Vir?

[AAAtlantis]

Prominte ale nejde to sem blbej ... Musime se dohodnout na náký termín kdy by jste měla čas a zkusila to najit vy přes teamviewer 5 pls

[motji]

Není potřeba, to zvládneme

Tuto stránku znáte?
uStart Page = hxxp://giaitri.com/new/index.php


Pokud nemáte, přesuňte Combofix na plochu
-otevřete si Poznámkový blok
-Do něj zkopírujte text z tohoto okénka

Kód: Vybrat vše

File::
c:\windows\system32\GameMon.des
C:\Users\UIVATE~1\AppData\Local\Temp\~nsu.tmp\Au_.exe
C:\Users\UIVATE~1\AppData\Local\Temp\~nsu.tmp\Bu_.exe

Driver::
npggsvc

-uložte Vámi vytvořený TXT soubor jako CFScript.txt na plochu
-po uložení uchopte vámi vytvořený skript levým myšítkem a -přesuňte ho nad ikonu Combofixu, kde ho upustíte:




-po aplikaci na Vás vypadne další log,vložte ho sem

Upozornění : může se stát, že po aplikaci skriptu a restartu Windows nenaběhnou, v tom případě znovu restartujte a přitom mačkejte F8, pak zvolte Poslední známou funkční konfiguraci

[AAAtlantis]

Ano tu stránku znám ... Tu je log ze COMBOFIXU : ComboFix 10-06-18.03 - Uživatel 19.06.2010 8:27.3.2 - x86
Microsoft® Windows Vista™ Home Basic 6.0.6002.2.1250.420.1029.18.2037.1100 [GMT 2:00]
Spuštěný z: c:\users\Uživatel\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Uživatel\Desktop\CFScript.txt
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}

FILE ::
"c:\users\UIVATE~1\AppData\Local\Temp\~nsu.tmp\Au_.exe"
"c:\users\UIVATE~1\AppData\Local\Temp\~nsu.tmp\Bu_.exe"
"c:\windows\system32\GameMon.des"
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\system32\GameMon.des

.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Service_npggsvc


((((((((((((((((((((((((( Soubory vytvořené od 2010-05-19 do 2010-06-19 )))))))))))))))))))))))))))))))
.

2010-06-19 06:46 . 2010-06-19 06:46 -------- d-----w- c:\windows\system32\config\systemprofile\AppData\Local\temp
2010-06-19 06:46 . 2010-06-19 06:46 -------- d-----w- c:\users\U×ivatel\AppData\Local\temp
2010-06-19 06:46 . 2010-06-19 06:46 -------- d-----w- c:\users\Public\AppData\Local\temp
2010-06-19 06:46 . 2010-06-19 06:46 -------- d-----w- c:\users\Default\AppData\Local\temp
2010-06-17 13:46 . 2010-05-04 05:55 71680 ----a-w- c:\windows\system32\iesetup.dll
2010-06-17 13:46 . 2010-05-01 14:13 2037248 ----a-w- c:\windows\system32\win32k.sys
2010-06-16 13:15 . 2010-04-29 13:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-06-16 13:15 . 2010-06-16 13:15 -------- d-----w- c:\programdata\Malwarebytes
2010-06-16 13:15 . 2010-06-16 13:15 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-06-16 13:15 . 2010-04-29 13:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-06-16 12:43 . 2010-06-16 12:43 -------- d-----w- c:\program files\CCleaner
2010-06-15 15:39 . 2010-06-16 19:07 -------- d-----w- c:\program files\trend micro
2010-06-15 15:39 . 2010-06-15 15:41 -------- d-----w- C:\rsit
2010-06-13 11:53 . 2010-06-13 11:53 -------- d-----w- c:\program files\PremiumSoft
2010-06-13 10:58 . 2010-06-13 14:26 -------- d-----w- c:\programdata\Symantec
2010-06-13 10:58 . 2010-06-13 10:58 -------- d-----w- c:\programdata\Norton
2010-06-13 10:58 . 2010-06-13 10:58 -------- d-----w- c:\windows\system32\drivers\NSS
2010-06-13 10:58 . 2010-06-13 10:58 -------- d-----w- c:\program files\Norton Security Scan
2010-06-13 10:58 . 2010-06-13 10:58 -------- d-----w- c:\programdata\NortonInstaller
2010-06-13 10:58 . 2010-06-13 10:58 -------- d-----w- c:\program files\NortonInstaller
2010-06-13 10:00 . 2009-12-19 22:00 -------- d---a-w- C:\xampp
2010-06-13 09:20 . 2010-06-13 09:20 -------- d-----w- c:\program files\Sun
2010-06-13 07:57 . 2010-06-13 07:59 -------- d-----w- c:\windows\system32\Adobe
2010-06-08 16:08 . 2010-06-08 16:08 -------- d-----w- c:\programdata\FLEXnet
2010-06-08 15:59 . 2010-06-08 15:59 -------- d-----w- c:\program files\Bonjour
2010-06-08 15:41 . 2010-06-08 15:41 -------- d-----w- c:\program files\Common Files\Macrovision Shared
2010-06-08 14:43 . 2010-06-13 07:23 -------- d-----w- c:\program files\SindicateM2
2010-06-07 15:11 . 1998-10-29 14:45 306688 ----a-w- c:\windows\IsUninst.exe
2010-06-07 12:43 . 2010-06-07 13:04 -------- d-----w- c:\windows\048298C9A4D3490B9FF9AB023A9238F3.TMP
2010-06-07 12:26 . 2010-06-07 12:26 -------- d-----w- c:\program files\Common Files\Steam
2010-05-26 13:24 . 2010-04-23 14:13 2048 ----a-w- c:\windows\system32\tzres.dll
2010-05-25 14:53 . 2010-05-25 16:10 66178 ----a-w- c:\program files\Uninstall.exe
2010-05-25 14:33 . 2010-06-18 17:59 -------- d-----w- c:\program files\InfinityMU
2010-05-24 18:37 . 2010-05-24 18:37 -------- d-----w- c:\users\U×ivatel

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-06-18 08:30 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2010-06-17 13:26 . 2010-01-01 10:20 -------- d-----w- c:\program files\Google
2010-06-16 16:59 . 2007-06-07 10:09 611540 ----a-w- c:\windows\system32\perfh005.dat
2010-06-16 16:59 . 2007-06-07 10:09 119196 ----a-w- c:\windows\system32\perfc005.dat
2010-06-14 13:29 . 2009-02-03 14:33 -------- d-----w- c:\program files\ESET
2010-06-08 15:59 . 2009-01-13 12:57 -------- d-----w- c:\program files\Common Files\Adobe
2010-05-26 17:06 . 2010-06-17 13:47 34304 ----a-w- c:\windows\system32\atmlib.dll
2010-05-26 14:47 . 2010-06-17 13:47 289792 ----a-w- c:\windows\system32\atmfd.dll
2010-05-23 17:51 . 2010-02-13 17:39 -------- d-----w- c:\program files\Metin2_CZ
2010-05-21 12:14 . 2009-10-02 18:21 221568 ------w- c:\windows\system32\MpSigStub.exe
2010-05-09 18:29 . 2010-03-24 16:56 -------- d-----w- c:\program files\Softonic-Eng7
2010-05-06 20:59 . 2009-02-12 16:46 38848 ----a-w- c:\windows\system32\avastSS.scr
2010-05-06 20:59 . 2009-02-12 16:46 165032 ----a-w- c:\windows\system32\aswBoot.exe
2010-05-06 20:39 . 2009-02-12 16:46 46672 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2010-05-06 20:39 . 2009-02-12 16:46 164048 ----a-w- c:\windows\system32\drivers\aswSP.sys
2010-05-06 20:34 . 2009-02-12 16:46 23376 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2010-05-06 20:34 . 2009-02-12 16:46 51792 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2010-05-06 20:33 . 2009-02-12 16:46 19024 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2010-05-04 05:59 . 2010-06-17 13:47 916480 ----a-w- c:\windows\system32\wininet.dll
2010-05-04 05:55 . 2010-06-17 13:47 109056 ----a-w- c:\windows\system32\iesysprep.dll
2010-05-04 04:31 . 2010-06-17 13:47 133632 ----a-w- c:\windows\system32\ieUnatt.exe
2010-05-01 15:28 . 2010-05-01 14:54 -------- d-----w- c:\programdata\Blizzard Entertainment
2010-05-01 11:34 . 2009-04-18 06:48 -------- d-----w- c:\program files\Common Files\Blizzard Entertainment
2010-04-29 16:50 . 2010-04-01 15:15 -------- d-----w- c:\program files\Naruto Battle Arena MUGEN
2010-04-08 12:53 . 2010-04-08 12:53 25280 ----a-w- c:\windows\system32\drivers\hamachi.sys
2010-04-05 17:01 . 2010-06-17 13:47 67072 ----a-w- c:\windows\system32\asycfilt.dll
2010-04-03 15:55 . 2010-04-03 15:55 151 ----a-w- c:\windows\system32\check.bat
2010-03-30 17:16 . 2010-03-30 17:16 0 ----a-w- c:\windows\nsreg.dat
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}]
2010-05-09 18:29 2515552 ----a-w- c:\program files\Softonic-Eng7\tbSof1.dll

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{414B6D9D-4A95-4E8D-B5B1-149DD2D93BB3}"= "c:\program files\Softonic-Eng7\tbSof1.dll" [2010-05-09 2515552]

[HKEY_CLASSES_ROOT\clsid\{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1233920]
"WindowsWelcomeCenter"="oobefldr.dll" [2009-04-11 2153472]
"Messenger (Yahoo!)"="c:\program files\Yahoo!\Messenger\YahooMessenger.exe" [2009-05-26 4351216]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-18 1008184]
"RtHDVCpl"="RtHDVCpl.exe" [2008-04-17 4874240]
"CanonSolutionMenu"="c:\program files\Canon\SolutionMenu\CNSLMAIN.exe" [2007-05-14 644696]
"CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2007-04-03 1603152]
"OpwareSE4"="c:\program files\ScanSoft\OmniPageSE4\OpwareSE4.exe" [2007-02-04 79400]
"RemoteControl"="c:\program files\CyberLink\PowerDVD\PDVDServ.exe" [2004-11-02 32768]
"avast5"="c:\progra~1\ALWILS~1\Avast5\avastUI.exe" [2010-05-06 2815192]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2008-02-11 141848]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2008-02-11 166424]
"Persistence"="c:\windows\system32\igfxpers.exe" [2008-02-11 133656]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
WinZip Quick Pick.lnk - c:\program files\WinZip\WZQKPICK.EXE [2010-2-4 495432]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"VistaSp2"=hex(b):08,76,39,cd,17,2e,ca,01

R2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-04-02 135664]
R2 Hamachi2Svc;LogMeIn Hamachi 2.0 Tunneling Engine;c:\program files\LogMeIn Hamachi\hamachi-2.exe [x]
R3 LLRING0;LLRING0;c:\program files\InfinityMU\MuGuard\llck2.sys [2010-05-28 5120]
R3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter;c:\windows\system32\DRIVERS\VBoxNetAdp.sys [2009-12-17 99152]
S1 aswSP;aswSP; [x]
S1 VBoxDrv;VirtualBox Service;c:\windows\system32\DRIVERS\VBoxDrv.sys [2009-12-17 123280]
S1 VBoxUSBMon;VirtualBox USB Monitor Driver;c:\windows\system32\DRIVERS\VBoxUSBMon.sys [2009-12-17 41616]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2010-05-06 51792]
S2 TeamViewer5;TeamViewer 5;c:\program files\TeamViewer\Version5\TeamViewer_Service.exe [2010-03-18 172328]
S3 VBoxNetFlt;VBoxNetFlt Service;c:\windows\system32\DRIVERS\VBoxNetFlt.sys [2009-12-17 110096]


[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceNoNetwork REG_MULTI_SZ PLA DPS BFE mpssvc
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
Obsah adresáře 'Naplánované úlohy'

2010-03-12 c:\windows\Tasks\CreateChoiceProcessTask.job
- c:\windows\System32\browserchoice.exe [2010-03-12 10:32]

2010-06-19 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-04-02 11:12]

2010-06-19 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-04-02 11:12]

2010-06-18 c:\windows\Tasks\Norton Security Scan for Uživatel.job
- c:\program files\Norton Security Scan\Engine\2.7.3.34\Nss.exe [2010-06-13 14:31]

2010-06-19 c:\windows\Tasks\User_Feed_Synchronization-{7B9E18C4-C5EC-4FF3-8D2D-40E8B0370A8D}.job
- c:\windows\system32\msfeedssync.exe [2010-06-17 04:30]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://giaitri.com/new/index.php
uInternet Settings,ProxyOverride = *.local
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: WikiKomentáře Google... - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_2EC7709873947E87.dll/cmsidewiki.html
FF - ProfilePath - c:\users\Uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\mk6s8n54.default\
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("ui.use_native_colors", true);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
c:\program files\Mozilla Firefox\greprefs\all.js - pref("svg.smil.enabled", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-06-19 08:49
Windows 6.0.6002 Service Pack 2 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\Alwil Software\Avast5\AvastSvc.exe
c:\windows\RtHDVCpl.exe
c:\program files\Alwil Software\Avast5\AvastUI.exe
c:\windows\system32\conime.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\windows\system32\igfxsrvc.exe
c:\program files\Yahoo!\SoftwareUpdate\YahooAUService.exe
c:\windows\servicing\TrustedInstaller.exe
c:\program files\Windows Media Player\wmpnscfg.exe
c:\program files\Windows Media Player\wmpnetwk.exe
.
**************************************************************************
.
Celkový čas: 2010-06-19 08:58:47 - počítač byl restartován
ComboFix-quarantined-files.txt 2010-06-19 06:58
ComboFix2.txt 2010-06-18 13:10

Před spuštěním: Volných bajtů: 239 934 025 728
Po spuštění: Volných bajtů: 239 540 191 232

Current=1 Default=1 Failed=0 LastKnownGood=11 Sets=1,2,3,4,5,6,7,8,9,11
- - End Of File - - EFA87B5C2908A9402A061A03E85F6F9A

[motji]

Jak to vypadá s počítačem?

[AAAtlantis]

Všechno je v poho jen ty 2 klávesy pořád blbnou pod SHIFTEM je kalkulačka a pod ALTEM vypínám zvuk

[motji]

Odinstalujte combofix přes Start - Spustit
- zkopírujte do okénka:

ComboFix /Uninstall

-stiskněte Enter
-To odinstaluje ComboFix a smaže s ním související soubory a složky.


***********


Stáhněte T-Cleaner
http://sweb.cz/Marinus/T-Cleaner.exe

-Spusťte,pro potvrzení volby mačkejte klávesu A, Enter
-po použití prográmek vymažte.Pozor,antiviry ho mohou falešně označit za vir



***********


Z mého podpisu stahněte Ccleaner
- nainstalujte, při výběru, co se má nainstalovat, dejte pryč fajfku u instalace yahoo toolbaru

záložka čistič
- nechejte v levém sloupečku zatrhnuté vše jak je, klikněte na analyzovat
- po analýze klikněte na Spustit Ccleaner

záložka Registry
- klikněte na hledej problémy
- pak klikněte na opravit vybrané problémy -- udělat zálohu registrů - nemusíte
- kliknete opravit všechny problémy ok zavřít

Záložka Nástroje
- zde můžete odinstalovat programy. Je to důkladnější odinstalace než u přidat/odebrat programy ve Windows.

Ccleaner - čistič doporučuji používat, krásně pročistí pc od dočasných souborů.
Registry pročistí třeba po odinstalaci nějakého programu.


***********



Stahněte OTC a použijte
http://oldtimer.geekstogo.com/OTC.exe
-vyčistí tempy a po použitých programech



***********

Vložte nový log ze RSIT a řekněte co počítač, jak se chová, už je vše v pořádku?


Na ty klávesy se zeptám kolegů

[AAAtlantis]

Tu je log ze RSITU ... - jinak vše je v pořádku jen ty klávesy . .. Logfile of random's system information tool 1.07 (written by random/random)
Run by Uživatel at 2010-06-19 17:03:19
Microsoft® Windows Vista™ Home Basic Service Pack 2
System drive C: has 227 GB (74%) free of 305 GB
Total RAM: 2037 MB (54% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:03:28, on 19.6.2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18928)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
C:\Program Files\ScanSoft\OmniPageSE4\OpWareSE4.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Windows\system32\igfxsrvc.exe
C:\Windows\system32\taskeng.exe
C:\Windows\System32\mobsync.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\Users\Uživatel\Downloads\RSIT.exe
C:\Users\Uživatel\Downloads\RSIT.exe
C:\Program Files\trend micro\Uživatel.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://giaitri.com/new/index.php
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Softonic-Eng7 Toolbar - {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - C:\Program Files\Softonic-Eng7\tbSof1.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: SMTTB2009 - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - (no file)
O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn2\YTSingleInstance.dll
O3 - Toolbar: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe /logon
O4 - HKLM\..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon
O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe"
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - HKCU\..\Run: [Messenger (Yahoo!)] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: WikiKomentáře Google... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_2EC7709873947E87.dll/cmsidewiki.html
O9 - Extra button: (no name) - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program Files\ICQ6.5\ICQ.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LogMeIn Hamachi 2.0 Tunneling Engine (Hamachi2Svc) - Unknown owner - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: TeamViewer 5 (TeamViewer5) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe
O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe

--
End of file - 6625 bytes

======Scheduled tasks folder======

C:\Windows\tasks\CreateChoiceProcessTask.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\Norton Security Scan for Uživatel.job
C:\Windows\tasks\User_Feed_Synchronization-{7B9E18C4-C5EC-4FF3-8D2D-40E8B0370A8D}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
Skype add-on (mastermind) - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2009-08-04 1586472]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}]
Softonic-Eng7 Toolbar - C:\Program Files\Softonic-Eng7\tbSof1.dll [2010-05-09 2515552]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-11-19 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081}]
SingleInstance Class - C:\Program Files\Yahoo!\Companion\Installs\cpn2\YTSingleInstance.dll [2010-03-23 160056]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{EF99BD32-C1FB-11D2-892F-0090271D4F88}


[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-18 1008184]
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2008-04-17 4874240]
"CanonSolutionMenu"=C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe [2007-05-14 644696]
"CanonMyPrinter"=C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2007-04-03 1603152]
"OpwareSE4"=C:\Program Files\ScanSoft\OmniPageSE4\OpwareSE4.exe [2007-02-04 79400]
"RemoteControl"=C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [2004-11-02 32768]
"avast5"=C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe [2010-05-06 2815192]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2008-02-11 141848]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2008-02-11 166424]
"Persistence"=C:\Windows\system32\igfxpers.exe [2008-02-11 133656]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-04-11 1233920]
"WindowsWelcomeCenter"=oobefldr.dll,ShowWelcomeCenter []
"Messenger (Yahoo!)"=C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe [2009-05-26 4351216]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
WinZip Quick Pick.lnk - C:\Program Files\WinZip\WZQKPICK.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2008-02-11 204800]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"= []

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"EnableLUA"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Users\Uživatel\Downloads\IMAGE464-facebook.com.JPG.jpg.exe"="C:\Windows\infocard.exe:*:Enabled:Firewall Admin"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 months======

2010-06-19 16:59:20 ----D---- C:\rsit
2010-06-19 08:48:50 ----D---- C:\$RECYCLE.BIN
2010-06-18 15:10:52 ----D---- C:\Windows\temp
2010-06-17 15:47:53 ----A---- C:\Windows\system32\asycfilt.dll
2010-06-17 15:47:50 ----A---- C:\Windows\system32\atmfd.dll
2010-06-17 15:47:49 ----A---- C:\Windows\system32\atmlib.dll
2010-06-17 15:47:22 ----A---- C:\Windows\system32\mshtml.dll
2010-06-17 15:47:19 ----A---- C:\Windows\system32\ieframe.dll
2010-06-17 15:47:16 ----A---- C:\Windows\system32\iertutil.dll
2010-06-17 15:47:15 ----A---- C:\Windows\system32\urlmon.dll
2010-06-17 15:47:14 ----A---- C:\Windows\system32\wininet.dll
2010-06-17 15:47:13 ----A---- C:\Windows\system32\occache.dll
2010-06-17 15:47:13 ----A---- C:\Windows\system32\msfeeds.dll
2010-06-17 15:47:12 ----A---- C:\Windows\system32\mstime.dll
2010-06-17 15:47:12 ----A---- C:\Windows\system32\iedkcs32.dll
2010-06-17 15:47:10 ----A---- C:\Windows\system32\ieui.dll
2010-06-17 15:47:09 ----A---- C:\Windows\system32\msfeedsbs.dll
2010-06-17 15:47:09 ----A---- C:\Windows\system32\ieUnatt.exe
2010-06-17 15:47:09 ----A---- C:\Windows\system32\iesysprep.dll
2010-06-17 15:47:09 ----A---- C:\Windows\system32\iepeers.dll
2010-06-17 15:47:08 ----A---- C:\Windows\system32\jsproxy.dll
2010-06-17 15:46:59 ----A---- C:\Windows\system32\msfeedssync.exe
2010-06-17 15:46:59 ----A---- C:\Windows\system32\ie4uinit.exe
2010-06-17 15:46:58 ----A---- C:\Windows\system32\iesetup.dll
2010-06-17 15:46:58 ----A---- C:\Windows\system32\iernonce.dll
2010-06-16 15:15:51 ----D---- C:\Users\Uživatel\AppData\Roaming\Malwarebytes
2010-06-16 15:15:18 ----D---- C:\ProgramData\Malwarebytes
2010-06-16 15:15:17 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-06-16 14:43:35 ----D---- C:\Program Files\CCleaner
2010-06-15 17:39:57 ----D---- C:\Program Files\trend micro
2010-06-13 13:53:54 ----D---- C:\Program Files\PremiumSoft
2010-06-13 12:58:23 ----D---- C:\ProgramData\Symantec
2010-06-13 12:58:23 ----D---- C:\ProgramData\Norton
2010-06-13 12:58:23 ----D---- C:\Program Files\Norton Security Scan
2010-06-13 12:58:19 ----D---- C:\ProgramData\NortonInstaller
2010-06-13 12:58:19 ----D---- C:\Program Files\NortonInstaller
2010-06-13 12:00:05 ----AD---- C:\xampp
2010-06-13 11:20:44 ----D---- C:\Program Files\Sun
2010-06-13 09:57:16 ----D---- C:\Windows\system32\Adobe
2010-06-08 18:08:05 ----D---- C:\ProgramData\FLEXnet
2010-06-08 17:59:25 ----D---- C:\Program Files\Bonjour
2010-06-08 17:41:38 ----D---- C:\Program Files\Common Files\Macrovision Shared
2010-06-08 16:43:02 ----D---- C:\Program Files\SindicateM2
2010-06-07 17:11:51 ----A---- C:\Windows\IsUninst.exe
2010-06-07 14:43:36 ----D---- C:\Windows\048298C9A4D3490B9FF9AB023A9238F3.TMP
2010-06-07 14:26:22 ----D---- C:\Program Files\Common Files\Steam
2010-05-26 15:24:00 ----A---- C:\Windows\system32\tzres.dll
2010-05-25 16:53:44 ----A---- C:\Program Files\Uninstall.exe
2010-05-25 16:33:21 ----D---- C:\Program Files\InfinityMU
2010-05-20 19:59:37 ----D---- C:\Program Files\WinRAR

======List of files/folders modified in the last 1 months======

2010-06-19 17:02:18 ----D---- C:\Windows\Prefetch
2010-06-19 16:57:09 ----AD---- C:\Windows
2010-06-19 16:54:45 ----D---- C:\Users\Uživatel\AppData\Roaming\Skype
2010-06-19 16:51:45 ----D---- C:\Windows\Debug
2010-06-19 16:40:47 ----D---- C:\Windows\tracing
2010-06-19 16:05:27 ----D---- C:\Users\Uživatel\AppData\Roaming\skypePM
2010-06-19 11:13:01 ----SHD---- C:\System Volume Information
2010-06-19 08:58:52 ----D---- C:\Windows\system32\drivers
2010-06-19 08:49:14 ----A---- C:\Windows\system.ini
2010-06-19 08:47:03 ----D---- C:\Windows\system32\config
2010-06-19 08:47:03 ----D---- C:\Boot
2010-06-19 08:45:16 ----D---- C:\Windows\System32
2010-06-19 08:40:59 ----D---- C:\Windows\AppPatch
2010-06-19 08:40:56 ----D---- C:\Program Files\Common Files
2010-06-18 10:49:16 ----D---- C:\Windows\Microsoft.NET
2010-06-18 10:49:01 ----RSD---- C:\Windows\assembly
2010-06-18 10:45:09 ----D---- C:\Windows\winsxs
2010-06-18 10:34:45 ----D---- C:\Windows\system32\catroot
2010-06-18 10:30:44 ----D---- C:\Windows\system32\migration
2010-06-18 10:30:44 ----D---- C:\Program Files\Windows Mail
2010-06-18 10:30:44 ----D---- C:\Program Files\Internet Explorer
2010-06-18 10:05:25 ----D---- C:\Windows\system32\wbem
2010-06-17 19:15:23 ----D---- C:\Users\Uživatel\AppData\Roaming\Hamachi
2010-06-17 15:45:00 ----D---- C:\Windows\system32\catroot2
2010-06-17 15:30:51 ----D---- C:\ProgramData
2010-06-17 15:26:35 ----D---- C:\Program Files\Google
2010-06-17 03:50:08 ----SHD---- C:\Windows\Installer
2010-06-16 18:59:59 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-06-16 18:59:54 ----D---- C:\Windows\inf
2010-06-16 15:15:17 ----D---- C:\Program Files
2010-06-16 14:57:26 ----D---- C:\Windows\Minidump
2010-06-15 21:07:17 ----SD---- C:\Users\Uživatel\AppData\Roaming\Microsoft
2010-06-14 15:29:58 ----D---- C:\Program Files\ESET
2010-06-13 12:58:37 ----D---- C:\Windows\Tasks
2010-06-13 12:58:33 ----D---- C:\Windows\system32\Tasks
2010-06-13 09:58:43 ----D---- C:\Windows\system32\Macromed
2010-06-08 18:25:10 ----D---- C:\Program Files\Adobe
2010-06-08 18:10:11 ----D---- C:\Users\Uživatel\AppData\Roaming\Adobe
2010-06-08 18:01:22 ----D---- C:\ProgramData\Adobe
2010-06-08 17:59:17 ----D---- C:\Program Files\Common Files\Adobe
2010-06-08 17:53:56 ----RSD---- C:\Windows\Fonts
2010-05-28 21:37:34 ----A---- C:\Windows\system32\mrt.exe
2010-05-27 14:15:37 ----D---- C:\Windows\rescache
2010-05-27 14:05:40 ----D---- C:\Windows\system32\cs-CZ
2010-05-24 20:37:41 ----RD---- C:\Users
2010-05-23 19:51:26 ----D---- C:\Program Files\Metin2_CZ
2010-05-22 08:13:04 ----D---- C:\Program Files\Mozilla Firefox
2010-05-21 14:14:28 ----N---- C:\Windows\system32\MpSigStub.exe
2010-05-20 20:00:22 ----D---- C:\Users\Uživatel\AppData\Roaming\WinRAR

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys [2010-05-06 23376]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2010-05-06 164048]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2010-05-06 46672]
R1 ElbyCDIO;ElbyCDIO Driver; C:\Windows\System32\Drivers\ElbyCDIO.sys [2009-02-17 24232]
R1 VBoxDrv;VirtualBox Service; C:\Windows\system32\DRIVERS\VBoxDrv.sys [2009-12-17 123280]
R1 VBoxUSBMon;VirtualBox USB Monitor Driver; C:\Windows\system32\DRIVERS\VBoxUSBMon.sys [2009-12-17 41616]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2010-05-06 19024]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2010-05-06 51792]
R3 ElbyCDFL;ElbyCDFL; C:\Windows\System32\Drivers\ElbyCDFL.sys [2007-02-16 34760]
R3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2010-04-08 25280]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2008-02-11 2302976]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2008-04-17 2047576]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2008-04-17 118784]
R3 VBoxNetFlt;VBoxNetFlt Service; C:\Windows\system32\DRIVERS\VBoxNetFlt.sys [2009-12-17 110096]
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-18 5632]
S3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2006-11-02 235520]
S3 ialm;ialm; C:\Windows\system32\DRIVERS\igdkmd32.sys [2008-02-11 2302976]
S3 LLRING0;LLRING0; \??\C:\Program Files\InfinityMU\MuGuard\llck2.sys [2010-05-29 5120]
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-18 8192]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-18 5888]
S3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-18 5504]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-18 6016]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-18 35328]
S3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter; C:\Windows\system32\DRIVERS\VBoxNetAdp.sys [2009-12-17 99152]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-18 83328]
S4 WmiAcpi;Microsoft Windows Management Interface for ACPI; C:\Windows\system32\drivers\wmiacpi.sys [2006-11-02 11264]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-05-06 40384]
R2 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:\Program Files\Bonjour\mDNSResponder.exe [2006-02-28 229376]
R2 TeamViewer5;TeamViewer 5; C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe [2010-03-18 172328]
R2 YahooAUService;Yahoo! Updater; C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe [2008-11-09 602392]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-05-06 40384]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-05-06 40384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-04-02 135664]
S2 Hamachi2Svc;LogMeIn Hamachi 2.0 Tunneling Engine; C:\Program Files\LogMeIn Hamachi\hamachi-2.exe -s []
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-06-08 654848]
S3 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-18 21504]
S3 gusvc;Google Software Updater; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [2010-01-01 182768]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2008-12-22 104944]

-----------------EOF-----------------

[motji]

Otestujte na www.virustotal.com
C:\Users\Uživatel\Downloads\IMAGE464-facebook.com.JPG.jpg.exe
C:\Windows\infocard.exe
-Na virustotalu dáte procházet, a do spodního okénka nakopírujete přímo cestu k souboru a dáte odeslat
-z prohlížeče zkopírujete adresu ke stránce s výsledky
-pokud se Vás zeptá, dejte soubor otestovat znovu, tak aby to byl soubor z Vašeho počítače

[AAAtlantis]

Udělal sem to přesně jako na screenu ale napíše mi to vždy soubor nenalezen

[motji]

Můžu Vás ještě chviličku trápit? Jen pro ověření, zda tam nemáte jednu potvůrku.



Stáhněte SystemLook
http://jpshortstuff.247fixes.com/SystemLook.exe

- uložte ho na plochu a spustte.
- do okénka zkopírujte

Kód: Vybrat vše

:filefind
C:\Users\Uživatel\Downloads\IMAGE464-facebook.com.JPG.jpg.exe
C:\Windows\infocard.exe

- klikněte na Look, proběhne sken, na konci se zobrazí log, jehož obsah zkopírujete sem

[AAAtlantis]

SystemLook v1.0 by jpshortstuff (11.01.10)
Log created at 13:42 on 20/06/2010 by Uživatel (Administrator - Elevation successful)

========== filefind ==========

Searching for "C:\Users\Uživatel\Downloads\IMAGE464-facebook.com.JPG.jpg.exe"
No files found.

Searching for "C:\Windows\infocard.exe"
No files found.

-=End Of File=-

[motji]

Otevřete si Poznámkový blok a zkopírujte do něj text

Kód: Vybrat vše

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{EF99BD32-C1FB-11D2-892F-0090271D4F88}"=-
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"=-
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Users\Uživatel\Downloads\IMAGE464-facebook.com.JPG.jpg.exe"=-
 

-uložte jako (typ: všechny soubory) kde za název souboru zadáte "smazani.reg" bez uvozovek,
klikněte na uložit, pak na soubor standardně 2X klikněte a potvrďte dialogové okno.



Stahněte OTC a použijte
http://oldtimer.geekstogo.com/OTC.exe
-počítač se restartuje



S tou klávesnicí, pokud to není notebook, můžete na něm vyzkoušet jinou klávesnici?

[AAAtlantis]

Udělal jsem to ale problemy zustavaj , bohuzel nemůžem zkusit jinou klávesnici máme jen jednu

[motji]

Musíte tu klávesnici vyzkoušet, nemůžete si pujčit třeba od kamaráda? Nebo tu Vaši vyzkoušet v jiném pc?

[AAAtlantis]

Zkusím přemluvit kámoše jestli by mi ji nepujčil odpovím do týdne