prosím o kontrolu logu

[motji]

Notepad pak pro jistotu vyměníme, mrkněte ještě na ty další programy. Měl jste tam potvoru, která je právě nahrazuje svými. Ale mělo by to být už opraveno.

Zkuste se podívat do start - programy, zda tam nemáte nějaký program jako by podsvícen.

[rahmael]

Díval jsem s po těch dalších progr. a jakoby podsvícen není žádný jinak zbytek progr. mi tedy nakonec běhá normálně

[motji]

Asi to combofix opravil .

Pokud nemáte, přesuňte Combofix na plochu
-otevřete si Poznámkový blok
-Do něj zkopírujte text z tohoto okénka

Kód: Vybrat vše

Restore::
c:\windows\system32\notepad.exe

Driver::
MSICPL
GMSIPCI
avg9wd
avgfws9
AVGIDSAgent
AVG Security Toolbar Service

Registry::
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^McAfee Security Scan Plus.lnk]
[-HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Adobe Reader Speed Launch.lnk]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"GC_vcd_autorun"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{D2F8F919-690B-4EA2-9FA7-A203D1E04F75}"=-
"{EBF2BA02-9094-4c5a-858B-BB198F3D8DE2}"=-

Folder::
C:\Program Files\AVG

-uložte Vámi vytvořený TXT soubor jako CFScript.txt na plochu
-po uložení uchopte vámi vytvořený skript levým myšítkem a -přesuňte ho nad ikonu Combofixu, kde ho upustíte:




-po aplikaci na Vás vypadne další log,vložte ho sem

Upozornění : může se stát, že po aplikaci skriptu a restartu Windows nenaběhnou, v tom případě znovu restartujte a přitom mačkejte F8, pak zvolte Poslední známou funkční konfiguraci

[rahmael]

Hotovo zde je log :


ComboFix 10-08-05.01 - Tomik 11.08.2010 16:57:04.4.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.1022.274 [GMT 2:00]
Spuštěný z: c:\documents and settings\Tomik\Plocha\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\Tomik\Plocha\CFScript.txt
AV: ESET NOD32 Antivirus 4.2 *On-access scanning disabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
* Rezidentní štít AV je zapnutý

.
- REŽIM S OMEZENOU FUNKČNOSTÍ -
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

Nakažená kopie c:\windows\system32\notepad.exe byla nalezena a vyléčena.
Obnovena kopie z - c:\windows\system32\dllcache\notepad.exe

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-07-11 do 2010-08-11 )))))))))))))))))))))))))))))))
.

2010-08-11 14:57 . 2008-04-14 03:22 69632 ----a-w- c:\windows\system32\notepad.exe
2010-07-14 20:57 . 2010-02-09 14:37 65602 ----a-w- c:\windows\system32\cook3260.dll
2010-07-14 20:57 . 2010-02-09 14:37 217127 ----a-w- c:\windows\system32\drv43260.dll
2010-07-14 20:57 . 2010-02-09 14:37 208935 ----a-w- c:\windows\system32\drv33260.dll
2010-07-14 20:57 . 2010-02-09 14:37 176165 ----a-w- c:\windows\system32\drv23260.dll
2010-07-14 20:57 . 2010-02-09 14:37 102439 ----a-w- c:\windows\system32\sipr3260.dll
2010-07-14 20:57 . 2010-02-09 14:37 626688 ----a-w- c:\windows\system32\vp7vfw.dll
2010-07-14 20:57 . 2010-02-09 14:37 1184984 ----a-w- c:\windows\system32\wvc1dmod.dll
2010-07-14 04:01 . 2010-06-14 14:31 744448 -c----w- c:\windows\system32\dllcache\helpsvc.exe

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-08-08 17:07 . 2008-01-02 08:43 -------- d-----w- c:\program files\Windows Defender
2010-08-08 17:07 . 2007-08-05 18:08 -------- d-----w- c:\program files\Speed Startup
2010-08-07 12:28 . 2010-08-07 12:28 62464 ----a-w- c:\windows\system32\cygz.dll
2010-08-07 12:28 . 2010-08-07 12:28 62464 ----a-w- c:\windows\cygz.dll
2010-08-07 12:28 . 2010-08-07 12:28 1153417 ----a-w- c:\windows\system32\cygwin1.dll
2010-08-07 12:28 . 2010-08-07 12:28 1153417 ----a-w- c:\windows\cygwin1.dll
2010-08-06 07:41 . 2001-10-25 12:00 79062 ----a-w- c:\windows\system32\perfc005.dat
2010-08-06 07:41 . 2001-10-25 12:00 432004 ----a-w- c:\windows\system32\perfh005.dat
2010-08-02 11:25 . 2008-12-22 21:04 -------- d-----w- c:\program files\CCleaner
2010-07-20 00:05 . 2008-06-22 20:03 -------- d-----w- c:\program files\foobar2000
2010-07-14 20:58 . 2010-01-06 19:29 47360 ----a-w- c:\windows\system32\drivers\pcouffin.sys
2010-07-14 20:57 . 2007-12-20 19:45 -------- d-----w- c:\program files\VSO
2010-07-10 08:57 . 2010-01-06 19:42 -------- d-----w- c:\program files\Game-Cloner
2010-07-06 11:36 . 2010-01-06 19:42 18304 ----a-w- c:\windows\system32\drivers\tiamominiport.sys
2010-07-06 08:59 . 2010-07-06 08:59 -------- d-----w- c:\program files\007DVD
2010-07-05 21:20 . 2010-01-06 19:42 6784 ----a-w- c:\windows\system32\drivers\tiamobus.sys
2010-07-05 20:02 . 2007-09-17 17:43 -------- d-----w- c:\program files\SlySoft
2010-07-05 19:43 . 2010-07-05 19:40 -------- d-----w- c:\program files\Elaborate Bytes
2010-07-02 15:07 . 2007-11-05 14:46 -------- d-----w- c:\program files\Common Files\Java
2010-07-02 15:07 . 2010-07-02 15:07 411368 ----a-w- c:\windows\system32\deployJava1.dll
2010-07-02 15:07 . 2007-11-05 14:48 -------- d-----w- c:\program files\Java
2010-07-02 10:43 . 2010-07-02 10:43 95896 ----a-w- c:\windows\system32\drivers\epfwtdir.sys
2010-07-02 10:43 . 2010-07-02 10:43 140752 ----a-w- c:\windows\system32\drivers\eamon.sys
2010-06-30 19:43 . 2010-06-30 19:43 -------- d-----w- c:\program files\OO Software
2010-06-30 19:32 . 2010-03-28 11:01 -------- d-----w- c:\program files\Ashampoo
2010-06-30 14:45 . 2010-05-12 20:15 -------- d-----w- c:\program files\OpenTTD
2010-06-30 14:43 . 2007-06-23 18:24 -------- d-----w- c:\program files\Total Commander
2010-06-30 14:43 . 2008-02-19 15:25 -------- d-----w- c:\program files\DivX
2010-06-30 14:42 . 2007-06-23 19:25 -------- d-----w- c:\program files\Winamp
2010-06-30 14:41 . 2008-01-20 20:49 -------- d-----w- c:\program files\VirtualDJ
2010-06-30 14:41 . 2007-09-05 18:59 -------- d-----w- c:\program files\RocketDock
2010-06-30 14:41 . 2007-06-26 06:45 -------- d-----w- c:\program files\Windows Media Connect 2
2010-06-30 14:41 . 2008-11-09 14:54 -------- d-----w- c:\program files\Codec Pack - All In 1
2010-06-30 14:40 . 2009-06-03 20:58 -------- d-----w- c:\program files\FlashGet
2010-06-30 14:40 . 2009-08-22 16:10 -------- d-----w- c:\program files\WMR11
2010-06-26 13:01 . 2010-06-26 13:01 -------- d-----w- c:\program files\YouTube Downloader
2010-06-14 14:31 . 2007-06-23 17:55 744448 ----a-w- c:\windows\PCHEALTH\HELPCTR\Binaries\helpsvc.exe
2010-05-21 12:14 . 2009-10-03 08:43 221568 ------w- c:\windows\system32\MpSigStub.exe
2007-09-17 21:12 . 2007-09-17 17:43 24 -csh--w- c:\windows\SDE4CC256.tmp
2006-05-03 10:06 . 2010-05-23 12:31 163328 --sh--r- c:\windows\system32\flvDX.dll
2007-02-21 11:47 . 2010-05-23 12:31 31232 --sh--r- c:\windows\system32\msfDX.dll
2008-03-16 13:30 . 2010-05-23 12:31 216064 --sh--r- c:\windows\system32\nbDX.dll
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"Shockwave Updater"="c:\windows\system32\Adobe\Shockwave 11\SwHelper_1151601.exe" [2009-07-31 468408]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2010-01-11 13666408]
"OODefragTray"="c:\program files\OO Software\Defrag\oodtray.exe" [2009-09-11 2524416]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-02-18 248040]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2010-07-02 2202704]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"SpeedStartup"="c:\program files\Speed Startup\speedstartup.exe" [2008-01-04 2229248]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\LMIinit]
2008-10-16 19:35 87352 ----a-w- c:\windows\system32\LMIinit.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0OODBS

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^HP Digital Imaging Monitor.lnk]
backup=c:\windows\pss\HP Digital Imaging Monitor.lnkCommon Startup
path=c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\HP Digital Imaging Monitor.lnk

[HKLM\~\startupfolder\C:^Documents and Settings^Tomik^Nabídka Start^Programy^Po spuštění^Adobe Gamma.lnk]
backup=c:\windows\pss\Adobe Gamma.lnkStartup
path=c:\documents and settings\Tomik\Nabídka Start\Programy\Po spuštění\Adobe Gamma.lnk

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\36X Raid Configurer]
2007-11-19 09:01 1970176 ----a-w- c:\windows\system32\xRaidSetup.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr]
2010-01-19 17:46 64032 -c--a-w- c:\windows\ALCMTR.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools]
2007-04-03 22:29 165784 ----a-w- c:\program files\DAEMON Tools\daemon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
2007-05-08 14:24 54840 ----a-w- c:\program files\HP\HP Software Update\hpwuSchd2.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\JMB36X IDE Setup]
2007-03-20 12:36 36864 -c--a-w- c:\windows\RaidTool\xInsIDE.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Logitech Utility]
2004-03-03 17:50 19968 -c----w- c:\windows\LOGI_MWX.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
2008-04-14 03:22 1695232 ----a-w- c:\program files\Messenger\msmsgs.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NSLauncher]
2007-11-06 08:16 3096576 -c--a-w- c:\program files\Nokia\Nokia Software Launcher\NSLauncher.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon]
2010-01-11 21:17 13666408 ----a-w- c:\windows\system32\nvcpl.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter]
2010-01-11 21:17 110696 ----a-w- c:\windows\system32\nvmctray.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PC Suite Tray]
2009-03-20 12:32 1312256 -c--a-w- c:\program files\Nokia\Nokia PC Suite 7\PCSuite.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL]
2010-01-19 17:46 18790432 -c--a-w- c:\windows\RTHDCPL.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SkyTel]
2010-01-19 17:46 1833504 -c--a-w- c:\windows\SkyTel.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sony Ericsson PC Suite]
2007-06-13 07:16 528384 ----a-r- c:\program files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SystemKey]
2006-04-07 07:58 339968 ----a-w- c:\documents and settings\All Users\Data aplikací\SystemKey\SystemKey.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinFast Schedule]
2006-03-20 12:53 327680 ----a-w- c:\program files\WinFast\WFTVFM\WFWIZ.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\zBrowser Launcher]
2004-03-18 07:33 892928 ----a-w- c:\program files\Logitech\iTouch\iTouch.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"c:\\QIP Infium JadrisPack\\infium.exe"=
"d:\\Program Files\\Mass Effect 2\\Binaries\\MassEffect2.exe"=
"d:\\Program Files\\Mass Effect 2\\MassEffect2Launcher.exe"=
"d:\\Command & Conquer 3 Kane's Wrath\\RetailExe\\1.0\\cnc3ep1.dat"=
"d:\\Command & Conquer 3 Kane's Wrath\\RetailExe\\1.2\\cnc3ep1.dat"=
"c:\\Program Files\\Common Files\\Nokia\\Service Layer\\A\\nsl_host_process.exe"=
"c:\\Program Files\\Nokia\\Nokia Software Updater\\nsu_ui_client.exe"=
"c:\\Program Files\\BitSpirit\\BitSpirit.exe"=
"c:\\Program Files\\Google\\Google Earth\\client\\googleearth.exe"=
"d:\\COMMAND.AND.CONQUER.3.TW.V1.04.ALL.HATRED.NOCD\\C&C3\\RetailExe\\1.4\\cnc3game.dat"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"5353:TCP"= 5353:TCP:Adobe CSI CS4

R0 78501052;78501052 Boot Guard Driver;c:\windows\system32\drivers\78501052.sys [9.4.2010 23:11 37392]
R0 78516072;78516072 Boot Guard Driver;c:\windows\system32\drivers\78516072.sys [17.5.2010 10:07 37392]
R0 tiamobus;vcdrom Bus;c:\windows\system32\drivers\tiamobus.sys [6.1.2010 21:42 6784]
R1 78501051;78501051;c:\windows\system32\drivers\78501051.sys [9.4.2010 23:11 128016]
R1 78516071;78516071;c:\windows\system32\drivers\78516071.sys [17.5.2010 10:07 128016]
R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [28.4.2010 8:17 114984]
R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [2.7.2010 12:43 95896]
R1 setup_9.0.0.722_09.04.2010_23-08drv;setup_9.0.0.722_09.04.2010_23-08drv;c:\windows\system32\drivers\7850105.sys [9.4.2010 23:11 315408]
R1 setup_9.0.0.722_17.05.2010_11-24drv;setup_9.0.0.722_17.05.2010_11-24drv;c:\windows\system32\drivers\7851607.sys [17.5.2010 10:07 315408]
R2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [2.7.2010 12:43 810144]
R2 WinDefend;Windows Defender;c:\program files\Windows Defender\MsMpEng.exe [3.11.2006 20:19 13592]
R3 Avgfwdx;Avgfwdx;c:\windows\system32\drivers\avgfwdx.sys [9.4.2010 14:09 30104]
R3 itchfltr;iTouch Keyboard Filter;c:\windows\system32\drivers\itchfltr.sys [10.8.2007 16:58 12953]
S0 AvgRkx86;avgrkx86.sys;c:\windows\system32\Drivers\avgrkx86.sys --> c:\windows\system32\Drivers\avgrkx86.sys [?]
S0 tiamoport;cxlmo Miniport;c:\windows\system32\drivers\tiamominiport.sys [6.1.2010 21:42 18304]
S2 avg9wd;AVG WatchDog;"c:\program files\AVG\AVG9\avgwdsvc.exe" --> c:\program files\AVG\AVG9\avgwdsvc.exe [?]
S2 avgfws9;AVG Firewall;"c:\program files\AVG\AVG9\avgfws9.exe" --> c:\program files\AVG\AVG9\avgfws9.exe [?]
S2 AVGIDSAgent;AVG9IDSAgent;"c:\program files\AVG\AVG9\Identity Protection\Agent\Bin\AVGIDSAgent.exe" AVGIDSAgent --> c:\program files\AVG\AVG9\Identity Protection\Agent\Bin\AVGIDSAgent.exe [?]
S2 GJService;Game Jackal Server;c:\program files\SlySoft\Game Jackal v4\Server.exe --> c:\program files\SlySoft\Game Jackal v4\Server.exe [?]
S2 gupdate1c9a8c3a9513872;Služba Google Update (gupdate1c9a8c3a9513872);c:\program files\Google\Update\GoogleUpdate.exe [19.3.2009 20:51 133104]
S2 LMIInfo;LogMeIn Kernel Information Provider;\??\c:\program files\LogMeIn\x86\RaInfo.sys --> c:\program files\LogMeIn\x86\RaInfo.sys [?]
S3 AEXPAM;Philips SmartManage Service;c:\windows\system32\drivers\aexpamdrv.sys [20.12.2005 10:57 27008]
S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [25.1.2010 15:59 1691480]
S3 AsAudioDevice_351;AsAudioDevice_351;c:\windows\system32\drivers\AsAudioDevice_351.sys [3.4.2010 13:57 16640]
S3 AVG Security Toolbar Service;AVG Security Toolbar Service;c:\program files\AVG\AVG9\Toolbar\ToolbarBroker.exe --> c:\program files\AVG\AVG9\Toolbar\ToolbarBroker.exe [?]
S3 Avgfwfd;AVG network filter service;c:\windows\system32\drivers\avgfwdx.sys [9.4.2010 14:09 30104]
S3 AVGIDSDriverxpx;AVG9IDSDriver;\??\c:\program files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_XP\AVGIDSDriver.sys --> c:\program files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_XP\AVGIDSDriver.sys [?]
S3 AVGIDSFilterxpx;AVG9IDSFilter;\??\c:\program files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_XP\AVGIDSFilter.sys --> c:\program files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_XP\AVGIDSFilter.sys [?]
S3 AVGIDSShimxpx;AVG9IDSShim;\??\c:\program files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_XP\AVGIDSShim.sys --> c:\program files\AVG\AVG9\Identity Protection\Agent\Driver\Platform_XP\AVGIDSShim.sys [?]
S3 M1000Srv;M5603C USB2.0 Camera Driver;c:\windows\system32\Drivers\M1000KNT.sys --> c:\windows\system32\Drivers\M1000KNT.sys [?]
S3 nmwcdnsu;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsu.sys [27.4.2010 19:54 137344]
S3 nmwcdnsuc;Nokia USB Flashing Generic;c:\windows\system32\drivers\nmwcdnsuc.sys [27.4.2010 19:54 8320]
S3 s115bus;Sony Ericsson Device 115 driver (WDM);c:\windows\system32\drivers\s115bus.sys [3.3.2009 17:35 83208]
S3 s115mdfl;Sony Ericsson Device 115 USB WMC Modem Filter;c:\windows\system32\drivers\s115mdfl.sys [3.3.2009 17:35 15112]
S3 s115mdm;Sony Ericsson Device 115 USB WMC Modem Driver;c:\windows\system32\drivers\s115mdm.sys [3.3.2009 17:35 108680]
S3 s115mgmt;Sony Ericsson Device 115 USB WMC Device Management Drivers (WDM);c:\windows\system32\drivers\s115mgmt.sys [3.3.2009 17:35 100488]
S3 s115obex;Sony Ericsson Device 115 USB WMC OBEX Interface;c:\windows\system32\drivers\s115obex.sys [3.3.2009 17:35 98568]
S3 s816bus;Sony Ericsson Device 816 driver (WDM);c:\windows\system32\drivers\s816bus.sys [3.3.2009 17:25 81832]
S3 s816mdfl;Sony Ericsson Device 816 USB WMC Modem Filter;c:\windows\system32\drivers\s816mdfl.sys [3.3.2009 17:25 13864]
S3 s816mdm;Sony Ericsson Device 816 USB WMC Modem Driver;c:\windows\system32\drivers\s816mdm.sys [3.3.2009 17:25 107304]
S3 s816mgmt;Sony Ericsson Device 816 USB WMC Device Management Drivers (WDM);c:\windows\system32\drivers\s816mgmt.sys [3.3.2009 17:25 99112]
S3 s816nd5;Sony Ericsson Device 816 USB Ethernet Emulation SEMCMR7 (NDIS);c:\windows\system32\drivers\s816nd5.sys [3.3.2009 17:26 21928]
S3 s816obex;Sony Ericsson Device 816 USB WMC OBEX Interface;c:\windows\system32\drivers\s816obex.sys [3.3.2009 17:25 97320]
S3 s816unic;Sony Ericsson Device 816 USB Ethernet Emulation SEMCMR7 (WDM);c:\windows\system32\drivers\s816unic.sys [3.3.2009 17:25 97704]
S3 SetupNTGLM7X;SetupNTGLM7X;\??\e:\ntglm7x.sys --> e:\NTGLM7X.sys [?]
S3 WFIOCTL;WFIOCTL;c:\program files\WinFast\WFTVFM\WFIOCTL.sys [27.8.2007 22:57 9446]
S4 sptd;sptd;c:\windows\system32\drivers\sptd.sys [24.6.2007 7:08 716272]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
getPlusHelper REG_MULTI_SZ getPlusHelper
.
Obsah adresáře 'Naplánované úlohy'

2010-08-11 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-03-19 18:50]

2010-08-10 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-03-19 18:50]

2010-08-11 c:\windows\Tasks\MP Scheduled Scan.job
- c:\program files\Windows Defender\MpCmdRun.exe [2006-11-03 18:20]
.
.
------- Doplňkový sken -------
.
uStart Page = about:blank
uInternet Connection Wizard,ShellNext = hxxp://codecs.r8.org/
uInternet Settings,ProxyOverride = local
uInternet Settings,ProxyServer = 127.0.0.1:8080
IE: &ICQ Toolbar Search - c:\program files\ICQToolbar\toolbaru.dll/SEARCH.HTML
IE: &Winamp Toolbar Search - c:\documents and settings\All Users\Data aplikací\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: Stáhnout pomocí &BitSpiritu - c:\program files\BitSpirit\bsurl.htm
IE: {{7E6A20FB-153F-402c-A84B-1A64E1955D3D} - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - c:\windows\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748449} - {CC963627-B1DC-40E0-B52A-CF21EE748450} - c:\windows\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748450} - {CC963627-B1DC-40E0-B52A-CF21EE748450} - c:\windows\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748451} - {CC963627-B1DC-40E0-B52A-CF21EE748451} - c:\windows\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748452} - {CC963627-B1DC-40E0-B52A-CF21EE748452} - c:\windows\WebIE.dll
FF - ProfilePath - c:\documents and settings\Tomik\Data aplikací\Mozilla\Firefox\Profiles\hxa4y507.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.yahoo.com/search?ei=UTF-8&fr=ytff-&p=
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - plugin: c:\program files\DivX\DivX Plus Web Player\npdivx32.dll
FF - plugin: c:\program files\Google\Google Earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\Google\Update\1.2.183.29\npGoogleOneClick8.dll
FF - plugin: c:\program files\Java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npdeployJava1.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npFoxitReaderPlugin.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npgcplug.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npracplug.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

HKCU-Run-WEBTRAN - (no file)
HKCU-Run-OEXPRESS - (no file)



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-08-11 17:01
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_USERS\S-1-5-21-796845957-630328440-682003330-1003\Software\SecuROM\License information*]
"datasecu"=hex:f3,d0,ed,a5,0f,b4,ab,6d,b6,fa,4b,b8,af,dc,bc,89,df,f2,c6,cc,ce,
0a,74,58,5a,be,31,28,0e,4c,45,f7,1f,64,02,79,90,8a,27,fd,30,9e,0b,5e,c6,0f,\
"rkeysecu"=hex:56,c6,0d,e0,20,27,f2,5f,5e,7a,0c,15,6c,01,a7,f3

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\Ř•€|˙˙˙˙•€|ů•6~*]
"5E7CEC10DF0760D4F8DAFB12FDC06CCD"="02:\\Software\\Adobe\\FeatureSubscriptions\\DVAAdobeDocMeta\\{01CEC7E5-70FD-4D06-8FAD-BF21DF0CC6DC}\\Registered"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System*]
"OODEFRAG10.00.00.01WORKSTATION"="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"
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
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(1016)
c:\windows\system32\LMIinit.dll
c:\windows\system32\LMIRfsClientNP.dll

- - - - - - - > 'explorer.exe'(3408)
c:\progra~1\WINDOW~3\wmpband.dll
c:\windows\system32\WPDShServiceObj.dll
c:\program files\Nokia\Nokia PC Suite 7\PhoneBrowser.dll
c:\program files\Nokia\Nokia PC Suite 7\NGSCM.DLL
c:\program files\Nokia\Nokia PC Suite 7\Lang\PhoneBrowser_cze.nlr
c:\program files\Nokia\Nokia PC Suite 7\Resource\PhoneBrowser_Nokia.ngr
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
c:\windows\system32\LMIRfsClientNP.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\nvsvc32.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\OO Software\Defrag\oodag.exe
c:\windows\system32\HPZipm12.exe
c:\program files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
c:\program files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
c:\windows\SoftwareDistribution\Download\80a5b71ef37d413455c34f50b82e083d\update\update.exe
.
**************************************************************************
.
Celkový čas: 2010-08-11 17:07:11 - počítač byl restartován
ComboFix-quarantined-files.txt 2010-08-11 15:07
ComboFix2.txt 2010-08-08 17:21
ComboFix3.txt 2010-08-05 20:50
ComboFix4.txt 2010-05-20 07:55

Před spuštěním: 1 031 299 072
Po spuštění: 1 030 750 208

- - End Of File - - 7470798F93C72859E0EFD6BFC66B48FB

[motji]

Co počítač a notepad?

[rahmael]

Počítač po restartu jede perfektně ale ten notepad stále nefunguje

[motji]

Zkuste tento program
http://sapcupgrades.com/Spywaretools/daft.exe
-stahněte, spusťte
-dejte sken, červeně označené řádky označte a klikněte na fix
-restartujte počítač
-pak dejte vědět zda to pomohlo

[rahmael]

Dobré ráno, tak bohužel nepomohlo ale stáhl jsem nový pozn.blok, tak pokud je vše bez viru tak bych to asi nechal být

Tak Vám velice děkuji za pomoc

[motji]

Odinstalujte combofix přes Start - Spustit
- zkopírujte do okénka:

ComboFix /Uninstall

-stiskněte Enter
-To odinstaluje ComboFix a smaže s ním související soubory a složky.


***********


Stáhněte T-Cleaner
http://sweb.cz/Marinus/T-Cleaner.exe

-Spusťte,pro potvrzení volby mačkejte klávesu A, Enter
-po použití prográmek vymažte.Pozor,antiviry ho mohou falešně označit za vir



***********


Z mého podpisu stahněte Ccleaner
- nainstalujte, při výběru, co se má nainstalovat, dejte pryč fajfku u instalace yahoo toolbaru

záložka čistič
- nechejte v levém sloupečku zatrhnuté vše jak je, klikněte na analyzovat
- po analýze klikněte na Spustit Ccleaner

záložka Registry
- klikněte na hledej problémy
- pak klikněte na opravit vybrané problémy -- udělat zálohu registrů - nemusíte
- kliknete opravit všechny problémy ok zavřít

Záložka Nástroje
- zde můžete odinstalovat programy. Je to důkladnější odinstalace než u přidat/odebrat programy ve Windows.

Ccleaner - čistič doporučuji používat, krásně pročistí pc od dočasných souborů.
Registry pročistí třeba po odinstalaci nějakého programu.


***********



Stahněte OTC a použijte
http://oldtimer.geekstogo.com/OTC.exe
-vyčistí tempy a po použitých programech



***********

Vložte nový log ze RSIT a řekněte co počítač, jak se chová, už je vše v pořádku?

----------------------------------


Stahněte SAS http://portable.superantispyware.com/sassaferun.php
-proveďte aktualizaci a dejte uplný sken.
-Co najde, smažte,a napište co našel.
(tato verze se neinstaluje, je v angličtině. Pokud potřebujete uplný návod, klikněte mi v podpisu na SAS)