Stránka 8 z 11

Re: neviem co s tym,prosim pomozte

Napsal: 04 kvě 2011 08:25
od motji
Myslíte bránu firewall?
Poprosím o nový log ze rsitu.

Re: neviem co s tym,prosim pomozte

Napsal: 04 kvě 2011 08:38
od ringov
Logfile of random's system information tool 1.08 (written by random/random)
Run by Administrator at 2011-05-04 09:35:40
Systém Microsoft Windows XP Professional Service Pack 2
System drive C: has 2 GB (29%) free of 8 GB
Total RAM: 511 MB (30% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:37:27 , on 4.5.2011
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
D:\AVAST\AvastSvc.exe
D:\AVAST\avastUI.exe
D:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Bonjour\mDNSResponder.exe
E:\panda\Panda USB Vaccine\USBVaccine.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Documents and Settings\Administrator\Plocha\RSIT.exe
C:\Program Files\trend micro\Administrator.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://pobox.sk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O1 - Hosts: ˙ţ127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - D:\AVAST\aswWebRepIE.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - D:\AVAST\aswWebRepIE.dll
O4 - HKLM\..\Run: [avast] "D:\AVAST\avastUI.exe" /nogui
O4 - HKLM\..\Run: [ZoneAlarm Client] "D:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O20 - Winlogon Notify: !SASWinLogon - D:\SuperAntiSpywer\SASWINLO.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: avast! Antivirus - AVAST Software - D:\AVAST\AvastSvc.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe

--
End of file - 3037 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\PandaUSBVaccine.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2004-12-14 63136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - D:\AVAST\aswWebRepIE.dll [2011-04-18 818280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - D:\AVAST\aswWebRepIE.dll [2011-04-18 818280]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"avast"=D:\AVAST\avastUI.exe [2011-04-18 3460784]
"ZoneAlarm Client"=D:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe [2011-03-18 1043968]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2004-08-17 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\!SASWinLogon]
D:\SuperAntiSpywer\SASWINLO.DLL [2009-09-04 548352]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\WINDOWS\system32\ZoneLabs\vsmon.exe"="C:\WINDOWS\system32\ZoneLabs\vsmon.exe:*:Disabled:vsmon"
"C:\WINDOWS\system32\sessmgr.exe"="C:\WINDOWS\system32\sessmgr.exe:*:Disabled:@xpsp2res.dll,-22019"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

======List of files/folders created in the last 1 months======

2011-05-04 09:35:40 ----D---- C:\rsit
2011-05-04 09:30:31 ----A---- C:\TDSSKiller.2.5.0.0_04.05.2011_09.30.31_log.txt
2011-05-04 08:00:04 ----A---- C:\WINDOWS\ntbtlog.txt
2011-05-03 21:57:08 ----D---- C:\Documents and Settings\Administrator\Data aplikací\IDM
2011-05-03 18:46:05 ----SHD---- C:\RECYCLER
2011-05-03 18:32:46 ----D---- C:\WINDOWS\temp
2011-05-02 13:24:42 ----D---- C:\WINDOWS\system32\CatRoot2
2011-05-01 12:42:03 ----D---- C:\Downloads
2011-05-01 00:01:31 ----D---- C:\Documents and Settings\All Users\Data aplikací\PC Tools
2011-04-28 13:42:21 ----A---- C:\WINDOWS\system32\zlcommdb.dll
2011-04-28 13:42:21 ----A---- C:\WINDOWS\system32\zlcomm.dll
2011-04-28 13:42:04 ----A---- C:\WINDOWS\system32\vswmi.dll
2011-04-28 13:41:49 ----A---- C:\WINDOWS\system32\zpeng25.dll
2011-04-28 13:41:44 ----A---- C:\WINDOWS\system32\vsmonapi.dll
2011-04-28 13:40:20 ----A---- C:\WINDOWS\system32\vsinit.dll
2011-04-28 13:40:20 ----A---- C:\WINDOWS\system32\vsdata.dll
2011-04-28 13:40:19 ----A---- C:\WINDOWS\system32\vsutil.dll
2011-04-28 09:46:52 ----A---- C:\WINDOWS\system32\vsregexp.dll
2011-04-28 09:46:12 ----A---- C:\WINDOWS\system32\vsxml.dll
2011-04-28 09:46:10 ----A---- C:\WINDOWS\system32\vspubapi.dll
2011-04-28 09:46:06 ----A---- C:\WINDOWS\system32\vsdatant.sys
2011-04-27 15:12:47 ----D---- C:\Documents and Settings\All Users\Data aplikací\SUPERAntiSpyware.com
2011-04-27 13:59:38 ----N---- C:\WINDOWS\system32\drivers\aswNdis.sys
2011-04-27 13:58:56 ----D---- C:\Program Files\Alwil Software
2011-04-27 13:58:56 ----D---- C:\Documents and Settings\All Users\Data aplikací\Alwil Software
2011-04-26 07:21:31 ----D---- C:\Documents and Settings\All Users\Data aplikací\Babylon
2011-04-26 07:21:30 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Babylon
2011-04-25 18:27:17 ----D---- C:\Program Files\CheckPoint
2011-04-25 18:26:07 ----D---- C:\WINDOWS\system32\ZoneLabs
2011-04-25 18:11:53 ----HDC---- C:\WINDOWS\$NtUninstallKB943232$
2011-04-25 18:10:07 ----D---- C:\WINDOWS\Internet Logs
2011-04-25 17:55:44 ----A---- C:\Install.log.txt
2011-04-24 22:03:54 ----D---- C:\Documents and Settings\All Users\Data aplikací\Norton
2011-04-24 21:28:33 ----D---- C:\Program Files\QuickTime
2011-04-24 14:59:58 ----N---- C:\WINDOWS\system32\drivers\aswSP.sys
2011-04-24 14:59:58 ----N---- C:\WINDOWS\system32\drivers\aswFsBlk.sys
2011-04-24 14:59:53 ----A---- C:\WINDOWS\system32\drivers\aswTdi.sys
2011-04-24 14:59:53 ----A---- C:\WINDOWS\system32\drivers\aswRdr.sys
2011-04-24 14:59:52 ----N---- C:\WINDOWS\system32\drivers\aswSnx.sys
2011-04-24 14:59:52 ----N---- C:\WINDOWS\system32\drivers\aswmon2.sys
2011-04-24 14:59:52 ----N---- C:\WINDOWS\system32\drivers\aswmon.sys
2011-04-24 14:59:51 ----N---- C:\WINDOWS\system32\drivers\aavmker4.sys
2011-04-24 14:59:23 ----N---- C:\WINDOWS\system32\aswBoot.exe
2011-04-24 13:34:45 ----D---- C:\Program Files\Google
2011-04-24 10:33:58 ----A---- C:\WINDOWS\system32\wuweb.dll
2011-04-24 10:33:58 ----A---- C:\WINDOWS\system32\wucltui.dll
2011-04-24 10:33:58 ----A---- C:\WINDOWS\system32\wuauserv.dll
2011-04-24 10:33:57 ----A---- C:\WINDOWS\system32\wuaueng1.dll
2011-04-24 10:33:54 ----A---- C:\WINDOWS\system32\wups.dll
2011-04-24 10:33:54 ----A---- C:\WINDOWS\system32\wuaueng.dll
2011-04-24 10:33:53 ----A---- C:\WINDOWS\system32\wuauclt1.exe
2011-04-24 10:33:51 ----A---- C:\WINDOWS\system32\wuauclt.exe
2011-04-24 10:33:49 ----A---- C:\WINDOWS\system32\wuapi.dll
2011-04-24 10:33:31 ----A---- C:\WINDOWS\system32\qmgr.dll
2011-04-24 10:12:22 ----A---- C:\WINDOWS\system32\drivers\24548982.sys
2011-04-24 10:12:22 ----A---- C:\WINDOWS\system32\drivers\24548981.sys
2011-04-24 10:12:22 ----A---- C:\WINDOWS\system32\drivers\2454898.sys
2011-04-23 21:37:10 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Avira
2011-04-23 18:44:13 ----A---- C:\WINDOWS\system32\drivers\ssmdrv.sys
2011-04-23 18:44:12 ----A---- C:\WINDOWS\system32\drivers\avipbb.sys
2011-04-23 18:44:12 ----A---- C:\WINDOWS\system32\drivers\avgntmgr.sys
2011-04-23 18:44:12 ----A---- C:\WINDOWS\system32\drivers\avgntflt.sys
2011-04-23 18:44:12 ----A---- C:\WINDOWS\system32\drivers\avgntdd.sys
2011-04-23 18:44:10 ----D---- C:\Documents and Settings\All Users\Data aplikací\Avira
2011-04-22 17:13:34 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-04-22 00:54:02 ----D---- C:\WINDOWS\system32\XPSViewer
2011-04-22 00:53:54 ----D---- C:\Program Files\MSBuild
2011-04-22 00:53:44 ----D---- C:\Program Files\Reference Assemblies
2011-04-22 00:45:52 ----D---- C:\Program Files\MSXML 6.0
2011-04-21 23:01:37 ----HDC---- C:\WINDOWS\$NtUninstallKB939683$
2011-04-21 09:06:39 ----D---- C:\Program Files\Codec Pack - All In 1
2011-04-21 09:06:30 ----D---- C:\WINDOWS\system32\languages
2011-04-20 22:51:08 ----D---- C:\Program Files\CCleaner
2011-04-20 20:45:42 ----A---- C:\AILog.txt
2011-04-19 17:29:47 ----A---- C:\WINDOWS\unvise32.exe
2011-04-18 20:06:35 ----D---- C:\Documents and Settings\All Users\Data aplikací\Spybot - Search & Destroy
2011-04-18 07:48:48 ----D---- C:\WINDOWS\system32\CatRoot_bak
2011-04-17 23:31:24 ----D---- C:\Documents and Settings\All Users\Data aplikací\AVAST Software
2011-04-17 10:36:10 ----A---- C:\WINDOWS\Sof2.INI
2011-04-16 22:22:18 ----D---- C:\Documents and Settings\Administrator\Data aplikací\PCToolsFirewallPlus
2011-04-15 22:43:16 ----HDC---- C:\WINDOWS\$NtUninstallKB970430$
2011-04-15 22:42:59 ----HDC---- C:\WINDOWS\$NtUninstallKB971737$
2011-04-15 13:10:47 ----HDC---- C:\WINDOWS\$NtUninstallKB973540_WM9L$
2011-04-15 13:09:31 ----HDC---- C:\WINDOWS\$NtUninstallKB952004$
2011-04-15 13:08:49 ----HDC---- C:\WINDOWS\$NtUninstallKB975560$
2011-04-15 13:07:41 ----HDC---- C:\WINDOWS\$NtUninstallKB973507$
2011-04-15 13:06:50 ----HDC---- C:\WINDOWS\$NtUninstallKB941569$
2011-04-15 13:04:52 ----HDC---- C:\WINDOWS\$NtUninstallKB977816$
2011-04-15 13:04:08 ----HDC---- C:\WINDOWS\$NtUninstallKB973687$
2011-04-15 13:03:42 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2011-04-15 10:20:16 ----HDC---- C:\WINDOWS\$NtUninstallKB978601$
2011-04-15 09:28:48 ----HDC---- C:\WINDOWS\$NtUninstallKB980218$
2011-04-15 09:28:26 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2011-04-15 09:28:03 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2011-04-15 09:27:38 ----HDC---- C:\WINDOWS\$NtUninstallKB959426$
2011-04-15 09:27:19 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2011-04-15 09:27:06 ----HDC---- C:\WINDOWS\$NtUninstallKB956803$
2011-04-15 09:26:52 ----HDC---- C:\WINDOWS\$NtUninstallKB960859$
2011-04-15 09:26:37 ----HDC---- C:\WINDOWS\$NtUninstallKB971468$
2011-04-15 09:25:52 ----HDC---- C:\WINDOWS\$NtUninstallKB979683$
2011-04-15 09:24:37 ----HDC---- C:\WINDOWS\$NtUninstallKB958869$
2011-04-15 09:24:24 ----HDC---- C:\WINDOWS\$NtUninstallKB954155_WM9$
2011-04-15 09:24:06 ----HDC---- C:\WINDOWS\$NtUninstallKB980195$
2011-04-15 09:23:40 ----HDC---- C:\WINDOWS\$NtUninstallKB980232$
2011-04-15 09:23:00 ----HDC---- C:\WINDOWS\$NtUninstallKB955759$
2011-04-15 09:22:36 ----HDC---- C:\WINDOWS\$NtUninstallKB974318$
2011-04-15 09:22:08 ----HDC---- C:\WINDOWS\$NtUninstallKB969059$
2011-04-15 09:21:40 ----HDC---- C:\WINDOWS\$NtUninstallKB2229593$
2011-04-15 09:21:17 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2011-04-15 09:20:55 ----HDC---- C:\WINDOWS\$NtUninstallKB978037$
2011-04-15 09:20:30 ----HDC---- C:\WINDOWS\$NtUninstallKB975713$
2011-04-15 09:20:04 ----HDC---- C:\WINDOWS\$NtUninstallKB971657$
2011-04-15 09:19:38 ----HDC---- C:\WINDOWS\$NtUninstallKB978338$
2011-04-15 09:19:22 ----HDC---- C:\WINDOWS\$NtUninstallKB960225$
2011-04-15 09:19:05 ----HDC---- C:\WINDOWS\$NtUninstallKB972270$
2011-04-15 09:18:50 ----HDC---- C:\WINDOWS\$NtUninstallKB974112$
2011-04-15 09:17:45 ----HDC---- C:\WINDOWS\$NtUninstallKB956572$
2011-04-15 09:17:28 ----HDC---- C:\WINDOWS\$NtUninstallKB956844$
2011-04-15 09:17:15 ----HDC---- C:\WINDOWS\$NtUninstallKB961501$
2011-04-15 09:16:43 ----HDC---- C:\WINDOWS\$NtUninstallKB975561$
2011-04-15 09:16:32 ----HDC---- C:\WINDOWS\$NtUninstallKB952069_WM9$
2011-04-15 09:16:20 ----HDC---- C:\WINDOWS\$NtUninstallKB973869$
2011-04-15 09:16:13 ----HDC---- C:\WINDOWS\$NtUninstallKB975025$
2011-04-15 09:15:48 ----HDC---- C:\WINDOWS\$NtUninstallKB974571$
2011-04-15 09:14:57 ----HDC---- C:\WINDOWS\$NtUninstallKB981793$
2011-04-15 09:14:42 ----HDC---- C:\WINDOWS\$NtUninstallKB979559$
2011-04-15 09:14:19 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2011-04-15 09:14:00 ----HDC---- C:\WINDOWS\$NtUninstallKB973904$
2011-04-15 09:11:57 ----HDC---- C:\WINDOWS\$NtUninstallKB967715$
2011-04-15 09:11:02 ----HDC---- C:\WINDOWS\$NtUninstallKB929399$
2011-04-15 09:10:17 ----HDC---- C:\WINDOWS\$NtUninstallKB974392$
2011-04-15 09:09:30 ----HDC---- C:\WINDOWS\$NtUninstallKB977914$
2011-04-15 09:09:07 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2011-04-15 09:08:50 ----HDC---- C:\WINDOWS\$NtUninstallKB978542$
2011-04-15 09:08:34 ----HDC---- C:\WINDOWS\$NtUninstallKB970238$
2011-04-15 09:08:21 ----HDC---- C:\WINDOWS\$NtUninstallKB885884$
2011-04-15 09:06:40 ----HDC---- C:\WINDOWS\$NtUninstallKB979309$
2011-04-15 09:06:23 ----HDC---- C:\WINDOWS\$NtUninstallKB978695_WM9$
2011-04-15 09:06:08 ----HDC---- C:\WINDOWS\$NtUninstallKB979482$
2011-04-15 09:05:54 ----HDC---- C:\WINDOWS\$NtUninstallKB978706$
2011-04-15 09:05:27 ----HDC---- C:\WINDOWS\$NtUninstallKB958470$
2011-04-15 09:05:16 ----HDC---- C:\WINDOWS\$NtUninstallKB960803$
2011-04-15 09:04:43 ----HDC---- C:\WINDOWS\$NtUninstallKB973815$
2011-04-15 09:04:26 ----HDC---- C:\WINDOWS\$NtUninstallKB975562$
2011-04-15 09:04:05 ----D---- C:\WINDOWS\ie8updates
2011-04-15 09:03:41 ----HDC---- C:\WINDOWS\$NtUninstallKB971032$
2011-04-15 09:03:22 ----HDC---- C:\WINDOWS\$NtUninstallKB958644$
2011-04-15 09:03:06 ----HDC---- C:\WINDOWS\$NtUninstallKB955069$
2011-04-15 09:02:53 ----HDC---- C:\WINDOWS\$NtUninstallKB956802$
2011-04-15 09:02:42 ----HDC---- C:\WINDOWS\$NtUninstallKB954154_WM11$
2011-04-15 09:02:25 ----HDC---- C:\WINDOWS\$NtUninstallKB923561$
2011-04-15 09:02:12 ----HDC---- C:\WINDOWS\$NtUninstallKB975467$
2011-04-15 09:01:48 ----HDC---- C:\WINDOWS\$NtUninstallKB968389$
2011-04-14 16:36:26 ----A---- C:\WINDOWS\system32\browserchoice.exe
2011-04-14 15:59:27 ----A---- C:\WINDOWS\system32\tzchange.exe
2011-04-13 10:29:27 ----D---- C:\Documents and Settings\All Users\Data aplikací\_comodo_
2011-04-13 10:21:38 ----A---- C:\WINDOWS\system32\cssdll32.dll
2011-04-13 06:36:35 ----D---- C:\Documents and Settings\All Users\Data aplikací\Panda Security
2011-04-12 09:44:57 ----D---- C:\Program Files\Windows Media Connect 2
2011-04-12 08:47:09 ----SHD---- C:\WINDOWS\CSC
2011-04-11 16:37:14 ----D---- C:\WINDOWS\MindSoft Utilities 2011
2011-04-11 12:28:10 ----A---- C:\WINDOWS\system32\vhxaag.txt
2011-04-10 12:36:54 ----D---- C:\Documents and Settings\All Users\Data aplikací\Google
2011-04-10 09:33:06 ----D---- C:\Program Files\Defraggler
2011-04-10 07:21:49 ----D---- C:\WINDOWS\system32\PreInstall
2011-04-10 07:21:43 ----HDC---- C:\WINDOWS\$NtUninstallKB898461$
2011-04-10 07:21:43 ----HD---- C:\WINDOWS\$hf_mig$
2011-04-09 09:21:29 ----D---- C:\WINDOWS\system32\NtmsData
2011-04-09 07:25:29 ----HD---- C:\WINDOWS\system32\GroupPolicy
2011-04-09 06:46:03 ----D---- C:\WINDOWS\SxsCaPendDel
2011-04-08 10:04:50 ----A---- C:\WINDOWS\system32\ChCfg.exe
2011-04-08 10:04:25 ----RA---- C:\WINDOWS\system32\drivers\alcxwdm.sys
2011-04-08 10:03:41 ----A---- C:\WINDOWS\system32\RTLCPL.exe
2011-04-08 10:03:37 ----A---- C:\WINDOWS\soundman.exe
2011-04-08 10:03:36 ----A---- C:\WINDOWS\system32\RtlCPAPI.dll
2011-04-08 10:03:32 ----A---- C:\WINDOWS\alcupd.exe
2011-04-08 10:03:32 ----A---- C:\WINDOWS\Alcrmv.exe
2011-04-07 11:48:26 ----D---- C:\Program Files\trend micro
2011-04-06 16:53:19 ----A---- C:\WINDOWS\cmaudio.ini
2011-04-06 15:48:38 ----A---- C:\WINDOWS\system32\uxtuneup.dll
2011-04-06 15:24:35 ----ASH---- C:\pagefile.sys
2011-04-06 08:49:29 ----SHD---- C:\Documents and Settings\All Users\Data aplikací\{24036256-BFDB-4CD3-BE8A-A3D6160F2E16}
2011-04-05 21:30:29 ----D---- C:\WINDOWS\WBEM
2011-04-05 21:28:55 ----HDC---- C:\WINDOWS\ie8
2011-04-05 21:28:55 ----D---- C:\WINDOWS\system32\cs-CZ

======List of files/folders modified in the last 1 months======

2011-05-04 09:36:26 ----D---- C:\WINDOWS\Prefetch
2011-05-04 09:30:33 ----D---- C:\WINDOWS\system32\drivers
2011-05-04 09:02:39 ----SHD---- C:\System Volume Information
2011-05-04 08:43:44 ----D---- C:\WINDOWS\system32\LogFiles
2011-05-04 08:10:51 ----D---- C:\WINDOWS
2011-05-04 08:05:28 ----D---- C:\WINDOWS\system32\drivers\etc
2011-05-04 07:51:34 ----D---- C:\WINDOWS\Minidump
2011-05-04 07:30:15 ----ASH---- C:\boot.ini
2011-05-03 18:51:23 ----D---- C:\WINDOWS\system32\Restore
2011-05-03 18:27:45 ----A---- C:\WINDOWS\system.ini
2011-05-03 18:24:10 ----D---- C:\WINDOWS\system32
2011-05-03 18:24:10 ----D---- C:\WINDOWS\AppPatch
2011-05-03 18:24:05 ----D---- C:\Program Files\Common Files
2011-05-02 13:29:18 ----SHD---- C:\WINDOWS\Installer
2011-05-02 13:28:40 ----RD---- C:\WINDOWS\Web
2011-05-02 13:28:40 ----RD---- C:\Program Files
2011-05-02 13:27:54 ----ASHC---- C:\WINDOWS\fonts\desktop.ini
2011-05-02 13:26:51 ----D---- C:\WINDOWS\system32\CatRoot
2011-05-02 09:00:57 ----SD---- C:\Documents and Settings\Administrator\Data aplikací\Microsoft
2011-05-02 09:00:55 ----D---- C:\Config.Msi
2011-05-02 08:34:17 ----D---- C:\WINDOWS\WinSxS
2011-05-01 00:20:30 ----AD---- C:\Documents and Settings\All Users\Data aplikací\TEMP
2011-04-27 14:02:26 ----HD---- C:\WINDOWS\inf
2011-04-27 14:00:24 ----D---- C:\Program Files\Common Files\Microsoft Shared
2011-04-27 07:54:52 ----D---- C:\Documents and Settings\Administrator\Data aplikací\DMCache
2011-04-25 18:37:45 ----D---- C:\WINDOWS\security
2011-04-25 18:12:18 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-04-25 10:58:51 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-04-24 21:22:28 ----D---- C:\Program Files\Bonjour
2011-04-24 20:51:31 ----D---- C:\Program Files\Common Files\Adobe
2011-04-24 14:51:18 ----D---- C:\WINDOWS\Debug
2011-04-24 13:36:02 ----SD---- C:\WINDOWS\Tasks
2011-04-24 13:10:19 ----A---- C:\WINDOWS\UPGRADE.TXT
2011-04-24 13:01:01 ----D---- C:\WINDOWS\Registration
2011-04-22 21:24:04 ----D---- C:\WINDOWS\system32\config
2011-04-22 20:40:25 ----D---- C:\Program Files\Internet Explorer
2011-04-22 12:17:12 ----D---- C:\WINDOWS\Microsoft.NET
2011-04-22 12:17:11 ----D---- C:\WINDOWS\assembly
2011-04-22 00:53:49 ----RSD---- C:\WINDOWS\Fonts
2011-04-22 00:53:06 ----D---- C:\WINDOWS\system32\spool
2011-04-22 00:50:56 ----D---- C:\Documents and Settings
2011-04-21 09:02:45 ----A---- C:\WINDOWS\iun6002.exe
2011-04-21 07:25:20 ----HD---- C:\Program Files\InstallShield Installation Information
2011-04-19 09:28:11 ----D---- C:\ProgramData
2011-04-19 08:41:33 ----D---- C:\Program Files\Common Files\InstallShield
2011-04-17 09:40:28 ----D---- C:\WINDOWS\system32\ReinstallBackups
2011-04-15 09:32:13 ----D---- C:\WINDOWS\system32\wbem
2011-04-15 09:32:12 ----D---- C:\WINDOWS\system32\Setup
2011-04-15 09:23:31 ----D---- C:\WINDOWS\Help
2011-04-15 09:16:49 ----D---- C:\Program Files\Movie Maker
2011-04-15 09:08:54 ----D---- C:\Program Files\Outlook Express
2011-04-15 09:05:30 ----D---- C:\WINDOWS\ServicePackFiles
2011-04-12 06:55:29 ----D---- C:\WINDOWS\SoftwareDistribution
2011-04-10 19:20:57 ----A---- C:\WINDOWS\win.ini
2011-04-10 15:04:41 ----D---- C:\WINDOWS\pss
2011-04-09 22:43:10 ----HDC---- C:\WINDOWS\$NtUninstallWudf01000$
2011-04-09 12:02:00 ----D---- C:\Program Files\WinRAR
2011-04-09 09:26:00 ----D---- C:\WINDOWS\repair
2011-04-09 09:21:27 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2011-04-06 09:07:30 ----D---- C:\Documents and Settings\All Users\Data aplikací\TuneUp Software
2011-04-06 08:55:12 ----D---- C:\Documents and Settings\Administrator\Data aplikací\TuneUp Software
2011-04-05 23:11:04 ----A---- C:\WINDOWS\system32\deployJava1.dll
2011-04-05 21:52:02 ----D---- C:\Program Files\Mozilla Firefox
2011-04-05 21:30:19 ----D---- C:\WINDOWS\Media

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2007-03-08 43528]
R0 sisagp;Filtr SIS sběrnice AGP ; C:\WINDOWS\System32\DRIVERS\sisagp.sys [2004-08-03 41088]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2011-04-18 30680]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2011-04-18 25432]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2011-04-18 441176]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2011-04-18 307288]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2011-04-18 49240]
R1 SASDIFSV;SASDIFSV; \??\D:\SuperAntiSpywer\SASDIFSV.SYS []
R1 SASKUTIL;SASKUTIL; \??\D:\SuperAntiSpywer\SASKUTIL.SYS []
R1 vsdatant;vsdatant; C:\WINDOWS\System32\vsdatant.sys [2010-05-13 532224]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\drivers\aswFsBlk.sys [2011-04-18 19544]
R2 aswMon2;aswMon2; C:\WINDOWS\system32\drivers\aswMon2.sys [2011-04-18 102488]
R2 Fallback;Fallback; C:\WINDOWS\System32\DRIVERS\HSF_FALL.sys [2001-08-17 289887]
R2 Fsks;Fsks; C:\WINDOWS\System32\DRIVERS\HSF_FSKS.sys [2001-08-17 115807]
R2 K56;K56; C:\WINDOWS\System32\DRIVERS\HSF_K56K.sys [2001-08-17 391199]
R2 mdmxsdk;mdmxsdk; C:\WINDOWS\System32\DRIVERS\mdmxsdk.sys [2004-08-03 11868]
R2 SoftFax;SoftFax; C:\WINDOWS\System32\DRIVERS\HSF_FAXX.sys [2001-08-17 199711]
R2 SpeakerPhone;SpeakerPhone; C:\WINDOWS\System32\DRIVERS\HSF_SPKP.sys [2001-08-17 73279]
R2 Tones;Tones; C:\WINDOWS\System32\DRIVERS\HSF_TONE.sys [2001-08-17 50751]
R2 V124;V124; C:\WINDOWS\System32\DRIVERS\HSF_V124.sys [2001-08-17 488383]
R3 Afc;PPdus ASPI Shell; C:\WINDOWS\system32\drivers\Afc.sys [2005-02-23 11776]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2008-09-24 4122368]
R3 basic2;basic2; C:\WINDOWS\System32\DRIVERS\HSF_BSC2.sys [2001-08-17 67167]
R3 hsf_msft;hsf_msft; C:\WINDOWS\System32\DRIVERS\HSF_MSFT.sys [2001-08-17 542879]
R3 PAC207;Trust WB-1400T Webcam; C:\WINDOWS\system32\DRIVERS\PFC027.SYS [2007-05-14 508288]
R3 Rksample;Rksample; C:\WINDOWS\System32\DRIVERS\HSF_SAMP.sys [2001-08-17 57471]
R3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\System32\DRIVERS\RTL8139.SYS [2004-08-03 20992]
R3 S3SAVAGE4M;S3SAVAGE4M; C:\WINDOWS\System32\DRIVERS\s3sav4m.sys [2001-08-17 77824]
S2 avgntflt;avgntflt; C:\WINDOWS\system32\drivers\avgntflt.sys [2011-03-04 61960]
S3 ALCXSENS;Service for WDM 3D Audio Driver; C:\WINDOWS\system32\drivers\ALCXSENS.SYS []
S3 AmdLLD;AMD Low Level Device Driver; C:\WINDOWS\system32\DRIVERS\AmdLLD.sys []
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2004-08-03 17024]
S3 GMSIPCI;GMSIPCI; \??\F:\INSTALL\GMSIPCI.SYS []
S3 HSF_DP;HSF_DP; C:\WINDOWS\System32\DRIVERS\HSFDPSP2.sys [2004-08-03 1041536]
S3 HSFHWBS2;HSFHWBS2; C:\WINDOWS\System32\DRIVERS\HSFBS2S2.sys [2004-08-03 220032]
S3 MODEMCSA;Unimodem Streaming Filter Device; C:\WINDOWS\system32\drivers\MODEMCSA.sys [2001-08-17 16128]
S3 ms_mpu401;Microsoft MPU-401 MIDI UART Driver; C:\WINDOWS\system32\drivers\msmpu401.sys [2001-08-18 2944]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2004-08-03 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2004-08-03 85376]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2004-08-03 10880]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys []
S3 pctNdis;PC Tools Firewall Intermediate Filter Service; C:\WINDOWS\system32\DRIVERS\pctNdis.sys []
S3 pctNdisMP;PC Tools Driver; C:\WINDOWS\system32\DRIVERS\pctNdis.sys []
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2004-08-03 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2004-08-03 15360]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-03 25856]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-03 26496]
S3 WpdUsb;WpdUsb; C:\WINDOWS\System32\Drivers\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2004-08-03 19328]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S4 WS2IFSL;Podpůrné prostředí zprostředkovatele služeb Windows Socket 2.0 bez podpory IFS; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-10-25 12032]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; D:\AVAST\AvastSvc.exe [2011-04-18 42184]
R2 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:\Program Files\Bonjour\mDNSResponder.exe [2006-02-28 229376]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2004-08-17 14336]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-04-24 136176]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-30 69632]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-04-24 136176]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S4 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-09-26 654848]
S4 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe []

-----------------EOF-----------------

Re: neviem co s tym,prosim pomozte

Napsal: 04 kvě 2011 08:44
od motji
Proč jste spouštěl Tdss killer?
Vložte sem tento log C:\TDSSKiller.2.5.0.0_04.05.2011_09.30.31_log.txt
Můžete dát screen té hlášky, co Vám vyskakuje?

Re: neviem co s tym,prosim pomozte

Napsal: 04 kvě 2011 08:47
od ringov
2011/05/04 09:30:31.0054 3724 TDSS rootkit removing tool 2.5.0.0 May 1 2011 14:20:16
2011/05/04 09:30:33.0067 3724 ================================================================================
2011/05/04 09:30:33.0067 3724 SystemInfo:
2011/05/04 09:30:33.0067 3724
2011/05/04 09:30:33.0067 3724 OS Version: 5.1.2600 ServicePack: 2.0
2011/05/04 09:30:33.0067 3724 Product type: Workstation
2011/05/04 09:30:33.0067 3724 ComputerName: TEREZIA
2011/05/04 09:30:33.0067 3724 UserName: Administrator
2011/05/04 09:30:33.0077 3724 Windows directory: C:\WINDOWS
2011/05/04 09:30:33.0077 3724 System windows directory: C:\WINDOWS
2011/05/04 09:30:33.0077 3724 Processor architecture: Intel x86
2011/05/04 09:30:33.0077 3724 Number of processors: 1
2011/05/04 09:30:33.0077 3724 Page size: 0x1000
2011/05/04 09:30:33.0077 3724 Boot type: Normal boot
2011/05/04 09:30:33.0077 3724 ================================================================================
2011/05/04 09:30:34.0278 3724 Initialize success
2011/05/04 09:30:46.0035 2624 ================================================================================
2011/05/04 09:30:46.0035 2624 Scan started
2011/05/04 09:30:46.0035 2624 Mode: Manual;
2011/05/04 09:30:46.0035 2624 ================================================================================
2011/05/04 09:30:46.0836 2624 Aavmker4 (78a4db23bb4e8d4349e164d1d90af73f) C:\WINDOWS\system32\drivers\Aavmker4.sys
2011/05/04 09:30:47.0708 2624 ACPI (fa2fbcda96d2385f773b059fe5a125a6) C:\WINDOWS\system32\DRIVERS\ACPI.sys
2011/05/04 09:30:48.0028 2624 ACPIEC (afdff022a01f0b11c776f0860c3b282f) C:\WINDOWS\system32\drivers\ACPIEC.sys
2011/05/04 09:30:48.0599 2624 aec (841f385c6cfaf66b58fbd898722bb4f0) C:\WINDOWS\system32\drivers\aec.sys
2011/05/04 09:30:48.0990 2624 Afc (a7b8a3a79d35215d798a300df49ed23f) C:\WINDOWS\system32\drivers\Afc.sys
2011/05/04 09:30:49.0420 2624 AFD (55e6e1c51b6d30e54335750955453702) C:\WINDOWS\System32\drivers\afd.sys
2011/05/04 09:30:52.0665 2624 ALCXWDM (dd8520280304b6145a6be31008748c7c) C:\WINDOWS\system32\drivers\ALCXWDM.SYS
2011/05/04 09:30:56.0400 2624 aswFsBlk (9bdb29e81abceb883556df44649696c4) C:\WINDOWS\system32\drivers\aswFsBlk.sys
2011/05/04 09:30:56.0851 2624 aswMon2 (2ce6da466687cbb3b97e59f8831a27cb) C:\WINDOWS\system32\drivers\aswMon2.sys
2011/05/04 09:30:57.0231 2624 aswRdr (a90cf680ca7a323913ca3a0810c8e02d) C:\WINDOWS\system32\drivers\aswRdr.sys
2011/05/04 09:30:57.0682 2624 aswSnx (f7969934cca2e566e95df17380a3cb11) C:\WINDOWS\system32\drivers\aswSnx.sys
2011/05/04 09:30:58.0333 2624 aswSP (478d6a0e0630c31bf4a7f5eb0a05b92c) C:\WINDOWS\system32\drivers\aswSP.sys
2011/05/04 09:30:58.0744 2624 aswTdi (e52e45743e27fd6184c55618a10b81ab) C:\WINDOWS\system32\drivers\aswTdi.sys
2011/05/04 09:30:59.0164 2624 AsyncMac (02000abf34af4c218c35d257024807d6) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
2011/05/04 09:30:59.0515 2624 atapi (cdfe4411a69c224bd1d11b2da92dac51) C:\WINDOWS\system32\DRIVERS\atapi.sys
2011/05/04 09:31:00.0176 2624 Atmarpc (ec88da854ab7d7752ec8be11a741bb7f) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
2011/05/04 09:31:00.0586 2624 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
2011/05/04 09:31:00.0897 2624 avgntflt (47b879406246ffdced59e18d331a0e7d) C:\WINDOWS\system32\drivers\avgntflt.sys
2011/05/04 09:31:01.0287 2624 basic2 (1b9c81ab9a456eabd9f8335f04b5f495) C:\WINDOWS\system32\DRIVERS\HSF_BSC2.sys
2011/05/04 09:31:01.0648 2624 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
2011/05/04 09:31:02.0128 2624 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
2011/05/04 09:31:02.0469 2624 CCDECODE (6163ed60b684bab19d3352ab22fc48b2) C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
2011/05/04 09:31:03.0090 2624 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
2011/05/04 09:31:03.0500 2624 Cdfs (cd7d5152df32b47f4e36f710b35aae02) C:\WINDOWS\system32\drivers\Cdfs.sys
2011/05/04 09:31:03.0841 2624 Cdrom (af9c19b3100fe010496b1a27181fbf72) C:\WINDOWS\system32\DRIVERS\cdrom.sys
2011/05/04 09:31:06.0004 2624 Disk (00ca44e4534865f8a3b64f7c0984bff0) C:\WINDOWS\system32\DRIVERS\disk.sys
2011/05/04 09:31:06.0505 2624 dmboot (e1968edec81c430108feb23ab07bdb14) C:\WINDOWS\system32\drivers\dmboot.sys
2011/05/04 09:31:07.0005 2624 dmio (1b1520a82e396e46b9ae9fa6b03ff6c6) C:\WINDOWS\system32\drivers\dmio.sys
2011/05/04 09:31:07.0406 2624 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
2011/05/04 09:31:07.0817 2624 DMusic (a6f881284ac1150e37d9ae47ff601267) C:\WINDOWS\system32\drivers\DMusic.sys
2011/05/04 09:31:08.0498 2624 drmkaud (1ed4dbbae9f5d558dbba4cc450e3eb2e) C:\WINDOWS\system32\drivers\drmkaud.sys
2011/05/04 09:31:09.0088 2624 Fallback (c823debe2548656549f84a875d65237b) C:\WINDOWS\system32\DRIVERS\HSF_FALL.sys
2011/05/04 09:31:09.0579 2624 Fastfat (3117f595e9615e04f05a54fc15a03b20) C:\WINDOWS\system32\drivers\Fastfat.sys
2011/05/04 09:31:10.0050 2624 Fdc (ced2e8396a8838e59d8fd529c680e02c) C:\WINDOWS\system32\DRIVERS\fdc.sys
2011/05/04 09:31:10.0420 2624 Fips (266dab58619b17bdf37fabbd48d875ca) C:\WINDOWS\system32\drivers\Fips.sys
2011/05/04 09:31:10.0901 2624 Flpydisk (0dd1de43115b93f4d85e889d7a86f548) C:\WINDOWS\system32\DRIVERS\flpydisk.sys
2011/05/04 09:31:11.0252 2624 FltMgr (157754f0df355a9e0a6f54721914f9c6) C:\WINDOWS\system32\drivers\fltmgr.sys
2011/05/04 09:31:11.0682 2624 Fsks (6483414841d4cab6c3b4db2ac6edd70b) C:\WINDOWS\system32\DRIVERS\HSF_FSKS.sys
2011/05/04 09:31:12.0103 2624 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys
2011/05/04 09:31:12.0483 2624 Ftdisk (4e664d8541db4a66b73a24257e322e1f) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
2011/05/04 09:31:12.0934 2624 gameenum (5f92fd09e5610a5995da7d775eadcd12) C:\WINDOWS\system32\DRIVERS\gameenum.sys
2011/05/04 09:31:13.0545 2624 Gpc (c0f1d4a21de5a415df8170616703debf) C:\WINDOWS\system32\DRIVERS\msgpc.sys
2011/05/04 09:31:14.0737 2624 HSFHWBS2 (970178e8e003eb1481293830069624b9) C:\WINDOWS\system32\DRIVERS\HSFBS2S2.sys
2011/05/04 09:31:15.0708 2624 HSF_DP (ebb354438a4c5a3327fb97306260714a) C:\WINDOWS\system32\DRIVERS\HSFDPSP2.sys
2011/05/04 09:31:16.0790 2624 hsf_msft (74e379857d4c0dfb56de2d19b8f4c434) C:\WINDOWS\system32\DRIVERS\HSF_MSFT.sys
2011/05/04 09:31:17.0621 2624 HTTP (9f8b0f4276f618964fd118be4289b7cd) C:\WINDOWS\system32\Drivers\HTTP.sys
2011/05/04 09:31:18.0903 2624 i8042prt (0f42de9909b5dbf2c48dd1a79d491af5) C:\WINDOWS\system32\DRIVERS\i8042prt.sys
2011/05/04 09:31:19.0473 2624 Imapi (f8aa320c6a0409c0380e5d8a99d76ec6) C:\WINDOWS\system32\DRIVERS\imapi.sys
2011/05/04 09:31:20.0935 2624 ip6fw (4448006b6bc60e6c027932cfc38d6855) C:\WINDOWS\system32\drivers\ip6fw.sys
2011/05/04 09:31:21.0276 2624 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
2011/05/04 09:31:21.0767 2624 IpInIp (e1ec7f5da720b640cd8fb8424f1b14bb) C:\WINDOWS\system32\DRIVERS\ipinip.sys
2011/05/04 09:31:22.0137 2624 IpNat (b5a8e215ac29d24d60b4d1250ef05ace) C:\WINDOWS\system32\DRIVERS\ipnat.sys
2011/05/04 09:31:22.0708 2624 IPSec (64537aa5c003a6afeee1df819062d0d1) C:\WINDOWS\system32\DRIVERS\ipsec.sys
2011/05/04 09:31:23.0109 2624 IRENUM (50708daa1b1cbb7d6ac1cf8f56a24410) C:\WINDOWS\system32\DRIVERS\irenum.sys
2011/05/04 09:31:23.0629 2624 isapnp (1091528512e4dd7ed5fddcc4df1c53d7) C:\WINDOWS\system32\DRIVERS\isapnp.sys
2011/05/04 09:31:24.0060 2624 K56 (9c5e3fdbfcc30cf71a49ca178b9ad442) C:\WINDOWS\system32\DRIVERS\HSF_K56K.sys
2011/05/04 09:31:24.0691 2624 Kbdclass (6f877bf8dc01a550cd666f3bedb2213c) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
2011/05/04 09:31:25.0081 2624 kmixer (d93cad07c5683db066b0b2d2d3790ead) C:\WINDOWS\system32\drivers\kmixer.sys
2011/05/04 09:31:25.0532 2624 KSecDD (674d3e5a593475915dc6643317192403) C:\WINDOWS\system32\drivers\KSecDD.sys
2011/05/04 09:31:26.0554 2624 mdmxsdk (195741aee20369980796b557358cd774) C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys
2011/05/04 09:31:27.0034 2624 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
2011/05/04 09:31:27.0395 2624 Modem (60210deb037846afe521ebf349964f6b) C:\WINDOWS\system32\drivers\Modem.sys
2011/05/04 09:31:27.0915 2624 MODEMCSA (1992e0d143b09653ab0f9c5e04b0fd65) C:\WINDOWS\system32\drivers\MODEMCSA.sys
2011/05/04 09:31:28.0266 2624 Mouclass (b160ec94114715675509115986400fd9) C:\WINDOWS\system32\DRIVERS\mouclass.sys
2011/05/04 09:31:28.0606 2624 MountMgr (65653f3b4477f3c63e68a9659f85ee2e) C:\WINDOWS\system32\drivers\MountMgr.sys
2011/05/04 09:31:29.0398 2624 MRxDAV (46edcc8f2db2f322c24f48785cb46366) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
2011/05/04 09:31:29.0958 2624 MRxSmb (fb6c89bb3ce282b08bdb1e3c179e1c39) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
2011/05/04 09:31:30.0549 2624 Msfs (561b3a4333ca2dbdba28b5b956822519) C:\WINDOWS\system32\drivers\Msfs.sys
2011/05/04 09:31:31.0050 2624 MSKSSRV (ae431a8dd3c1d0d0610cdbac16057ad0) C:\WINDOWS\system32\drivers\MSKSSRV.sys
2011/05/04 09:31:31.0461 2624 MSPCLOCK (13e75fef9dfeb08eeded9d0246e1f448) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
2011/05/04 09:31:31.0801 2624 MSPQM (1988a33ff19242576c3d0ef9ce785da7) C:\WINDOWS\system32\drivers\MSPQM.sys
2011/05/04 09:31:32.0252 2624 mssmbios (469541f8bfd2b32659d5d463a6714bce) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
2011/05/04 09:31:32.0622 2624 MSTEE (bf13612142995096ab084f2db7f40f77) C:\WINDOWS\system32\drivers\MSTEE.sys
2011/05/04 09:31:33.0153 2624 ms_mpu401 (ca3e22598f411199adc2dfee76cd0ae0) C:\WINDOWS\system32\drivers\msmpu401.sys
2011/05/04 09:31:33.0564 2624 Mup (82035e0f41c2dd05ae41d27fe6cf7de1) C:\WINDOWS\system32\drivers\Mup.sys
2011/05/04 09:31:33.0944 2624 NABTSFEC (5c8dc6429c43dc6177c1fa5b76290d1a) C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
2011/05/04 09:31:34.0435 2624 NDIS (558635d3af1c7546d26067d5d9b6959e) C:\WINDOWS\system32\drivers\NDIS.sys
2011/05/04 09:31:34.0785 2624 NdisIP (520ce427a8b298f54112857bcf6bde15) C:\WINDOWS\system32\DRIVERS\NdisIP.sys
2011/05/04 09:31:35.0136 2624 NdisTapi (08d43bbdacdf23f34d79e44ed35c1b4c) C:\WINDOWS\system32\DRIVERS\ndistapi.sys
2011/05/04 09:31:35.0597 2624 Ndisuio (34d6cd56409da9a7ed573e1c90a308bf) C:\WINDOWS\system32\DRIVERS\ndisuio.sys
2011/05/04 09:31:35.0937 2624 NdisWan (0b90e255a9490166ab368cd55a529893) C:\WINDOWS\system32\DRIVERS\ndiswan.sys
2011/05/04 09:31:36.0398 2624 NDProxy (59fc3fb44d2669bc144fd87826bb571f) C:\WINDOWS\system32\drivers\NDProxy.sys
2011/05/04 09:31:36.0778 2624 NetBIOS (3a2aca8fc1d7786902ca434998d7ceb4) C:\WINDOWS\system32\DRIVERS\netbios.sys
2011/05/04 09:31:37.0189 2624 NetBT (0c80e410cd2f47134407ee7dd19cc86b) C:\WINDOWS\system32\DRIVERS\netbt.sys
2011/05/04 09:31:37.0850 2624 Npfs (4f601bcb8f64ea3ac0994f98fed03f8e) C:\WINDOWS\system32\drivers\Npfs.sys
2011/05/04 09:31:38.0361 2624 Ntfs (b78be402c3f63dd55521f73876951cdd) C:\WINDOWS\system32\drivers\Ntfs.sys
2011/05/04 09:31:39.0021 2624 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
2011/05/04 09:31:39.0352 2624 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
2011/05/04 09:31:39.0793 2624 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
2011/05/04 09:31:40.0273 2624 PAC207 (54183d1ec4a8658bbacb31acd0c8f6df) C:\WINDOWS\system32\DRIVERS\PFC027.SYS
2011/05/04 09:31:40.0864 2624 Parport (76a18caa2fefb28a4ced38d76837e86e) C:\WINDOWS\system32\DRIVERS\parport.sys
2011/05/04 09:31:41.0235 2624 PartMgr (3334430c29dc338092f79c38ef7b4cd0) C:\WINDOWS\system32\drivers\PartMgr.sys
2011/05/04 09:31:41.0605 2624 ParVdm (1fae19d0457176318bba4a8795656ebc) C:\WINDOWS\system32\drivers\ParVdm.sys
2011/05/04 09:31:42.0406 2624 PCI (b7979f37bb7b9df2230046134955e6e7) C:\WINDOWS\system32\DRIVERS\pci.sys
2011/05/04 09:31:43.0157 2624 PCIIde (2da4ec85e0ea7a45c6b2a05820492d5a) C:\WINDOWS\system32\DRIVERS\pciide.sys
2011/05/04 09:31:43.0468 2624 Pcmcia (90505755634407d4ef4c6dea60fc1df9) C:\WINDOWS\system32\drivers\Pcmcia.sys
2011/05/04 09:31:46.0672 2624 PptpMiniport (1c5cc65aac0783c344f16353e60b72ac) C:\WINDOWS\system32\DRIVERS\raspptp.sys
2011/05/04 09:31:47.0103 2624 Processor (9a10e4fd13824823da50d4758bd0a645) C:\WINDOWS\system32\DRIVERS\processr.sys
2011/05/04 09:31:47.0474 2624 PSched (48671f327553dcf1d27f6197f622a668) C:\WINDOWS\system32\DRIVERS\psched.sys
2011/05/04 09:31:47.0884 2624 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
2011/05/04 09:31:48.0285 2624 PxHelp20 (d86b4a68565e444d76457f14172c875a) C:\WINDOWS\system32\Drivers\PxHelp20.sys
2011/05/04 09:31:50.0077 2624 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys
2011/05/04 09:31:50.0538 2624 Rasl2tp (98faeb4a4dcf812ba1c6fca4aa3e115c) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
2011/05/04 09:31:50.0919 2624 RasPppoe (7306eeed8895454cbed4669be9f79faa) C:\WINDOWS\system32\DRIVERS\raspppoe.sys
2011/05/04 09:31:51.0269 2624 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys
2011/05/04 09:31:51.0760 2624 Rdbss (29d66245adba878fff574cd66abd2884) C:\WINDOWS\system32\DRIVERS\rdbss.sys
2011/05/04 09:31:52.0160 2624 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
2011/05/04 09:31:52.0711 2624 rdpdr (a2cae2c60bc37e0751ef9dda7ceaf4ad) C:\WINDOWS\system32\DRIVERS\rdpdr.sys
2011/05/04 09:31:53.0162 2624 RDPWD (d4f5643d7714ef499ae9527fdcd50894) C:\WINDOWS\system32\drivers\RDPWD.sys
2011/05/04 09:31:53.0653 2624 redbook (aba13d33e1f888c9a68599a48a8840d6) C:\WINDOWS\system32\DRIVERS\redbook.sys
2011/05/04 09:31:54.0013 2624 Rksample (bb7549bd94d1aac3599c7606c50c48a0) C:\WINDOWS\system32\DRIVERS\HSF_SAMP.sys
2011/05/04 09:31:54.0524 2624 rtl8139 (d507c1400284176573224903819ffda3) C:\WINDOWS\system32\DRIVERS\RTL8139.SYS
2011/05/04 09:31:54.0944 2624 S3SAVAGE4M (dddc792753e657a9932029c46e60fe52) C:\WINDOWS\system32\DRIVERS\s3sav4m.sys
2011/05/04 09:31:55.0165 2624 SASDIFSV (a3281aec37e0720a2bc28034c2df2a56) D:\SuperAntiSpywer\SASDIFSV.SYS
2011/05/04 09:31:55.0245 2624 SASKUTIL (61db0d0756a99506207fd724e3692b25) D:\SuperAntiSpywer\SASKUTIL.SYS
2011/05/04 09:31:55.0826 2624 Secdrv (07f7f501ad50de2ba2d5842d9b6d6155) C:\WINDOWS\system32\DRIVERS\secdrv.sys
2011/05/04 09:31:56.0286 2624 serenum (a2d868aeeff612e70e213c451a70cafb) C:\WINDOWS\system32\DRIVERS\serenum.sys
2011/05/04 09:31:56.0647 2624 Serial (c1ddbc85251551a840212999da3d95f3) C:\WINDOWS\system32\DRIVERS\serial.sys
2011/05/04 09:31:57.0077 2624 Sfloppy (0d13b6df6e9e101013a7afb0ce629fe0) C:\WINDOWS\system32\drivers\Sfloppy.sys
2011/05/04 09:31:57.0808 2624 sisagp (732d859b286da692119f286b21a2a114) C:\WINDOWS\system32\DRIVERS\sisagp.sys
2011/05/04 09:31:58.0249 2624 SLIP (5caeed86821fa2c6139e32e9e05ccdc9) C:\WINDOWS\system32\DRIVERS\SLIP.sys
2011/05/04 09:31:58.0670 2624 SoftFax (d9e8e0ce154a2f6430d9efabdf730867) C:\WINDOWS\system32\DRIVERS\HSF_FAXX.sys
2011/05/04 09:31:59.0391 2624 SpeakerPhone (6c843c43fd7f0b42cfe477ce88d0f9b3) C:\WINDOWS\system32\DRIVERS\HSF_SPKP.sys
2011/05/04 09:31:59.0801 2624 splitter (8e186b8f23295d1e42c573b82b80d548) C:\WINDOWS\system32\drivers\splitter.sys
2011/05/04 09:32:00.0192 2624 sr (a74035ea526db97d9d50d2143a55f5cf) C:\WINDOWS\system32\DRIVERS\sr.sys
2011/05/04 09:32:00.0743 2624 Srv (7a4f147cc6b133f905f6e65e2f8669fb) C:\WINDOWS\system32\DRIVERS\srv.sys
2011/05/04 09:32:01.0203 2624 streamip (284c57df5dc7abca656bc2b96a667afb) C:\WINDOWS\system32\DRIVERS\StreamIP.sys
2011/05/04 09:32:01.0524 2624 swenum (03c1bae4766e2450219d20b993d6e046) C:\WINDOWS\system32\DRIVERS\swenum.sys
2011/05/04 09:32:01.0904 2624 swmidi (94abc808fc4b6d7d2bbf42b85e25bb4d) C:\WINDOWS\system32\drivers\swmidi.sys
2011/05/04 09:32:03.0557 2624 sysaudio (650ad082d46bac0e64c9c0e0928492fd) C:\WINDOWS\system32\drivers\sysaudio.sys
2011/05/04 09:32:04.0108 2624 Tcpip (2a5554fc5b1e04e131230e3ce035c3f9) C:\WINDOWS\system32\DRIVERS\tcpip.sys
2011/05/04 09:32:04.0548 2624 TDPIPE (38d437cf2d98965f239b0abcd66dcb0f) C:\WINDOWS\system32\drivers\TDPIPE.sys
2011/05/04 09:32:04.0949 2624 TDTCP (ed0580af02502d00ad8c4c066b156be9) C:\WINDOWS\system32\drivers\TDTCP.sys
2011/05/04 09:32:05.0249 2624 TermDD (a540a99c281d933f3d69d55e48727f47) C:\WINDOWS\system32\DRIVERS\termdd.sys
2011/05/04 09:32:05.0700 2624 Tones (8021a499db46b2961c285168671cb9af) C:\WINDOWS\system32\DRIVERS\HSF_TONE.sys
2011/05/04 09:32:06.0411 2624 Udfs (12f70256f140cd7d52c58c7048fde657) C:\WINDOWS\system32\drivers\Udfs.sys
2011/05/04 09:32:07.0162 2624 usbhub (c72f40947f92cea56a8fb532edf025f1) C:\WINDOWS\system32\DRIVERS\usbhub.sys
2011/05/04 09:32:07.0522 2624 usbohci (bdfe799a8531bad8a5a985821fe78760) C:\WINDOWS\system32\DRIVERS\usbohci.sys
2011/05/04 09:32:07.0843 2624 usbprint (a42369b7cd8886cd7c70f33da6fcbcf5) C:\WINDOWS\system32\DRIVERS\usbprint.sys
2011/05/04 09:32:08.0183 2624 USBSTOR (6cd7b22193718f1d17a47a1cd6d37e75) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
2011/05/04 09:32:08.0734 2624 V124 (269c0ade94b90029b12497747be408cb) C:\WINDOWS\system32\DRIVERS\HSF_V124.sys
2011/05/04 09:32:09.0245 2624 VgaSave (8a60edd72b4ea5aea8202daf0e427925) C:\WINDOWS\System32\drivers\vga.sys
2011/05/04 09:32:09.0876 2624 VolSnap (cd8cce067f7e9cbd762c00bdddecaa34) C:\WINDOWS\system32\drivers\VolSnap.sys
2011/05/04 09:32:10.0377 2624 vsdatant (050c38ebb22512122e54b47dc278bccd) C:\WINDOWS\system32\vsdatant.sys
2011/05/04 09:32:11.0058 2624 Wanarp (984ef0b9788abf89974cfed4bfbaacbc) C:\WINDOWS\system32\DRIVERS\wanarp.sys
2011/05/04 09:32:11.0678 2624 wdmaud (2797f33ebf50466020c430ee4f037933) C:\WINDOWS\system32\drivers\wdmaud.sys
2011/05/04 09:32:12.0399 2624 WpdUsb (cf4def1bf66f06964dc0d91844239104) C:\WINDOWS\system32\Drivers\wpdusb.sys
2011/05/04 09:32:12.0750 2624 WS2IFSL (6abe6e225adb5a751622a9cc3bc19ce8) C:\WINDOWS\System32\drivers\ws2ifsl.sys
2011/05/04 09:32:13.0100 2624 WSTCODEC (d5842484f05e12121c511aa93f6439ec) C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
2011/05/04 09:32:13.0441 2624 WudfPf (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS\system32\DRIVERS\WudfPf.sys
2011/05/04 09:32:13.0781 2624 WudfRd (28b524262bce6de1f7ef9f510ba3985b) C:\WINDOWS\system32\DRIVERS\wudfrd.sys
2011/05/04 09:32:14.0452 2624 ================================================================================
2011/05/04 09:32:14.0452 2624 Scan finished
2011/05/04 09:32:14.0452 2624 ================================================================================
2011/05/04 09:33:01.0099 3412 Deinitialize success

Re: neviem co s tym,prosim pomozte

Napsal: 04 kvě 2011 08:53
od motji
To je ok. Můžete mi prosím odpovídat na otázky?

Re: neviem co s tym,prosim pomozte

Napsal: 04 kvě 2011 08:56
od ringov

Re: neviem co s tym,prosim pomozte

Napsal: 04 kvě 2011 14:02
od motji
Takže máte nové síťové připojení, předpokládám, že ho neznáte?
Pokud mi nebudete odpovídat na otázky, nemůžu Vám pomoci, věšteckou kouli nemám :)

Re: neviem co s tym,prosim pomozte

Napsal: 04 kvě 2011 20:55
od ringov
nie nepoznam, predtym tu nebolo.Chcem to odpojit ale sa neda lebo vypise ze sa neda lebo je zaneprazdnene odpojovanim a pripojovanim.

Re: neviem co s tym,prosim pomozte

Napsal: 04 kvě 2011 21:10
od motji
Nejde to odpojit ani v nouzovém režimu?
Co máte za připojení? wifi nebo kabel?
Když se fyzicky odpojíte od internetu, nejde to odebrat?

:arrow: Spusťte combofix podle tohoto návodu
http://www.bleepingcomputer.com/combofi ... t-combofix

Re: neviem co s tym,prosim pomozte

Napsal: 04 kvě 2011 21:17
od ringov
Mam kabel.Ked odpojim kabel od PC tak to zmizne.

Re: neviem co s tym,prosim pomozte

Napsal: 04 kvě 2011 21:21
od motji
Ještě něco - máte doma více pc připojených ke stejné síti?
Pokud máte povolené sdílení v síti, tak pak je zapnutá brána internetu http://windows.microsoft.com/cs-CZ/wind ... nd-Control

Re: neviem co s tym,prosim pomozte

Napsal: 05 kvě 2011 06:41
od ringov
Prepacte ze tak neskoro ale po CF som sa nemohol pripojit.Nemam doma viac PC.////////////////////////////////ComboFix 11-05-04.02 - Administrator 04.05.2011 22:27:01.20.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.2.1250.421.1029.18.511.265 [GMT 2:00]
Running from: c:\documents and settings\Administrator\Plocha\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
FW: ZoneAlarm Firewall *Disabled* {829BDA32-94B3-44F4-8446-F8FCFF809F8B}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\system32\drivers\etc\lmhosts
.
.
((((((((((((((((((((((((( Files Created from 2011-04-04 to 2011-05-04 )))))))))))))))))))))))))))))))
.
.
2011-05-04 09:14 . 2011-05-04 10:17 -------- d-----w- c:\documents and settings\Administrator\DoctorWeb
2011-05-03 19:57 . 2011-05-03 19:58 -------- d-----w- c:\documents and settings\Administrator\Data aplikací\IDM
2011-05-02 11:24 . 2011-05-04 20:45 -------- d-----w- c:\windows\system32\CatRoot2
2011-05-01 10:42 . 2011-05-01 10:56 -------- d-----w- C:\Downloads
2011-04-30 22:01 . 2011-04-30 22:19 -------- d-----w- c:\documents and settings\All Users\Data aplikací\PC Tools
2011-04-28 11:42 . 2011-03-17 23:24 69120 ----a-w- c:\windows\system32\zlcomm.dll
2011-04-28 11:42 . 2011-03-17 23:24 104448 ----a-w- c:\windows\system32\zlcommdb.dll
2011-04-28 11:41 . 2011-03-17 23:24 1238528 ----a-w- c:\windows\system32\zpeng25.dll
2011-04-27 13:12 . 2011-04-27 13:12 -------- d-----w- c:\documents and settings\All Users\Data aplikací\SUPERAntiSpyware.com
2011-04-27 11:59 . 2010-03-19 19:10 12112 ------w- c:\windows\system32\drivers\aswNdis.sys
2011-04-27 11:58 . 2011-04-27 18:43 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Alwil Software
2011-04-27 11:58 . 2011-04-27 11:58 -------- d-----w- c:\program files\Alwil Software
2011-04-26 05:21 . 2011-04-26 05:21 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Data aplikací\Babylon
2011-04-26 05:21 . 2011-04-26 05:21 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Babylon
2011-04-26 05:21 . 2011-04-26 05:21 -------- d-----w- c:\documents and settings\Administrator\Data aplikací\Babylon
2011-04-25 16:27 . 2011-04-25 16:27 -------- d-----w- c:\program files\CheckPoint
2011-04-25 16:26 . 2011-05-01 06:26 -------- d-----w- c:\windows\system32\ZoneLabs
2011-04-25 16:10 . 2011-05-04 20:20 -------- d-----w- c:\windows\Internet Logs
2011-04-24 20:03 . 2011-04-24 20:03 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Norton
2011-04-24 20:03 . 2011-05-04 05:42 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Data aplikací\NPE
2011-04-24 19:28 . 2011-04-24 19:28 -------- d-----w- c:\program files\QuickTime
2011-04-24 12:59 . 2011-04-18 17:17 307288 ------w- c:\windows\system32\drivers\aswSP.sys
2011-04-24 12:59 . 2011-04-18 17:12 19544 ------w- c:\windows\system32\drivers\aswFsBlk.sys
2011-04-24 12:59 . 2011-04-18 17:16 49240 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2011-04-24 12:59 . 2011-04-18 17:13 25432 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2011-04-24 12:59 . 2011-04-18 17:17 441176 ------w- c:\windows\system32\drivers\aswSnx.sys
2011-04-24 12:59 . 2011-04-18 17:16 102488 ------w- c:\windows\system32\drivers\aswmon2.sys
2011-04-24 12:59 . 2011-04-18 17:16 96344 ------w- c:\windows\system32\drivers\aswmon.sys
2011-04-24 12:59 . 2011-04-18 17:13 30680 ------w- c:\windows\system32\drivers\aavmker4.sys
2011-04-24 12:59 . 2011-04-18 17:25 199304 ------w- c:\windows\system32\aswBoot.exe
2011-04-24 11:34 . 2011-04-24 11:34 -------- d-----w- c:\program files\Google
2011-04-24 11:34 . 2011-04-18 17:25 40112 ----a-w- c:\windows\avastSS.scr
2011-04-24 11:13 . 2004-08-17 13:49 4096 ----a-w- c:\documents and settings\All Users\Data aplikací\Microsoft\USMT\iconlib.dll
2011-04-24 09:07 . 2004-08-17 13:49 116224 -c--a-w- c:\windows\system32\dllcache\xrxwiadr.dll
2011-04-24 09:07 . 2001-10-24 10:25 23040 -c--a-w- c:\windows\system32\dllcache\xrxwbtmp.dll
2011-04-24 09:07 . 2001-10-24 10:25 17408 -c--a-w- c:\windows\system32\dllcache\xrxscnui.dll
2011-04-24 09:07 . 2001-10-24 10:25 27648 -c--a-w- c:\windows\system32\dllcache\xrxftplt.exe
2011-04-24 09:07 . 2001-10-24 10:25 4608 -c--a-w- c:\windows\system32\dllcache\xrxflnch.exe
2011-04-24 09:07 . 2001-08-18 04:37 99865 -c--a-w- c:\windows\system32\dllcache\xlog.exe
2011-04-24 09:07 . 2001-08-17 18:11 16970 -c--a-w- c:\windows\system32\dllcache\xem336n5.sys
2011-04-24 09:07 . 2004-08-03 20:29 19455 -c--a-w- c:\windows\system32\dllcache\wvchntxx.sys
2011-04-24 09:07 . 2004-08-03 20:29 12063 -c--a-w- c:\windows\system32\dllcache\wsiintxx.sys
2011-04-24 09:07 . 2004-08-17 13:49 8192 -c--a-w- c:\windows\system32\dllcache\wshirda.dll
2011-04-24 09:05 . 2001-08-17 19:28 604253 -c--a-w- c:\windows\system32\dllcache\vmodem.sys
2011-04-24 09:04 . 2001-08-17 18:14 123995 -c--a-w- c:\windows\system32\dllcache\tjisdn.sys
2011-04-24 09:03 . 2001-08-17 18:51 58368 -c--a-w- c:\windows\system32\dllcache\smiminib.sys
2011-04-24 09:02 . 2001-08-17 19:53 6912 -c--a-w- c:\windows\system32\dllcache\seaddsmc.sys
2011-04-24 09:01 . 2004-08-03 21:00 6016 -c--a-w- c:\windows\system32\dllcache\qic157.sys
2011-04-24 09:00 . 2001-10-24 10:25 116736 -c--a-w- c:\windows\system32\dllcache\ovcodec2.dll
2011-04-24 08:59 . 2001-10-24 10:24 19968 -c--a-w- c:\windows\system32\dllcache\mxicfg.dll
2011-04-24 08:59 . 2001-10-24 10:01 22144 -c--a-w- c:\windows\system32\dllcache\mxcard.sys
2011-04-24 08:59 . 2001-08-17 18:50 103296 -c--a-w- c:\windows\system32\dllcache\mtxvideo.sys
2011-04-24 08:59 . 2004-08-03 21:10 49024 -c--a-w- c:\windows\system32\dllcache\mstape.sys
2011-04-24 08:59 . 2001-08-17 19:48 12416 -c--a-w- c:\windows\system32\dllcache\msriffwv.sys
2011-04-24 08:59 . 2004-08-03 21:00 22016 -c--a-w- c:\windows\system32\dllcache\msircomm.sys
2011-04-24 08:59 . 2001-08-17 20:02 35200 -c--a-w- c:\windows\system32\dllcache\msgame.sys
2011-04-24 08:59 . 2001-08-17 19:48 6016 -c--a-w- c:\windows\system32\dllcache\msfsio.sys
2011-04-24 08:59 . 2004-08-03 21:10 51328 -c--a-w- c:\windows\system32\dllcache\msdv.sys
2011-04-24 08:59 . 2001-08-17 19:52 17280 -c--a-w- c:\windows\system32\dllcache\mraid35x.sys
2011-04-24 08:59 . 2004-08-03 21:10 15360 -c--a-w- c:\windows\system32\dllcache\mpe.sys
2011-04-24 08:59 . 2001-10-24 09:54 12160 -c--a-w- c:\windows\system32\dllcache\mouhid.sys
2011-04-24 08:57 . 2001-08-23 13:00 9216 -c--a-w- c:\windows\system32\dllcache\kbdnecat.dll
2011-04-24 08:56 . 2001-08-23 13:00 57398 -c--a-w- c:\windows\system32\dllcache\imjpdadm.exe
2011-04-24 08:55 . 2001-10-24 10:24 19456 -c--a-w- c:\windows\system32\dllcache\hr1w.dll
2011-04-24 08:54 . 2001-08-17 18:15 455296 -c--a-w- c:\windows\system32\dllcache\fusbbase.sys
2011-04-24 08:53 . 2001-08-17 18:11 66591 -c--a-w- c:\windows\system32\dllcache\el90xbc5.sys
2011-04-24 08:52 . 2001-10-24 10:24 420381 -c--a-w- c:\windows\system32\dllcache\dgconfig.dll
2011-04-24 08:51 . 2001-10-24 10:24 170880 -c--a-w- c:\windows\system32\dllcache\cl546x.dll
2011-04-24 08:50 . 2001-10-24 09:49 13824 -c--a-w- c:\windows\system32\dllcache\bulltlp3.sys
2011-04-24 08:49 . 2001-10-24 10:24 144384 -c--a-w- c:\windows\system32\dllcache\avmenum.dll
2011-04-24 08:48 . 2001-08-17 20:07 101888 -c--a-w- c:\windows\system32\dllcache\adpu160m.sys
2011-04-24 08:47 . 2001-10-24 10:24 66048 -c--a-w- c:\windows\system32\dllcache\s3legacy.dll
2011-04-24 08:33 . 2009-08-06 17:24 327896 ----a-w- c:\windows\system32\wucltui.dll
2011-04-24 08:33 . 2009-08-06 17:24 209632 ----a-w- c:\windows\system32\wuweb.dll
2011-04-24 08:33 . 2004-08-17 13:49 6656 ----a-w- c:\windows\system32\wuauserv.dll
2011-04-24 08:33 . 2004-08-17 13:49 183296 ----a-w- c:\windows\system32\wuaueng1.dll
2011-04-24 08:33 . 2009-08-06 17:24 35552 ----a-w- c:\windows\system32\wups.dll
2011-04-24 08:33 . 2009-08-06 17:24 217816 ----a-w- c:\windows\system32\wuaucpl.cpl
2011-04-24 08:33 . 2009-08-06 17:23 1929952 ----a-w- c:\windows\system32\wuaueng.dll
2011-04-24 08:33 . 2004-08-17 13:49 166912 ----a-w- c:\windows\system32\wuauclt1.exe
2011-04-24 08:33 . 2009-08-06 17:24 53472 ----a-w- c:\windows\system32\wuauclt.exe
2011-04-24 08:33 . 2009-08-06 17:23 575704 ----a-w- c:\windows\system32\wuapi.dll
2011-04-24 08:33 . 2004-08-17 13:49 382464 ----a-w- c:\windows\system32\qmgr.dll
2011-04-24 08:12 . 2009-10-22 11:54 37392 ----a-w- c:\windows\system32\drivers\24548982.sys
2011-04-24 08:12 . 2009-10-09 21:31 315408 ----a-w- c:\windows\system32\drivers\2454898.sys
2011-04-24 08:12 . 2009-09-25 15:59 128016 ----a-w- c:\windows\system32\drivers\24548981.sys
2011-04-23 19:37 . 2011-04-23 19:37 -------- d-----w- c:\documents and settings\Administrator\Data aplikací\Avira
2011-04-23 18:15 . 2011-04-23 18:15 512 ----a-w- C:\PhysicalMBR.bin
2011-04-23 16:44 . 2011-03-04 14:11 137656 ----a-w- c:\windows\system32\drivers\avipbb.sys
2011-04-23 16:44 . 2011-03-04 12:37 61960 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2011-04-23 16:44 . 2010-06-17 12:27 45416 ----a-w- c:\windows\system32\drivers\avgntdd.sys
2011-04-23 16:44 . 2010-06-17 12:27 22360 ----a-w- c:\windows\system32\drivers\avgntmgr.sys
2011-04-23 16:44 . 2011-04-23 16:44 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Avira
2011-04-21 22:54 . 2011-04-22 10:08 -------- d-----w- c:\windows\system32\XPSViewer
2011-04-21 22:53 . 2011-04-21 22:53 -------- d-----w- c:\program files\MSBuild
2011-04-21 22:53 . 2011-04-21 22:53 -------- d-----w- c:\program files\Reference Assemblies
2011-04-21 22:50 . 2011-04-24 17:36 -------- d-----w- c:\documents and settings\Default User
2011-04-21 22:45 . 2011-04-21 22:45 -------- d-----w- c:\program files\MSXML 6.0
2011-04-21 07:06 . 2011-04-21 07:07 -------- d-----w- c:\program files\Codec Pack - All In 1
2011-04-21 07:06 . 2011-04-21 07:06 -------- d-----w- c:\windows\system32\languages
2011-04-20 20:51 . 2011-04-30 21:44 -------- d-----w- c:\program files\CCleaner
2011-04-20 08:57 . 2011-04-20 08:57 -------- d-sh--w- c:\windows\system32\config\systemprofile\IETldCache
2011-04-19 15:29 . 1999-11-14 13:41 86016 ----a-w- c:\windows\unvise32.exe
2011-04-18 18:06 . 2011-04-18 19:53 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Spybot - Search & Destroy
2011-04-18 05:48 . 2011-04-22 21:18 -------- d-----w- c:\windows\system32\CatRoot_bak
2011-04-17 21:31 . 2011-04-24 09:26 -------- d-----w- c:\documents and settings\All Users\Data aplikací\AVAST Software
2011-04-16 20:22 . 2011-04-25 15:58 -------- d-----w- c:\documents and settings\Administrator\Data aplikací\PCToolsFirewallPlus
2011-04-14 14:36 . 2010-02-12 10:03 293376 ----a-w- c:\windows\system32\browserchoice.exe
2011-04-14 14:05 . 2010-02-16 19:34 2018816 -c--a-w- c:\windows\system32\dllcache\ntkrpamp.exe
2011-04-14 14:04 . 2010-02-16 19:34 2139136 -c--a-w- c:\windows\system32\dllcache\ntkrnlmp.exe
2011-04-13 08:29 . 2011-04-13 20:22 -------- d-----w- c:\documents and settings\All Users\Data aplikací\_comodo_
2011-04-13 08:21 . 2011-04-13 08:21 249592 ----a-w- c:\windows\system32\cssdll32.dll
2011-04-13 04:36 . 2011-04-13 07:05 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Panda Security
2011-04-12 07:48 . 2011-04-12 07:48 -------- d-----w- c:\windows\system32\wbem\Repository
2011-04-12 07:44 . 2011-04-12 07:44 -------- d-----w- c:\program files\Windows Media Connect 2
2011-04-11 14:37 . 2011-04-11 14:37 -------- d-----w- c:\windows\MindSoft Utilities 2011
2011-04-10 07:33 . 2011-04-10 07:33 -------- d-----w- c:\program files\Defraggler
2011-04-10 05:21 . 2011-04-22 15:30 -------- d--h--w- c:\windows\$hf_mig$
2011-04-09 07:21 . 2011-04-24 11:18 -------- d-----w- c:\windows\system32\NtmsData
2011-04-09 05:25 . 2011-04-09 05:25 -------- d--h--w- c:\windows\system32\GroupPolicy
2011-04-09 04:46 . 2011-04-09 08:08 -------- d-----w- c:\windows\SxsCaPendDel
2011-04-08 11:34 . 2011-04-28 10:25 -------- d-----w- c:\documents and settings\NetworkService\Local Settings\Data aplikací\Google
2011-04-08 11:29 . 2011-04-28 10:18 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Data aplikací\Temp
2011-04-08 11:29 . 2011-04-28 11:50 -------- d-----w- c:\documents and settings\LocalService\Local Settings\Data aplikací\Google
2011-04-08 08:04 . 2006-08-01 13:02 49152 ----a-w- c:\windows\system32\ChCfg.exe
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-04-21 07:02 . 2010-09-17 18:18 737280 ----a-w- c:\windows\iun6002.exe
2011-04-05 21:11 . 2010-08-02 15:22 472808 ----a-w- c:\windows\system32\deployJava1.dll
2011-03-06 17:06 . 2011-03-06 16:46 43520 ----a-w- c:\windows\system32\CmdLineExt03.dll
2011-03-06 17:01 . 2010-09-26 23:31 717296 ----a-w- c:\windows\system32\drivers\sptd.sys
2011-02-26 13:06 . 2011-02-26 13:06 172032 ----a-w- c:\windows\system32\AniGIF.ocx
2011-03-18 18:05 . 2011-04-05 19:52 142296 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avast"="d:\avast\avastUI.exe" [2011-04-18 3460784]
"ZoneAlarm Client"="d:\program files\Zone Labs\ZoneAlarm\zlclient.exe" [2011-03-17 1043968]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2009-09-03 22:21 548352 ----a-w- d:\superantispywer\SASWINLO.DLL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"SoundMan"=SOUNDMAN.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\ZoneLabsFirewall]
"DisableMonitoring"=dword:00000001
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"c:\\WINDOWS\\system32\\ZoneLabs\\vsmon.exe"=
"c:\\WINDOWS\\system32\\sessmgr.exe"=
.
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [24.4.2011 14:59 441176]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [24.4.2011 14:59 307288]
R1 SASDIFSV;SASDIFSV;d:\superantispywer\sasdifsv.sys [17.2.2010 20:25 12872]
R1 SASKUTIL;SASKUTIL;d:\superantispywer\SASKUTIL.SYS [10.5.2010 20:41 67656]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [24.4.2011 14:59 19544]
R3 PAC207;Trust WB-1400T Webcam;c:\windows\system32\drivers\PFC027.SYS [14.5.2007 10:26 508288]
R3 S3SAVAGE4M;S3SAVAGE4M;c:\windows\system32\drivers\s3sav4m.sys [7.7.2008 18:00 77824]
S2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [24.4.2011 13:35 136176]
S3 gupdatem;Služba Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [24.4.2011 13:35 136176]
S3 pctNdis;PC Tools Firewall Intermediate Filter Service;c:\windows\system32\DRIVERS\pctNdis.sys --> c:\windows\system32\DRIVERS\pctNdis.sys [?]
S3 pctNdisMP;PC Tools Driver;c:\windows\system32\DRIVERS\pctNdis.sys --> c:\windows\system32\DRIVERS\pctNdis.sys [?]
.
Contents of the 'Scheduled Tasks' folder
.
2011-05-04 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-04-24 11:34]
.
2011-05-04 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-04-24 11:34]
.
2011-05-04 c:\windows\Tasks\PandaUSBVaccine.job
- e:\panda\Panda USB Vaccine\RunInteractiveWin.exe [2011-04-13 14:45]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://pobox.sk/
mWindow Title = Microsoft Internet Explorer
uInternet Connection Wizard,ShellNext = iexplore
DPF: DirectAnimation Java Classes
DPF: Microsoft XML Parser for Java
FF - ProfilePath - c:\documents and settings\Administrator\Data aplikací\Mozilla\Firefox\Profiles\sa3oy8yh.default\
FF - prefs.js: browser.startup.homepage - pobox.sk
FF - prefs.js: keyword.URL - hxxp://www.crawler.com/search/dispatcher.aspx? ... 60327&qkw=
FF - prefs.js: network.proxy.ftp - 127.0.0.1
FF - prefs.js: network.proxy.ftp_port - 3129
FF - prefs.js: network.proxy.http - 127.0.0.1
FF - prefs.js: network.proxy.http_port - 3129
FF - prefs.js: network.proxy.socks - 127.0.0.1
FF - prefs.js: network.proxy.socks_port - 3129
FF - prefs.js: network.proxy.ssl - 127.0.0.1
FF - prefs.js: network.proxy.ssl_port - 3129
FF - prefs.js: network.proxy.type - 4
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: nglayout.initialpaint.delay - 600
FF - user.js: content.notify.interval - 600000
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.switch.threshold - 600000
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-05-04 22:45
Windows 5.1.2600 Service Pack 2 NTFS
.
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
scanning hidden files ...
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_USERS\S-1-5-21-1957994488-1677128483-854245398-500\Software\Microsoft\Internet Explorer\User Preferences]
@Denied: (2) (Administrator)
"88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,57,fe,94,e8,f9,a9,65,49,b0,f4,f4,\
"2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,57,fe,94,e8,f9,a9,65,49,b0,f4,f4,\
"6256FFB019F8FDFBD36745B06F4540E9AEAF222A25"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,57,fe,94,e8,f9,a9,65,49,b0,f4,f4,\
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10p_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10p_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
--------------------- DLLs Loaded Under Running Processes ---------------------
.
- - - - - - - > 'winlogon.exe'(576)
d:\superantispywer\SASWINLO.DLL
.
- - - - - - - > 'explorer.exe'(1992)
c:\windows\system32\ieframe.dll
c:\windows\system32\msi.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Other Running Processes ------------------------
.
d:\avast\AvastSvc.exe
e:\panda\Panda USB Vaccine\USBVaccine.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\windows\system32\wscntfy.exe
.
**************************************************************************
.
Completion time: 2011-05-04 22:55:50 - machine was rebooted
ComboFix-quarantined-files.txt 2011-05-04 20:55
.
Pre-Run: 2 193 178 624
Post-Run: 2 185 895 936
.
Current=2 Default=2 Failed=7 LastKnownGood=3 Sets=1,2,3,4,5,7
- - End Of File - - CA488124AD375D999FD93D43652EB87D

Re: neviem co s tym,prosim pomozte

Napsal: 05 kvě 2011 06:50
od ringov
Neviete ako mozem tu branu vypnut?Lebo neda sa kliknut na ikonu moznosti internetu nareaguje.

Re: neviem co s tym,prosim pomozte

Napsal: 05 kvě 2011 07:47
od motji
Máte doma víc počítačů na stejné síti?
http://support.microsoft.com/kb/304040/cs

Re: neviem co s tym,prosim pomozte

Napsal: 05 kvě 2011 07:52
od ringov
Nemam doma viac pocitacov.