Problem microsoft.net framework

[sudanec]

Pfuh. Skuste skocit do spravcu sluzieb (start -> spustit -> napiste services.msc a stlacte enter), najdite Windows Presentation Foundation Font Cache nejake_cisla, zastavte sluzbu, skocte do C:\Windows\ServiceProfiles\LocalService\AppData\Local, zazalohujte vsetko, co sa zacina WPFFontCache_v0400 (napr. si to ulozte niekam inam) a nasledne to skuste zmazat z tohto umiestnenia. Potom sluzbu znovu spustite.

[joseee]

No mam to v tomhle stavu, prepokladam tedy ze to mam vypnute.
Mam to teda smazat i tak?

[joseee]

jinak v te slozce LOKAL SERVICE slozku APPDATA nemam :-\

[sudanec]

Ta zlozka je skryta; zobrazite ju napriklad ked otvorite Control panel -> Appearance and Personalization -> Folder Options -> View -> Show hidden files, folders, and drives

[motji]

Dobrý večer, omlouvám se za vstup.
Prosím mrkněte se po tomto souboru
C:/Users/Aqwertz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/winlogin.exe
Pokud ho najdete, otestujte ho na www.virustotal.com. Asi si budete muset odkrýt skryté a sytémové soubory.

[joseee]

tak jsem si odkryl skryte soubory a nasel pozadovanou slozku, avsak soubory zacinajici WPFFontCache.......
nikde nejsou. Co ted?

[motji]

Podle mě za tu chybu může vir, zkuste ho najít a otestovat na www.virustotal.com. pak ho smažeme

Dejte soubor otestovat na http://www.virustotal.com

C:/Users/Aqwertz/AppData/Roaming/Microsoft/Windows/Start%20Menu/Programs/Startup/winlogin.exe


-Na virustotalu dáte procházet, a do spodního okénka nakopírujete přímo cestu k souboru a dáte odeslat
-z prohlížeče zkopírujete adresu ke stránce s výsledky
-pokud se Vás zeptá, dejte soubor otestovat znovu, tak aby to byl soubor z Vašeho počítače

[joseee]

A analyzoval jsem tedy i ten souborek.

File name:
winlogin.exe
Submission date:
2011-04-26 20:02:07 (UTC)
Current status:
finished
Result:
27/ 41 (65.9%) VT Community

not reviewed
Safety score: -

Compact
Print results Antivirus Version Last Update Result
AhnLab-V3 2011.04.27.00 2011.04.26 Malware/Win32.Generic
AntiVir 7.11.7.7 2011.04.25 TR/Spy.Gen
Antiy-AVL 2.0.3.7 2011.04.26 -
Avast 4.8.1351.0 2011.04.26 MSIL:Crypt-CE
Avast5 5.0.677.0 2011.04.26 MSIL:Crypt-CE
AVG 10.0.0.1190 2011.04.26 PSW.Generic8.AQDL
BitDefender 7.2 2011.04.26 Gen:Heur.MSIL.Krypt.2
CAT-QuickHeal 11.00 2011.04.26 -
ClamAV 0.97.0.0 2011.04.26 -
Commtouch 5.3.2.6 2011.04.26 -
Comodo 8486 2011.04.26 UnclassifiedMalware
DrWeb 5.0.2.03300 2011.04.26 -
eSafe 7.0.17.0 2011.04.26 -
eTrust-Vet 36.1.8293 2011.04.26 -
F-Prot 4.6.2.117 2011.04.26 -
F-Secure 9.0.16440.0 2011.04.26 Gen:Heur.MSIL.Krypt.2
Fortinet 4.2.257.0 2011.04.26 W32/MSIL.BI!tr
GData 22 2011.04.26 Gen:Heur.MSIL.Krypt.2
Ikarus T3.1.1.103.0 2011.04.26 Trojan.SuspectCRC
Jiangmin 13.0.900 2011.04.26 -
K7AntiVirus 9.98.4485 2011.04.26 Riskware
Kaspersky 9.0.0.837 2011.04.26 HEUR:Trojan.Win32.Generic
McAfee 5.400.0.1158 2011.04.26 Generic.dx!wwo
McAfee-GW-Edition 2010.1D 2011.04.26 Generic.dx!wwo
Microsoft 1.6802 2011.04.26 TrojanSpy:Win32/Malintent
NOD32 6073 2011.04.26 a variant of MSIL/Agent.AT
Norman 6.07.07 2011.04.26 W32/Suspicious_Gen2.JYVEP
Panda 10.0.3.5 2011.04.26 Generic Trojan
PCTools 7.0.3.5 2011.04.21 -
Prevx 3.0 2011.04.26 -
Rising 23.55.01.05 2011.04.26 -
Sophos 4.64.0 2011.04.26 Mal/MSIL-BI
SUPERAntiSpyware 4.40.0.1006 2011.04.26 Trojan.Agent/Gen-Malagent
Symantec 20101.3.2.89 2011.04.26 -
TheHacker 6.7.0.1.183 2011.04.26 Trojan/Agent.at
TrendMicro 9.200.0.1012 2011.04.26 TROJ_GEN.R3EC2CU
TrendMicro-HouseCall 9.200.0.1012 2011.04.26 TROJ_GEN.R3EC2CU
VBA32 3.12.16.0 2011.04.26 TrojanSpy.MSIL.KeyLogger.bta
VIPRE 9127 2011.04.26 Trojan.Win32.Generic!BT
ViRobot 2011.4.26.4431 2011.04.26 -
VirusBuster 13.6.322.0 2011.04.26 Trojan.ATRAPS!0AQFfo3KRIM
Additional information
Show all
MD5 : 30b05a8db16efd306af20fb3e31bdb43
SHA1 : 4e253154fecdfdff5af0a93deda197862893bd36
SHA256: 5fbddef8b8d8fb69d60cda4e2cc6b6fd531c601a12d62f31c4e21d6945533cb2
ssdeep: 6144:FkY4gD1T40HaHswPbOvmnBBiXu9VdRQ/vqkg1gEagdgHHH2W:aYjadjOvmB/V7uikFgKW
File size : 409600 bytes
First seen: 2011-03-18 22:06:06
Last seen : 2011-04-26 20:02:07
TrID:
InstallShield setup (54.9%)
Windows Screen Saver (16.7%)
Win32 Executable Generic (10.8%)
Win32 Dynamic Link Library (generic) (9.6%)
Win16/32 Executable Delphi generic (2.6%)
sigcheck:
publisher....: Microsoft Corp.
copyright....: Copyright (c) 2010
product......: n/a
description..: Microsoft
original name: Stub.exe
internal name: Stub.exe
file version.: 1.0.0.0
comments.....: Microsoft Protected
signers......: -
signing date.: -
verified.....: Unsigned
PEInfo: PE structure information

[[ basic data ]]
entrypointaddress: 0x217CE
timedatestamp....: 0x4D180BC9 (Mon Dec 27 03:45:13 2010)
machinetype......: 0x14c (I386)

[[ 4 section(s) ]]
name, viradd, virsiz, rawdsiz, ntropy, md5
.text, 0x2000, 0x1F7D4, 0x1F800, 5.36, 87f983c71a56c470a0abdfdcebbc513d
.sdata, 0x22000, 0xA6, 0x200, 2.38, de68315a8083d658cc76972a0452de26
.rsrc, 0x24000, 0x43ED8, 0x44000, 7.64, f2eacd0c655a3552424ad9e0208d5a12
.reloc, 0x68000, 0xC, 0x200, 0.10, e6fda638b0c7aa92fcbf6dafcdeb61db

[[ 1 import(s) ]]
mscoree.dll: _CorExeMain
ExifTool:
file metadata
AssemblyVersion: 1.0.0.0
CharacterSet: Unicode
CodeSize: 129024
Comments: Microsoft Protected
CompanyName: Microsoft Corp.
EntryPoint: 0x217ce
FileDescription: Microsoft
FileFlagsMask: 0x003f
FileOS: Win32
FileSize: 400 kB
FileSubtype: 0
FileType: Win32 EXE
FileVersion: 1.0.0.0
FileVersionNumber: 1.0.0.0
ImageVersion: 0.0
InitializedDataSize: 279552
InternalName: Stub.exe
LanguageCode: Neutral
LegalCopyright: Copyright 2010
LinkerVersion: 8.0
MIMEType: application/octet-stream
MachineType: Intel 386 or later, and compatibles
OSVersion: 4.0
ObjectFileType: Executable application
OriginalFilename: Stub.exe
PEType: PE32
ProductVersion: 1.0.0.0
ProductVersionNumber: 1.0.0.0
Subsystem: Windows GUI
SubsystemVersion: 4.0
TimeStamp: 2010:12:27 04:45:13+01:00
UninitializedDataSize: 0
Symantec reputation:Suspicious.Insight


VT Community

This file has never been reviewed by any VT Community member. Be the first one to comment on it!
VirusTotal Team

[motji]

Paráda, smažeme ho

Spusťte combofix podle tohoto návodu
http://www.bleepingcomputer.com/combofi ... t-combofix

[joseee]

ComboFix 11-04-25.01 - Aqwertz 26.04.2011 22:19:23.2.2 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1250.420.1033.18.3066.1829 [GMT 2:00]
Spuštěný z: c:\users\Aqwertz\Desktop\ComboFix.exe
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\PCDr\5744\Downloads\162088e9-0b41-471a-947d-e6bfb7774266.dll
c:\programdata\PCDr\5744\Downloads\26671a7e-758b-4293-8191-e6b81368d7ac.dll
c:\programdata\PCDr\5744\Downloads\2da1393a-9d2c-436b-a660-c3dd133e9836.dll
c:\programdata\PCDr\5744\Downloads\3060b7ae-c612-4b71-be9a-0721727ba831.dll
c:\programdata\PCDr\5744\Downloads\38db339b-86cf-40c4-86da-57495513b374.dll
c:\programdata\PCDr\5744\Downloads\3abc4f65-3752-4824-83cd-674c30d9f41c.dll
c:\programdata\PCDr\5744\Downloads\4128ef4c-5308-415e-947b-b523a115be2d.dll
c:\programdata\PCDr\5744\Downloads\4b07fd4d-6cb2-4166-8e08-7e3d0fb96a24.dll
c:\programdata\PCDr\5744\Downloads\5f66a5f6-96e8-487a-b1da-d49f4e9f0813.dll
c:\programdata\PCDr\5744\Downloads\61963b16-da7a-4faf-ba6b-14eb102d0df8.dll
c:\programdata\PCDr\5744\Downloads\654e4133-96c6-421b-9240-26a29538de3f.dll
c:\programdata\PCDr\5744\Downloads\69bf7709-6da5-40eb-b648-3731ebda143c.dll
c:\programdata\PCDr\5744\Downloads\69df3b5e-bee6-4786-8070-a683635a81cd.dll
c:\programdata\PCDr\5744\Downloads\70b66070-48fe-4fad-ac33-5f17042d5ee7.dll
c:\programdata\PCDr\5744\Downloads\7cfc7ddb-2ff0-41ad-a5d7-3e2c7c6da278.dll
c:\programdata\PCDr\5744\Downloads\890823c6-b297-4c5e-8839-80468e0508dc.dll
c:\programdata\PCDr\5744\Downloads\920b4bdb-56cb-44d8-b977-2de6535367f0.dll
c:\programdata\PCDr\5744\Downloads\94c1bf6e-ecf1-4c5d-ad15-1b8540879958.dll
c:\programdata\PCDr\5744\Downloads\a12cd2ff-9e6d-4d89-a010-63188cb6a861.dll
c:\programdata\PCDr\5744\Downloads\a2f393bb-92a1-4fda-a382-66896efa06dd.dll
c:\programdata\PCDr\5744\Downloads\b0ad9f03-890a-4558-bcd7-38c10ea44def.dll
c:\programdata\PCDr\5744\Downloads\c6bcc260-2097-4f4f-a0c3-098183f01ac5.dll
c:\programdata\PCDr\5744\Downloads\db49fe36-7c40-41f5-b9c1-5a7c3297c269.dll
c:\programdata\PCDr\5744\Downloads\db760e79-da96-4a2b-a687-8256c6e72fb6.dll
c:\programdata\PCDr\5744\Downloads\e3d50fea-9128-4ef0-9ea5-b4d74186612f.dll
c:\programdata\PCDr\5744\Downloads\f6b10855-5837-4857-9c20-c7b6a6dc2589.dll
c:\users\Aqwertz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\winlogin.exe
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-03-26 do 2011-04-26 )))))))))))))))))))))))))))))))
.
.
2011-04-26 15:44 . 2011-04-26 15:45 -------- d-----w- C:\rsit
2011-04-26 15:44 . 2011-04-26 15:45 -------- d-----w- c:\program files\trend micro
2011-04-22 07:15 . 2011-04-11 07:04 7071056 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{261B6840-C149-410B-B8E5-190A7B7CFEA9}\mpengine.dll
2011-04-03 09:27 . 2011-04-03 09:28 -------- d-----w- c:\users\Aqwertz\AppData\Roaming\Zoner
2011-04-03 09:27 . 2011-04-03 09:27 -------- d-----w- c:\users\Aqwertz\AppData\Local\Zoner
2011-04-03 09:27 . 2011-04-03 09:27 -------- d-----w- c:\program files\Zoner
2011-04-01 14:50 . 2011-04-01 14:50 -------- d-----w- c:\users\Aqwertz\AppData\Local\GamePlayLabs Plugin
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-02-02 16:11 . 2009-10-05 09:06 222080 ------w- c:\windows\system32\MpSigStub.exe
2010-08-13 20:11 . 2009-08-10 04:21 119808 ----a-w- c:\program files\mozilla firefox\components\GoogleDesktopMozilla.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-11-25 39408]
"Sidebar"="c:\program files\Windows Sidebar\SideBar.exe" [2009-04-11 1233920]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952]
"DAEMON Tools Lite"="c:\programy\DAEMON Tools Lite\DTLite.exe" [2010-04-01 357696]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Apoint"="c:\program files\DellTPad\Apoint.exe" [2008-07-17 196608]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-01-21 61440]
"Google Desktop Search"="c:\program files\Google\Google Desktop Search\GoogleDesktop.exe" [2010-08-13 30192]
"Dell Webcam Central"="c:\program files\Dell Webcam\Dell Webcam Central\WebcamDell.exe" [2008-06-03 446635]
"PCMService"="c:\program files\Dell\MediaDirect\PCMService.exe" [2008-07-04 132392]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2010-04-01 202256]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2008-2-12 723496]
QuickSet.lnk - c:\program files\Dell\QuickSet\quickset.exe [2008-7-9 1616976]
Skype.lnk - c:\windows\Installer\{D103C4BA-F905-437A-8049-DB24763BBE36}\SkypeIcon.exe [2010-3-13 371272]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\GoToAssist]
2008-11-25 08:08 10536 ----a-w- c:\program files\Citrix\GoToAssist\514\g2awinlogon.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\progra~1\Google\GOOGLE~3\GoogleDesktopNetwork3.dll c:\progra~1\Google\GOOGLE~3\GOEC62~1.DLL
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc\S-1-5-21-1431754263-3123048416-4286111678-1000]
"EnableNotificationsRef"=dword:00000001
.
R2 gupdate1ca89a4acfcf020;Služba Google Update (gupdate1ca89a4acfcf020);c:\program files\Google\Update\GoogleUpdate.exe [2009-12-30 133104]
R3 GoogleDesktopManager-051210-111108;Google Desktop Manager 5.9.1005.12335;c:\program files\Google\Google Desktop Search\GoogleDesktop.exe [2010-08-13 30192]
R3 PCDSRVC{E9D79540-57D5953E-06020101}_0;PCDSRVC{E9D79540-57D5953E-06020101}_0 - PCDR Kernel Mode Service Helper Driver;c:\program files\dell support center\pcdsrvc.pkms [2010-11-18 21744]
R3 s115bus;Sony Ericsson Device 115 driver (WDM);c:\windows\system32\DRIVERS\s115bus.sys [2007-04-23 83208]
R3 s115mdfl;Sony Ericsson Device 115 USB WMC Modem Filter;c:\windows\system32\DRIVERS\s115mdfl.sys [2007-04-23 15112]
R3 s115mdm;Sony Ericsson Device 115 USB WMC Modem Driver;c:\windows\system32\DRIVERS\s115mdm.sys [2007-04-23 108680]
R3 s115mgmt;Sony Ericsson Device 115 USB WMC Device Management Drivers (WDM);c:\windows\system32\DRIVERS\s115mgmt.sys [2007-04-23 100488]
R3 s115obex;Sony Ericsson Device 115 USB WMC OBEX Interface;c:\windows\system32\DRIVERS\s115obex.sys [2007-04-23 98568]
R3 WPFFontCache_v0400;WPFFontCache_v0400; [x]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2010-02-16 691696]
S2 AESTFilters;Andrea ST Filters Service;c:\windows\System32\DriverStore\FileRepository\stwrt.inf_f091b975\aestsrv.exe [2008-07-17 73728]
S3 itecir;ITECIR Infrared Receiver;c:\windows\system32\DRIVERS\itecir.sys [2008-07-28 54784]
S3 k57nd60x;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60x.sys [2008-05-29 203264]
S3 NETw5v32;Intel(R) Wireless WiFi Link Adapter Driver for Windows Vista 32 Bit ;c:\windows\system32\DRIVERS\NETw5v32.sys [2008-07-04 3663360]
S3 OA001Ufd;Creative Camera OA001 Upper Filter Driver;c:\windows\system32\DRIVERS\OA001Ufd.sys [2008-09-22 144672]
S3 OA001Vid;Creative Camera OA001 Function Driver;c:\windows\system32\DRIVERS\OA001Vid.sys [2008-09-22 277632]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bthsvcs REG_MULTI_SZ BthServ
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
Obsah adresáře 'Naplánované úlohy'
.
2011-04-26 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-12-30 23:06]
.
2011-04-26 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-12-30 23:06]
.
2011-04-26 c:\windows\Tasks\ParetoLogic Registration.job
- c:\program files\Common Files\ParetoLogic\UUS2\UUS.dll [2009-01-13 14:59]
.
2011-04-19 c:\windows\Tasks\ParetoLogic Update Version2.job
- c:\program files\Common Files\ParetoLogic\UUS2\Pareto_Update.exe [2009-01-13 14:59]
.
2011-04-21 c:\windows\Tasks\PCDoctorBackgroundMonitorTask.job
- c:\program files\Dell Support Center\uaclauncher.exe [2010-11-18 15:13]
.
2011-04-26 c:\windows\Tasks\SystemToolsDailyTest.job
- c:\program files\Dell Support Center\pcdrcui.exe [2010-11-18 15:13]
.
2011-04-26 c:\windows\Tasks\User_Feed_Synchronization-{89ED00AA-BCCD-4A5A-9369-37806B817BF4}.job
- c:\windows\system32\msfeedssync.exe [2010-08-12 04:24]
.
.
------- Doplňkový sken -------
.
uSearchURL,(Default) = hxxp://www.google.com/search/?q=%s
IE: Google Sidewiki... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_E11712C84EA7E12B.dll/cmsidewiki.html
IE: Send image to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Send page to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
HKLM-Run-dellsupportcenter - c:\program files\Dell Support Center\bin\sprtcmd.exe
HKLM-Run-SysTrayApp - %ProgramFiles%\IDT\WDM\sttray.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-04-26 22:26
Windows 6.0.6002 Service Pack 2 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Services\PCDSRVC{E9D79540-57D5953E-06020101}_0]
"ImagePath"="\??\c:\program files\dell support center\pcdsrvc.pkms"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\User Preferences]
@Denied: (2) (LocalSystem)
"88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,ec,91,a1,63,31,37,ab,40,b8,fb,65,\
"2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,ec,91,a1,63,31,37,ab,40,b8,fb,65,\
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0012\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0013\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0014\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
--------------------- Knihovny navázané na běžící procesy ---------------------
.
- - - - - - - > 'Explorer.exe'(3200)
c:\windows\system32\btmmhook.dll
.
Celkový čas: 2011-04-26 22:27:52
ComboFix-quarantined-files.txt 2011-04-26 20:27
.
Před spuštěním: 74 801 422 336 bytes free
Po spuštění: 74 940 010 496 bytes free
.
- - End Of File - - 9CE6FA096F0139E89715F6A45283F0AD

[joseee]

jo a ted mam zpomaleny notas, nefunguje mi 1 4 7 pres funkcni klavesu a na touchpadu nefunguje po krajich to posouvani.

[motji]

Tuto složku znáte? Combofix ji smazal . Jinak smazal i ten soubor, ještě Vám framework hlásí chybu?
c:\programdata\PCDr\5744

[joseee]

Tak framework uz to nehlasi.
A slozku neznam ale je tam toho dost. Viz foto.
A co ty dalsi priznaky

[motji]

Počkejte, mě zajímá pouze tato složka c:\programdata\PCDr\5744.
Jaké příznaky? jak je na tom ted počítač?

[motji]

Pardon, už ty chyby čtu, to je až po použití combofixu?