Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Shedder

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Zamčeno
Zpráva
Autor
mickeykr
Návštěvník
Návštěvník
Příspěvky: 82
Registrován: 27 říj 2010 21:40

Shedder

#1 Příspěvek od mickeykr »

Dobrý den, mám problém s shedder ani nevím, kde se to v complu vzalo nejde to vymazat nic... Poradíte ?

http://www.youtube.com/watch?v=dflsqrle0Mg

Díky
Jsem člověk, který našel svůj domov forum.viry.cz
Nic nedělejte bez rádce, můžete dojít ke kompletní ztrátě dat !
Nejsem rádce, ale chtěl bych se jím stát, ale i tak vám rád pomůžu


Microsoft Essential ke stažení !
RSIT ke stažení !

Chcete pomoct se stránkami nebo grafikou ? Nebojte se mi napsat, rád vám pomůžu

mickeykr
Návštěvník
Návštěvník
Příspěvky: 82
Registrován: 27 říj 2010 21:40

Re: Shedder

#2 Příspěvek od mickeykr »

RSIT log:

Kód: Vybrat vše

Logfile of random's system information tool 1.08 (written by random/random)
Run by Michal at 2010-10-28 10:19:10
Microsoft® Windows Vista™ Home Basic  
System drive C: has 23 GB (20%) free of 114 GB
Total RAM: 3002 MB (33% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:19:31, on 28.10.2010
Platform: Windows Vista  (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16982)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\DivX\DivX Update\DivXUpdate.exe
C:\Program Files\Microsoft Security Essentials\msseces.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Multimedia Mouse Driver\v5\StartAutorun.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Pinnacle\Shared Files\Programs\StrmServer\StrmServer.exe
C:\Program Files\Multimedia Mouse Driver\v5\KMConfig.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\Multimedia Mouse Driver\v5\KMProcess.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Windows\system32\conime.exe
C:\Windows\explorer.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\ICQ7.2\ICQ.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Adobe\Adobe Photoshop CS3\Photoshop.exe
C:\totalcmd\TOTALCMD.EXE
C:\Program Files\PSPad editor\PSPad.exe
C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Michal\Downloads\RSIT.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\trend micro\Michal.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.icq.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:25488
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = plimus.com,www.plimus.com,regnow.com,www.regnow.com,
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
R3 - URLSearchHook: (no name) -  - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: PCCBHO.CPCCBHO - {22FC6CE8-7D47-479F-B74A-BFBB04ADB9AF} - C:\Program Files\Winferno\PC Confidential\PCCBHO.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKLM\..\Run: [MSSE] "c:\Program Files\Microsoft Security Essentials\msseces.exe" -hide -runkey
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [PrzyspieszKomputer] "C:\Program Files\Zrychleni Pocitace\PrzyspieszKomputer.exe"
O4 - HKLM\..\Run: [iSafeCW] C:\Program Files\iSafe AllInOne Keylogger\winsrv.exe
O4 - HKLM\..\Run: [amd_dc_opt] C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [KMConfig] "C:\Program Files\Multimedia Mouse Driver\v5\StartAutorun.exe" KMConfig.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Google Update] "C:\Users\Michal\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"
O4 - HKCU\..\Run: [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [EA Core] "C:\Program Files\Electronic Arts\EADM\Core.exe" -silent
O4 - HKCU\..\Run: [ICQ] "C:\Program Files\ICQ6.5\ICQ.exe" silent
O4 - HKCU\..\Run: [Smart Engine] "C:\ProgramData\2beba8\SM2be_231.exe" /s /d
O4 - Startup: OpenOffice.org 3.2.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O4 - Global Startup: 20Dollars2Surf.lnk = C:\Program Files\20Dollars2Surf\20dollars2surf.exe
O4 - Global Startup: Pinnacle Streaming Server.lnk = C:\Program Files\Pinnacle\Shared Files\Programs\StrmServer\StrmServer.exe
O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\Michal\AppData\Roaming\DVDVideoSoftIEHelpers\youtubetomp3.htm
O9 - Extra button: (no name) - {53F6FCCD-9E22-4d71-86EA-6E43136192AB} - C:\Program Files\Winferno\PC Confidential\PCConfidential.exe
O9 - Extra 'Tools' menuitem: PC Confidential - {53F6FCCD-9E22-4d71-86EA-6E43136192AB} - C:\Program Files\Winferno\PC Confidential\PCConfidential.exe
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: PC Confidential - {925DAB62-F9AC-4221-806A-057BFB1014AA} - C:\Program Files\Winferno\PC Confidential\PCConfidential.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Keyboard And Mouse Communication Service (KMWDSERVICE) - UASSOFT.COM - C:\Program Files\Multimedia Mouse Driver\v5\KMWDSrv.exe
O23 - Service: mental ray 3.7 Satellite for Autodesk 3ds Max 2010 32-bit 32-bit (mi-raysat_3dsmax2010_32) - Unknown owner - C:\Program Files\Autodesk\3ds Max 2010\mentalray\satellite\raysat_3dsmax2010_32server.exe
O23 - Service: RaySat_3dsmax8 Server (mi-raysat_3dsmax8) - Unknown owner - C:\Program Files\Autodesk\3dsMax8\mentalray\satellite\raysat_3dsmax8server.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: TeamViewer 5 (TeamViewer5) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe
O23 - Service: Stardock WindowBlinds (WindowBlinds) - Stardock Corporation - C:\Program Files\Stardock\MyColors\VistaSrv.exe

--
End of file - 9290 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1630076922-693152462-836407820-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1630076922-693152462-836407820-1000UA.job
C:\Windows\tasks\Norton Security Scan for Michal.job
C:\Windows\tasks\PCConfidential.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22FC6CE8-7D47-479F-B74A-BFBB04ADB9AF}]
PCCBHO.CPCCBHO - C:\Program Files\Winferno\PC Confidential\PCCBHO.dll [2008-04-01 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre6\bin\ssv.dll [2010-07-28 325408]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype add-on for Internet Explorer - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2010-02-08 804136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-07-28 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4FE6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2009-08-16 962808]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2010-07-30 1006264]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]
"DivXUpdate"=C:\Program Files\DivX\DivX Update\DivXUpdate.exe [2010-06-03 1144104]
"MSSE"=c:\Program Files\Microsoft Security Essentials\msseces.exe [2010-09-15 1094224]
"QuickTime Task"=C:\Program Files\QuickTime\QTTask.exe [2009-05-26 413696]
"PrzyspieszKomputer"=C:\Program Files\Zrychleni Pocitace\PrzyspieszKomputer.exe [2010-08-15 890104]
"iSafeCW"=C:\Program Files\iSafe AllInOne Keylogger\winsrv.exe [2010-03-21 1793024]
"amd_dc_opt"=C:\Program Files\AMD\Dual-Core Optimizer\amd_dc_opt.exe [2008-07-22 77824]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2009-09-10 141848]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2009-09-10 175128]
"Persistence"=C:\Windows\system32\igfxpers.exe [2009-09-10 153624]
"KMConfig"=C:\Program Files\Multimedia Mouse Driver\v5\StartAutorun.exe [2007-03-06 212992]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2007-05-11 40048]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-07-30 1232896]
"Google Update"=C:\Users\Michal\AppData\Local\Google\Update\GoogleUpdate.exe [2010-07-28 136176]
"Skype"=C:\Program Files\Skype\\Phone\Skype.exe [2010-09-02 13351304]
"uTorrent"=C:\Program Files\uTorrent\uTorrent.exe [2010-09-16 328568]
"RocketDock"=C:\Program Files\RocketDock\RocketDock.exe [2007-09-02 495616]
"EA Core"=C:\Program Files\Electronic Arts\EADM\Core.exe [2009-03-28 3325952]
"ICQ"=C:\Program Files\ICQ6.5\ICQ.exe [2009-11-16 172792]
"Smart Engine"=C:\ProgramData\2beba8\SM2be_231.exe [2010-10-27 3579904]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
20Dollars2Surf.lnk - C:\Program Files\20Dollars2Surf\20dollars2surf.exe
Pinnacle Streaming Server.lnk - C:\Program Files\Pinnacle\Shared Files\Programs\StrmServer\StrmServer.exe

C:\Users\Michal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
OpenOffice.org 3.2.lnk - C:\Program Files\OpenOffice.org 3\program\quickstart.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2009-09-10 215040]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"= []

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======List of files/folders created in the last 1 months======

2010-10-27 23:39:59 ----SHD---- C:\$RECYCLE.BIN
2010-10-27 23:39:56 ----D---- C:\Windows\temp
2010-10-27 23:39:54 ----A---- C:\ComboFix.txt
2010-10-27 23:25:20 ----A---- C:\Windows\zip.exe
2010-10-27 23:25:20 ----A---- C:\Windows\SWXCACLS.exe
2010-10-27 23:25:20 ----A---- C:\Windows\SWSC.exe
2010-10-27 23:25:20 ----A---- C:\Windows\SWREG.exe
2010-10-27 23:25:20 ----A---- C:\Windows\sed.exe
2010-10-27 23:25:20 ----A---- C:\Windows\PEV.exe
2010-10-27 23:25:20 ----A---- C:\Windows\NIRCMD.exe
2010-10-27 23:25:20 ----A---- C:\Windows\MBR.exe
2010-10-27 23:25:20 ----A---- C:\Windows\grep.exe
2010-10-27 23:25:05 ----D---- C:\Windows\ERDNT
2010-10-27 23:25:03 ----D---- C:\cokoliv.com
2010-10-27 23:23:48 ----D---- C:\Qoobox
2010-10-27 22:49:03 ----D---- C:\Program Files\trend micro
2010-10-27 22:49:02 ----D---- C:\rsit
2010-10-27 20:44:46 ----D---- C:\Program Files\CamStudio
2010-10-27 20:40:19 ----SHD---- C:\ProgramData\SMNAOQE
2010-10-27 20:39:30 ----SHD---- C:\ProgramData\2beba8
2010-10-27 11:47:50 ----D---- C:\Program Files\Winamp Detect
2010-10-27 11:47:20 ----D---- C:\Users\Michal\AppData\Roaming\Winamp
2010-10-27 11:47:20 ----D---- C:\Program Files\Winamp
2010-10-26 12:27:00 ----D---- C:\Program Files\ICQ6.5
2010-10-26 12:16:31 ----D---- C:\Program Files\ICQ7.2
2010-10-25 22:13:14 ----D---- C:\Program Files\CPUID
2010-10-25 22:13:14 ----A---- C:\Windows\system32\drivers\cpuz132_x32.sys
2010-10-24 22:56:00 ----D---- C:\Program Files\TED Notepad
2010-10-24 20:09:38 ----D---- C:\Users\Michal\AppData\Roaming\dvdcss
2010-10-24 20:07:03 ----D---- C:\Users\Michal\AppData\Roaming\vlc
2010-10-24 20:05:48 ----D---- C:\Program Files\VideoLAN
2010-10-24 18:39:25 ----A---- C:\Windows\system32\drivers\Ltn_stk7070P.sys
2010-10-24 18:37:34 ----D---- C:\Program Files\MSXML 4.0
2010-10-24 18:36:20 ----N---- C:\Windows\system32\MASE32.DLL
2010-10-24 18:36:20 ----N---- C:\Windows\system32\MASD32.DLL
2010-10-24 18:36:19 ----N---- C:\Windows\system32\MAMC32.DLL
2010-10-24 18:36:19 ----N---- C:\Windows\system32\MACD32.DLL
2010-10-24 18:36:19 ----N---- C:\Windows\system32\MA32.DLL
2010-10-24 18:35:52 ----N---- C:\Windows\system32\MSVCRTD.DLL
2010-10-24 18:35:52 ----N---- C:\Windows\system32\msvcr71d.dll
2010-10-24 18:35:51 ----N---- C:\Windows\system32\msvcr70d.dll
2010-10-24 18:35:51 ----N---- C:\Windows\system32\msvcp71d.dll
2010-10-24 18:35:51 ----N---- C:\Windows\system32\msvcp70d.dll
2010-10-24 18:35:51 ----N---- C:\Windows\system32\mfc71d.dll
2010-10-24 18:35:51 ----N---- C:\Windows\system32\HHActiveX.dll
2010-10-24 18:35:50 ----A---- C:\Windows\system32\DivXEncSettings.txt
2010-10-24 18:35:38 ----N---- C:\Windows\system32\MFC71u.dll
2010-10-24 18:35:38 ----N---- C:\Windows\system32\MFC71.dll
2010-10-24 18:35:37 ----N---- C:\Windows\system32\msvcr80.dll
2010-10-24 18:35:37 ----N---- C:\Windows\system32\msvcp80.dll
2010-10-24 18:35:37 ----N---- C:\Windows\system32\atl71.dll
2010-10-24 18:35:36 ----D---- C:\Program Files\Pinnacle
2010-10-24 18:29:43 ----D---- C:\ProgramData\Pinnacle
2010-10-24 18:03:48 ----D---- C:\Program Files\Multimedia Mouse Driver
2010-10-24 06:46:47 ----D---- C:\ProgramData\Electronic Arts
2010-10-22 14:05:11 ----A---- C:\Windows\system32\vp6vfw.dll
2010-10-22 14:04:55 ----D---- C:\Program Files\Microsoft WSE
2010-10-22 13:45:04 ----D---- C:\Program Files\Electronic Arts
2010-10-18 16:51:19 ----D---- C:\Users\Michal\AppData\Roaming\OpenOffice.org
2010-10-18 16:47:06 ----D---- C:\Program Files\OpenOffice.org 3
2010-10-15 07:06:26 ----D---- C:\Users\Michal\AppData\Roaming\PSpad
2010-10-15 07:06:00 ----D---- C:\Program Files\PSPad editor
2010-10-15 06:40:52 ----D---- C:\Program Files\SoftMaker Viewer
2010-10-15 06:40:52 ----A---- C:\Windows\unTMV.exe
2010-10-15 06:39:24 ----D---- C:\Program Files\Doc Convertor
2010-10-12 17:38:47 ----D---- C:\Users\Michal\AppData\Roaming\TuxPaint
2010-10-12 17:38:34 ----D---- C:\Program Files\TuxPaint
2010-10-12 15:19:14 ----D---- C:\Program Files\Altar Games
2010-10-12 15:14:55 ----D---- C:\Program Files\ABCgames Cheater
2010-10-11 16:24:22 ----D---- C:\Program Files\Scorpions WinCheater
2010-10-11 16:19:57 ----D---- C:\Program Files\1C
2010-10-09 21:46:17 ----D---- C:\Program Files\Google
2010-10-07 09:08:04 ----D---- C:\Program Files\Share Rapid Uploader
2010-09-30 14:30:57 ----D---- C:\Program Files\ScreenVCR
2010-09-30 14:24:57 ----D---- C:\Fraps

======List of files/folders modified in the last 1 months======

2010-10-28 09:34:40 ----D---- C:\Users\Michal\AppData\Roaming\Skype
2010-10-28 08:31:25 ----D---- C:\Windows\System32
2010-10-28 08:31:25 ----D---- C:\ProgramData
2010-10-28 08:31:22 ----D---- C:\Users\Michal\AppData\Roaming\ICQ
2010-10-28 08:31:12 ----D---- C:\Users\Michal\AppData\Roaming\skypePM
2010-10-27 23:39:56 ----D---- C:\Windows
2010-10-27 23:37:49 ----A---- C:\Windows\system.ini
2010-10-27 23:37:42 ----D---- C:\Windows\system32\drivers\etc
2010-10-27 23:32:47 ----D---- C:\Windows\system32\drivers
2010-10-27 23:32:47 ----D---- C:\Windows\AppPatch
2010-10-27 23:32:46 ----D---- C:\Program Files\Common Files
2010-10-27 23:12:06 ----D---- C:\Users\Michal\AppData\Roaming\uTorrent
2010-10-27 22:49:03 ----D---- C:\Program Files
2010-10-27 22:04:51 ----D---- C:\Games
2010-10-27 21:38:25 ----D---- C:\Program Files\ICQ6Toolbar
2010-10-27 20:21:41 ----A---- C:\Windows\system32\PnkBstrB.exe
2010-10-27 17:32:19 ----D---- C:\Users\Michal\AppData\Roaming\FileZilla
2010-10-27 15:46:36 ----SHD---- C:\System Volume Information
2010-10-27 12:21:07 ----D---- C:\Users\Michal\AppData\Roaming\TeamViewer
2010-10-26 12:49:01 ----D---- C:\Users\Michal\AppData\Roaming\Adobe
2010-10-26 12:31:18 ----D---- C:\Program Files\Mozilla Firefox
2010-10-26 12:30:22 ----HD---- C:\Program Files\InstallShield Installation Information
2010-10-26 12:30:16 ----D---- C:\ProgramData\ICQ
2010-10-25 14:58:26 ----D---- C:\Program Files\Common Files\Symantec Shared
2010-10-24 19:56:48 ----D---- C:\Windows\Prefetch
2010-10-24 19:56:46 ----D---- C:\Program Files\AVS4YOU
2010-10-24 19:48:25 ----D---- C:\Windows\inf
2010-10-24 19:46:55 ----D---- C:\Windows\system32\catroot
2010-10-24 18:38:56 ----SHD---- C:\Windows\Installer
2010-10-24 18:37:53 ----D---- C:\Windows\winsxs
2010-10-24 18:36:20 ----A---- C:\Windows\win.ini
2010-10-24 18:35:14 ----D---- C:\ProgramData\Adobe
2010-10-24 18:34:33 ----D---- C:\Program Files\Common Files\Adobe
2010-10-24 18:34:14 ----D---- C:\Program Files\Adobe
2010-10-24 13:15:33 ----D---- C:\.mpr_file_store_32
2010-10-22 14:05:10 ----SD---- C:\Users\Michal\AppData\Roaming\Microsoft
2010-10-22 14:05:10 ----RSD---- C:\Windows\assembly
2010-10-22 12:54:10 ----D---- C:\Windows\system32\WDI
2010-10-22 05:59:13 ----D---- C:\Windows\system32\catroot2
2010-10-19 22:51:33 ----N---- C:\Windows\system32\MpSigStub.exe
2010-10-18 17:32:27 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-10-18 16:47:44 ----RSD---- C:\Windows\Fonts
2010-10-15 09:47:55 ----D---- C:\.file_store_32
2010-10-14 14:55:32 ----D---- C:\Program Files\Common Files\Blizzard Entertainment
2010-10-13 23:56:27 ----A---- C:\Windows\system32\mrt.exe
2010-10-13 16:41:51 ----D---- C:\Program Files\Microsoft Security Essentials
2010-10-09 21:46:28 ----D---- C:\Windows\Tasks
2010-10-09 21:46:28 ----D---- C:\Windows\system32\Tasks
2010-10-02 10:37:03 ----A---- C:\Windows\system32\PnkBstrA.exe
2010-10-02 10:37:01 ----A---- C:\Windows\system32\pbsvc.exe
2010-09-29 16:18:19 ----D---- C:\Users\Michal\AppData\Roaming\Autodesk

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2010-03-25 151216]
R2 cpuz132;cpuz132; \??\C:\Windows\system32\drivers\cpuz132_x32.sys [2009-03-27 12672]
R3 AmdLLD;AMD Low Level Device Driver; C:\Windows\system32\DRIVERS\AmdLLD.sys [2007-06-29 34304]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2009-01-09 1093120]
R3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2010-07-30 19456]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2006-11-02 92160]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2010-07-30 29184]
R3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2009-09-10 4744704]
R3 MpNWMon;Microsoft Malware Protection Network Driver; C:\Windows\system32\DRIVERS\MpNWMon.sys [2010-03-25 42368]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2006-11-02 49664]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2008-12-23 138240]
R3 usbvideo;Zobrazovací zařízení USB (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2006-11-02 132352]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2010-07-30 220160]
S3 catchme;catchme; \??\C:\Users\Michal\AppData\Local\Temp\catchme.sys []
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2006-11-02 5632]
S3 ialm;ialm; C:\Windows\system32\DRIVERS\ialmnt5.sys [2006-11-02 1302492]
S3 Ltn_stk7070P;PCTV based TV tuner device; C:\Windows\system32\DRIVERS\Ltn_stk7070P.sys [2007-06-14 466048]
S3 mbr;mbr; \??\C:\Users\Michal\AppData\Local\Temp\mbr.sys []
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2006-11-02 8192]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2006-11-02 5888]
S3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2006-11-02 5504]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2006-11-02 6016]
S3 Ph3xIB32;Philips 713x Inbox PCI TV Card; C:\Windows\system32\DRIVERS\Ph3xIB32.sys [2007-04-03 1131136]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2006-11-02 35328]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2006-11-02 82560]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Autodesk Licensing Service;Autodesk Licensing Service; C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe [2010-08-13 72704]
R2 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:\Program Files\Bonjour\mDNSResponder.exe [2006-02-28 229376]
R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2006-11-02 22016]
R2 KMWDSERVICE;Keyboard And Mouse Communication Service; C:\Program Files\Multimedia Mouse Driver\v5\KMWDSrv.exe [2007-05-08 2179072]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Essentials\MsMpEng.exe [2010-03-25 17904]
R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2010-10-02 75064]
R2 TeamViewer5;TeamViewer 5; C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe [2010-09-24 1960744]
R2 WindowBlinds;Stardock WindowBlinds; C:\Program Files\Stardock\MyColors\VistaSrv.exe [2009-06-09 230704]
R3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-09-26 651720]
S2 gupdate;Google Update Service (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-07-28 136176]
S2 mi-raysat_3dsmax2010_32;mental ray 3.7 Satellite for Autodesk 3ds Max 2010 32-bit 32-bit; C:\Program Files\Autodesk\3ds Max 2010\mentalray\satellite\raysat_3dsmax2010_32server.exe [2009-03-12 86016]
S2 mi-raysat_3dsmax8;RaySat_3dsmax8 Server; C:\Program Files\Autodesk\3dsMax8\mentalray\satellite\raysat_3dsmax8server.exe [2005-09-21 65536]

-----------------EOF-----------------
Jsem člověk, který našel svůj domov forum.viry.cz
Nic nedělejte bez rádce, můžete dojít ke kompletní ztrátě dat !
Nejsem rádce, ale chtěl bych se jím stát, ale i tak vám rád pomůžu


Microsoft Essential ke stažení !
RSIT ke stažení !

Chcete pomoct se stránkami nebo grafikou ? Nebojte se mi napsat, rád vám pomůžu

Uživatelský avatar
motji
VIP
VIP
Příspěvky: 23302
Registrován: 23 říj 2008 08:02

Re: Shedder

#3 Příspěvek od motji »

Vy si ze mě děláte srandu, ne? Log už Vám kontroluju v jednom topicu, proč zakládáte stále další?
Zde prosím moderátory o lock a Vy pokračujte v tom původním http://www.viry.cz/forum/viewtopic.php?f=13&t=106013
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data :!:
Chcete podpořit naše forum? Informace zde

Obrázek

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.

Uživatelský avatar
Caroprd111
VIP
VIP
Příspěvky: 13492
Registrován: 22 bře 2009 20:48
Bydliště: Třebíč
Kontaktovat uživatele:

Re: Shedder

#4 Příspěvek od Caroprd111 »

Zamykám :closed:
Obrázek

Zamčeno