VIRY.CZ

Zkusila jsem instalaci výše doporučovaného programu staženého na jiném počítači. Polovina souborů v balíčku hlásí "aktualizace se vašeho počítače netýká", druhá polovina hlásís tejný problém jako vždy "název souboru, adresa nebo jmenovka svazku je nesprávná"...

Udělejte sken GMER: http://forum.viry.cz/viewtopic.php?f=29&t=62878 a dejte oba logy.

GMER 1.0.15.15641 - http://www.gmer.net
Rootkit quick scan 2012-09-06 07:54:29
Windows 6.0.6001 Service Pack 1 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 Hitachi_HTS543216L9A300 rev.FB2OC40J
Running: gmer.exe; Driver: C:\Users\KAENKA~1\AppData\Local\Temp\afliafow.sys


---- Devices - GMER 1.0.15 ----

AttachedDevice \FileSystem\fastfat \Fat fltmgr.sys (Microsoft Filesystem Filter Manager/Spole?nost Microsoft)
AttachedDevice \Driver\tdx \Device\Tcp mfetdik.sys (Anti-Virus Mini-Firewall Driver/McAfee, Inc.)
AttachedDevice \Driver\tdx \Device\Udp mfetdik.sys (Anti-Virus Mini-Firewall Driver/McAfee, Inc.)
AttachedDevice \Driver\kbdclass \Device\KeyboardClass0 Wdf01000.sys (WDF Dynamic/Microsoft Corporation)
AttachedDevice \Driver\kbdclass \Device\KeyboardClass1 Wdf01000.sys (WDF Dynamic/Microsoft Corporation)

---- EOF - GMER 1.0.15 ----









GMER 1.0.15.15641 - http://www.gmer.net
Rootkit scan 2012-09-06 19:42:43
Windows 6.0.6001 Service Pack 1 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-0 Hitachi_HTS543216L9A300 rev.FB2OC40J
Running: gmer.exe; Driver: C:\Users\KAENKA~1\AppData\Local\Temp\afliafow.sys


---- Kernel code sections - GMER 1.0.15 ----

.text C:\windows\system32\DRIVERS\atikmdag.sys section is writeable [0x9CC0F000, 0x251858, 0xE8000020]

---- User code sections - GMER 1.0.15 ----

.text C:\Program Files\Mozilla Firefox\plugin-container.exe[2132] USER32.dll!GetWindowInfo 769D0560 5 Bytes JMP 6455F66F C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text C:\Program Files\Mozilla Firefox\plugin-container.exe[2132] USER32.dll!IsZoomed + 80 769D0731 7 Bytes JMP 64718F94 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text C:\Program Files\Mozilla Firefox\plugin-container.exe[2132] USER32.dll!AdjustWindowRectEx + 76 769D1F30 7 Bytes JMP 64718F23 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text C:\Program Files\Mozilla Firefox\plugin-container.exe[2132] USER32.dll!CheckMenuRadioItem + 12E 769E1412 7 Bytes JMP 6455FCA8 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe[2276] kernel32.dll!SetUnhandledExceptionFilter 77A6700D 4 Bytes [C2, 04, 00, 00]
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] ntdll.dll!NtCreateFile + 6 77967C7E 4 Bytes [28, 00, 06, 00]
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] ntdll.dll!NtCreateFile + B 77967C83 1 Byte [E2]
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] ntdll.dll!NtCreateKey + 6 77967CBE 4 Bytes [68, 01, 06, 00]
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] ntdll.dll!NtCreateKey + B 77967CC3 1 Byte [E2]
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] ntdll.dll!NtCreateMutant + 6 77967CEE 4 Bytes [28, 02, 06, 00]
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] ntdll.dll!NtCreateMutant + B 77967CF3 1 Byte [E2]
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] ntdll.dll!NtCreateSection + 6 77967D6E 4 Bytes [68, 02, 06, 00]
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] ntdll.dll!NtCreateSection + B 77967D73 1 Byte [E2]
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] ntdll.dll!NtMapViewOfSection + 6 779683CE 4 Bytes [A8, 04, 06, 00]
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] ntdll.dll!NtMapViewOfSection + B 779683D3 1 Byte [E2]
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] ntdll.dll!NtOpenFile + 6 7796845E 4 Bytes [68, 00, 06, 00]
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] ntdll.dll!NtOpenFile + B 77968463 1 Byte [E2]
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] ntdll.dll!NtOpenKey + 6 7796848E 4 Bytes [A8, 01, 06, 00]
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] ntdll.dll!NtOpenKey + B 77968493 1 Byte [E2]
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] ntdll.dll!NtOpenMutant + B 779684B3 1 Byte [E2]
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] ntdll.dll!NtOpenProcess + 6 779684DE 1 Byte [28]
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] ntdll.dll!NtOpenProcess + 6 779684DE 4 Bytes [28, 03, 06, 00]
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] ntdll.dll!NtOpenProcess + B 779684E3 1 Byte [E2]
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] ntdll.dll!NtOpenProcessToken + 6 779684EE 1 Byte [68]
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] ntdll.dll!NtOpenProcessToken + 6 779684EE 4 Bytes [68, 03, 06, 00]
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] ntdll.dll!NtOpenProcessToken + B 779684F3 1 Byte [E2]
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] ntdll.dll!NtOpenProcessTokenEx + 6 779684FE 4 Bytes [28, 04, 06, 00]
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] ntdll.dll!NtOpenProcessTokenEx + B 77968503 1 Byte [E2]
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] ntdll.dll!NtOpenSection + 6 7796850E 4 Bytes [A8, 02, 06, 00]
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] ntdll.dll!NtOpenSection + B 77968513 1 Byte [E2]
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] ntdll.dll!NtOpenThread + B 77968553 1 Byte [E2]
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] ntdll.dll!NtOpenThreadToken + 6 7796855E 1 Byte [E8]
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] ntdll.dll!NtOpenThreadToken + B 77968563 1 Byte [E2]
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] ntdll.dll!NtOpenThreadTokenEx + 6 7796856E 4 Bytes [68, 04, 06, 00]
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] ntdll.dll!NtOpenThreadTokenEx + B 77968573 1 Byte [E2]
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] ntdll.dll!NtQueryAttributesFile + 6 779685FE 4 Bytes [A8, 00, 06, 00]
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] ntdll.dll!NtQueryAttributesFile + B 77968603 1 Byte [E2]
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] ntdll.dll!NtQueryFullAttributesFile + B 779686B3 1 Byte [E2]
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] ntdll.dll!NtSetInformationFile + 6 77968B8E 4 Bytes [28, 01, 06, 00]
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] ntdll.dll!NtSetInformationFile + B 77968B93 1 Byte [E2]
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] ntdll.dll!NtSetInformationThread + 6 77968BDE 1 Byte [A8]
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] ntdll.dll!NtSetInformationThread + 6 77968BDE 4 Bytes [A8, 03, 06, 00]
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] ntdll.dll!NtSetInformationThread + B 77968BE3 1 Byte [E2]
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] ntdll.dll!NtUnmapViewOfSection + B 77968E83 1 Byte [E2]
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] kernel32.dll!CreateProcessW 77A41C01 5 Bytes JMP 000100B0
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] kernel32.dll!CreateProcessA 77A41C36 5 Bytes JMP 000100F0
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] kernel32.dll!OpenEventW 77A5C8AD 5 Bytes JMP 00010070
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] kernel32.dll!CreateEventW 77A8447A 5 Bytes JMP 00010030
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] GDI32.dll!GetDeviceCaps 77B25AF0 5 Bytes JMP 000803B0
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] GDI32.dll!DeleteObject 77B25BED 5 Bytes JMP 000801B0
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] GDI32.dll!SelectObject 77B26100 5 Bytes JMP 000805F0
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] GDI32.dll!SetTextColor 77B26549 5 Bytes JMP 00080A30
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] GDI32.dll!SetBkMode 77B265F4 5 Bytes JMP 000808F0
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] GDI32.dll!DeleteDC 77B26A44 5 Bytes JMP 00080170
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] GDI32.dll!SetStretchBltMode 77B26D78 5 Bytes JMP 000806B0
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] GDI32.dll!GetCurrentObject 77B26F4B 5 Bytes JMP 00080370
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] GDI32.dll!StretchDIBits 77B27442 5 Bytes JMP 00080770
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] GDI32.dll!SaveDC 77B2772D 5 Bytes JMP 00080570
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] GDI32.dll!RestoreDC 77B277C6 5 Bytes JMP 00080530
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] GDI32.dll!ExtSelectClipRgn 77B279DA 5 Bytes JMP 000802F0
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] GDI32.dll!SelectClipRgn 77B27AE5 5 Bytes JMP 000805B0
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] GDI32.dll!Rectangle 77B27D49 5 Bytes JMP 000809B0
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] GDI32.dll!GetTextAlign 77B28178 5 Bytes JMP 00080D70
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] GDI32.dll!ExtTextOutW 77B282B1 5 Bytes JMP 00080970
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] GDI32.dll!GetClipBox 77B28629 5 Bytes JMP 00080330
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] GDI32.dll!SetTextAlign 77B286EA 5 Bytes JMP 000809F0
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] GDI32.dll!MoveToEx 77B2878E 5 Bytes JMP 00080470
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] GDI32.dll!GetTextMetricsW 77B29434 5 Bytes JMP 00080E30
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] GDI32.dll!IntersectClipRect 77B29698 5 Bytes JMP 000803F0
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] GDI32.dll!SetICMMode 77B29DAB 5 Bytes JMP 00080DB0
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] GDI32.dll!GetTextExtentPoint32W 77B2A926 5 Bytes JMP 00080670
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] GDI32.dll!CreateDCA 77B2AC01 5 Bytes JMP 000800B0
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] GDI32.dll!CreateDCW 77B2ADA5 5 Bytes JMP 000800F0
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] GDI32.dll!CreateICW 77B2ADFD 5 Bytes JMP 00080130
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] GDI32.dll!GetTextFaceW 77B2C1CF 5 Bytes JMP 00080D30
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] GDI32.dll!GetFontData 77B2C835 5 Bytes JMP 00080C70
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] GDI32.dll!SetWorldTransform 77B2CAB8 5 Bytes JMP 000806F0
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] GDI32.dll!GetTextMetricsA 77B2D65F 5 Bytes JMP 00080DF0
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] GDI32.dll!LineTo 77B2EF82 5 Bytes JMP 00080430
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] GDI32.dll!ExtTextOutA 77B2FE29 5 Bytes JMP 00080930
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] GDI32.dll!GetTextExtentPoint32A 77B30B59 5 Bytes JMP 00080630
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] GDI32.dll!ExtEscape 77B3208D 5 Bytes JMP 000802B0
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] GDI32.dll!Escape 77B32A7B 5 Bytes JMP 00080270
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] GDI32.dll!ResetDCW 77B3321A 5 Bytes JMP 00080AB0
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] GDI32.dll!SetPolyFillMode 77B349EE 5 Bytes JMP 00080B30
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] GDI32.dll!SetMiterLimit 77B36298 5 Bytes JMP 00080B70
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] GDI32.dll!EndPage 77B3F173 5 Bytes JMP 00080230
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] GDI32.dll!GetTextFaceA 77B3F321 5 Bytes JMP 00080CF0
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] GDI32.dll!GetGlyphOutlineW 77B4A04F 5 Bytes JMP 00080CB0
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] GDI32.dll!CreateScalableFontResourceW 77B4C4BB 5 Bytes JMP 00080BB0
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] GDI32.dll!AddFontResourceW 77B4C8C3 5 Bytes JMP 00080BF0
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] GDI32.dll!RemoveFontResourceW 77B4CD59 5 Bytes JMP 00080C30
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] GDI32.dll!AbortDoc 77B52A4E 5 Bytes JMP 00080030
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] GDI32.dll!EndDoc 77B52E62 5 Bytes JMP 000801F0
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] GDI32.dll!StartPage 77B52F4D 5 Bytes JMP 00080730
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] GDI32.dll!StartDocW 77B53A31 5 Bytes JMP 000807F0
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] GDI32.dll!BeginPath 77B541ED 5 Bytes JMP 00080830
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] GDI32.dll!SelectClipPath 77B54244 5 Bytes JMP 00080AF0
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] GDI32.dll!CloseFigure 77B5429F 5 Bytes JMP 00080070
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] GDI32.dll!EndPath 77B542F6 5 Bytes JMP 00080A70
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] GDI32.dll!StrokePath 77B54528 5 Bytes JMP 000807B0
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] GDI32.dll!FillPath 77B545B4 5 Bytes JMP 00080870
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] GDI32.dll!PolylineTo 77B54A1D 5 Bytes JMP 000804F0
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] GDI32.dll!PolyBezierTo 77B54AAD 5 Bytes JMP 000804B0
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] GDI32.dll!PolyDraw 77B54B5E 5 Bytes JMP 000808B0
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] USER32.dll!SetCursor 769CE563 5 Bytes JMP 00090530
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] USER32.dll!RegisterClipboardFormatW 769CE869 5 Bytes JMP 000902B0
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] USER32.dll!MonitorFromWindow 769D13F6 7 Bytes JMP 00090630
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] USER32.dll!ActivateKeyboardLayout 769D5A50 5 Bytes JMP 000904F0
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] USER32.dll!GetClientRect 769D89F9 7 Bytes JMP 000905B0
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] USER32.dll!GetParent 769D918E 7 Bytes JMP 000906F0
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] USER32.dll!RegisterClipboardFormatA 769D974D 5 Bytes JMP 000902F0
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] USER32.dll!GetClipboardFormatNameA 769D9AB5 5 Bytes JMP 00090270
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] USER32.dll!PostMessageW 769DA064 5 Bytes JMP 000905F0
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] USER32.dll!MapWindowPoints 769DA14F 5 Bytes JMP 00090570
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] USER32.dll!ScreenToClient 769E0C02 7 Bytes JMP 00090670
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] USER32.dll!IsWindowVisible 769E0CDC 7 Bytes JMP 000906B0
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] USER32.dll!GetOpenClipboardWindow 769E26DC 5 Bytes JMP 000903F0
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] USER32.dll!SetClipboardViewer 769EBE37 5 Bytes JMP 000904B0
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] USER32.dll!IsClipboardFormatAvailable 769EC8D4 5 Bytes JMP 000900F0
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] USER32.dll!CloseClipboard 769EC8E8 5 Bytes JMP 000900B0
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] USER32.dll!OpenClipboard 769EC90E 5 Bytes JMP 00090070
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] USER32.dll!GetTopWindow 769ED329 7 Bytes JMP 00090730
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] USER32.dll!GetClipboardSequenceNumber 769EE355 5 Bytes JMP 00090330
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] USER32.dll!ChangeClipboardChain 769EE52F 5 Bytes JMP 00090430
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] USER32.dll!GetClipboardOwner 769F0A5E 5 Bytes JMP 00090370
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] USER32.dll!CountClipboardFormats 769F0E19 5 Bytes JMP 000901F0
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] USER32.dll!SetClipboardData 76A062F8 5 Bytes JMP 00090170
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] USER32.dll!EnumClipboardFormats 76A06C7E 5 Bytes JMP 000901B0
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] USER32.dll!SetCursorPos 76A06F1A 5 Bytes JMP 00090770
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] USER32.dll!GetClipboardData 76A070B2 5 Bytes JMP 00090030
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] USER32.dll!GetClipboardFormatNameW 76A0A93C 5 Bytes JMP 00090230
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] USER32.dll!EmptyClipboard 76A2390B 5 Bytes JMP 00090130
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] USER32.dll!GetClipboardViewer 76A2396D 5 Bytes JMP 00090470
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] USER32.dll!GetPriorityClipboardFormat 76A23A6F 5 Bytes JMP 000903B0
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] Secur32.dll!FreeContextBuffer 76012825 5 Bytes JMP 000B00F0
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] Secur32.dll!DeleteSecurityContext 76012ABF 5 Bytes JMP 000B0270
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] Secur32.dll!FreeCredentialsHandle 760131F5 5 Bytes JMP 000B0130
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] Secur32.dll!EncryptMessage 76014BDE 5 Bytes JMP 000B01F0
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] Secur32.dll!DecryptMessage 76014CAB 5 Bytes JMP 000B0230
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] Secur32.dll!InitializeSecurityContextA 76018233 5 Bytes JMP 000B0170
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] Secur32.dll!AcquireCredentialsHandleA 7601833B 5 Bytes JMP 000B0030
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] Secur32.dll!QueryContextAttributesA 76018747 5 Bytes JMP 000B0070
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] Secur32.dll!ApplyControlToken 7601DDB2 5 Bytes JMP 000B01B0
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] Secur32.dll!QueryCredentialsAttributesA 7601DFB5 5 Bytes JMP 000B00B0
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] ole32.dll!OleGetClipboard 76412AC1 5 Bytes JMP 000C00B0
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] ole32.dll!OleSetClipboard 7643EC7D 5 Bytes JMP 000C0030
.text C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] ole32.dll!OleIsCurrentClipboard 76448B31 5 Bytes JMP 000C0070
.text C:\Program Files\Mozilla Firefox\firefox.exe[5232] ntdll.dll!LdrLoadDll 779379B3 5 Bytes JMP 64406C40 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text C:\Program Files\Mozilla Firefox\firefox.exe[5232] kernel32.dll!HeapSetInformation + 26 77A67008 7 Bytes JMP 6440FE71 C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text C:\Program Files\Mozilla Firefox\firefox.exe[5232] kernel32.dll!LockResource + C 77A8813B 7 Bytes JMP 64642D9C C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text C:\Program Files\Mozilla Firefox\firefox.exe[5232] kernel32.dll!VirtualAllocEx + 54 77A8BA7A 7 Bytes JMP 64642DBF C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)
.text C:\Program Files\Mozilla Firefox\firefox.exe[5232] GDI32.dll!StretchDIBits + 179 77B275BB 7 Bytes JMP 64642D1D C:\Program Files\Mozilla Firefox\xul.dll (Mozilla Foundation)

---- User IAT/EAT - GMER 1.0.15 ----

IAT C:\windows\Explorer.EXE[2064] @ C:\windows\Explorer.EXE [gdiplus.dll!GdiplusShutdown] [746D8864] C:\windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18551_none_9e7a1850c9c1b3dc\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\windows\Explorer.EXE[2064] @ C:\windows\Explorer.EXE [gdiplus.dll!GdipCloneImage] [74719855] C:\windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18551_none_9e7a1850c9c1b3dc\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\windows\Explorer.EXE[2064] @ C:\windows\Explorer.EXE [gdiplus.dll!GdipDrawImageRectI] [746DB984] C:\windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18551_none_9e7a1850c9c1b3dc\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\windows\Explorer.EXE[2064] @ C:\windows\Explorer.EXE [gdiplus.dll!GdipSetInterpolationMode] [746CFB47] C:\windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18551_none_9e7a1850c9c1b3dc\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\windows\Explorer.EXE[2064] @ C:\windows\Explorer.EXE [gdiplus.dll!GdiplusStartup] [746D7A29] C:\windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18551_none_9e7a1850c9c1b3dc\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\windows\Explorer.EXE[2064] @ C:\windows\Explorer.EXE [gdiplus.dll!GdipCreateFromHDC] [746CEA65] C:\windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18551_none_9e7a1850c9c1b3dc\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\windows\Explorer.EXE[2064] @ C:\windows\Explorer.EXE [gdiplus.dll!GdipCreateBitmapFromStreamICM] [7470B12D] C:\windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18551_none_9e7a1850c9c1b3dc\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\windows\Explorer.EXE[2064] @ C:\windows\Explorer.EXE [gdiplus.dll!GdipCreateBitmapFromStream] [746DBC4A] C:\windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18551_none_9e7a1850c9c1b3dc\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\windows\Explorer.EXE[2064] @ C:\windows\Explorer.EXE [gdiplus.dll!GdipGetImageHeight] [746D0756] C:\windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18551_none_9e7a1850c9c1b3dc\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\windows\Explorer.EXE[2064] @ C:\windows\Explorer.EXE [gdiplus.dll!GdipGetImageWidth] [746D06BD] C:\windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18551_none_9e7a1850c9c1b3dc\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\windows\Explorer.EXE[2064] @ C:\windows\Explorer.EXE [gdiplus.dll!GdipDisposeImage] [746C71B3] C:\windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18551_none_9e7a1850c9c1b3dc\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\windows\Explorer.EXE[2064] @ C:\windows\Explorer.EXE [gdiplus.dll!GdipLoadImageFromFileICM] [7475D9E0] C:\windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18551_none_9e7a1850c9c1b3dc\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\windows\Explorer.EXE[2064] @ C:\windows\Explorer.EXE [gdiplus.dll!GdipLoadImageFromFile] [746F7329] C:\windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18551_none_9e7a1850c9c1b3dc\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\windows\Explorer.EXE[2064] @ C:\windows\Explorer.EXE [gdiplus.dll!GdipDeleteGraphics] [746CE109] C:\windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18551_none_9e7a1850c9c1b3dc\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\windows\Explorer.EXE[2064] @ C:\windows\Explorer.EXE [gdiplus.dll!GdipFree] [746C697E] C:\windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18551_none_9e7a1850c9c1b3dc\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\windows\Explorer.EXE[2064] @ C:\windows\Explorer.EXE [gdiplus.dll!GdipAlloc] [746C69A9] C:\windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18551_none_9e7a1850c9c1b3dc\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\windows\Explorer.EXE[2064] @ C:\windows\Explorer.EXE [gdiplus.dll!GdipSetCompositingMode] [746D2475] C:\windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.18551_none_9e7a1850c9c1b3dc\gdiplus.dll (Microsoft GDI+/Microsoft Corporation)
IAT C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] @ C:\windows\system32\SHLWAPI.dll [USER32.dll!GetKeyState] 000907D0
IAT C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] @ C:\windows\system32\USERENV.dll [KERNEL32.dll!MoveFileExW] 00010110
IAT C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] @ C:\windows\system32\ole32.dll [USER32.dll!GetKeyState] 000907D0
IAT C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] @ C:\windows\system32\SHELL32.dll [KERNEL32.dll!MoveFileExW] 00010110
IAT C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] @ C:\windows\system32\SHELL32.dll [USER32.dll!GetFocus] 00090790
IAT C:\windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe[3048] @ C:\windows\system32\SHELL32.dll [USER32.dll!GetKeyState] 000907D0

---- Devices - GMER 1.0.15 ----

AttachedDevice \Driver\kbdclass \Device\KeyboardClass0 Wdf01000.sys (WDF Dynamic/Microsoft Corporation)
AttachedDevice \Driver\kbdclass \Device\KeyboardClass1 Wdf01000.sys (WDF Dynamic/Microsoft Corporation)
---- Processes - GMER 1.0.15 ----

Library C:\Users\Ka?nka\Desktop\gmer.exe (*** hidden *** ) @ C:\Users\Ka?enka\Desktop\gmer.exe [3404] 0x00400000

---- Registry - GMER 1.0.15 ----

Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Keys\00247e848e9d
Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Keys\00247e848e9d@a87b39ad8481 0xA9 0x0C 0x74 0x49 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Keys\00247e848e9d@48dcfb9f4b2a 0x34 0x63 0x34 0x56 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Keys\00247e848e9d@2c30685a4246 0xE6 0x80 0x7E 0xE5 ...
Reg HKLM\SYSTEM\ControlSet011\Services\BTHPORT\Parameters\Keys\00247e848e9d (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet011\Services\BTHPORT\Parameters\Keys\00247e848e9d@a87b39ad8481 0xA9 0x0C 0x74 0x49 ...
Reg HKLM\SYSTEM\ControlSet011\Services\BTHPORT\Parameters\Keys\00247e848e9d@48dcfb9f4b2a 0x34 0x63 0x34 0x56 ...
Reg HKLM\SYSTEM\ControlSet011\Services\BTHPORT\Parameters\Keys\00247e848e9d@2c30685a4246 0xE6 0x80 0x7E 0xE5 ...
Reg HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing@SessionIdHigh 30247914
Reg HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing@SessionIdLow 1337111228
Reg HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update@NextDetectionTime 2012-09-06 09:42:40
Reg HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Detect@LastSuccessTime 2012-09-05 13:44:13
Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\EMDMgmt\_??_USBSTOR#Disk&Ven_Kingston&Prod_DataTraveler_2.0&Rev_PMAP#5B741789FE4A&0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}KLOKAN??_3856093006
Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\EMDMgmt\_??_USBSTOR#Disk&Ven_Kingston&Prod_DataTraveler_2.0&Rev_PMAP#5B741789FE4A&0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}KLOKAN??_3856093006@CacheSizeInMB 0
Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\EMDMgmt\_??_USBSTOR#Disk&Ven_Kingston&Prod_DataTraveler_2.0&Rev_PMAP#5B741789FE4A&0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}KLOKAN??_3856093006@CacheStatus 2
Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\EMDMgmt\_??_USBSTOR#Disk&Ven_Kingston&Prod_DataTraveler_2.0&Rev_PMAP#5B741789FE4A&0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}KLOKAN??_3856093006@USBVersion 131072
Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\EMDMgmt\_??_USBSTOR#Disk&Ven_Kingston&Prod_DataTraveler_2.0&Rev_PMAP#5B741789FE4A&0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}KLOKAN??_3856093006@ReadSpeedKBs 0
Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\EMDMgmt\_??_USBSTOR#Disk&Ven_Kingston&Prod_DataTraveler_2.0&Rev_PMAP#5B741789FE4A&0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}KLOKAN??_3856093006@WriteSpeedKBs 0
Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\EMDMgmt\_??_USBSTOR#Disk&Ven_Kingston&Prod_DataTraveler_2.0&Rev_PMAP#5B741789FE4A&0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}KLOKAN??_3856093006@PhysicalDeviceSizeMB 983
Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\EMDMgmt\_??_USBSTOR#Disk&Ven_Kingston&Prod_DataTraveler_2.0&Rev_PMAP#5B741789FE4A&0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}KLOKAN??_3856093006@RecommendedCacheSizeMB 0
Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\EMDMgmt\_??_USBSTOR#Disk&Ven_Kingston&Prod_DataTraveler_2.0&Rev_PMAP#5B741789FE4A&0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}KLOKAN??_3856093006@HasSlowRegions 0
Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\EMDMgmt\_??_USBSTOR#Disk&Ven_Kingston&Prod_DataTraveler_2.0&Rev_PMAP#5B741789FE4A&0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}KLOKAN??_3856093006@DoRetestDevice 0
Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\EMDMgmt\_??_USBSTOR#Disk&Ven_Kingston&Prod_DataTraveler_2.0&Rev_PMAP#5B741789FE4A&0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}KLOKAN??_3856093006@DeviceStatus 1
Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\EMDMgmt\_??_USBSTOR#Disk&Ven_Kingston&Prod_DataTraveler_2.0&Rev_PMAP#5B741789FE4A&0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}KLOKAN??_3856093006@LastTestedTime 0x00 0x00 0x00 0x00 ...
Reg HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ot?ky
Reg HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ot?ky\OpenWithList

---- EOF - GMER 1.0.15 ----

Rootkit nemáte. Podíváme se na samotný disk. Stáhněte, nainstalujte a spusťte CrystalDiskInfo: http://www.stahuj.centrum.cz/utility_a_ ... ldiskinfo/ (lze ho naistalovat i v nouz. režimu) a přes Úpravy>kopírovat sem dejte log.

Děkuji. Při instalaci minulého programu se mi na konci vytváření logu objevilo okno, kde se psalo něco o rootkinu, mám to znovu zkusit? Tady je nové info:



----------------------------------------------------------------------------
CrystalDiskInfo 5.0.4 Shizuku Edition (C) 2008-2012 hiyohiyo
Crystal Dew World : http://crystalmark.info/
----------------------------------------------------------------------------

OS : Windows Vista Home Basic Edition SP1 [6.0 Build 6001] (x86)
Date : 2012/09/06 21:13:09

-- Controller Map ----------------------------------------------------------
+ Standardní řadič AHCI 1.0 s rozhraním Serial ATA [ATA]
+ IDE Channel (0)
- Hitachi HTS543216L9A300 ATA Device
+ IDE Channel (1)
- HL-DT-ST DVDRAM GT20L ATA Device
- Iniciátor iSCSI společnosti Microsoft [SCSI]

-- Disk List ---------------------------------------------------------------
(1) Hitachi HTS543216L9A300 : 160,0 GB [0/0/0, pd1]

----------------------------------------------------------------------------
(1) Hitachi HTS543216L9A300
----------------------------------------------------------------------------
Model : Hitachi HTS543216L9A300
Firmware : FB2OC40J
Serial Number : 090616FBC2005CD0D5ZA
Disk Size : 160,0 GB (8,4/137,4/160,0)
Buffer Size : 7114 KB
Queue Depth : 32
# of Sectors : 312581808
Rotation Rate : 5400 RPM
Interface : Serial ATA
Major Version : ATA8-ACS
Minor Version : ATA8-ACS version 3f
Transfer Mode : SATA/300
Power On Hours : 7295 hod.
Power On Count : 2631 krát
Temparature : 40 C (104 F)
Health Status : Dobrý
Features : S.M.A.R.T., APM, 48bit LBA, NCQ
APM Level : 4080h [ON]
AAM Level : ----

-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
01 100 100 _62 000000000000 Počet chyb čtení
02 100 100 _40 000000000000 Průchodnost disku
03 253 100 _33 000300000000 Čas na roztočení ploten
04 _99 _99 __0 000000000A49 Počet spuštění/zastavení
05 100 100 __5 000000000000 Počet přemapovaných sektorů
07 100 100 _67 000000000000 Počet chybných hledání
08 100 100 _40 000000000000 Čas potřebný na vyhledání
09 _84 _84 __0 000000001C7F Hodin v činnosti
0A 100 100 _60 000000000000 Počet opakovaných pokusů o roztočení ploten
0C _99 _99 __0 000000000A47 Počet cyklů zapnutí zařízení
B8 100 100 _97 000000000000 Ukončovacích chyb
BB 100 100 __0 000000000000 Ohlášeno neopravitelných chyb
BC 100 _99 __0 000000000007 Časový limit příkazu
BE _60 _44 __0 00002F1B0028 Teplota toku vzduchu
BF 100 100 __0 000000000000 Počet udalostí zaznamenaných otřesovým senzorem
C0 100 100 __0 000000150015 Počet vypnutí disku
C1 _94 _94 __0 000000010C92 Počet cyklů načítání/vymazání
C2 137 100 __0 003800060028 Teplota
C4 100 100 __0 000000000000 Počet udalostí s číslem realokování sektorů
C5 100 100 __0 000000000000 Počet podezřelých sektorů
C6 100 100 __0 000000000000 Počet neopravitelných sektorů
C7 200 200 __0 000000000000 Počet chyb v kontrolním součtu UltraDMA
DF 100 100 __0 000000000000 Zatížení budiče magnetických hlav způsobené opakovanými úkony

-- IDENTIFY_DEVICE ---------------------------------------------------------
0 1 2 3 4 5 6 7 8 9
000: 045A 3FFF C837 0010 0000 0000 003F 0000 0000 0000
010: 3039 3036 3136 4642 4332 3030 3543 4430 4435 5A41
020: 0003 3795 0004 4642 324F 4334 304A 4869 7461 6368
030: 6920 4854 5335 3433 3231 364C 3941 3330 3020 2020
040: 2020 2020 2020 2020 2020 2020 2020 8010 4000 0F00
050: 4000 0200 0200 0007 3FFF 0010 003F FC10 00FB 0100
060: FFFF 0FFF 0000 0407 0003 0078 0078 0078 0078 0000
070: 0000 0000 0000 0000 0000 001F 0D06 0000 004C 0040
080: 01FC 0042 706B 7C09 6123 7069 BC09 6123 003F 0021
090: 0022 4080 FFFE 0000 0000 0000 0000 0000 0000 0000
100: 9EB0 12A1 0000 0000 0000 0000 0000 8848 5000 CCA5
110: E5CE 4546 0000 0000 0000 0000 0000 0000 0000 4014
120: 4014 0000 0000 0000 0000 0000 0000 0000 0029 000B
130: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
140: 0000 0000 0000 0000 0000 0000 0000 0000 4001 0000
150: 8000 0000 3248 0000 0000 3773 5555 0000 0000 0000
160: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
170: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
180: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
190: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
200: 0000 0000 0000 0000 0000 0000 003D 0000 0000 0000
210: 0000 0000 0000 0000 0000 0000 0000 1518 0000 0000
220: 0000 0000 101F 0000 0000 0000 0000 0000 0000 0000
230: 0000 0000 0000 0000 0001 0080 0000 0000 0000 0000
240: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
250: 0000 0000 0000 0000 0000 4AA5

-- SMART_READ_DATA ---------------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 10 00 01 0F 00 64 64 00 00 00 00 00 00 00 02 05
010: 00 64 64 00 00 00 00 00 00 00 03 23 00 FD 64 00
020: 00 00 00 03 00 00 04 32 00 63 63 49 0A 00 00 00
030: 00 00 05 33 00 64 64 00 00 00 00 00 00 00 07 0F
040: 00 64 64 00 00 00 00 00 00 00 08 05 00 64 64 00
050: 00 00 00 00 00 00 09 32 00 54 54 7F 1C 00 00 00
060: 00 00 0A 33 00 64 64 00 00 00 00 00 00 00 0C 32
070: 00 63 63 47 0A 00 00 00 00 00 B8 33 00 64 64 00
080: 00 00 00 00 00 00 BB 32 00 64 64 00 00 00 00 00
090: 00 00 BC 32 00 64 63 07 00 00 00 00 00 00 BE 22
0A0: 00 3C 2C 28 00 1B 2F 00 00 00 BF 0A 00 64 64 00
0B0: 00 00 00 00 00 00 C0 32 00 64 64 15 00 15 00 00
0C0: 00 00 C1 32 00 5E 5E 92 0C 01 00 00 00 00 C2 22
0D0: 00 89 64 28 00 06 00 38 00 00 C4 32 00 64 64 00
0E0: 00 00 00 00 00 00 C5 32 00 64 64 00 00 00 00 00
0F0: 00 00 C6 10 00 64 64 00 00 00 00 00 00 00 C7 2A
100: 00 C8 C8 00 00 00 00 00 00 00 DF 2A 00 64 64 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 85 02 01 51
170: 03 00 01 00 02 43 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7E

-- SMART_READ_THRESHOLD ----------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 10 00 01 3E 00 00 00 00 00 00 00 00 00 00 02 28
010: 00 00 00 00 00 00 00 00 00 00 03 21 00 00 00 00
020: 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00
030: 00 00 05 05 00 00 00 00 00 00 00 00 00 00 07 43
040: 00 00 00 00 00 00 00 00 00 00 08 28 00 00 00 00
050: 00 00 00 00 00 00 09 00 00 00 00 00 00 00 00 00
060: 00 00 0A 3C 00 00 00 00 00 00 00 00 00 00 0C 00
070: 00 00 00 00 00 00 00 00 00 00 B8 61 00 00 00 00
080: 00 00 00 00 00 00 BB 00 00 00 00 00 00 00 00 00
090: 00 00 BC 00 00 00 00 00 00 00 00 00 00 00 BE 00
0A0: 00 00 00 00 00 00 00 00 00 00 BF 00 00 00 00 00
0B0: 00 00 00 00 00 00 C0 00 00 00 00 00 00 00 00 00
0C0: 00 00 C1 00 00 00 00 00 00 00 00 00 00 00 C2 00
0D0: 00 00 00 00 00 00 00 00 00 00 C4 00 00 00 00 00
0E0: 00 00 00 00 00 00 C5 00 00 00 00 00 00 00 00 00
0F0: 00 00 C6 00 00 00 00 00 00 00 00 00 00 00 C7 00
100: 00 00 00 00 00 00 00 00 00 00 DF 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
170: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3B

Disk je OK. Zkuste pouze kontrolu chyb s aut. opravou. Klikněte v Tento počítač na ikonu disku pravým myšítkem>vlastnosti>nástroje>kontrola chyb. V otevřeném okně zkontrolujte, zda je zaškrtnuto "automaticky opravovat chyby".

Ano, je to zaškrtnuto. Kontrolu chyb mi to nepovolilo, protože je "disk využíván".

Restartujte PC a při startu se kontrola provede.

Jak to tu vypadá?

Zkusila jsem poslední radu a bohužel programy hlásí pořád stejný problém

Zkuste obnovu systému k datu, kdy korketně fungoval.

To už jsem zkusila, ale nic se nezměnilo...

Dejte log ComboFix:

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware

Program jsem si stáhla, ale při pokusu ho spustit opět hlásí error launching installer.

Zkuste to v nouz. režimu.