\drivers\avgntflt.sys
2010-07-03 14:30:57 ----A---- C:\Windows\system32\drivers\avgntdd.sys
2010-07-03 14:30:56 ----D---- C:\ProgramData\Avira
2010-07-03 14:30:56 ----D---- C:\Program Files\Avira

======List of files/folders modified in the last 1 months======

2010-08-02 13:17:41 ----RD---- C:\Program Files
2010-08-02 13:01:06 ----D---- C:\Users\doktor\AppData\Roaming\esmska
2010-08-02 13:00:55 ----AD---- C:\Windows
2010-08-02 12:50:59 ----D---- C:\Users\doktor\AppData\Roaming\FileZilla
2010-08-02 12:11:48 ----D---- C:\Windows\system32\config
2010-08-01 09:59:13 ----D---- C:\Users\doktor\AppData\Roaming\AIMP
2010-07-31 16:29:16 ----D---- C:\Windows\System32
2010-07-31 16:29:16 ----D---- C:\Program Files\Google
2010-07-31 15:52:21 ----D---- C:\Windows\system32\Tasks
2010-07-31 12:44:09 ----A---- C:\Windows\system.ini
2010-07-31 12:40:08 ----D---- C:\Windows\system32\drivers
2010-07-31 12:40:08 ----D---- C:\Windows\AppPatch
2010-07-31 12:40:06 ----D---- C:\Program Files\Common Files
2010-07-31 12:31:19 ----D---- C:\Windows\Prefetch
2010-07-31 12:21:05 ----D---- C:\Windows\inf
2010-07-31 12:21:05 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-07-31 01:00:59 ----D---- C:\Users\doktor\AppData\Roaming\dvdcss
2010-07-30 23:34:13 ----D---- C:\Windows\system32\DriverStore
2010-07-30 23:34:13 ----D---- C:\Windows\system32\catroot
2010-07-30 23:33:43 ----SHD---- C:\System Volume Information
2010-07-24 18:42:31 ----D---- C:\Windows\system32\NDF
2010-07-24 16:30:18 ----RSD---- C:\Windows\assembly
2010-07-24 16:26:56 ----SHD---- C:\Windows\Installer
2010-07-24 16:26:46 ----HD---- C:\Program Files\InstallShield Installation Information
2010-07-24 16:04:28 ----D---- C:\ProgramData
2010-07-24 13:57:22 ----D---- C:\Users\doktor\AppData\Roaming\Adobe
2010-07-24 09:25:05 ----D---- C:\Program Files\JDownloader
2010-07-24 07:59:02 ----D---- C:\Program Files\Mozilla Firefox
2010-07-22 13:26:05 ----D---- C:\Program Files\Ashampoo
2010-07-20 22:42:35 ----D---- C:\Program Files\Defraggler
2010-07-20 19:37:48 ----D---- C:\Windows\system32\catroot2
2010-07-20 19:28:57 ----D---- C:\ProgramData\regid.1986-12.com.adobe
2010-07-20 16:08:50 ----D---- C:\Windows\system32\drivers\etc
2010-07-14 20:47:29 ----D---- C:\Windows\winsxs
2010-07-14 10:33:46 ----D---- C:\Windows\debug
2010-07-14 10:21:37 ----D---- C:\ProgramData\Microsoft Help
2010-07-10 14:31:59 ----D---- C:\Windows\PolicyDefinitions
2010-07-08 22:28:39 ----D---- C:\Users\doktor\AppData\Roaming\PC Suite
2010-07-07 17:31:13 ----D---- C:\PSFONTS
2010-07-05 16:16:48 ----A---- C:\Windows\system32\wrap_oal.dll
2010-07-05 16:16:48 ----A---- C:\Windows\system32\OpenAL32.dll
2010-07-05 16:11:28 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2010-07-05 02:08:09 ----D---- C:\Program Files\Opera
2010-07-03 14:34:51 ----D---- C:\ProgramData\Comodo Downloader
2010-07-03 14:27:47 ----D---- C:\ProgramData\Norton
2010-07-03 09:35:05 ----D---- C:\Program Files\Miranda IM

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 JRAID;JRAID; C:\Windows\system32\DRIVERS\jraid.sys [2009-07-18 93096]
R0 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12368]
R0 PxHelp20;PxHelp20; C:\Windows\System32\Drivers\PxHelp20.sys [2008-02-06 44608]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 173648]
R0 snapman;Acronis Snapshots Manager; C:\Windows\system32\DRIVERS\snapman.sys [2010-04-05 129248]
R0 tdrpman;Acronis Try&Decide and Restore Points filter; C:\Windows\system32\DRIVERS\tdrpman.sys [2010-04-05 368736]
R0 timounter;Acronis True Image Backup Archive Explorer; C:\Windows\system32\DRIVERS\timntr.sys [2010-04-05 441760]
R1 avipbb;avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [2010-03-01 124784]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\Windows\System32\DRIVERS\cmdguard.sys [2010-06-04 224240]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\Windows\System32\DRIVERS\cmdhlp.sys [2010-06-01 30112]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 387584]
R1 inspect;COMODO Internet Security Firewall Driver; C:\Windows\system32\DRIVERS\inspect.sys [2010-06-01 75944]
R1 sp_rsdrv2;Spyware Terminator Driver 2; \??\C:\Windows\system32\drivers\sp_rsdrv2.sys [2010-07-06 142592]
R1 ssmdrv;ssmdrv; C:\Windows\system32\DRIVERS\ssmdrv.sys [2009-05-11 28520]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2010-05-23 281760]
R2 avgntflt;avgntflt; C:\Windows\system32\DRIVERS\avgntflt.sys [2010-02-16 60936]
R2 cpuz134;cpuz134; \??\C:\Windows\system32\drivers\cpuz134_x32.sys [2010-07-09 20328]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2010-05-23 25888]
R2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
R2 tifsfilter;Acronis True Image FS Filter; C:\Windows\system32\DRIVERS\tifsfilt.sys [2010-04-05 44384]
R3 dc3d;MS Hardware Device Detection Driver (USB); C:\Windows\system32\DRIVERS\dc3d.sys [2009-11-11 22384]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2009-05-18 26600]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]
R3 NuidFltr;NUID filter driver; C:\Windows\system32\DRIVERS\NuidFltr.sys [2009-05-09 14736]
R3 pcouffin;VSO Software pcouffin; C:\Windows\System32\Drivers\pcouffin.sys [2010-07-14 47360]
R3 Point32;Microsoft IntelliPoint Filter Driver; C:\Windows\system32\DRIVERS\point32k.sys [2009-11-11 30576]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt86win7.sys [2009-11-17 232448]
R3 SbieDrv;SbieDrv; \??\C:\Program Files\Sandboxie\SbieDrv.sys [2010-07-04 119016]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\DRIVERS\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 BthEnum;Bluetooth Enumerator Service; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 34816]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2009-07-14 392704]
S3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2009-07-14 58880]
S3 catchme;catchme; \??\C:\Users\doktor\AppData\Local\Temp\catchme.sys []
S3 dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2009-07-14 131072]
S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2009-07-14 16384]
S3 dot4usb;Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2009-07-14 36864]
S3 nmwcd;Nokia USB Phone Parent; C:\Windows\system32\drivers\ccdcmb.sys [2010-02-26 18176]
S3 nmwcdc;Nokia USB Generic; C:\Windows\system32\drivers\ccdcmbo.sys [2010-02-26 22528]
S3 pbfilter;pbfilter; \??\E:\instalace\peerblock§\pbfilter.sys []
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 133120]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 5632]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\DRIVERS\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 28224]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerflt.sys [2010-02-26 8192]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2009-07-14 27648]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltj.sys [2010-02-26 8192]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\DRIVERS\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 175824]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 17920]
S4 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-07-24 697328]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AntiVirService;Avira AntiVir Guard; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [2010-04-01 267432]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler; C:\Program Files\Avira\AntiVir Desktop\sched.exe [2010-02-24 135336]
R2 astcc;AST Service; C:\Windows\system32\astsrv.exe [2010-05-31 57344]
R2 cmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2010-06-01 1778480]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 nlsX86cc;Nalpeiron Licensing Service; C:\Windows\system32\nlssrv32.exe [2010-03-25 57344]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2010-03-16 129640]
R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 SbieSvc;Sandboxie Service; C:\Program Files\Sandboxie\SbieSvc.exe [2010-07-04 75496]
R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-01-14 226656]
R2 sp_rssrv;Spyware Terminator Realtime Shield Service; C:\Program Files\Spyware Terminator\sp_rsser.exe [2010-07-06 488960]
R2 TryAndDecideService;Acronis Try And Decide Service; C:\Program Files\Common Files\Acronis\Fomatik\TrueImageTryStartService.exe [2007-10-23 495832]
R3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2010-04-27 611840]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-05-24 136176]
S2 StarWindServiceAE;StarWind AE Service; C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe []
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-04-05 655624]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S4 AcrSch2Svc;Acronis Scheduler2 Service; C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe [2007-10-23 427288]
S4 ATMsrvc;ATM Service; C:\Windows\System32\ATMsrvc.exe [2000-05-24 15360]

-----------------EOF-----------------

Uživatelský avatar
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 říj 2008 08:02

Re: Problém s internetem - padá připojení

#2 Příspěvek od motji »

Hezké odpoledne :)
Pokud pc předem čistíte sám, a ještě k tomu combofixem, tak v logu už toho moc nevyčteme :) .

:arrow: Našel mbam a AVPtool něco?

:arrow: Poprosím o tento log
C:\ComboFix.txt
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

mad_doc
Návštěvník
Návštěvník
Příspěvky: 25
Registrován: 13 lis 2006 22:25

Re: Problém s internetem - padá připojení

#3 Příspěvek od mad_doc »

Děkuji za opověď. No před pár dny jsem skutečně combofix spouštěl :oops:
Mbam a ni žádný jiný sw problém nenašel.

Přikládám combofix log:


ComboFix 10-07-30.03 - doktor 31.07.2010 12:35:30.17.2 - x86
Microsoft Windows 7 Ultimate 6.1.7600.0.1250.420.1033.18.2047.1136 [GMT 2:00]
Spuštěný z: c:\users\doktor\Desktop\ComboFix.exe
SP: Spyware Terminator *disabled* (Updated) {55EE49A8-16BE-4601-BBE6-607B7F7317DE}
.

((((((((((((((((((((((((( Soubory vytvořené od 2010-06-28 do 2010-07-31 )))))))))))))))))))))))))))))))
.

2010-07-31 10:43 . 2010-07-31 10:44 -------- d-----w- c:\users\doktor\AppData\Local\temp
2010-07-31 10:43 . 2010-07-31 10:43 -------- d-----w- c:\users\Public\AppData\Local\temp
2010-07-31 10:43 . 2010-07-31 10:43 -------- d-----w- c:\users\Default\AppData\Local\temp
2010-07-30 22:38 . 2010-07-30 22:38 -------- d-----w- C:\!_mov+music
2010-07-24 14:26 . 2010-07-24 14:26 -------- d-----w- c:\program files\Ubisoft
2010-07-24 11:57 . 2010-07-24 11:57 -------- d-----w- c:\users\doktor\Library
2010-07-24 08:02 . 2010-07-24 08:02 -------- d-----w- C:\RaidTool
2010-07-24 08:02 . 2009-05-20 13:25 151552 ----a-w- c:\windows\system32\xRaidAPI.dll
2010-07-24 08:02 . 2007-11-19 09:01 1970176 ----a-w- c:\windows\system32\xRaidSetup.exe
2010-07-24 08:02 . 2010-07-24 08:02 -------- d-----w- c:\windows\RaidTool
2010-07-24 08:01 . 2010-07-24 08:01 -------- d-----w- c:\program files\Intel
2010-07-24 08:01 . 2009-08-18 11:44 53248 ----a-w- c:\windows\system32\CSVer.dll
2010-07-24 08:01 . 2010-07-24 08:01 -------- d-----w- C:\Intel
2010-07-24 08:00 . 2009-07-18 11:18 93096 ----a-w- c:\windows\system32\drivers\jraid.sys
2010-07-24 07:55 . 2010-07-24 07:58 -------- d-----w- c:\users\doktor\AppData\Roaming\Download Manager
2010-07-24 07:50 . 2010-07-24 07:50 -------- d-----w- c:\program files\CPUID
2010-07-24 07:50 . 2010-07-09 11:18 20328 ----a-w- c:\windows\system32\drivers\cpuz134_x32.sys
2010-07-22 11:27 . 2010-07-22 11:27 -------- d-----w- C:\IExp1.tmp
2010-07-22 11:27 . 2010-07-22 11:27 -------- d-----w- C:\IExp0.tmp
2010-07-22 11:27 . 2010-07-22 11:27 -------- d--h--w- c:\windows\msdownld.tmp
2010-07-22 11:27 . 2010-07-22 11:27 -------- d-----w- c:\program files\Windows Media Components
2010-07-15 19:43 . 2010-07-15 19:43 -------- d-----w- c:\programdata\Alien Skin
2010-07-15 19:42 . 2010-07-15 19:43 -------- d-----w- c:\program files\Alien Skin
2010-07-15 18:56 . 2010-07-15 18:56 -------- d-----w- c:\users\doktor\AppData\Roaming\Tropico 3
2010-07-15 18:51 . 2010-07-15 19:00 -------- d-----w- c:\program files\Kalypso
2010-07-15 08:45 . 2010-07-15 08:45 -------- d--h--w- c:\program files\InstallJammer Registry
2010-07-15 08:45 . 2010-07-24 15:25 -------- d-----w- c:\program files\Esmska
2010-07-14 13:45 . 2010-07-23 07:55 -------- d-----w- c:\users\doktor\AppData\Roaming\vlc
2010-07-14 13:13 . 2010-07-14 13:13 47360 ----a-w- c:\windows\system32\drivers\pcouffin.sys
2010-07-14 13:13 . 2010-07-14 13:13 47360 ----a-w- c:\users\doktor\AppData\Roaming\pcouffin.sys
2010-07-14 13:13 . 2010-07-14 13:13 -------- d-----w- c:\users\doktor\AppData\Roaming\Vso
2010-07-14 13:12 . 2010-07-14 13:13 -------- d-----w- c:\program files\DVDFab 7
2010-07-14 13:03 . 2010-07-14 13:03 -------- d-----w- c:\programdata\DVD Shrink
2010-07-12 14:25 . 2010-07-12 14:26 -------- d-----w- c:\program files\Euro Truck Simulator
2010-07-09 22:06 . 2010-07-15 19:53 -------- d-----w- c:\users\doktor\AppData\Roaming\Alien Skin
2010-07-06 13:53 . 2010-07-06 13:53 -------- d-----w- c:\programdata\Kaspersky Lab
2010-07-06 12:32 . 2010-07-06 12:32 6144 ----a-w- c:\programdata\Spyware Terminator\sp_rsdel.exe
2010-07-06 12:32 . 2010-07-06 12:32 5632 ----a-w- c:\programdata\Spyware Terminator\fileobjinfo.sys
2010-07-06 12:32 . 2010-07-06 12:32 142592 ----a-w- c:\windows\system32\drivers\sp_rsdrv2.sys
2010-07-06 12:32 . 2010-07-20 15:15 -------- d-----w- c:\users\doktor\AppData\Roaming\Spyware Terminator
2010-07-06 12:32 . 2010-07-20 15:16 -------- d-----w- c:\programdata\Spyware Terminator
2010-07-06 12:32 . 2010-07-06 13:28 -------- d-----w- c:\program files\Spyware Terminator
2010-07-05 14:16 . 2010-07-05 14:16 -------- d-----w- c:\program files\OpenAL
2010-07-05 12:55 . 2010-07-05 12:55 22 --sha-w- c:\windows\Sys3390 SettingsCollection.bin
2010-07-05 12:55 . 2010-07-05 12:55 22 --sha-w- c:\users\doktor\AppData\Roaming\Sys6925.Config Collection.sys
2010-07-05 12:55 . 2010-07-05 12:58 -------- d-----w- c:\program files\jv16 PowerTools 2010
2010-07-04 21:48 . 2010-07-04 21:49 -------- d-----w- c:\programdata\WinZip
2010-07-04 21:36 . 2010-07-14 16:03 -------- d-----w- c:\programdata\onOne Software
2010-07-04 21:36 . 2010-05-31 01:35 966656 ----a-w- c:\users\doktor\AppData\Roaming\Adobe\Lightroom\Modules\PhotoTools 2.5.lrplugin\win32\icuuc42.dll
2010-07-04 21:36 . 2010-05-31 01:35 3072 ----a-w- c:\users\doktor\AppData\Roaming\Adobe\Lightroom\Modules\PhotoTools 2.5.lrplugin\win32\icudt42.dll
2010-07-04 21:36 . 2010-05-31 01:35 1102848 ----a-w- c:\users\doktor\AppData\Roaming\Adobe\Lightroom\Modules\PhotoTools 2.5.lrplugin\win32\icuin42.dll
2010-07-04 21:36 . 2010-05-31 01:35 624640 ----a-w- c:\users\doktor\AppData\Roaming\Adobe\Lightroom\Modules\PhotoTools 2.5.lrplugin\win32\CoreFoundation.dll
2010-07-03 14:08 . 2010-07-03 14:08 -------- d-----w- c:\program files\Electronic Arts
2010-07-03 12:42 . 2010-07-03 12:42 -------- d-----w- c:\users\doktor\AppData\Roaming\Avira
2010-07-03 12:38 . 2010-07-03 12:38 -------- d-----w- c:\programdata\COMODO
2010-07-03 12:36 . 2010-07-03 12:36 -------- d-----w- c:\program files\COMODO
2010-07-03 12:30 . 2010-03-01 08:05 124784 ----a-w- c:\windows\system32\drivers\avipbb.sys
2010-07-03 12:30 . 2010-02-16 12:24 60936 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2010-07-03 12:30 . 2009-05-11 10:49 51992 ----a-w- c:\windows\system32\drivers\avgntdd.sys
2010-07-03 12:30 . 2009-05-11 10:49 17016 ----a-w- c:\windows\system32\drivers\avgntmgr.sys
2010-07-03 12:30 . 2010-07-03 12:30 -------- d-----w- c:\programdata\Avira
2010-07-03 12:30 . 2010-07-03 12:30 -------- d-----w- c:\program files\Avira
2010-07-02 20:32 . 2010-07-02 20:32 -------- d-----w- c:\program files\Microsoft IntelliPoint

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-07-31 10:21 . 2010-04-04 21:47 631076 ----a-w- c:\windows\system32\perfh005.dat
2010-07-31 10:21 . 2010-04-04 21:47 121716 ----a-w- c:\windows\system32\perfc005.dat
2010-07-30 23:53 . 2010-05-05 11:19 -------- d-----w- c:\users\doktor\AppData\Roaming\esmska
2010-07-30 23:00 . 2010-04-05 20:37 -------- d-----w- c:\users\doktor\AppData\Roaming\dvdcss
2010-07-24 14:26 . 2010-04-10 16:50 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-07-24 14:01 . 2010-04-04 22:45 697328 ----a-w- c:\windows\system32\drivers\sptd.sys
2010-07-24 12:17 . 2010-04-06 11:06 -------- d-----w- c:\users\doktor\AppData\Roaming\FileZilla
2010-07-24 07:25 . 2010-06-19 09:12 -------- d-----w- c:\program files\JDownloader
2010-07-23 22:25 . 2010-04-05 20:17 -------- d-----w- c:\users\doktor\AppData\Roaming\AIMP
2010-07-22 11:26 . 2010-04-14 11:24 -------- d-----w- c:\program files\Ashampoo
2010-07-20 20:42 . 2010-04-09 20:52 -------- d-----w- c:\program files\Defraggler
2010-07-20 17:28 . 2010-06-06 06:16 -------- d-----w- c:\programdata\regid.1986-12.com.adobe
2010-07-14 16:03 . 2010-07-04 21:37 -------- d-----w- c:\users\doktor\AppData\Roaming\onOne Software
2010-07-14 08:21 . 2010-04-04 22:53 -------- d-----w- c:\programdata\Microsoft Help
2010-07-08 20:28 . 2010-04-28 06:55 -------- d-----w- c:\users\doktor\AppData\Roaming\PC Suite
2010-07-05 14:16 . 2010-05-14 21:10 444952 ----a-w- c:\windows\system32\wrap_oal.dll
2010-07-05 14:16 . 2010-05-14 21:10 109080 ----a-w- c:\windows\system32\OpenAL32.dll
2010-07-05 14:11 . 2010-04-12 14:24 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2010-07-05 00:08 . 2010-04-12 17:30 -------- d-----w- c:\program files\Opera
2010-07-03 12:34 . 2010-04-04 21:35 -------- d-----w- c:\programdata\Comodo Downloader
2010-07-03 12:27 . 2010-06-06 08:58 -------- d-----w- c:\programdata\Norton
2010-07-03 07:35 . 2010-04-04 22:20 -------- d-----w- c:\program files\Miranda IM
2010-07-02 21:33 . 2010-04-04 21:56 87848 ----a-w- c:\users\doktor\AppData\Local\GDIPFONTCACHEV1.DAT
2010-07-02 14:19 . 2010-06-28 22:26 -------- d-----w- c:\programdata\Media Center Programs
2010-06-28 22:15 . 2010-06-28 22:15 -------- d-----w- c:\program files\THQ
2010-06-28 21:59 . 2010-04-05 18:01 -------- d-----w- c:\program files\AIMP2
2010-06-26 06:41 . 2010-04-04 21:59 -------- d-----w- c:\program files\CCleaner
2010-06-24 10:30 . 2010-04-05 14:21 -------- d-----w- c:\users\doktor\AppData\Roaming\uTorrent
2010-06-23 20:15 . 2010-04-04 22:54 -------- d-----w- c:\program files\Microsoft.NET
2010-06-19 12:32 . 2010-06-19 12:32 0 ---ha-w- c:\windows\system32\drivers\Msft_Kernel_ccdcmb_01009.Wdf
2010-06-19 12:30 . 2010-04-28 06:55 -------- d-----w- c:\program files\Common Files\Nokia
2010-06-19 12:30 . 2010-04-28 06:54 -------- d-----w- c:\program files\Nokia
2010-06-19 12:20 . 2010-06-19 12:20 -------- d-----w- c:\programdata\Nokia
2010-06-19 12:06 . 2010-06-19 12:06 -------- d-----w- c:\program files\PC Connectivity Solution
2010-06-19 11:59 . 2010-06-19 11:59 36864 ----a-w- c:\programdata\Installations\{09C468CA-2940-466A-AAE8-DCC0C6E9323C}\Installer\CommonCustomActions\Sleep.exe
2010-06-19 11:59 . 2010-06-19 11:59 3351812 ----a-w- c:\programdata\Installations\{09C468CA-2940-466A-AAE8-DCC0C6E9323C}\Installer\CommonCustomActions\msxml6Exec.exe
2010-06-19 11:59 . 2010-06-19 11:59 3203453 ----a-w- c:\programdata\Installations\{09C468CA-2940-466A-AAE8-DCC0C6E9323C}\Installer\CommonCustomActions\vcredistExec.exe
2010-06-19 11:58 . 2010-04-28 06:52 -------- d-----w- c:\programdata\Installations
2010-06-19 11:58 . 2010-06-19 11:59 35798536 ----a-w- c:\programdata\Installations\{09C468CA-2940-466A-AAE8-DCC0C6E9323C}\NokiaSoftwareUpdaterSetup_cs.exe
2010-06-19 09:40 . 2010-06-19 09:40 0 ---ha-w- c:\windows\system32\drivers\Msft_Kernel_ccdcmb_01007.Wdf
2010-06-19 09:37 . 2010-04-28 06:55 -------- d-----w- c:\users\doktor\AppData\Roaming\Nokia
2010-06-19 09:18 . 2010-06-19 09:13 -------- d-----w- c:\users\doktor\AppData\Roaming\kikin
2010-06-19 09:13 . 2010-06-19 09:13 -------- d-----w- c:\program files\kikin
2010-06-19 09:12 . 2010-06-19 09:12 411368 ----a-w- c:\windows\system32\deploytk.dll
2010-06-19 09:12 . 2010-06-19 09:12 -------- d-----w- c:\program files\Java
2010-06-18 08:41 . 2010-04-04 22:27 -------- d-----w- c:\program files\Windows Live
2010-06-18 08:40 . 2010-06-18 08:40 -------- d-----w- c:\program files\Microsoft Sync Framework
2010-06-18 08:39 . 2010-06-18 08:39 -------- d-----w- c:\program files\Microsoft SQL Server Compact Edition
2010-06-17 09:12 . 2010-04-06 11:06 -------- d-----w- c:\program files\FileZilla FTP Client
2010-06-09 11:16 . 2010-06-09 11:16 -------- d-----w- c:\program files\Core Services
2010-06-07 15:11 . 2010-06-02 15:46 -------- d-----w- c:\users\doktor\AppData\Roaming\Divine
2010-06-07 09:02 . 2010-06-07 09:02 -------- d-----w- c:\program files\QS
2010-06-07 09:02 . 2010-06-07 09:02 -------- d-----w- c:\users\doktor\AppData\Roaming\TeamViewer
2010-06-06 13:35 . 2010-06-06 08:52 -------- d-----w- c:\programdata\NortonInstaller
2010-06-06 10:47 . 2010-06-06 08:58 -------- d-----w- c:\programdata\{7B6BA59A-FB0E-4499-8536-A7420338BF3B}
2010-06-06 09:17 . 2010-06-06 09:17 -------- d-----r- c:\program files\Norton Support
2010-06-06 08:58 . 2010-06-06 08:58 -------- d-----w- c:\programdata\Symantec
2010-06-06 08:53 . 2010-06-06 08:48 -------- d-----w- c:\users\doktor\AppData\Roaming\GetRightToGo
2010-06-06 06:15 . 2010-04-04 23:07 -------- d-----w- c:\program files\Common Files\Adobe
2010-06-06 06:10 . 2010-06-06 06:10 -------- d-----w- c:\program files\Common Files\Adobe AIR
2010-06-06 06:10 . 2010-06-06 06:10 38784 ----a-w- c:\users\Default\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe
2010-06-06 06:10 . 2010-04-05 08:50 38784 ----a-w- c:\users\doktor\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe
2010-06-04 09:55 . 2010-06-04 09:55 224240 ----a-w- c:\windows\system32\drivers\cmdGuard.sys
2010-06-04 08:18 . 2010-06-04 08:18 -------- d-----w- c:\program files\Sandboxie
2010-06-04 08:15 . 2010-04-04 22:28 -------- d-----w- c:\program files\Microsoft Silverlight
2010-06-03 23:57 . 2010-05-05 11:18 411368 ----a-w- c:\windows\system32\deployJava1.dll
2010-06-03 22:42 . 2010-04-04 22:00 -------- d-----w- c:\program files\VideoLAN
2010-06-02 15:41 . 2010-06-02 15:41 -------- d-----w- c:\program files\Divine
2010-06-02 08:28 . 2010-06-03 20:06 865792 ----a-w- c:\users\doktor\AppData\Roaming\Mozilla\Firefox\Profiles\nodu8w4i.default\extensions\{e3f6c2cc-d8db-498c-af6c-499fb211db97}\platform\WINNT_x86-msvc\components\pagespeed.dll
2010-06-01 17:00 . 2010-06-01 17:00 278288 ----a-w- c:\windows\system32\guard32.dll
2010-06-01 17:00 . 2010-06-01 17:00 75944 ----a-w- c:\windows\system32\drivers\inspect.sys
2010-06-01 17:00 . 2010-06-01 17:00 30112 ----a-w- c:\windows\system32\drivers\cmdhlp.sys
2010-06-01 17:00 . 2010-06-01 17:00 16744 ----a-w- c:\windows\system32\drivers\cmderd.sys
2010-05-27 07:24 . 2010-06-09 19:18 34304 ----a-w- c:\windows\system32\atmlib.dll
2010-05-27 03:49 . 2010-06-09 19:18 293888 ----a-w- c:\windows\system32\atmfd.dll
2010-05-23 14:16 . 2010-05-23 14:16 281760 ----a-w- c:\windows\system32\drivers\atksgt.sys
2010-05-23 14:16 . 2010-05-23 14:16 25888 ----a-w- c:\windows\system32\drivers\lirsgt.sys
2010-05-21 12:14 . 2010-04-04 21:23 221568 ------w- c:\windows\system32\MpSigStub.exe
2010-05-21 05:18 . 2010-06-09 19:18 977920 ----a-w- c:\windows\system32\wininet.dll
2010-05-09 09:14 . 2010-06-23 20:12 641536 ----a-w- c:\windows\system32\CPFilters.dll
2010-05-09 09:14 . 2010-06-23 20:12 417792 ----a-w- c:\windows\system32\msdri.dll
2009-06-10 21:26 . 2009-07-14 02:04 9633792 --sha-r- c:\windows\Fonts\StaticCache.dat
2009-07-14 01:14 . 2009-07-13 23:42 396800 --sha-w- c:\windows\winsxs\x86_microsoft-windows-mail-app_31bf3856ad364e35_6.1.7600.16385_none_f12e83abb108c86c\WinMail.exe
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{E601996F-E400-41CA-804B-CD6373A7EEE2}]
2010-05-06 16:06 777904 ----a-w- c:\program files\kikin\ie_kikin.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2010-04-16 3872080]
"PC Suite Tray"="c:\program files\Nokia\Nokia PC Suite 7\PCSuite.exe" [2009-11-11 1451520]
"SandboxieControl"="c:\program files\Sandboxie\SbieCtrl.exe" [2010-07-04 398568]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1173504]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AdobeCS4ServiceManager"="c:\program files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" [2008-08-14 611712]
"Adobe Acrobat Speed Launcher"="c:\program files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe" [2008-06-12 37232]
"Acrobat Assistant 8.0"="c:\program files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe" [2008-06-11 640376]
"Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2010-04-29 1090952]
"AdobeCS5ServiceManager"="c:\program files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" [2010-02-22 406992]
"IntelliPoint"="c:\program files\Microsoft IntelliPoint\ipoint.exe" [2009-11-11 1468256]
"AdobeAAMUpdater-1.0"="c:\program files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-03-06 500208]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2010-03-02 282792]
"COMODO Internet Security"="c:\program files\COMODO\COMODO Internet Security\cfp.exe" [2010-06-01 2039240]
"JMB36X IDE Setup"="c:\windows\RaidTool\xInsIDE.exe" [2007-03-20 36864]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\System32\guard32.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acronis Scheduler2 Service]
2007-10-23 14:10 140568 ----a-w- c:\program files\Common Files\Acronis\Schedule2\schedhlp.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AcronisTimounterMonitor]
2007-10-23 15:58 906648 ----a-w- c:\program files\Acronis\TrueImageHome\TimounterMonitor.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Malwarebytes Anti-Malware (reboot)]
2010-04-29 13:39 1090952 ----a-w- c:\program files\Malwarebytes' Anti-Malware\mbam.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TrueImageMonitor.exe]
2007-10-23 14:05 2615624 ----a-w- c:\program files\Acronis\TrueImageHome\TrueImageMonitor.exe

R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-05-24 136176]
R3 pbfilter;pbfilter;e:\instalace\peerblock§\pbfilter.sys [x]
R4 sptd;sptd;c:\windows\system32\Drivers\sptd.sys [2010-07-24 697328]
S1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\system32\DRIVERS\cmdguard.sys [2010-06-04 224240]
S1 cmdHlp;COMODO Internet Security Helper Driver;c:\windows\system32\DRIVERS\cmdhlp.sys [2010-06-01 30112]
S1 sp_rsdrv2;Spyware Terminator Driver 2;c:\windows\system32\drivers\sp_rsdrv2.sys [2010-07-06 142592]
S2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files\Avira\AntiVir Desktop\sched.exe [2010-02-24 135336]
S2 cpuz134;cpuz134;c:\windows\system32\drivers\cpuz134_x32.sys [2010-07-09 20328]
S2 nlsX86cc;Nalpeiron Licensing Service;c:\windows\system32\nlssrv32.exe [2010-03-25 57344]
S3 dc3d;MS Hardware Device Detection Driver (USB);c:\windows\system32\DRIVERS\dc3d.sys [2009-11-11 22384]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [2009-11-17 232448]


[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
.
Obsah adresáře 'Naplánované úlohy'

2010-07-31 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-05-24 09:19]

2010-07-31 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-05-24 09:19]
.
.
------- Doplňkový sken -------
.
IE: Append Link Target to Existing PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Append to Existing PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert Link Target to Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert to Adobe PDF - c:\program files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~4\Office12\EXCEL.EXE/3000
IE: {{0F7195C2-6713-4d93-A1BC-DA5FA33F0A65} - {E601996F-E400-41CA-804B-CD6373A7EEE2} - c:\program files\kikin\ie_kikin.dll
DPF: {D1278801-B2C0-4332-BD3E-2F64D2204EDF} - hxxps://www.mesh.com/0.9.4014.39/TSWeb.cab
FF - ProfilePath - c:\users\doktor\AppData\Roaming\Mozilla\Firefox\Profiles\nodu8w4i.default\
FF - prefs.js: browser.search.selectedEngine - ÄŚSFD
FF - prefs.js: browser.startup.homepage - hxxp://www.google.cz
FF - component: c:\users\doktor\AppData\Roaming\Mozilla\Firefox\Profiles\nodu8w4i.default\extensions\{e3f6c2cc-d8db-498c-af6c-499fb211db97}\platform\WINNT_x86-msvc\components\pagespeed.dll
FF - plugin: c:\program files\Google\Google Earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\Google\Update\1.2.183.29\npGoogleOneClick8.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npdeployJava1.dll
FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.lu", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.nu", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.nz", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--p1ai", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbayh7gpa", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.tel", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.proxy.type", 5);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.buffer.cache.count", 24);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.buffer.cache.size", 4096);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("dom.ipc.plugins.timeoutSecs", 45);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("accelerometer.enabled", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.nptest.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npswf32.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npctrl.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled.npqtplugin.dll", true);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_USERS\S-1-5-21-3486623973-786561201-3217107067-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.v30po\UserChoice]
@Denied: (2) (S-1-5-21-3486623973-786561201-3217107067-1001)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.v30po"

[HKEY_USERS\S-1-5-21-3486623973-786561201-3217107067-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.v30pp\UserChoice]
@Denied: (2) (S-1-5-21-3486623973-786561201-3217107067-1001)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.v30pp"

[HKEY_USERS\S-1-5-21-3486623973-786561201-3217107067-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.v30ppf\UserChoice]
@Denied: (2) (S-1-5-21-3486623973-786561201-3217107067-1001)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.v30ppf"

[HKEY_USERS\S-1-5-21-3486623973-786561201-3217107067-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xmp\UserChoice]
@Denied: (2) (S-1-5-21-3486623973-786561201-3217107067-1001)
@Denied: (2) (LocalSystem)
"Progid"="ACDSee Pro 3.xmp"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0004\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0005\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0006\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0007\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'lsass.exe'(668)
c:\windows\system32\relog_ap.DLL
.
Celkový čas: 2010-07-31 12:46:51
ComboFix-quarantined-files.txt 2010-07-31 10:46
ComboFix2.txt 2010-07-24 08:50
ComboFix3.txt 2010-07-21 15:11
ComboFix4.txt 2010-07-21 14:56

Před spuštěním: Volných bajtů: 48 169 316 352
Po spuštění: Volných bajtů: 48 123 490 304

- - End Of File - - 2E571DFDD393ACE0AF27DF18BFE2AEAE

Uživatelský avatar
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 říj 2008 08:02

Re: Problém s internetem - padá připojení

#4 Příspěvek od motji »

Zkuste, zda Vám padá připojení i vnouzovém režimu. ( po restartu amčkejte F8 - nouzový režim s prací v síti)

Zkuste dočasně vypnout Spyware terminátora.
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

mad_doc
Návštěvník
Návštěvník
Příspěvky: 25
Registrován: 13 lis 2006 22:25

Re: Problém s internetem - padá připojení

#5 Příspěvek od mad_doc »

Díky, vyzkouším to, bohužel však to padání připojení je opravdu namátkové a může se prejevit třeba jednou za několik hodin (i když na dalších PC stejné stránky jedou, nebo je internet OK).

Uživatelský avatar
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 říj 2008 08:02

Re: Problém s internetem - padá připojení

#6 Příspěvek od motji »

Já v lozích nic nevidím, chtělo by to opravdu odzkoušet :)
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

Odpovědět