Antivirus Tool smejdak

Zpráva

Krkovicka74 · #1 Příspěvek od **Krkovicka74** » 21 úno 2011 17:19

DObry den opet kamarad dones notas s problemem a nedivim se bo nemel ani antivirus ani FW proste nic, na obrazovce sviti napis ze PC je infected nejde otevrit ani task manager, nejde Rsit v normal modu nic jen ta jejich stranka a nabidka za $60 dolaru ze to vycistej

Pomuze nekdo hodnej?
Log ze safe modu :

Logfile of random's system information tool 1.08 (written by random/random)
Run by Simon at 2011-02-21 16:12:30
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 72 GB (66%) free of 109 GB
Total RAM: 1013 MB (65% free)

HijackThis download failed

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\User_Feed_Synchronization-{D3F16FA4-05DF-4502-A02A-4E883F79440C}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2010-09-23 61888]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll [2010-03-26 341600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2011-01-01 297648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5805.1910\swg.dll [2011-01-01 843832]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-03-18 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2011-01-01 297648]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-19 1008184]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2006-11-15 815104]
"QPService"=C:\Program Files\HP\QuickPlay\QPService.exe [2006-11-24 167936]
"HP Software Update"=C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [2005-02-17 49152]
"NapsterShell"=C:\Program Files\Napster\napster.exe [2006-09-06 323216]
"QlbCtrl"=C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [2006-11-06 159744]
"HP Health Check Scheduler"=C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe [2006-11-28 46704]
"WAWifiMessage"=C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe [2006-10-18 317152]
"hpWirelessAssistant"=C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [2006-10-18 472800]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe []
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2007-02-26 131072]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2007-02-26 151552]
"Persistence"=C:\Windows\system32\igfxpers.exe [2007-02-26 126976]
"snp2uvc"=C:\Windows\vsnp2uvc.exe [2008-08-01 675840]
"DataCardMonitor"=C:\Program Files\Virgin Mobile\Broadband Home\DataCardMonitor.exe [2008-07-21 253952]
"TkBellExe"=C:\Program Files\Common Files\Real\Update_OB\realsched.exe [2010-03-26 202256]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2010-09-24 40368]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-09-21 932288]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Launcher"=C:\Windows\SMINST\launcher.exe [2006-11-08 44128]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-11 1233920]
"WindowsWelcomeCenter"=oobefldr.dll,ShowWelcomeCenter []
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-19 125952]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2010-03-26 39408]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"kPeNaLb01802"=C:\ProgramData\kPeNaLb01802\kPeNaLb01802 [2011-02-21 98]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2007-02-26 200704]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2011-02-21 16:12:32 ----D---- C:\Program Files\trend micro
2011-02-21 16:12:30 ----D---- C:\rsit
2011-02-21 07:21:53 ----A---- C:\Windows\system32\igfxres.dll
2011-02-21 07:19:24 ----A---- C:\Windows\ntbtlog.txt
2011-02-20 11:28:08 ----D---- C:\ProgramData\kPeNaLb01802
2011-02-15 22:49:49 ----D---- C:\ProgramData\Solar Accounts
2011-02-15 21:18:58 ----A---- C:\Windows\system32\sdclt.exe
2011-02-15 21:18:53 ----A---- C:\Windows\system32\odbc32.dll
2011-02-15 21:18:47 ----A---- C:\Windows\system32\win32k.sys
2011-02-15 21:18:42 ----A---- C:\Windows\system32\ntkrnlpa.exe
2011-02-15 21:18:42 ----A---- C:\Windows\system32\ntdll.dll
2011-02-15 21:18:41 ----A---- C:\Windows\system32\ntoskrnl.exe
2011-02-15 21:18:26 ----A---- C:\Windows\system32\FntCache.dll
2011-02-15 21:18:26 ----A---- C:\Windows\system32\DWrite.dll
2011-02-15 21:18:26 ----A---- C:\Windows\system32\d3d10warp.dll
2011-02-15 21:18:25 ----A---- C:\Windows\system32\xpsservices.dll
2011-02-15 21:18:25 ----A---- C:\Windows\system32\XpsRasterService.dll
2011-02-15 21:18:25 ----A---- C:\Windows\system32\XpsPrint.dll
2011-02-15 21:18:25 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2011-02-15 21:18:25 ----A---- C:\Windows\system32\MFH264Dec.dll
2011-02-15 21:18:25 ----A---- C:\Windows\system32\d2d1.dll
2011-02-15 21:18:24 ----A---- C:\Windows\system32\mfreadwrite.dll
2011-02-15 21:18:24 ----A---- C:\Windows\system32\mfmp4src.dll
2011-02-15 21:18:24 ----A---- C:\Windows\system32\MFHEAACdec.dll
2011-02-15 21:18:24 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2011-02-15 21:18:23 ----A---- C:\Windows\system32\OpcServices.dll
2011-02-15 21:18:23 ----A---- C:\Windows\system32\mf.dll
2011-02-15 21:18:23 ----A---- C:\Windows\system32\dxgi.dll
2011-02-15 21:18:23 ----A---- C:\Windows\system32\d3d10_1core.dll
2011-02-15 21:18:22 ----A---- C:\Windows\system32\printfilterpipelinesvc.exe
2011-02-15 21:18:22 ----A---- C:\Windows\system32\d3d10_1.dll
2011-02-15 21:18:22 ----A---- C:\Windows\system32\d3d10.dll
2011-02-15 21:18:21 ----A---- C:\Windows\system32\shdocvw.dll
2011-02-15 21:18:21 ----A---- C:\Windows\system32\mfplat.dll
2011-02-15 21:18:21 ----A---- C:\Windows\system32\d3d10level9.dll
2011-02-15 21:18:21 ----A---- C:\Windows\system32\d3d10core.dll
2011-02-15 21:18:20 ----A---- C:\Windows\system32\stobject.dll
2011-02-15 21:18:19 ----A---- C:\Windows\system32\printfilterpipelineprxy.dll
2011-02-15 21:18:19 ----A---- C:\Windows\system32\mfps.dll
2011-02-15 21:18:19 ----A---- C:\Windows\system32\cdd.dll
2011-02-15 21:17:58 ----A---- C:\Windows\system32\mshtml.dll
2011-02-15 21:17:56 ----A---- C:\Windows\system32\ieframe.dll
2011-02-15 21:17:55 ----A---- C:\Windows\system32\urlmon.dll
2011-02-15 21:17:55 ----A---- C:\Windows\system32\msfeeds.dll
2011-02-15 21:17:54 ----A---- C:\Windows\system32\wininet.dll
2011-02-15 21:17:54 ----A---- C:\Windows\system32\mstime.dll
2011-02-15 21:17:54 ----A---- C:\Windows\system32\iertutil.dll
2011-02-15 21:17:54 ----A---- C:\Windows\system32\iedkcs32.dll
2011-02-15 21:17:53 ----A---- C:\Windows\system32\occache.dll
2011-02-15 21:17:53 ----A---- C:\Windows\system32\mshtmled.dll
2011-02-15 21:17:53 ----A---- C:\Windows\system32\msfeedsbs.dll
2011-02-15 21:17:53 ----A---- C:\Windows\system32\ieUnatt.exe
2011-02-15 21:17:53 ----A---- C:\Windows\system32\ieui.dll
2011-02-15 21:17:53 ----A---- C:\Windows\system32\iesysprep.dll
2011-02-15 21:17:53 ----A---- C:\Windows\system32\iesetup.dll
2011-02-15 21:17:53 ----A---- C:\Windows\system32\iernonce.dll
2011-02-15 21:17:53 ----A---- C:\Windows\system32\iepeers.dll
2011-02-15 21:17:52 ----A---- C:\Windows\system32\msfeedssync.exe
2011-02-15 21:17:52 ----A---- C:\Windows\system32\licmgr10.dll
2011-02-15 21:17:52 ----A---- C:\Windows\system32\jsproxy.dll
2011-02-15 21:17:52 ----A---- C:\Windows\system32\ie4uinit.exe
2011-02-15 21:17:40 ----A---- C:\Windows\system32\shell32.dll
2011-02-15 21:17:37 ----A---- C:\Windows\system32\shlwapi.dll
2011-02-15 21:17:12 ----A---- C:\Windows\system32\atmfd.dll
2011-02-15 21:17:11 ----A---- C:\Windows\system32\atmlib.dll

======List of files/folders modified in the last 1 months======

2011-02-21 16:12:32 ----RD---- C:\Program Files
2011-02-21 16:10:04 ----D---- C:\Windows\Temp
2011-02-21 16:04:06 ----D---- C:\Windows\System32
2011-02-21 16:04:06 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-02-21 16:04:05 ----D---- C:\Windows\inf
2011-02-21 07:24:17 ----SD---- C:\Users\Simon\AppData\Roaming\Microsoft
2011-02-21 07:19:24 ----D---- C:\Windows
2011-02-20 11:28:08 ----HD---- C:\ProgramData
2011-02-20 10:43:57 ----SHD---- C:\System Volume Information
2011-02-16 20:22:06 ----D---- C:\Windows\rescache
2011-02-16 20:16:28 ----D---- C:\Windows\winsxs
2011-02-16 20:06:12 ----D---- C:\Windows\system32\catroot
2011-02-16 19:56:47 ----D---- C:\Program Files\Windows Mail
2011-02-16 19:56:43 ----D---- C:\Windows\system32\drivers
2011-02-16 19:56:42 ----D---- C:\Windows\system32\migration
2011-02-16 19:56:42 ----D---- C:\Program Files\Internet Explorer
2011-02-15 21:16:35 ----D---- C:\Windows\system32\catroot2
2011-02-15 20:49:04 ----D---- C:\Windows\system32\WDI
2011-02-04 17:34:02 ----A---- C:\Windows\system32\mrt.exe
2011-02-02 17:11:20 ----N---- C:\Windows\system32\MpSigStub.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 PxHelp20;PxHelp20; C:\Windows\System32\Drivers\PxHelp20.sys [2006-07-24 36528]
R2 rimmptsk;rimmptsk; C:\Windows\system32\DRIVERS\rimmptsk.sys [2006-11-16 32256]
R2 rimsptsk;rimsptsk; C:\Windows\system32\DRIVERS\rimsptsk.sys [2006-11-16 43520]
R2 rismxdp;Ricoh xD-Picture Card Driver; C:\Windows\system32\DRIVERS\rixdptsk.sys [2006-11-16 37376]
R3 BCM43XX;Broadcom 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl6.sys [2007-01-03 534016]
R3 E100B;Intel(R) PRO Adapter Driver; C:\Windows\system32\DRIVERS\e100b325.sys [2008-01-19 159744]
R3 HBtnKey;HBtnKey; C:\Windows\system32\DRIVERS\cpqbttn.sys [2006-06-28 9472]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2006-11-15 179256]
S1 eabfiltr;eabfiltr; C:\Windows\system32\DRIVERS\eabfiltr.sys [2006-06-28 8192]
S2 mdmxsdk;mdmxsdk; C:\Windows\system32\DRIVERS\mdmxsdk.sys [2006-06-19 12672]
S2 XAudio;XAudio; C:\Windows\system32\DRIVERS\xaudio.sys [2006-08-04 8192]
S3 BCM43XV;Broadcom Extensible 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl6.sys [2007-01-03 534016]
S3 BthEnum;Bluetooth Request Block Driver; C:\Windows\system32\DRIVERS\BthEnum.sys [2006-11-02 19456]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2006-11-02 92160]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2006-11-02 220160]
S3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2006-11-02 29184]
S3 drmkaud;Microsoft Kernel DRM Audio Descrambler; C:\Windows\system32\drivers\drmkaud.sys [2008-01-19 5632]
S3 HdAudAddService;Microsoft UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\CHDART.sys [2006-12-12 148992]
S3 HSF_DPV;HSF_DPV; C:\Windows\system32\DRIVERS\HSX_DPV.sys [2006-10-18 986624]
S3 HSFHWAZL;HSFHWAZL; C:\Windows\system32\DRIVERS\VSTAZL3.SYS [2006-11-02 200704]
S3 HSXHWAZL;HSXHWAZL; C:\Windows\system32\DRIVERS\HSXHWAZL.sys [2006-10-18 206848]
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\Windows\system32\DRIVERS\ewusbmdm.sys [2008-04-17 101632]
S3 ialm;ialm; C:\Windows\system32\DRIVERS\igdkmd32.sys [2007-02-26 1608192]
S3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2007-02-26 1608192]
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-19 8192]
S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-19 5888]
S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2008-01-19 5504]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys [2008-01-19 6016]
S3 NETw3v32;Intel(R) PRO/Wireless 3945ABG Adapter Driver for Windows Vista 32 Bit; C:\Windows\system32\DRIVERS\NETw3v32.sys [2006-11-09 1786880]
S3 odysseyIM4;Odyssey Network Agent Miniport; C:\Windows\system32\DRIVERS\odysseyIM4.sys [2005-06-10 173056]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2006-11-02 49664]
S3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2009-04-11 89088]
S3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\Windows\system32\DRIVERS\snp2uvc.sys [2009-06-09 3482240]
S3 UIUSys;Conexant Setup API; C:\Windows\system32\DRIVERS\UIUSYS.SYS []
S3 USB_RNDIS;Belkin High-Speed Mode Wireless G USB Network Adapter Driver; C:\Windows\system32\DRIVERS\usb8023.sys [2009-04-11 15872]
S3 usbvideo;USB Video Device (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2006-11-02 132352]
S3 winachsf;winachsf; C:\Windows\system32\DRIVERS\HSX_CNXT.sys [2006-10-18 659968]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-19 83328]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

S2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2008-01-19 21504]
S2 CLCapSvc;CyberLink Background Capture Service (CBCS); C:\Program Files\HP\QuickPlay\Kernel\TV\CLCapSvc.exe [2006-11-24 270431]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 CLSched;CyberLink Task Scheduler (CTS); C:\Program Files\HP\QuickPlay\Kernel\TV\CLSched.exe [2006-11-24 118877]
S2 CLTNetCnService;Symantec Lic NetConnect service; c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe /h ccCommon []
S2 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-19 21504]
S2 gupdate;Google Update Service (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-03-30 135664]
S2 HP Health Check Service;HP Health Check Service; C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [2006-11-28 63080]
S2 hpqwmiex;hpqwmiex; C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe [2006-05-02 135168]
S2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2006-10-19 61440]
S2 XAudioService;XAudioService; C:\Windows\system32\DRIVERS\xaudio.exe [2006-08-04 386560]
S3 AddFiltr;AddFiltr; C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\AddFiltr.exe [2006-06-26 126976]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2010-03-29 182768]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Roxio\Roxio MyDVD Basic v9\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 RoxMediaDB9;RoxMediaDB9; C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe [2006-11-06 887544]
S3 stllssvr;stllssvr; C:\Program Files\Common Files\SureThing Shared\stllssvr.exe [2006-11-01 73728]
S3 WPFFontCache_v0400;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]

-----------------EOF-----------------

#2 Příspěvek od **cernohous13** » 21 úno 2011 17:58

Zdravím, zůstaň v nouz. režimu

Otevři Poznámkový blok
(Start -> Spustit... -> napiš notepad -> OK)
Zkopíruj a vlož zelený text
Kód: Vybrat vše
Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"kPeNaLb01802"=-
Soubor ulož jako oprava.reg
Při ukládání dej uložit jako typ Všechny soubory (nastavení je uvedeno na obrázku níže)

Zavři notepad a spusť dvojklikem oprava.reg
Dotaz na změnu registru potvrdit
Okno jen problikne a opraví registry - soubor můžeš smazat

Smaž složku C:\ProgramData\kPeNaLb01802

Restartuj do normálního režimu a dej RSIT

Krkovicka74 · #3 Příspěvek od **Krkovicka74** » 21 úno 2011 18:16

Logfile of random's system information tool 1.08 (written by random/random)
Run by Simon at 2011-02-21 17:13:56
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 71 GB (65%) free of 109 GB
Total RAM: 1013 MB (30% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:14:47, on 21/02/2011
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.19019)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\HP\QuickPlay\QPService.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Napster\napster.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Windows\vsnp2uvc.exe
C:\Program Files\Virgin Mobile\Broadband Home\DataCardMonitor.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Windows\ehome\ehmsas.exe
C:\PROGRA~1\HEWLET~1\Shared\HPQTOA~1.EXE
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Simon\Desktop\RSIT.exe
C:\Program Files\trend micro\Simon.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://news.google.co.uk/nwshp?hl=en&tab=wn
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE= ... &pf=laptop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE= ... &pf=laptop
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5805.1910\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [NapsterShell] C:\Program Files\Napster\napster.exe /systray
O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [HP Health Check Scheduler] C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
O4 - HKLM\..\Run: [WAWifiMessage] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [snp2uvc] C:\Windows\vsnp2uvc.exe
O4 - HKLM\..\Run: [DataCardMonitor] C:\Program Files\Virgin Mobile\Broadband Home\DataCardMonitor.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\RunOnce: [Launcher] %WINDIR%\SMINST\launcher.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_E11712C84EA7E12B.dll/cmsidewiki.html
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: t-mobile - (no CLSID) - (no file)
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: AddFiltr - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\AddFiltr.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLSched.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Roxio\Roxio MyDVD Basic v9\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

--
End of file - 8192 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\User_Feed_Synchronization-{D3F16FA4-05DF-4502-A02A-4E883F79440C}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2010-09-23 61888]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll [2010-03-26 341600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2011-01-01 297648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5805.1910\swg.dll [2011-01-01 843832]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-03-18 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - Google Toolbar - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2011-01-01 297648]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-19 1008184]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2006-11-15 815104]
"QPService"=C:\Program Files\HP\QuickPlay\QPService.exe [2006-11-24 167936]
"HP Software Update"=C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [2005-02-17 49152]
"NapsterShell"=C:\Program Files\Napster\napster.exe [2006-09-06 323216]
"QlbCtrl"=C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [2006-11-06 159744]
"HP Health Check Scheduler"=C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe [2006-11-28 46704]
"WAWifiMessage"=C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe [2006-10-18 317152]
"hpWirelessAssistant"=C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [2006-10-18 472800]
"SunJavaUpdateSched"=C:\Program Files\Java\jre6\bin\jusched.exe []
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2007-02-26 131072]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2007-02-26 151552]
"Persistence"=C:\Windows\system32\igfxpers.exe [2007-02-26 126976]
"snp2uvc"=C:\Windows\vsnp2uvc.exe [2008-08-01 675840]
"DataCardMonitor"=C:\Program Files\Virgin Mobile\Broadband Home\DataCardMonitor.exe [2008-07-21 253952]
"TkBellExe"=C:\Program Files\Common Files\Real\Update_OB\realsched.exe [2010-03-26 202256]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [2010-09-24 40368]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-09-21 932288]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Launcher"=C:\Windows\SMINST\launcher.exe [2006-11-08 44128]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-11 1233920]
"WindowsWelcomeCenter"=oobefldr.dll,ShowWelcomeCenter []
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-19 125952]
"swg"=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [2010-03-26 39408]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2007-02-26 200704]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2011-02-21 17:11:37 ----ASH---- C:\hiberfil.sys
2011-02-21 16:12:32 ----D---- C:\Program Files\trend micro
2011-02-21 16:12:30 ----D---- C:\rsit
2011-02-21 07:21:53 ----A---- C:\Windows\system32\igfxres.dll
2011-02-21 07:19:24 ----A---- C:\Windows\ntbtlog.txt
2011-02-15 22:49:49 ----D---- C:\ProgramData\Solar Accounts
2011-02-15 21:18:58 ----A---- C:\Windows\system32\sdclt.exe
2011-02-15 21:18:53 ----A---- C:\Windows\system32\odbc32.dll
2011-02-15 21:18:47 ----A---- C:\Windows\system32\win32k.sys
2011-02-15 21:18:42 ----A---- C:\Windows\system32\ntkrnlpa.exe
2011-02-15 21:18:42 ----A---- C:\Windows\system32\ntdll.dll
2011-02-15 21:18:41 ----A---- C:\Windows\system32\ntoskrnl.exe
2011-02-15 21:18:26 ----A---- C:\Windows\system32\FntCache.dll
2011-02-15 21:18:26 ----A---- C:\Windows\system32\DWrite.dll
2011-02-15 21:18:26 ----A---- C:\Windows\system32\d3d10warp.dll
2011-02-15 21:18:25 ----A---- C:\Windows\system32\xpsservices.dll
2011-02-15 21:18:25 ----A---- C:\Windows\system32\XpsRasterService.dll
2011-02-15 21:18:25 ----A---- C:\Windows\system32\XpsPrint.dll
2011-02-15 21:18:25 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2011-02-15 21:18:25 ----A---- C:\Windows\system32\MFH264Dec.dll
2011-02-15 21:18:25 ----A---- C:\Windows\system32\d2d1.dll
2011-02-15 21:18:24 ----A---- C:\Windows\system32\mfreadwrite.dll
2011-02-15 21:18:24 ----A---- C:\Windows\system32\mfmp4src.dll
2011-02-15 21:18:24 ----A---- C:\Windows\system32\MFHEAACdec.dll
2011-02-15 21:18:24 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2011-02-15 21:18:23 ----A---- C:\Windows\system32\OpcServices.dll
2011-02-15 21:18:23 ----A---- C:\Windows\system32\mf.dll
2011-02-15 21:18:23 ----A---- C:\Windows\system32\dxgi.dll
2011-02-15 21:18:23 ----A---- C:\Windows\system32\d3d10_1core.dll
2011-02-15 21:18:22 ----A---- C:\Windows\system32\printfilterpipelinesvc.exe
2011-02-15 21:18:22 ----A---- C:\Windows\system32\d3d10_1.dll
2011-02-15 21:18:22 ----A---- C:\Windows\system32\d3d10.dll
2011-02-15 21:18:21 ----A---- C:\Windows\system32\shdocvw.dll
2011-02-15 21:18:21 ----A---- C:\Windows\system32\mfplat.dll
2011-02-15 21:18:21 ----A---- C:\Windows\system32\d3d10level9.dll
2011-02-15 21:18:21 ----A---- C:\Windows\system32\d3d10core.dll
2011-02-15 21:18:20 ----A---- C:\Windows\system32\stobject.dll
2011-02-15 21:18:19 ----A---- C:\Windows\system32\printfilterpipelineprxy.dll
2011-02-15 21:18:19 ----A---- C:\Windows\system32\mfps.dll
2011-02-15 21:18:19 ----A---- C:\Windows\system32\cdd.dll
2011-02-15 21:17:58 ----A---- C:\Windows\system32\mshtml.dll
2011-02-15 21:17:56 ----A---- C:\Windows\system32\ieframe.dll
2011-02-15 21:17:55 ----A---- C:\Windows\system32\urlmon.dll
2011-02-15 21:17:55 ----A---- C:\Windows\system32\msfeeds.dll
2011-02-15 21:17:54 ----A---- C:\Windows\system32\wininet.dll
2011-02-15 21:17:54 ----A---- C:\Windows\system32\mstime.dll
2011-02-15 21:17:54 ----A---- C:\Windows\system32\iertutil.dll
2011-02-15 21:17:54 ----A---- C:\Windows\system32\iedkcs32.dll
2011-02-15 21:17:53 ----A---- C:\Windows\system32\occache.dll
2011-02-15 21:17:53 ----A---- C:\Windows\system32\mshtmled.dll
2011-02-15 21:17:53 ----A---- C:\Windows\system32\msfeedsbs.dll
2011-02-15 21:17:53 ----A---- C:\Windows\system32\ieUnatt.exe
2011-02-15 21:17:53 ----A---- C:\Windows\system32\ieui.dll
2011-02-15 21:17:53 ----A---- C:\Windows\system32\iesysprep.dll
2011-02-15 21:17:53 ----A---- C:\Windows\system32\iesetup.dll
2011-02-15 21:17:53 ----A---- C:\Windows\system32\iernonce.dll
2011-02-15 21:17:53 ----A---- C:\Windows\system32\iepeers.dll
2011-02-15 21:17:52 ----A---- C:\Windows\system32\msfeedssync.exe
2011-02-15 21:17:52 ----A---- C:\Windows\system32\licmgr10.dll
2011-02-15 21:17:52 ----A---- C:\Windows\system32\jsproxy.dll
2011-02-15 21:17:52 ----A---- C:\Windows\system32\ie4uinit.exe
2011-02-15 21:17:40 ----A---- C:\Windows\system32\shell32.dll
2011-02-15 21:17:37 ----A---- C:\Windows\system32\shlwapi.dll
2011-02-15 21:17:12 ----A---- C:\Windows\system32\atmfd.dll
2011-02-15 21:17:11 ----A---- C:\Windows\system32\atmlib.dll

======List of files/folders modified in the last 1 months======

2011-02-21 17:13:46 ----D---- C:\Windows\Temp
2011-02-21 17:10:34 ----HD---- C:\ProgramData
2011-02-21 16:17:00 ----D---- C:\Windows\System32
2011-02-21 16:17:00 ----D---- C:\Windows\inf
2011-02-21 16:17:00 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-02-21 16:12:32 ----RD---- C:\Program Files
2011-02-21 07:24:17 ----SD---- C:\Users\Simon\AppData\Roaming\Microsoft
2011-02-21 07:19:24 ----D---- C:\Windows
2011-02-20 10:43:57 ----SHD---- C:\System Volume Information
2011-02-16 20:22:06 ----D---- C:\Windows\rescache
2011-02-16 20:16:28 ----D---- C:\Windows\winsxs
2011-02-16 20:06:12 ----D---- C:\Windows\system32\catroot
2011-02-16 19:56:47 ----D---- C:\Program Files\Windows Mail
2011-02-16 19:56:43 ----D---- C:\Windows\system32\drivers
2011-02-16 19:56:42 ----D---- C:\Windows\system32\migration
2011-02-16 19:56:42 ----D---- C:\Program Files\Internet Explorer
2011-02-15 21:16:35 ----D---- C:\Windows\system32\catroot2
2011-02-15 20:49:04 ----D---- C:\Windows\system32\WDI
2011-02-04 17:34:02 ----A---- C:\Windows\system32\mrt.exe
2011-02-02 17:11:20 ----N---- C:\Windows\system32\MpSigStub.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 PxHelp20;PxHelp20; C:\Windows\System32\Drivers\PxHelp20.sys [2006-07-24 36528]
R1 eabfiltr;eabfiltr; C:\Windows\system32\DRIVERS\eabfiltr.sys [2006-06-28 8192]
R2 mdmxsdk;mdmxsdk; C:\Windows\system32\DRIVERS\mdmxsdk.sys [2006-06-19 12672]
R2 rimmptsk;rimmptsk; C:\Windows\system32\DRIVERS\rimmptsk.sys [2006-11-16 32256]
R2 rimsptsk;rimsptsk; C:\Windows\system32\DRIVERS\rimsptsk.sys [2006-11-16 43520]
R2 rismxdp;Ricoh xD-Picture Card Driver; C:\Windows\system32\DRIVERS\rixdptsk.sys [2006-11-16 37376]
R2 XAudio;XAudio; C:\Windows\system32\DRIVERS\xaudio.sys [2006-08-04 8192]
R3 BCM43XX;Broadcom 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl6.sys [2007-01-03 534016]
R3 E100B;Intel(R) PRO Adapter Driver; C:\Windows\system32\DRIVERS\e100b325.sys [2008-01-19 159744]
R3 HBtnKey;HBtnKey; C:\Windows\system32\DRIVERS\cpqbttn.sys [2006-06-28 9472]
R3 HdAudAddService;Microsoft UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\CHDART.sys [2006-12-12 148992]
R3 HSF_DPV;HSF_DPV; C:\Windows\system32\DRIVERS\HSX_DPV.sys [2006-10-18 986624]
R3 HSXHWAZL;HSXHWAZL; C:\Windows\system32\DRIVERS\HSXHWAZL.sys [2006-10-18 206848]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2007-02-26 1608192]
R3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2009-04-11 89088]
R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\Windows\system32\DRIVERS\snp2uvc.sys [2009-06-09 3482240]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2006-11-15 179256]
R3 winachsf;winachsf; C:\Windows\system32\DRIVERS\HSX_CNXT.sys [2006-10-18 659968]
S3 BCM43XV;Broadcom Extensible 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl6.sys [2007-01-03 534016]
S3 BthEnum;Bluetooth Request Block Driver; C:\Windows\system32\DRIVERS\BthEnum.sys [2006-11-02 19456]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2006-11-02 92160]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2006-11-02 220160]
S3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2006-11-02 29184]
S3 drmkaud;Microsoft Kernel DRM Audio Descrambler; C:\Windows\system32\drivers\drmkaud.sys [2008-01-19 5632]
S3 HSFHWAZL;HSFHWAZL; C:\Windows\system32\DRIVERS\VSTAZL3.SYS [2006-11-02 200704]
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\Windows\system32\DRIVERS\ewusbmdm.sys [2008-04-17 101632]
S3 ialm;ialm; C:\Windows\system32\DRIVERS\igdkmd32.sys [2007-02-26 1608192]
S3 MSKSSRV;Microsoft Streaming Service Proxy; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-19 8192]
S3 MSPCLOCK;Microsoft Streaming Clock Proxy; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-19 5888]
S3 MSPQM;Microsoft Streaming Quality Manager Proxy; C:\Windows\system32\drivers\MSPQM.sys [2008-01-19 5504]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\Windows\system32\drivers\MSTEE.sys [2008-01-19 6016]
S3 NETw3v32;Intel(R) PRO/Wireless 3945ABG Adapter Driver for Windows Vista 32 Bit; C:\Windows\system32\DRIVERS\NETw3v32.sys [2006-11-09 1786880]
S3 odysseyIM4;Odyssey Network Agent Miniport; C:\Windows\system32\DRIVERS\odysseyIM4.sys [2005-06-10 173056]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2006-11-02 49664]
S3 UIUSys;Conexant Setup API; C:\Windows\system32\DRIVERS\UIUSYS.SYS []
S3 USB_RNDIS;Belkin High-Speed Mode Wireless G USB Network Adapter Driver; C:\Windows\system32\DRIVERS\usb8023.sys [2009-04-11 15872]
S3 usbvideo;USB Video Device (WDM); C:\Windows\System32\Drivers\usbvideo.sys [2006-11-02 132352]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-19 83328]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 BthServ;@%SystemRoot%\System32\bthserv.dll,-101; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 CLCapSvc;CyberLink Background Capture Service (CBCS); C:\Program Files\HP\QuickPlay\Kernel\TV\CLCapSvc.exe [2006-11-24 270431]
R2 CLSched;CyberLink Task Scheduler (CTS); C:\Program Files\HP\QuickPlay\Kernel\TV\CLSched.exe [2006-11-24 118877]
R2 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 HP Health Check Service;HP Health Check Service; C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [2006-11-28 63080]
R2 hpqwmiex;hpqwmiex; C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe [2006-05-02 135168]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2006-10-19 61440]
R2 XAudioService;XAudioService; C:\Windows\system32\DRIVERS\xaudio.exe [2006-08-04 386560]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 CLTNetCnService;Symantec Lic NetConnect service; c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe /h ccCommon []
S2 gupdate;Google Update Service (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-03-30 135664]
S3 AddFiltr;AddFiltr; C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\AddFiltr.exe [2006-06-26 126976]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2010-03-29 182768]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Roxio\Roxio MyDVD Basic v9\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 RoxMediaDB9;RoxMediaDB9; C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe [2006-11-06 887544]
S3 stllssvr;stllssvr; C:\Program Files\Common Files\SureThing Shared\stllssvr.exe [2006-11-01 73728]
S3 WPFFontCache_v0400;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]

-----------------EOF-----------------

#4 Příspěvek od **cernohous13** » 21 úno 2011 18:43

Pro kontrolu

Stáhni a nainstaluj MBAM zde http://www.download.com/Malwarebytes-An ... tag=button
Spustit > na 3.záložce "Aktualizace" > Kontrola aktualizací
následně na 1.záložce "Kontrolor" -> Rychlá kontrola -> Prohledat
po dokončení scanu vyskočí okno Notepad s výsledkem - obsah zkopíruj do své odpovědi
zatím nic nemazat - počkej na posouzení

Jsou s PC ještě nějaké problémy?

Krkovicka74 · #5 Příspěvek od **Krkovicka74** » 21 úno 2011 19:04

Malwarebytes' Anti-Malware 1.50.1.1100
http://www.malwarebytes.org

Database version: 5830

Windows 6.0.6002 Service Pack 2
Internet Explorer 8.0.6001.19019

21/02/2011 18:03:05
mbam-log-2011-02-21 (18-02-54).txt

Scan type: Quick scan
Objects scanned: 143327
Time elapsed: 5 minute(s), 39 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 1
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 1

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{B64F4A7C-97C9-11DA-8BDE-F66BAD1E3F3A} (Rogue.WinAntiVirus) -> No action taken.

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
c:\Users\Simon\AppData\Local\Temp\Low\c.exe (Trojan.Dropper) -> No action taken.

jinak hlasi trojana droper a rogue antivirus

Jinak s notasem uz zadnej problem nevidim

#6 Příspěvek od **cernohous13** » 21 úno 2011 21:33

Tak to dojedeme

MBAM spustit znovu - dát Úplná kontrola
po ukončení -> Zobrazit výsledky -> zkontrolovat zda je vše označeno -> Odstranit označené
vyběhne log, ve kterém budou záznamy tohoto typu:
Infikované adresáře:
C:\Program Files\xxxxxx -> Quarantined and deleted successfully.
ten bych taky rád viděl

Krkovicka74 · #7 Příspěvek od **Krkovicka74** » 21 úno 2011 22:38

21/02/2011 21:34:04
mbam-log-2011-02-21 (21-34-04).txt

Scan type: Full scan (C:\|D:\|)
Objects scanned: 268027
Time elapsed: 51 minute(s), 19 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 1
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 1

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{B64F4A7C-97C9-11DA-8BDE-F66BAD1E3F3A} (Rogue.WinAntiVirus) -> Quarantined and deleted successfully.

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
c:\Users\Simon\AppData\Local\Temp\Low\c.exe (Trojan.Dropper) -> Quarantined and deleted successfully.

#8 Příspěvek od **cernohous13** » 22 úno 2011 06:48

Mohu doporučit kontrolu a vyčištění Ccleanerem

Stáhni Ccleaner - http://www.slunecnice.cz/sw/ccleaner/
Při instalaci vyhodit fajfku u "Instalovat Yahoo! Toolbar" (pokud bude v nabídce)

zavřít Internetový prohlížeč a
spustit "Čistič" > "Spustit Ccleaner" - odstraní nepotřebné
spustit "Registry" > "Hledej problémy" > "Opravit vybrané problémy"
souhlas se zálohou registrů - opakovat dokud nebudou registry čisté.
spustit "Nástroje" > "Start" - tady můžeš zkusit deaktivovat procesy, které při spuštění nepotřebuješ (pokud by ti potom něco nechodilo, stejným způsobem je povolíš)
Návod:http://jnp.zive.cz/Clanky/Prirucka-do-k ... fault.aspx

Ten si můžeš nechat i na budoucí občasné čištění.

myslím, že máme hotovo a čisto.

Krkovicka74 · #9 Příspěvek od **Krkovicka74** » 22 úno 2011 07:24

dik moc za help uz sem mu tam narval i AV a FW sem zvedav jak dlouho mu to vydrzi

#10 Příspěvek od **cernohous13** » 22 úno 2011 08:04

Nemáš zač - rádo se stalo a jsme tady i příště Obrázek

VIRY.CZ

Antivirus Tool smejdak

Antivirus Tool smejdak

Re: Antivirus Tool smejdak

Re: Antivirus Tool smejdak

Re: Antivirus Tool smejdak

Re: Antivirus Tool smejdak

Re: Antivirus Tool smejdak

Re: Antivirus Tool smejdak

Re: Antivirus Tool smejdak

Re: Antivirus Tool smejdak

Re: Antivirus Tool smejdak