zdravím, potřebovala bych pomoct, zničehonic (bez instalací čehokoliv za poslední dobu) se mi začaly sekat windowsy. Nabíhají pomalu, trvá věčnost, než naběhne mozilla apod.
Logfile of random's system information tool 1.08 (written by random/random)
Run by PC at 2011-01-10 18:24:15
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 216 GB (71%) free of 305 GB
Total RAM: 2047 MB (64% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:24:21, on 10.1.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\DAEMON Tools\daemon.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Browser Mouse\moffice.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Alwil Software\Avast5\avastUI.exe
C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\Browser Mouse\MOUSE32A.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\ICQ6Toolbar\ICQ Service.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Team Viewer\Version5\TeamViewer_Service.exe
C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\TeamViewer\Version6\TeamViewer.exe
C:\Program Files\TeamViewer\Version6\tv_w32.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
F:\Progs\Ochrana PC\RSIT.exe
C:\Program Files\trend micro\PC.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fullarticles.net
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.winamp.com/bin/winamp_report ... -%20EMusic
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: SweetIM ToolbarURLSearchHook Class - {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll
R3 - URLSearchHook: DVDVideoSoftTB Toolbar - {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} - C:\Program Files\DVDVideoSoft\tbDVD0.dll
R3 - URLSearchHook: Free Lunch Design Toolbar - {57cc715d-37ca-44e4-9ec2-8c2cbddb25ec} - C:\Program Files\Free_Lunch_Design\tbFre0.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Free Lunch Design Toolbar - {57cc715d-37ca-44e4-9ec2-8c2cbddb25ec} - C:\Program Files\Free_Lunch_Design\tbFre0.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: DVDVideoSoftTB Toolbar - {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} - C:\Program Files\DVDVideoSoft\tbDVD0.dll
O2 - BHO: SWEETIE - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: SweetIM Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll
O3 - Toolbar: DVDVideoSoftTB Toolbar - {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} - C:\Program Files\DVDVideoSoft\tbDVD0.dll
O3 - Toolbar: Free Lunch Design Toolbar - {57cc715d-37ca-44e4-9ec2-8c2cbddb25ec} - C:\Program Files\Free_Lunch_Design\tbFre0.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [wcmdmgr] C:\WINDOWS\wt\wcmdmgrl.exe -launch
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [MEDIAMOUSE] C:\Program Files\Browser Mouse\moffice.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime Alternative\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{F4182E98-D60F-4B90-8FC1-80E21462385A}: NameServer = 156.154.70.25,156.154.71.25
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: TeamViewer 5 (TeamViewer5) - TeamViewer GmbH - C:\Program Files\Team Viewer\Version5\TeamViewer_Service.exe
O23 - Service: TeamViewer 6 (TeamViewer6) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe
--
End of file - 10757 bytes
======Scheduled tasks folder======
C:\WINDOWS\tasks\AppleSoftwareUpdate.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-11-10 62376]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{57cc715d-37ca-44e4-9ec2-8c2cbddb25ec}]
Free Lunch Design Toolbar - C:\Program Files\Free_Lunch_Design\tbFre0.dll [2010-11-05 2735200]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-11-07 41760]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-11-07 79648]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{e9911ec6-1bcc-40b0-9993-e0eea7f6953f}]
DVDVideoSoftTB Toolbar - C:\Program Files\DVDVideoSoft\tbDVD0.dll [2010-11-05 2735200]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EEE6C35C-6118-11DC-9C72-001320C79847}]
SweetIM Toolbar Helper - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll [2009-10-19 1345336]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{855F3B16-6D32-4fe6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2009-06-01 962808]
{EEE6C35B-6118-11DC-9C72-001320C79847} - SweetIM Toolbar for Internet Explorer - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll [2009-10-19 1345336]
{e9911ec6-1bcc-40b0-9993-e0eea7f6953f} - DVDVideoSoftTB Toolbar - C:\Program Files\DVDVideoSoft\tbDVD0.dll [2010-11-05 2735200]
{57cc715d-37ca-44e4-9ec2-8c2cbddb25ec} - Free Lunch Design Toolbar - C:\Program Files\Free_Lunch_Design\tbFre0.dll [2010-11-05 2735200]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2007-12-19 135168]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2007-12-19 159744]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2007-12-19 131072]
"wcmdmgr"=C:\WINDOWS\wt\wcmdmgrl.exe [1999-12-09 20480]
"DAEMON Tools"=C:\Program Files\DAEMON Tools\daemon.exe [2005-12-10 133016]
"NWEReboot"= []
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2008-12-26 18081280]
"Alcmtr"=C:\WINDOWS\ALCMTR.EXE [2008-06-19 57344]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2005-12-10 7311360]
"nwiz"=nwiz.exe /install []
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2005-12-10 86016]
"MEDIAMOUSE"=C:\Program Files\Browser Mouse\moffice.exe [2010-08-29 806912]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2008-10-25 31072]
"QuickTime Task"=C:\Program Files\QuickTime Alternative\QTTask.exe [2010-09-08 421888]
"iTunesHelper"=C:\Program Files\iTunes\iTunesHelper.exe [2010-09-24 421160]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe [2010-11-10 35736]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-11-10 932288]
"avast5"=C:\Program Files\Alwil Software\Avast5\avastUI.exe [2010-09-07 2838912]
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cfp.exe [2010-09-10 2500552]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2010-05-13 26192168]
C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
Adobe Gamma Loader.exe.lnk - C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
Windows Search.lnk - C:\Program Files\Windows Desktop Search\WindowsSearch.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2007-12-19 208896]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\NavLogon]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-12 2217848]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"=C:\Program Files\Windows Desktop Search\MSNLNamespaceMgr.dll [2009-05-24 304128]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CLPSLS]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CLPSLS]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"DisableStatusMessages"=0
"DisableTaskMgr"=0
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=149
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\ICQ6.5\ICQ.exe"="C:\Program Files\ICQ6.5\ICQ.exe:*:Enabled:ICQ6"
"C:\Program Files\Skype\Plugin Manager\skypePM.exe"="C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\Program Files\ICQ7.2\ICQ.exe"="C:\Program Files\ICQ7.2\ICQ.exe:*:Enabled:ICQ7.2"
"C:\Program Files\ICQ7.2\aolload.exe"="C:\Program Files\ICQ7.2\aolload.exe:*:Enabled:aolload.exe"
"C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE"="C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\Program Files\Microsoft Office\Office12\GROOVE.EXE"="C:\Program Files\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE"="C:\Program Files\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\Program Files\Team Viewer\Version5\TeamViewer.exe"="C:\Program Files\Team Viewer\Version5\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application"
"C:\Program Files\Team Viewer\Version5\TeamViewer_Service.exe"="C:\Program Files\Team Viewer\Version5\TeamViewer_Service.exe:*:Enabled:Teamviewer Remote Control Service"
"C:\Documents and Settings\PC\Plocha\P17535732.JPG-www.facebook.exe"="C:\WINDOWS\nvsvc32.exe:*:Enabled:NVIDIA driver monitor"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour Service"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"C:\Program Files\TeamViewer\Version6\TeamViewer.exe"="C:\Program Files\TeamViewer\Version6\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application"
"C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe"="C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe:*:Enabled:Teamviewer Remote Control Service"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\ICQ7.2\ICQ.exe"="C:\Program Files\ICQ7.2\ICQ.exe:*:Enabled:ICQ7.2"
"C:\Program Files\ICQ7.2\aolload.exe"="C:\Program Files\ICQ7.2\aolload.exe:*:Enabled:aolload.exe"
======List of files/folders created in the last 1 months======
2011-01-10 18:24:15 ----D---- C:\rsit
2011-01-10 18:24:15 ----D---- C:\Program Files\trend micro
2011-01-10 18:13:57 ----D---- C:\Program Files\CCleaner
2011-01-08 20:07:02 ----HDC---- C:\WINDOWS\$NtUninstallKB963093$
2011-01-07 16:39:46 ----D---- C:\Documents and Settings\PC\Data aplikací\Windows Desktop Search
2011-01-07 16:39:14 ----D---- C:\WINDOWS\system32\GroupPolicy
2011-01-07 16:39:14 ----D---- C:\Program Files\Windows Desktop Search
2011-01-07 16:39:00 ----HDC---- C:\WINDOWS\$NtUninstallKB940157$
2011-01-07 16:38:44 ----HDC---- C:\WINDOWS\$NtUninstallKB915800-v4$
2010-12-28 21:03:25 ----D---- C:\Documents and Settings\All Users\Data aplikací\Comodo
2010-12-28 21:03:22 ----D---- C:\Program Files\COMODO
2010-12-28 21:03:21 ----A---- C:\WINDOWS\system32\mfc71.dll
2010-12-28 21:03:21 ----A---- C:\WINDOWS\system32\gdiplus.dll
2010-12-28 12:02:56 ----D---- C:\Program Files\TeamViewer
2010-12-27 18:32:42 ----A---- C:\WINDOWS\system32\drivers\aswFsBlk.sys
2010-12-27 18:32:41 ----A---- C:\WINDOWS\system32\drivers\aswSP.sys
2010-12-27 18:32:39 ----A---- C:\WINDOWS\system32\drivers\aswRdr.sys
2010-12-27 18:32:38 ----A---- C:\WINDOWS\system32\drivers\aswTdi.sys
2010-12-27 18:32:35 ----A---- C:\WINDOWS\system32\drivers\aswmon2.sys
2010-12-27 18:32:35 ----A---- C:\WINDOWS\system32\drivers\aswmon.sys
2010-12-27 18:32:35 ----A---- C:\WINDOWS\system32\drivers\aavmker4.sys
2010-12-27 18:32:26 ----A---- C:\WINDOWS\system32\aswBoot.exe
2010-12-27 18:32:22 ----D---- C:\Program Files\Alwil Software
2010-12-27 18:32:22 ----D---- C:\Documents and Settings\All Users\Data aplikací\Alwil Software
2010-12-14 23:28:58 ----HDC---- C:\WINDOWS\$NtUninstallKB2296199$
2010-12-14 23:28:35 ----HDC---- C:\WINDOWS\$NtUninstallKB2443105$
2010-12-14 23:27:58 ----HDC---- C:\WINDOWS\$NtUninstallKB2440591$
2010-12-14 23:27:53 ----HDC---- C:\WINDOWS\$NtUninstallKB2443685$
2010-12-14 23:27:49 ----HDC---- C:\WINDOWS\$NtUninstallKB2436673$
2010-12-14 23:27:45 ----HDC---- C:\WINDOWS\$NtUninstallKB2467659$
2010-12-14 23:25:03 ----HDC---- C:\WINDOWS\$NtUninstallKB2423089$
======List of files/folders modified in the last 1 months======
2026-08-17 20:21:07 ----D---- C:\WINDOWS\SoftwareDistribution
2011-01-10 18:24:21 ----D---- C:\WINDOWS\Prefetch
2011-01-10 18:24:15 ----RD---- C:\Program Files
2011-01-10 18:22:30 ----D---- C:\WINDOWS\Temp
2011-01-10 18:10:54 ----D---- C:\Program Files\Mozilla Firefox
2011-01-10 18:07:27 ----D---- C:\WINDOWS\system32\CatRoot2
2011-01-10 18:03:28 ----D---- C:\Documents and Settings\PC\Data aplikací\Skype
2011-01-10 17:39:46 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-01-10 01:45:18 ----A---- C:\WINDOWS\NeroDigital.ini
2011-01-09 15:33:07 ----D---- C:\WINDOWS
2011-01-08 20:07:07 ----HD---- C:\WINDOWS\inf
2011-01-08 20:07:04 ----D---- C:\WINDOWS\system32
2011-01-07 16:39:54 ----D---- C:\Documents and Settings\PC\Data aplikací\ICQ
2011-01-07 16:39:22 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2011-01-07 16:39:19 ----A---- C:\WINDOWS\imsins.BAK
2011-01-07 16:39:17 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-01-07 16:39:15 ----D---- C:\WINDOWS\system32\cs-cz
2011-01-07 16:39:14 ----D---- C:\WINDOWS\system32\wbem
2011-01-07 16:38:50 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-01-07 16:25:34 ----SD---- C:\Documents and Settings\PC\Data aplikací\Microsoft
2011-01-06 16:57:36 ----D---- C:\Documents and Settings\PC\Data aplikací\skypePM
2010-12-28 22:12:21 ----SHD---- C:\WINDOWS\Installer
2010-12-28 21:04:21 ----D---- C:\WINDOWS\system32\drivers
2010-12-28 20:59:23 ----D---- C:\Documents and Settings\PC\Data aplikací\TeamViewer
2010-12-28 19:07:07 ----D---- C:\Program Files\Winamp
2010-12-28 19:06:58 ----D---- C:\Program Files\Winamp Detect
2010-12-27 18:32:32 ----D---- C:\WINDOWS\WinSxS
2010-12-27 18:18:06 ----A---- C:\WINDOWS\win.ini
2010-12-27 18:12:13 ----D---- C:\Program Files\ESET
2010-12-14 23:28:52 ----D---- C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2010-12-14 23:28:28 ----D---- C:\Program Files\Internet Explorer
2010-12-14 23:28:03 ----HD---- C:\WINDOWS\$hf_mig$
2010-12-14 23:25:12 ----A---- C:\WINDOWS\system32\MRT.exe
2010-12-14 23:25:04 ----D---- C:\Program Files\Outlook Express
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 Inspect;COMODO Internet Security Firewall Driver; C:\WINDOWS\System32\DRIVERS\inspect.sys [2010-09-10 91560]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2009-04-28 44944]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2010-08-18 642560]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2010-09-07 28880]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2010-09-07 165584]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2010-09-07 46672]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\WINDOWS\System32\DRIVERS\cmdguard.sys [2010-09-10 239240]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\WINDOWS\System32\DRIVERS\cmdhlp.sys [2010-09-10 25240]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-25 12032]
R2 AegisP;AEGIS Protocol (IEEE 802.1x) v3.7.5.0; C:\WINDOWS\system32\DRIVERS\AegisP.sys [2009-09-13 21361]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2010-09-07 17744]
R2 aswMon2;aswMon2; C:\WINDOWS\system32\drivers\aswMon2.sys [2010-09-07 100176]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2010-09-07 23376]
R3 dtscsi;dtscsi; C:\WINDOWS\System32\Drivers\dtscsi.sys [2010-08-01 223128]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2009-05-18 26600]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 HidUsb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2008-12-26 4968448]
R3 moufiltr;Mouse Filter Driver; C:\WINDOWS\system32\DRIVERS\moufiltr.sys [2010-08-29 62592]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-25 12160]
R3 nv;nv; C:\WINDOWS\system32\DRIVERS\nv4_mini.sys [2005-12-10 3536768]
R3 RTLE8023xp;Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys [2008-09-25 115328]
R3 teamviewervpn;TeamViewer VPN Adapter; C:\WINDOWS\system32\DRIVERS\teamviewervpn.sys [2010-09-21 25088]
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S1 InCDPass;InCDPass; C:\WINDOWS\system32\drivers\InCDPass.sys []
S1 InCDRm;InCD Reader; C:\WINDOWS\system32\drivers\InCDRm.sys []
S3 GMSIPCI;GMSIPCI; \??\E:\INSTALL\GMSIPCI.SYS []
S3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2007-12-19 5854688]
S3 RT80x86;Ralink 802.11n Wireless Driver; C:\WINDOWS\system32\DRIVERS\RT2860.sys [2008-01-30 579456]
S3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys [2010-04-19 41984]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2005-01-28 18944]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 InCDFs;InCD File System; C:\WINDOWS\system32\drivers\InCDFs.sys []
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2010-08-13 144672]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2010-07-27 345376]
R2 cmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2010-09-10 1901056]
R2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2009-06-01 222968]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2005-12-10 131139]
R2 TeamViewer5;TeamViewer 5; C:\Program Files\Team Viewer\Version5\TeamViewer_Service.exe [2010-09-21 1957672]
R2 TeamViewer6;TeamViewer 6; C:\Program Files\TeamViewer\Version6\TeamViewer_Service.exe [2010-12-07 2228008]
R2 WSearch;Windows Search; C:\WINDOWS\system32\SearchIndexer.exe [2008-05-26 439808]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2010-09-24 820008]
S2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-11-07 153376]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2008-10-25 65888]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2008-11-04 441712]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 UMWdf;Windows User Mode Driver Framework; C:\WINDOWS\system32\wdfmgr.exe [2005-01-28 38912]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
-----------------EOF-----------------

Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Zničehonic pomalé Win
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
- Rudy
- Site Admin
- Příspěvky: 119506
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Zničehonic pomalé Win
Vyčistěte PC CCleanerem: http://www.viry.cz/forum/viewtopic.php?f=46&t=7478 a proveďte kompletní sken MBAM: http://www.malwarebytes.org/mbam.php . Dejte log, předem nic namžte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:

e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Zničehonic pomalé Win
Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org
Verze databáze: 5497
Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702
10.1.2011 21:08:07
mbam-log-2011-01-10 (21-08-03).txt
Typ kontroly: Úplný test (C:\|F:\|)
Testované objekty: 329523
Uplynulý čas: 1 hodin, 54 minut, 3 sekund
Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče v registru: 0
Infikované hodnoty v registru: 1
Infikované datové položky v registru: 0
Infikované složky: 0
Infikované soubory: 52
Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)
Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)
Infikované klíče v registru:
(Žádné škodlivé položky nebyly zjištěny)
Infikované hodnoty v registru:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Terminal Server\Install\Software\Microsoft\Windows\CurrentVersion\Run\NVIDIA driver monitor (Malware.Trace) -> Value: NVIDIA driver monitor -> No action taken.
Infikované datové položky v registru:
(Žádné škodlivé položky nebyly zjištěny)
Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)
Infikované soubory:
c:\program files\daemon tools\setupdtsb.exe (Adware.WhenU) -> No action taken.
f:\Progs\Adobe\adobe_all\AGAiN\acrobat3d8keygen+activation.exe (Trojan.Downloader) -> No action taken.
f:\Progs\Adobe\adobe_all\AGAiN\captivate3keygen+activation.exe (Trojan.Downloader) -> No action taken.
f:\progs\adobe\adobe_all\again\designpremiumcs3keygen+activation.exe (Trojan.Downloader) -> No action taken.
f:\progs\adobe\adobe_all\again\framemaker8keygen+activation.exe (Trojan.Downloader) -> No action taken.
f:\Progs\Adobe\adobe_all\AGAiN\golive9keygen+activation.exe (Trojan.Downloader) -> No action taken.
f:\Progs\Adobe\adobe_all\AGAiN\mastercollectioncs3keygen+activation.exe (Trojan.Downloader) -> No action taken.
f:\progs\adobe\adobe_all\again\onlocationcs3keygen+activation.exe (Trojan.Downloader) -> No action taken.
f:\Progs\Adobe\adobe_all\AGAiN\robohelp6keygen+activation.exe (Trojan.Downloader) -> No action taken.
f:\Progs\Adobe\adobe_all\CAM\adobe web premium cs3 keygen + activation.exe (Trojan.Agent) -> No action taken.
f:\Progs\Adobe\adobe_all\CAM\dreamweaver cs3 keygen + activation.exe (Trojan.Horst) -> No action taken.
f:\Progs\Adobe\adobe_all\CAM\photoshop cs3 extended keygen + activation.exe (TrojanProxy.Horst) -> No action taken.
f:\Progs\Adobe\adobe_all\coldfusion 8 keygen\coldfusion 8 keygen.exe (Malware.Packer.Gen) -> No action taken.
f:\Progs\Adobe\adobe_all\HAZE\coldfusion 8 keygen.exe (Malware.Packer.Gen) -> No action taken.
f:\Progs\Adobe\adobe_all\HAZE\flex builder 2 keygen.exe (Malware.Packer.Gen) -> No action taken.
f:\Progs\Adobe\adobe_all\HAZE\soundbooth cs3 keygen.exe (Malware.Packer.Gen) -> No action taken.
f:\Progs\Adobe\adobe_all\OLD\adobe aftereffects 7.0 keygen.exe (Trojan.Agent) -> No action taken.
f:\Progs\Adobe\adobe_all\OLD\adobe all cs2 premium keygen.exe (RiskWare.Tool.CK) -> No action taken.
f:\Progs\Adobe\adobe_all\OLD\adobe audition 2.0 keygen.exe (Trojan.Agent) -> No action taken.
f:\Progs\Adobe\adobe_all\SSG\contribute cs3 keygen vlk.exe (Trojan.Agent) -> No action taken.
f:\Progs\Adobe\adobe_all\SSG\fireworks cs3 keygen vlk.exe (RiskWare.Tool.CK) -> No action taken.
f:\Progs\Adobe\adobe_all\X-FORCE\adobe-master-cs3-keygen.exe (Malware.Tool) -> No action taken.
f:\Progs\Adobe\adobe_all\ZWT\adobe acrobat keygen + activation zwt.exe (Backdoor.Bot) -> No action taken.
f:\Progs\Adobe\adobe_all\ZWT\adobe design premium cs3 keygen + activation zwt.exe (Trojan.Agent) -> No action taken.
f:\Progs\Adobe\adobe_all\ZWT\adobe web premium cs3 keygen + activation zwt.exe (Trojan.Agent) -> No action taken.
f:\Progs\Adobe\adobe_all\ZWT\dreamweaver cs3 keygen + activation zwt.exe (Trojan.Agent) -> No action taken.
f:\Progs\Adobe\adobe_all\ZWT\flash pro cs3 keygen + activation zwt.exe (Trojan.Agent.CK) -> No action taken.
f:\Progs\Adobe\adobe_all\ZWT\photoshop cs3 keygen + activation zwt.exe (RiskWare.Tool.CK) -> No action taken.
f:\Progs\Adobe\adobe_all\ZWT\photoshop elements 5 keygen zwt.exe (Trojan.Agent) -> No action taken.
f:\Progs\making music\fl studio\fl studio 8.0.0 xxl\fl studio producer edition.xxl.v8.0.0-nope.exe (Trojan.Downloader) -> No action taken.
f:\Progs\making music\traktor dj 3\traktor_3_keygen.exe (Malware.Packer.Gen) -> No action taken.
f:\Progs\elite keylogger 4.3.070\ek_setup.exe (Trojan.Dropper) -> No action taken.
f:\progs\elite keylogger 4.3.070\_logviewer\logs viewer.exe (Spyware.EliteKeylogger) -> No action taken.
f:\Progs\winamp pro\KeyMaker.exe (RiskWare.Tool.CK) -> No action taken.
f:\Progs\winrar 3.80.5 full version\keygenpatch.exe (Malware.Packer.Gen) -> No action taken.
f:\recycler\s-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx (Worm.Conficker) -> No action taken.
f:\system volume information\_restore{37105117-2d2b-4be7-b3d1-fc65f7625328}\rp118\a0017541.exe (Trojan.Downloader) -> No action taken.
f:\system volume information\_restore{37105117-2d2b-4be7-b3d1-fc65f7625328}\rp118\a0017542.exe (Trojan.Downloader) -> No action taken.
f:\system volume information\_restore{37105117-2d2b-4be7-b3d1-fc65f7625328}\rp118\a0017543.exe (Trojan.Downloader) -> No action taken.
f:\system volume information\_restore{37105117-2d2b-4be7-b3d1-fc65f7625328}\rp118\a0017546.exe (Spyware.EliteKeylogger) -> No action taken.
f:\system volume information\_restore{37105117-2d2b-4be7-b3d1-fc65f7625328}\rp69\a0011278.exe (Trojan.VB) -> No action taken.
f:\system volume information\_restore{37105117-2d2b-4be7-b3d1-fc65f7625328}\rp77\a0011722.exe (Malware.Packer.Gen) -> No action taken.
f:\system volume information\_restore{37105117-2d2b-4be7-b3d1-fc65f7625328}\RP77\A0011723.exe (Trojan.Crax) -> No action taken.
f:\system volume information\_restore{37105117-2d2b-4be7-b3d1-fc65f7625328}\RP77\A0011725.exe (Trojan.Agent.CK) -> No action taken.
f:\system volume information\_restore{9b04e12a-937c-4d96-887c-4631aab7e906}\rp156\a0021899.exe (PUP.AutoKeylogger) -> No action taken.
f:\system volume information\_restore{9b04e12a-937c-4d96-887c-4631aab7e906}\RP156\A0021900.exe (HackTool.SnadBoy) -> No action taken.
f:\system volume information\_restore{9b04e12a-937c-4d96-887c-4631aab7e906}\RP156\A0021903.exe (HackTool.Brutus) -> No action taken.
f:\system volume information\_restore{9b04e12a-937c-4d96-887c-4631aab7e906}\RP156\A0021904.exe (HackTool.Brutus) -> No action taken.
f:\system volume information\_restore{9b04e12a-937c-4d96-887c-4631aab7e906}\rp178\a0023232.exe (Trojan.Dropper.Gen) -> No action taken.
f:\system volume information\_restore{9b04e12a-937c-4d96-887c-4631aab7e906}\rp178\a0023233.exe (Trojan.Dropper.Gen) -> No action taken.
f:\cd images of games\key-gen ea\fff-ea172.exe (Trojan.Orsam) -> No action taken.
c:\documents and settings\PC\local settings\Temp\opr_dvbv.avi.part (Trojan.Agent) -> No action taken.
www.malwarebytes.org
Verze databáze: 5497
Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702
10.1.2011 21:08:07
mbam-log-2011-01-10 (21-08-03).txt
Typ kontroly: Úplný test (C:\|F:\|)
Testované objekty: 329523
Uplynulý čas: 1 hodin, 54 minut, 3 sekund
Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče v registru: 0
Infikované hodnoty v registru: 1
Infikované datové položky v registru: 0
Infikované složky: 0
Infikované soubory: 52
Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)
Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)
Infikované klíče v registru:
(Žádné škodlivé položky nebyly zjištěny)
Infikované hodnoty v registru:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Terminal Server\Install\Software\Microsoft\Windows\CurrentVersion\Run\NVIDIA driver monitor (Malware.Trace) -> Value: NVIDIA driver monitor -> No action taken.
Infikované datové položky v registru:
(Žádné škodlivé položky nebyly zjištěny)
Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)
Infikované soubory:
c:\program files\daemon tools\setupdtsb.exe (Adware.WhenU) -> No action taken.
f:\Progs\Adobe\adobe_all\AGAiN\acrobat3d8keygen+activation.exe (Trojan.Downloader) -> No action taken.
f:\Progs\Adobe\adobe_all\AGAiN\captivate3keygen+activation.exe (Trojan.Downloader) -> No action taken.
f:\progs\adobe\adobe_all\again\designpremiumcs3keygen+activation.exe (Trojan.Downloader) -> No action taken.
f:\progs\adobe\adobe_all\again\framemaker8keygen+activation.exe (Trojan.Downloader) -> No action taken.
f:\Progs\Adobe\adobe_all\AGAiN\golive9keygen+activation.exe (Trojan.Downloader) -> No action taken.
f:\Progs\Adobe\adobe_all\AGAiN\mastercollectioncs3keygen+activation.exe (Trojan.Downloader) -> No action taken.
f:\progs\adobe\adobe_all\again\onlocationcs3keygen+activation.exe (Trojan.Downloader) -> No action taken.
f:\Progs\Adobe\adobe_all\AGAiN\robohelp6keygen+activation.exe (Trojan.Downloader) -> No action taken.
f:\Progs\Adobe\adobe_all\CAM\adobe web premium cs3 keygen + activation.exe (Trojan.Agent) -> No action taken.
f:\Progs\Adobe\adobe_all\CAM\dreamweaver cs3 keygen + activation.exe (Trojan.Horst) -> No action taken.
f:\Progs\Adobe\adobe_all\CAM\photoshop cs3 extended keygen + activation.exe (TrojanProxy.Horst) -> No action taken.
f:\Progs\Adobe\adobe_all\coldfusion 8 keygen\coldfusion 8 keygen.exe (Malware.Packer.Gen) -> No action taken.
f:\Progs\Adobe\adobe_all\HAZE\coldfusion 8 keygen.exe (Malware.Packer.Gen) -> No action taken.
f:\Progs\Adobe\adobe_all\HAZE\flex builder 2 keygen.exe (Malware.Packer.Gen) -> No action taken.
f:\Progs\Adobe\adobe_all\HAZE\soundbooth cs3 keygen.exe (Malware.Packer.Gen) -> No action taken.
f:\Progs\Adobe\adobe_all\OLD\adobe aftereffects 7.0 keygen.exe (Trojan.Agent) -> No action taken.
f:\Progs\Adobe\adobe_all\OLD\adobe all cs2 premium keygen.exe (RiskWare.Tool.CK) -> No action taken.
f:\Progs\Adobe\adobe_all\OLD\adobe audition 2.0 keygen.exe (Trojan.Agent) -> No action taken.
f:\Progs\Adobe\adobe_all\SSG\contribute cs3 keygen vlk.exe (Trojan.Agent) -> No action taken.
f:\Progs\Adobe\adobe_all\SSG\fireworks cs3 keygen vlk.exe (RiskWare.Tool.CK) -> No action taken.
f:\Progs\Adobe\adobe_all\X-FORCE\adobe-master-cs3-keygen.exe (Malware.Tool) -> No action taken.
f:\Progs\Adobe\adobe_all\ZWT\adobe acrobat keygen + activation zwt.exe (Backdoor.Bot) -> No action taken.
f:\Progs\Adobe\adobe_all\ZWT\adobe design premium cs3 keygen + activation zwt.exe (Trojan.Agent) -> No action taken.
f:\Progs\Adobe\adobe_all\ZWT\adobe web premium cs3 keygen + activation zwt.exe (Trojan.Agent) -> No action taken.
f:\Progs\Adobe\adobe_all\ZWT\dreamweaver cs3 keygen + activation zwt.exe (Trojan.Agent) -> No action taken.
f:\Progs\Adobe\adobe_all\ZWT\flash pro cs3 keygen + activation zwt.exe (Trojan.Agent.CK) -> No action taken.
f:\Progs\Adobe\adobe_all\ZWT\photoshop cs3 keygen + activation zwt.exe (RiskWare.Tool.CK) -> No action taken.
f:\Progs\Adobe\adobe_all\ZWT\photoshop elements 5 keygen zwt.exe (Trojan.Agent) -> No action taken.
f:\Progs\making music\fl studio\fl studio 8.0.0 xxl\fl studio producer edition.xxl.v8.0.0-nope.exe (Trojan.Downloader) -> No action taken.
f:\Progs\making music\traktor dj 3\traktor_3_keygen.exe (Malware.Packer.Gen) -> No action taken.
f:\Progs\elite keylogger 4.3.070\ek_setup.exe (Trojan.Dropper) -> No action taken.
f:\progs\elite keylogger 4.3.070\_logviewer\logs viewer.exe (Spyware.EliteKeylogger) -> No action taken.
f:\Progs\winamp pro\KeyMaker.exe (RiskWare.Tool.CK) -> No action taken.
f:\Progs\winrar 3.80.5 full version\keygenpatch.exe (Malware.Packer.Gen) -> No action taken.
f:\recycler\s-5-3-42-2819952290-8240758988-879315005-3665\jwgkvsq.vmx (Worm.Conficker) -> No action taken.
f:\system volume information\_restore{37105117-2d2b-4be7-b3d1-fc65f7625328}\rp118\a0017541.exe (Trojan.Downloader) -> No action taken.
f:\system volume information\_restore{37105117-2d2b-4be7-b3d1-fc65f7625328}\rp118\a0017542.exe (Trojan.Downloader) -> No action taken.
f:\system volume information\_restore{37105117-2d2b-4be7-b3d1-fc65f7625328}\rp118\a0017543.exe (Trojan.Downloader) -> No action taken.
f:\system volume information\_restore{37105117-2d2b-4be7-b3d1-fc65f7625328}\rp118\a0017546.exe (Spyware.EliteKeylogger) -> No action taken.
f:\system volume information\_restore{37105117-2d2b-4be7-b3d1-fc65f7625328}\rp69\a0011278.exe (Trojan.VB) -> No action taken.
f:\system volume information\_restore{37105117-2d2b-4be7-b3d1-fc65f7625328}\rp77\a0011722.exe (Malware.Packer.Gen) -> No action taken.
f:\system volume information\_restore{37105117-2d2b-4be7-b3d1-fc65f7625328}\RP77\A0011723.exe (Trojan.Crax) -> No action taken.
f:\system volume information\_restore{37105117-2d2b-4be7-b3d1-fc65f7625328}\RP77\A0011725.exe (Trojan.Agent.CK) -> No action taken.
f:\system volume information\_restore{9b04e12a-937c-4d96-887c-4631aab7e906}\rp156\a0021899.exe (PUP.AutoKeylogger) -> No action taken.
f:\system volume information\_restore{9b04e12a-937c-4d96-887c-4631aab7e906}\RP156\A0021900.exe (HackTool.SnadBoy) -> No action taken.
f:\system volume information\_restore{9b04e12a-937c-4d96-887c-4631aab7e906}\RP156\A0021903.exe (HackTool.Brutus) -> No action taken.
f:\system volume information\_restore{9b04e12a-937c-4d96-887c-4631aab7e906}\RP156\A0021904.exe (HackTool.Brutus) -> No action taken.
f:\system volume information\_restore{9b04e12a-937c-4d96-887c-4631aab7e906}\rp178\a0023232.exe (Trojan.Dropper.Gen) -> No action taken.
f:\system volume information\_restore{9b04e12a-937c-4d96-887c-4631aab7e906}\rp178\a0023233.exe (Trojan.Dropper.Gen) -> No action taken.
f:\cd images of games\key-gen ea\fff-ea172.exe (Trojan.Orsam) -> No action taken.
c:\documents and settings\PC\local settings\Temp\opr_dvbv.avi.part (Trojan.Agent) -> No action taken.
- Rudy
- Site Admin
- Příspěvky: 119506
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Zničehonic pomalé Win
Všechny nalezené položky smažte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:

e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Zničehonic pomalé Win
smazáno, co ted?
- Rudy
- Site Admin
- Příspěvky: 119506
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Zničehonic pomalé Win
Restartujte a zkuste, zda se něco změnilo.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:

e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.