VIRY.CZ

ani jsem ho neinstaloval, pri prvnim pouziti jsem ho zpoustel z falshky, takze odinstalace nemusi byt ne?

To je tak kdyz se neridite pokyny - hlavne ze jsem psal, ze ma byt CFko na plose

Odinstalaci preskocte a pokracujte dale

tak jsem všechno dokončil, PC se mi zrestartoval, ale po tom všem mi opět prohlížeče nejdou asi celé znovu že? mám začít s CF?

Po kterem kroku Vam prohlizece prestaly jit

Stahnete Malwarebytes' Anti-Malware (zkracene MBAM) (viz muj podpis)

• Provedte aktualizaci - treti zalozka
• Provedte uplny sken - nic nemazte
• MBAM miva obcas falesne detekce, proto vlozte log do prispevku a pockejte na posouzeni

zaclo to znovu po OCT, tady je ten protokol:

Malwarebytes' Anti-Malware 1.51.0.1200
www.malwarebytes.org

Verze databáze: 6774

Windows 6.1.7601 Service Pack 1
Internet Explorer 9.0.8112.16421

5.6.2011 16:34:01
mbam-log-2011-06-05 (16-33-53).txt

Typ: Úplná kontrola (C:\|F:\|)
Kontrolované objekty: 392670
Uplynulý čas: 58 minut, 9 sekund

Infikované procesy v paměti: 1
Infikované moduly v paměti: 0
Infikované klíče v registru: 1
Infikované hodnoty v registru: 0
Infikované datové položky v registru: 0
Infikované složky: 0
Infikované soubory: 2

Infikované procesy v paměti:
c:\Windows\kmservice.exe (RiskWare.Tool.CK) -> 2428 -> No action taken.

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče v registru:
HKEY_CURRENT_USER\SOFTWARE\D1T2EUR7FZ (Trojan.FakeAlert.SA) -> No action taken.

Infikované hodnoty v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky v registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
c:\Windows\kmservice.exe (RiskWare.Tool.CK) -> No action taken.
c:\qip infium jadrispack\qip infium jadrispack.exe (Trojan.Downloader) -> No action taken.

Polozky krome teto c:\qip infium jadrispack\qip infium jadrispack.exe smazte, restart PC a napiste stav PC

pořád stejné, skype jede ale prohlížeče ne

Prihlaste se do nouzoveho rezimu (restart PC, mackat F8, zvolit Stav nouze s praci v siti) a napiste, ci je chovani stejne i tam

v nouzovem rezimu prohlizece funguji

V normalni rezimu aplikujte WinSockFix http://www.spyware.cz/go.php?p=spyware&t=aplikace&id=22 - utilita resetuje protokol TCP/IP - pokud mate parametry pripojeni nastaveny rucne, bude treba je pak znovu zadat

píše mi to registry...import cosi not found, kdyz to odkliknu, pise: Repair Completed, restartoval jsem, ale ucinek zadny...

musím pryč, budu tu tak ve 20h

Ok, ja tu budu tak kolem devate...

Pripadne znovu spustte ComboFix a uvidime

tady je log:

ComboFix 11-06-04.02 - Roman 05.06.2011 20:59:34.5.2 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.420.1029.18.3000.1638 [GMT 2:00]
Spuštěný z: I:\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
FW: PC Tools Firewall Plus *Disabled* {175D0B73-9F8F-2CA9-8BF1-62277A276DC9}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-05-05 do 2011-06-05 )))))))))))))))))))))))))))))))
.
.
2011-06-05 19:14 . 2011-06-05 19:14 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-06-05 13:33 . 2011-06-05 13:33 -------- d-----w- c:\users\Roman\AppData\Roaming\Malwarebytes
2011-06-05 13:33 . 2011-05-29 07:11 39984 ----a-w- c:\windows\SysWow64\drivers\mbamswissarmy.sys
2011-06-05 13:33 . 2011-06-05 13:33 -------- d-----w- c:\programdata\Malwarebytes
2011-06-05 13:33 . 2011-06-05 13:33 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2011-06-05 13:33 . 2011-05-29 07:11 25912 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-06-05 12:38 . 2011-06-05 12:38 -------- d-----w- c:\program files (x86)\CCleaner
2011-06-05 08:11 . 2011-06-05 08:11 -------- d-----w- c:\program files\trend micro
2011-06-04 14:40 . 2011-06-04 14:40 -------- d-----w- c:\windows\system32\SPReview
2011-06-04 14:39 . 2011-06-04 14:39 -------- d-----w- c:\windows\system32\EventProviders
2011-06-04 14:22 . 2010-11-20 13:27 2314752 ----a-w- c:\windows\system32\tquery.dll
2011-06-04 14:21 . 2010-11-20 13:27 297984 ----a-w- c:\windows\system32\ws2_32.dll
2011-06-04 14:20 . 2010-11-20 13:33 78720 ----a-w- c:\windows\system32\drivers\HpSAMD.sys
2011-06-04 14:19 . 2010-11-20 13:27 2193920 ----a-w- c:\windows\system32\themecpl.dll
2011-06-04 14:18 . 2010-11-20 13:27 114688 ----a-w- c:\program files\Common Files\System\msadc\msadcf.dll
2011-06-04 14:17 . 2010-11-20 12:19 84480 ----a-w- c:\windows\SysWow64\mciavi32.dll
2011-06-04 14:16 . 2010-11-20 12:20 121344 ----a-w- c:\windows\SysWow64\sppc.dll
2011-06-04 14:15 . 2010-11-20 13:32 4608 ----a-w- c:\windows\system32\drivers\cs-CZ\kbdclass.sys.mui
2011-06-04 14:15 . 2010-11-20 13:31 3072 ----a-w- c:\windows\system32\drivers\cs-CZ\GAGP30KX.SYS.mui
2011-06-04 14:15 . 2010-11-20 12:21 189952 ----a-w- c:\windows\SysWow64\wdscore.dll
2011-06-04 14:15 . 2010-11-20 12:17 209920 ----a-w- c:\windows\SysWow64\PkgMgr.exe
2011-06-04 14:15 . 2010-11-20 12:18 323072 ----a-w- c:\windows\SysWow64\drvstore.dll
2011-06-04 14:15 . 2010-11-20 12:18 257024 ----a-w- c:\windows\SysWow64\dpx.dll
2011-06-04 14:14 . 2010-11-20 12:21 363008 ----a-w- c:\windows\SysWow64\wbemcomn.dll
2011-06-04 14:14 . 2010-11-20 12:19 606208 ----a-w- c:\windows\SysWow64\wbem\fastprox.dll
2011-06-04 14:10 . 2010-11-20 13:27 524288 ----a-w- c:\windows\system32\wmicmiplugin.dll
2011-06-04 14:10 . 2010-11-20 13:27 529408 ----a-w- c:\windows\system32\wbemcomn.dll
2011-06-04 14:10 . 2010-11-20 13:27 1225216 ----a-w- c:\windows\system32\wbem\wbemcore.dll
2011-06-04 14:09 . 2010-11-20 13:27 933376 ----a-w- c:\windows\system32\SmiEngine.dll
2011-06-04 14:09 . 2010-11-20 13:25 199168 ----a-w- c:\windows\system32\PkgMgr.exe
2011-06-04 14:08 . 2011-06-04 14:08 -------- d-----w- c:\users\Roman\AppData\Local\Roxio
2011-06-04 14:07 . 2010-11-20 13:26 422912 ----a-w- c:\windows\system32\drvstore.dll
2011-06-04 14:07 . 2010-11-20 13:26 399872 ----a-w- c:\windows\system32\dpx.dll
2011-06-04 13:50 . 2010-01-28 18:15 644608 ------w- c:\windows\system32\stapi64.dll
2011-06-04 13:49 . 2010-01-27 00:30 162816 ----a-w- c:\windows\system32\AESTAC64.dll
2011-06-04 13:49 . 2009-10-09 22:45 442368 ----a-w- c:\windows\system32\AESTEC64.dll
2011-06-04 13:49 . 2009-03-02 23:58 68608 ----a-w- c:\windows\system32\AESTAR64.dll
2011-06-04 13:49 . 2010-01-28 18:15 487424 ----a-w- c:\windows\sttray64.exe
2011-06-04 13:49 . 2010-01-28 18:15 3345408 ----a-w- c:\windows\system32\stlang64.dll
2011-06-04 13:49 . 2010-01-28 18:15 12574208 ----a-w- c:\windows\system32\idtcpl64.cpl
2011-06-04 13:49 . 2009-03-02 23:47 90624 ----a-w- c:\windows\system32\AESTCo64.dll
2011-06-04 13:48 . 2011-01-17 11:09 197120 ----a-w- c:\windows\system32\d3d10_1.dll
2011-06-04 13:48 . 2011-01-17 05:47 161792 ----a-w- c:\windows\SysWow64\d3d10_1.dll
2011-06-04 13:48 . 2010-01-28 18:15 209920 ----a-w- c:\windows\system32\staco64.dll
2011-06-04 13:48 . 2010-01-28 18:15 505856 ----a-w- c:\windows\system32\drivers\stwrt64.sys
2011-06-04 13:48 . 2010-01-28 18:15 431616 ----a-w- c:\windows\system32\stcplx64.dll
2011-06-04 13:48 . 2010-01-28 18:15 1472000 ----a-w- c:\windows\system32\stapo64.dll
2011-06-04 13:47 . 2011-06-04 13:50 -------- d-----w- c:\program files\IDT
2011-06-04 11:50 . 2011-05-09 22:00 8718160 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{6D485F22-1B57-4905-B58F-22745643E8E5}\mpengine.dll
2011-06-04 10:58 . 2011-06-04 10:58 -------- d-----w- c:\users\Roman\AppData\Local\ElevatedDiagnostics
2011-06-02 12:47 . 2011-06-04 11:24 -------- d-----w- C:\QIP Infium JadrisPack
2011-05-29 08:59 . 2011-05-29 08:59 -------- d-----w- c:\program files (x86)\Common Files\Skype
2011-05-29 08:54 . 2011-05-29 08:59 -------- d-----r- c:\program files (x86)\Skype
2011-05-27 14:29 . 2011-05-27 14:29 -------- d-----w- c:\program files (x86)\Team17
2011-05-27 14:22 . 2011-05-27 14:22 -------- d-----w- c:\users\Roman\AppData\Roaming\DAEMON Tools
2011-05-25 12:41 . 2011-04-22 22:15 27520 ----a-w- c:\windows\system32\drivers\Diskdump.sys
2011-05-23 06:45 . 2011-05-23 06:45 159744 ----a-w- c:\program files (x86)\Internet Explorer\Plugins\npqtplugin7.dll
2011-05-23 06:45 . 2011-05-23 06:45 159744 ----a-w- c:\program files (x86)\Internet Explorer\Plugins\npqtplugin6.dll
2011-05-23 06:45 . 2011-05-23 06:45 159744 ----a-w- c:\program files (x86)\Internet Explorer\Plugins\npqtplugin5.dll
2011-05-23 06:45 . 2011-05-23 06:45 159744 ----a-w- c:\program files (x86)\Internet Explorer\Plugins\npqtplugin4.dll
2011-05-23 06:45 . 2011-05-23 06:45 159744 ----a-w- c:\program files (x86)\Internet Explorer\Plugins\npqtplugin3.dll
2011-05-23 06:45 . 2011-05-23 06:45 159744 ----a-w- c:\program files (x86)\Internet Explorer\Plugins\npqtplugin2.dll
2011-05-23 06:45 . 2011-05-23 06:45 159744 ----a-w- c:\program files (x86)\Internet Explorer\Plugins\npqtplugin.dll
2011-05-23 06:45 . 2011-05-23 06:45 -------- d-----w- c:\program files (x86)\QuickTime
2011-05-23 06:45 . 2011-05-23 06:45 -------- d-----w- c:\programdata\Apple Computer
2011-05-22 21:59 . 2011-05-22 21:59 -------- d-----w- c:\program files (x86)\Common Files\Adobe Systems Shared
2011-05-22 21:57 . 2011-05-22 22:01 -------- d-----w- c:\program files (x86)\Common Files\Adobe
2011-05-21 08:31 . 2011-05-21 08:28 8192 ----a-w- c:\windows\SysWow64\srvany.exe
2011-05-16 07:01 . 2011-05-16 07:01 -------- d-----w- c:\program files (x86)\MSXML 4.0
2011-05-14 21:40 . 2011-05-14 21:42 -------- d-----w- c:\users\Roman\AppData\Roaming\Rajce
2011-05-14 21:40 . 2011-05-14 21:40 -------- d-----w- c:\users\Roman\AppData\Local\RajcePicasaPlugin
2011-05-14 20:47 . 2004-03-29 15:23 90112 ----a-w- c:\windows\unvise32.exe
2011-05-14 20:47 . 2011-05-14 20:47 -------- d-----w- c:\program files (x86)\LooksBuilderSE
2011-05-14 20:27 . 2011-05-15 14:24 -------- d-----w- c:\users\Roman\AppData\Local\Pinnacle
2011-05-14 20:27 . 2011-05-14 20:27 -------- d-----w- c:\programdata\Pinnacle Studio Ultimate Collection
2011-05-14 20:21 . 2011-05-14 20:21 -------- d-----w- c:\program files (x86)\Common Files\Yahoo!
2011-05-14 20:21 . 2011-05-14 20:21 -------- d-----w- c:\program files (x86)\Common Files\Pegasus Imaging
2011-05-14 20:21 . 2011-05-14 20:21 -------- d-----w- c:\programdata\Studio 14
2011-05-14 20:21 . 2011-05-14 20:21 -------- d-----w- c:\programdata\Pinnacle Studio Plus
2011-05-14 19:23 . 2011-05-14 20:47 -------- d-----w- c:\program files (x86)\Pinnacle
2011-05-14 19:23 . 2011-05-14 19:23 -------- d-----w- c:\program files (x86)\Common Files\Pinnacle
2011-05-14 19:23 . 2011-05-14 19:23 -------- d-----w- c:\users\Roman\AppData\Local\Downloaded Installations
2011-05-13 08:54 . 2011-04-09 06:58 142336 ----a-w- c:\windows\system32\poqexec.exe
2011-05-13 08:54 . 2011-04-09 05:56 123904 ----a-w- c:\windows\SysWow64\poqexec.exe
2011-05-11 21:28 . 2011-04-09 07:02 5562240 ----a-w- c:\windows\system32\ntoskrnl.exe
2011-05-11 21:27 . 2011-04-09 06:02 3967872 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2011-05-11 21:27 . 2011-04-09 06:02 3912576 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2011-05-11 21:27 . 2011-03-25 03:29 343040 ----a-w- c:\windows\system32\drivers\usbhub.sys
2011-05-11 21:27 . 2011-03-25 03:29 98816 ----a-w- c:\windows\system32\drivers\usbccgp.sys
2011-05-11 21:27 . 2011-03-25 03:29 325120 ----a-w- c:\windows\system32\drivers\usbport.sys
2011-05-11 21:27 . 2011-03-25 03:29 52736 ----a-w- c:\windows\system32\drivers\usbehci.sys
2011-05-11 21:27 . 2011-03-25 03:29 25600 ----a-w- c:\windows\system32\drivers\usbohci.sys
2011-05-11 21:27 . 2011-03-25 03:29 30720 ----a-w- c:\windows\system32\drivers\usbuhci.sys
2011-05-11 21:27 . 2011-03-25 03:28 7936 ----a-w- c:\windows\system32\drivers\usbd.sys
2011-05-10 11:43 . 2011-05-10 11:43 -------- d-----w- c:\users\Roman\AppData\Roaming\QipGuard
2011-05-10 11:43 . 2011-05-17 16:36 -------- d-----w- c:\program files (x86)\QIP Infium
2011-05-09 14:35 . 2011-05-09 14:35 -------- d-----w- c:\program files\CCleaner
2011-05-08 11:26 . 2011-05-29 09:52 484160 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight-2\SpotlightResources.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-06-04 20:58 . 2011-06-04 20:58 203776 ----a-w- c:\windows\SysWow64\webcheck.dll
2011-06-04 20:58 . 2011-06-04 20:58 249344 ----a-w- c:\windows\system32\webcheck.dll
2011-06-04 14:51 . 2009-07-14 02:36 152576 ----a-w- c:\windows\SysWow64\msclmd.dll
2011-06-04 14:51 . 2009-07-14 02:36 175616 ----a-w- c:\windows\system32\msclmd.dll
2011-06-04 09:09 . 2011-04-17 17:13 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\Markup.dll
2011-06-04 09:09 . 2011-04-14 18:27 484160 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2011-06-02 10:24 . 2011-04-14 18:27 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\Markup.dll
2011-05-27 15:28 . 2011-04-23 09:30 868848 ----a-w- c:\windows\system32\drivers\sptd.sys
2011-05-10 12:10 . 2011-04-14 17:42 40112 ----a-w- c:\windows\avastSS.scr
2011-05-10 12:10 . 2011-04-14 17:42 199304 ----a-w- c:\windows\SysWow64\aswBoot.exe
2011-05-10 12:10 . 2011-04-14 17:42 253888 ----a-w- c:\windows\system32\aswBoot.exe
2011-05-10 12:04 . 2011-04-14 17:42 600920 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2011-05-10 12:04 . 2011-04-14 17:42 287576 ----a-w- c:\windows\system32\drivers\aswSP.sys
2011-05-10 12:02 . 2011-04-14 17:42 53592 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2011-05-10 11:59 . 2011-04-14 17:42 31064 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2011-05-10 11:59 . 2011-04-14 17:42 64344 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2011-05-10 11:59 . 2011-04-14 17:42 22360 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2011-04-26 16:27 . 2011-04-26 16:27 472808 ----a-w- c:\windows\SysWow64\deployJava1.dll
2011-04-22 21:21 . 2011-04-22 21:28 737280 ----a-w- c:\windows\iun6002.exe
2011-04-17 19:24 . 2011-04-17 19:24 1060864 ----a-w- c:\windows\SysWow64\mfc71.dll
2011-04-17 19:24 . 2011-04-17 19:24 348160 ----a-w- c:\windows\SysWow64\msvcr71.dll
2011-04-17 19:24 . 2011-04-17 19:24 1700352 ----a-w- c:\windows\SysWow64\gdiplus.dll
2011-04-13 22:40 . 2011-04-13 22:40 4284416 ----a-w- c:\windows\SysWow64\GPhotos.scr
2011-03-21 11:22 . 2011-03-21 11:22 74272 ----a-w- c:\windows\system32\RtNicProp64.dll
2011-03-21 11:22 . 2011-03-21 11:22 452200 ----a-w- c:\windows\system32\drivers\Rt64win7.sys
2011-03-21 11:22 . 2010-09-09 22:01 107552 ----a-w- c:\windows\system32\RTNUninst64.dll
2011-03-12 12:08 . 2011-04-27 10:47 1465344 ----a-w- c:\windows\system32\XpsPrint.dll
2011-03-12 11:23 . 2011-04-27 10:47 870912 ----a-w- c:\windows\SysWow64\XpsPrint.dll
2011-03-11 06:41 . 2011-04-27 10:47 189824 ----a-w- c:\windows\system32\drivers\storport.sys
2011-03-11 06:41 . 2011-04-27 10:47 1659776 ----a-w- c:\windows\system32\drivers\ntfs.sys
2011-03-11 06:41 . 2011-04-27 10:47 166272 ----a-w- c:\windows\system32\drivers\nvstor.sys
2011-03-11 06:41 . 2011-04-27 10:47 148352 ----a-w- c:\windows\system32\drivers\nvraid.sys
2011-03-11 06:41 . 2011-04-27 10:47 410496 ----a-w- c:\windows\system32\drivers\iaStorV.sys
2011-03-11 06:41 . 2011-04-27 10:47 27008 ----a-w- c:\windows\system32\drivers\amdxata.sys
2011-03-11 06:41 . 2011-04-27 10:47 107904 ----a-w- c:\windows\system32\drivers\amdsata.sys
2011-03-11 06:34 . 2011-04-15 11:20 1359872 ----a-w- c:\windows\system32\mfc42u.dll
2011-03-11 06:34 . 2011-04-15 11:20 1395712 ----a-w- c:\windows\system32\mfc42.dll
2011-03-11 06:33 . 2011-04-27 10:47 2565632 ----a-w- c:\windows\system32\esent.dll
2011-03-11 06:30 . 2011-04-27 10:47 96768 ----a-w- c:\windows\system32\fsutil.exe
2011-03-11 05:33 . 2011-04-15 11:20 1137664 ----a-w- c:\windows\SysWow64\mfc42.dll
2011-03-11 05:33 . 2011-04-15 11:20 1164288 ----a-w- c:\windows\SysWow64\mfc42u.dll
2011-03-11 05:33 . 2011-04-27 10:47 1699328 ----a-w- c:\windows\SysWow64\esent.dll
2011-03-11 05:31 . 2011-04-27 10:47 74240 ----a-w- c:\windows\SysWow64\fsutil.exe
2011-03-08 06:29 . 2011-04-15 11:17 976896 ----a-w- c:\windows\system32\inetcomm.dll
2011-03-08 05:28 . 2011-04-15 11:17 741376 ----a-w- c:\windows\SysWow64\inetcomm.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LightScribe Control Panel"="c:\program files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe" [2010-01-22 2363392]
"TiVme Agent"="c:\program files (x86)\GIGABYTE\vivoTV\ScheduleAgent.exe" [2010-01-25 114688]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
"QIP Internet Guardian"="c:\users\Roman\AppData\Roaming\QipGuard\QipGuard.exe" [2011-04-25 191360]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2011-05-26 15147400]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"QLBController"="c:\program files (x86)\Hewlett-Packard\HP HotKey Support\QLBController.exe" [2010-03-01 256056]
"PDF Complete"="c:\program files (x86)\PDF Complete\pdfsty.exe" [2010-01-12 563736]
"WirelessAssistant"="c:\program files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2009-09-01 499768]
"NortonOnlineBackup"="c:\program files (x86)\Symantec\Norton Online Backup\NOBuClient.exe" [2010-05-03 1110360]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2011-05-10 3459712]
"00PCTFW"="c:\program files (x86)\PC Tools Firewall Plus\FirewallGUI.exe" [2009-08-27 2971608]
"BCSSync"="c:\program files (x86)\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 91520]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2010-11-29 421888]
"Malwarebytes' Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2011-05-29 449584]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Remote Control.lnk - c:\program files (x86)\GIGABYTE\U7300 Utilities\CONRCtl.exe [2011-4-14 94208]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
R0 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R3 BTMCOM;Bluetooth Serial Port;c:\windows\system32\Drivers\btmcom.sys [x]
R3 BTMUSB;Motorola Bluetooth Radio Service;c:\windows\system32\Drivers\btmusb.sys [x]
R3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files (x86)\Microsoft Office\Office14\GROOVE.EXE [2010-03-25 30969208]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
R3 RTL2832UBDA;REALTEK 2832U BDA Driver;c:\windows\system32\drivers\RTL2832UBDA.sys [x]
R3 RTL2832UUSB;REALTEK 2832U USB Driver;c:\windows\system32\Drivers\RTL2832UUSB.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S1 pctgntdi;pctgntdi;c:\windows\system32\drivers\pctgntdi64.sys [x]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 AESTFilters;Andrea ST Filters Service;c:\windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_21dba265e7e67cda\AESTSr64.exe [2009-03-03 89600]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [x]
S2 Bluetooth OBEX Service;Bluetooth OBEX Service;c:\program files\Motorola\Bluetooth\obexsrv.exe [2010-05-20 677128]
S2 HPDrvMntSvc.exe;HP Quick Synchronization Service;c:\program files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [2010-10-14 92216]
S2 hpHotkeyMonitor;HP Hotkey Monitor;c:\program files (x86)\Hewlett-Packard\HP HotKey Support\hpHotkeyMonitor.exe [2010-03-01 264248]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2011-05-29 366640]
S2 NOBU;Norton Online Backup;c:\program files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe service [x]
S2 pdfcDispatcher;PDF Document Manager;c:\program files (x86)\PDF Complete\pdfsvc.exe [2010-01-12 635416]
S3 Bluetooth Device Manager;Bluetooth Device Manager;c:\program files\Motorola\Bluetooth\devmgrsrv.exe [2010-06-29 4181256]
S3 Bluetooth Media Service;Bluetooth Media Service;c:\program files\Motorola\Bluetooth\audiosrv.exe [2010-05-20 1096968]
S3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2010-09-29 1028096]
S3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI;c:\windows\system32\drivers\IntcHdmi.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]
S3 netr28x;Ralink 802.11n Extensible Wireless Driver;c:\windows\system32\DRIVERS\netr28x.sys [x]
S3 PCTFW-DNS;PCTools Firewall - DNS driver;c:\windows\system32\drivers\pctNdis-DNS64.sys [x]
S3 PCTFW-PacketFilter;PCTools Firewall - Packet filter driver;c:\windows\system32\drivers\pctNdis-PacketFilter64.sys [x]
S3 pctNDIS;PC Tools Driver;c:\windows\system32\DRIVERS\pctNdis64.sys [x]
S3 pctplfw;pctplfw;c:\windows\System32\drivers\pctplfw64.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2010-01-22 18:06 451872 ----a-w- c:\program files (x86)\Common Files\LightScribe\LSRunOnce.exe
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-05-10 12:10 134384 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IAAnotif"="c:\program files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2010-01-08 186904]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-03-25 166424]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-03-25 390680]
"Persistence"="c:\windows\system32\igfxpers.exe" [2010-03-25 410136]
"BTMTrayAgent"="c:\program files\Motorola\Bluetooth\btmshell.dll" [2010-06-10 24783624]
"SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2010-01-28 487424]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
uSearchAssistant = hxxp://search.qip.ru/ie
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~1\Office14\EXCEL.EXE/3000
IE: Od&eslat do aplikace OneNote - c:\progra~2\MICROS~1\Office14\ONBttnIE.dll/105
IE: {{bd707fe6-39f6-4bda-9265-86a76719bdc5} - c:\program files\Motorola\Bluetooth\btmiesend.htm
TCP: DhcpNameServer = 10.0.0.138
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\pdfcDispatcher]
"ImagePath"="c:\program files (x86)\PDF Complete\pdfsvc.exe /startedbyscm:66B66708-40E2BE4D-pdfcService"
.
Celkový čas: 2011-06-05 21:39:25
ComboFix-quarantined-files.txt 2011-06-05 19:39
.
Před spuštěním: Volných bajtů: 264 260 841 472
Po spuštění: Volných bajtů: 263 958 425 600
.
- - End Of File - - F2F65CF95B3172E879CB7CC659D2A006

Log vypada cistny, nejaka zmena