VIRY.CZ

ComboFix 10-07-05.03 - standard 06.07.2010 17:45:03.5.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1033.18.1022.522 [GMT 2:00]
Spuštěný z: c:\documents and settings\standard\Desktop\ComboFix.exe
AV: avast! antivirus 4.8.0 [VPS 091230-0] *On-access scanning disabled* (Outdated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
* Vytvořen nový Bod Obnovení
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\standard\Application Data\Dealio
c:\documents and settings\standard\Application Data\Dealio\res\widgets.xml
c:\documents and settings\standard\Application Data\Dealio\temp\http___www_dealio_com_rss_coupons-deals_dotd_.xml
c:\windows\system32\_000005_.tmp.dll

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-06-06 do 2010-07-06 )))))))))))))))))))))))))))))))
.

2010-07-05 08:21 . 2010-07-05 08:21 -------- d-----w- c:\documents and settings\standard\Application Data\Malwarebytes
2010-07-05 08:21 . 2010-04-29 13:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-07-05 08:21 . 2010-07-05 08:37 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-07-05 08:21 . 2010-07-05 08:21 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
2010-07-05 08:21 . 2010-04-29 13:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-07-05 08:00 . 2010-07-05 08:00 -------- d-----w- c:\program files\CCleaner
2010-06-23 11:26 . 2010-06-23 12:34 -------- d-----w- c:\program files\trend micro
2010-06-23 11:24 . 2009-11-24 22:49 48560 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2010-06-23 11:24 . 2009-11-24 22:48 23120 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2010-06-23 11:24 . 2009-11-24 22:47 27408 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2010-06-23 11:24 . 2009-11-24 22:51 93424 ----a-w- c:\windows\system32\drivers\aswmon.sys
2010-06-23 11:24 . 2009-11-24 22:50 94160 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2010-06-23 11:24 . 2009-11-24 22:50 114768 ----a-w- c:\windows\system32\drivers\aswSP.sys
2010-06-23 11:24 . 2009-11-24 22:50 20560 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2010-06-23 11:24 . 2009-11-24 22:47 97480 ----a-w- c:\windows\system32\AvastSS.scr
2010-06-23 11:23 . 2009-11-24 22:54 1280480 ------w- c:\windows\system32\aswBoot.exe

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-07-05 09:15 . 2010-07-05 09:13 7786 ----a-w- C:\UsbFix_Upload_Me_STANDARD.zip
2010-07-05 07:24 . 2008-03-29 19:58 -------- d-----w- c:\program files\LifeView DTV
2010-07-02 14:58 . 2007-02-08 17:03 -------- d-----w- c:\program files\Google
2010-07-02 14:57 . 2009-07-15 04:15 -------- d-----w- c:\program files\ICQ6Toolbar
2010-07-02 14:57 . 2010-01-16 14:35 -------- d-----w- c:\program files\Application Updater
2010-07-02 14:43 . 2008-07-24 17:06 -------- d-----w- c:\program files\Common Files\Symantec Shared
2010-07-02 14:43 . 2006-11-28 18:09 -------- d-----w- c:\program files\Symantec
2010-06-29 17:50 . 2010-03-26 17:03 439816 ----a-w- c:\documents and settings\standard\Application Data\Real\Update\setup3.10\setup.exe
2010-06-28 17:33 . 2007-06-19 13:06 -------- d-----w- c:\program files\Common Files\Macromedia
2010-06-26 13:51 . 2007-06-04 14:18 -------- d-----w- c:\documents and settings\standard\Application Data\ICQ
2010-06-17 19:12 . 2009-07-15 04:13 -------- d-----w- c:\program files\ICQ6.5
2010-05-13 07:14 . 2007-10-25 08:28 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help
2010-05-11 19:57 . 2006-12-24 21:03 -------- d-----w- c:\documents and settings\standard\Application Data\Skype
2010-04-14 07:12 . 2009-11-16 17:48 79488 ----a-w- c:\documents and settings\standard\Application Data\Sun\Java\jre1.6.0_17\gtapi.dll
2006-05-03 10:06 . 2008-09-02 11:43 163328 --sh--r- c:\windows\system32\flvDX.dll
2007-02-21 11:47 . 2008-09-02 11:43 31232 --sh--r- c:\windows\system32\msfDX.dll
2008-03-16 13:30 . 2010-01-09 19:11 216064 --sh--r- c:\windows\system32\nbDX.dll
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SmpcSys"="c:\apps\SMP\SmpSys.exe" [2005-12-08 975360]
"mRouterConfig"="c:\program files\Intuwave\Shared\mRouterRuntime\mRouterConfig.exe" [2006-03-02 290816]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PHIME2002ASync"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-10 455168]
"PHIME2002A"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-10 455168]
"ehTray"="c:\windows\ehome\ehtray.exe" [2005-08-05 64512]
"SMSERIAL"="sm56hlpr.exe" [2005-10-18 557056]
"RTHDCPL"="RTHDCPL.EXE" [2006-05-18 16207872]
"SkyTel"="SkyTel.EXE" [2006-05-16 2879488]
"ATICCC"="c:\program files\ATI Technologies\ATI.ACE\CLIStart.exe" [2006-05-10 90112]
"DetectorApp"="c:\program files\Sonic\DigitalMedia LE v7\MyDVD LE\DetectorApp.exe" [2005-10-20 102400]
"IMJPMIG8.1"="c:\windows\IME\imjp8_1\IMJPMIG.EXE" [2004-08-10 208952]
"mouseElf"="c:\progra~1\TWINTO~1\MouseElf.EXE" [2004-08-26 192512]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2006-11-28 98304]
"NeroCheck"="c:\windows\system32\\NeroCheck.exe" [2001-07-09 155648]
"Sony Ericsson PC Suite"="c:\program files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" [2006-11-24 487424]
"DTVRemote"="c:\program files\LifeView DTV\RemoteControl.exe" [2004-12-02 36864]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2008-06-13 185896]
"PC Suite for Smartphones"="c:\program files\Sony Ericsson\Mobile4\Application Launcher\Application Launcher.exe" [2007-11-08 528384]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-10-15 39792]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-03-09 148888]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\All Users\Start Menu\Programs\Startup\
Adobe Gamma Loader.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2007-2-18 113664]
DSLMON.lnk - c:\program files\SAGEM\SAGEM F@st 800-840\dslmon.exe [2006-12-27 966756]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\WBSrv]
2007-03-05 14:36 140976 ----a-w- c:\progra~1\Stardock\OBJECT~1\WINDOW~1\WbSrv.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Authentication Packages REG_MULTI_SZ msv1_0 nwprovau

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\Intuwave\\Shared\\mRouterRuntime\\mRouterRuntime.exe"=
"c:\\Program Files\\BitLord\\BitLord.exe"=
"c:\\Program Files\\PES08\\Pro Evolution Soccer 2008\\PES2008.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\QIP Infium\\infium.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\Real\\RealPlayer\\realplay.exe"=
"c:\\Program Files\\Java\\jdk1.6.0_07\\jre\\bin\\java.exe"=
"c:\\Program Files\\ICQ6.5\\ICQ.exe"=
"c:\\Program Files\\Opera\\opera.exe"=
"c:\\APPS\\skype\\phone\\Skype.exe"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"9918:TCP"= 9918:TCP:BitComet 9918 TCP
"9918:UDP"= 9918:UDP:BitComet 9918 UDP

R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [23.6.2010 13:24 114768]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [23.6.2010 13:24 20560]
R3 genmcmnUSB;USB Scroll Mouse Driver;c:\windows\system32\drivers\gflmouhid.sys [25.12.2006 16:40 6656]
R3 LVHybrid;LVHybrid service;c:\windows\system32\drivers\LVHybrid.sys [29.3.2008 21:49 660736]
S4 sptd;sptd;c:\windows\system32\drivers\sptd.sys [30.12.2006 16:11 682232]
.
Obsah adresáře 'Naplánované úlohy'

2010-07-06 c:\windows\Tasks\Extended Warranty.job
- c:\apps\SMP\PBCARNOT.EXE [2005-11-09 12:55]

2010-07-06 c:\windows\Tasks\Master CD_DVD Creator.job
- c:\apps\SMP\MCDCHECK.EXE [2005-11-08 14:26]

2010-07-06 c:\windows\Tasks\User_Feed_Synchronization-{AD4007AC-1D73-4F72-AD10-FDAD23C6E17E}.job
- c:\windows\system32\msfeedssync.exe [2007-08-13 02:31]
.
.
------- Doplňkový sken -------
.
uLocal Page =
uSearchMigratedDefaultUrl =
IE: &ICQ Toolbar Search - c:\program files\ICQToolbar\toolbaru.dll/SEARCH.HTML
IE: Add to AMV Converter... - c:\program files\MP3 Player Utilities 4.15\AMVConverter\grab.html
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: MediaManager tool grab multimedia file - c:\program files\MP3 Player Utilities 4.15\MediaManager\grab.html
Trusted Zone: stahuj.cz
FF - ProfilePath - c:\documents and settings\standard\Application Data\Mozilla\Firefox\Profiles\bwgedfj5.default\
FF - prefs.js: browser.search.defaulturl -
FF - prefs.js: browser.search.selectedEngine - ICQ Search
FF - prefs.js: browser.startup.homepage - hxxp://www.google.cz/
FF - prefs.js: keyword.URL - hxxp://search.icq.com/search/afe_results.php?ch_id=afex&q=
FF - component: c:\documents and settings\standard\Application Data\Mozilla\Firefox\Profiles\bwgedfj5.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\frozen.dll
FF - component: c:\documents and settings\standard\Application Data\Mozilla\Firefox\Profiles\bwgedfj5.default\extensions\{32a1fd71-835e-4b11-8e54-886fda0b4c89}\components\qippipe.dll
FF - plugin: c:\documents and settings\standard\Application Data\Mozilla\Firefox\Profiles\bwgedfj5.default\extensions\firefox@tvunetworks.com\plugins\npTVUAx.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npmozax.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
.
.
------- Asociace souborů -------
.
.scr=AutoCADScriptFile
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-07-06 17:50
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(1120)
c:\windows\system32\Ati2evxx.dll
c:\progra~1\Stardock\OBJECT~1\WINDOW~1\wbsrv.dll
.
Celkový čas: 2010-07-06 17:52:09
ComboFix-quarantined-files.txt 2010-07-06 15:52
ComboFix2.txt 2010-07-05 09:21

Před spuštěním: 159 969 484 800 bytes free
Po spuštění: 159 939 919 872 bytes free

- - End Of File - - CD5A538E3CA419B345A2AF7724D09D46

ok,uz to vyzera dobre,,este sprav toto a napis ako sa chova pc.
Pri tejto akcii je nutné mať ComboFix na ploche.

Vypni>FIREWALL>Antivir>Antispyware>vsetko rezidentne.

Otvor Notepad (Poznámkový blok) a zkopíruj do neho celý zeleny tex: Potom klik na Subor -> Uložiť ako.. .. -> Ako je Názov souboru tak do toho riadku napiš:CFScript.txt
Typ súboru tak tam vyberies *všetky súbory
A ulož ho na plochu.> Pozor CFScript.txt>Neotvarat a nemoze byt ani>CFScript.txt.txt A Urobis Toto :


Po skonceni skenu vlož log čo ComboFix vytvorí

internet se nepatrně zrychlil, ale stále to neni ono. Načítání trvá stále dlouho


ComboFix 10-07-05.03 - standard 06.07.2010 19:12:43.6.2 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1033.18.1022.541 [GMT 2:00]
Spuštěný z: c:\documents and settings\standard\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\documents and settings\standard\Desktop\CFScript.txt
AV: avast! antivirus 4.8.0 [VPS 091230-0] *On-access scanning disabled* (Outdated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
* Vytvořen nový Bod Obnovení

FILE ::
"c:\windows\Tasks\Extended Warranty.job"
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\program files\Common Files\Symantec Shared
c:\program files\Common Files\Symantec Shared\AntiVirus\TBDC6.tmp
c:\program files\Common Files\Symantec Shared\AntiVirus\TBDC7.tmp
c:\program files\Common Files\Symantec Shared\AntiVirus\TBDC8.tmp
c:\program files\Common Files\Symantec Shared\AntiVirus\TBDC9.tmp
c:\program files\Common Files\Symantec Shared\AntiVirus\TBDCA.tmp
c:\program files\Common Files\Symantec Shared\CCPD-LC\symlcrst.dll
c:\program files\Common Files\Symantec Shared\COH\COHClean.dll
c:\program files\Common Files\Symantec Shared\COH\sH0007.dll
c:\program files\Common Files\Symantec Shared\COH\TBDB6.tmp
c:\program files\Common Files\Symantec Shared\Default.rul
c:\program files\Common Files\Symantec Shared\Firewall.BAK
c:\program files\Common Files\Symantec Shared\Firewall.rul
c:\program files\Common Files\Symantec Shared\Firewall\TBDBD.tmp
c:\program files\Common Files\Symantec Shared\Firewall\TBDBE.tmp
c:\program files\Common Files\Symantec Shared\HomeNet\TBDBC.tmp
c:\program files\Common Files\Symantec Shared\LocationMap.dat
c:\program files\Common Files\Symantec Shared\NFWEVT.LOG
c:\program files\Common Files\Symantec Shared\Persist.BAK
c:\program files\Common Files\Symantec Shared\Persist.Dat
c:\program files\Common Files\Symantec Shared\PIF\{96E26A03-A25A-400b-B9B4-564C9BD00F46}\TBDD1.tmp
c:\program files\Common Files\Symantec Shared\SEVINST.EXE
c:\program files\Common Files\Symantec Shared\SNDALRT.log
c:\program files\Common Files\Symantec Shared\SNDCON.log
c:\program files\Common Files\Symantec Shared\SNDDBG.log
c:\program files\Common Files\Symantec Shared\SNDFW.log
c:\program files\Common Files\Symantec Shared\SNDIDS.log
c:\program files\Common Files\Symantec Shared\SNDSvc.dll
c:\program files\Common Files\Symantec Shared\SNDSYS.log
c:\program files\Common Files\Symantec Shared\SNDunin.dll
c:\program files\Common Files\Symantec Shared\SPManifests\Snd.grd
c:\program files\Common Files\Symantec Shared\SPManifests\Snd.sig
c:\program files\Common Files\Symantec Shared\SPManifests\Snd.spm
c:\program files\Common Files\Symantec Shared\SPManifests\SYMEVNT.GRD
c:\program files\Common Files\Symantec Shared\SPManifests\SYMEVNT.SIG
c:\program files\Common Files\Symantec Shared\SPManifests\SYMEVNT.SPM
c:\program files\Common Files\Symantec Shared\SymcData\ipsdefs\20090715.003\SymIDSI.dll
c:\program files\Common Files\Symantec Shared\SymHTML\2.0\SymHTML.dll
c:\program files\Common Files\Symantec Shared\SymNetDrv\symIM.cat
c:\program files\Common Files\Symantec Shared\SymNetDrv\SymIM.sys
c:\program files\Common Files\Symantec Shared\SymNetDrv\SymIM_m.inf
c:\program files\Common Files\Symantec Shared\SymNetDrv\SymIM_p.inf
c:\program files\Common Files\Symantec Shared\SymNetDrv\symIMv.cat
c:\program files\Common Files\Symantec Shared\SymNetDrv\SymIMv.inf
c:\program files\Common Files\Symantec Shared\SymNetDrv\SymIMv.sys
c:\program files\Common Files\Symantec Shared\SymTheme\1.0\SymTheme.dll
c:\program files\Common Files\Symantec Shared\TBDC5.tmp
c:\program files\Common Files\Symantec Shared\TModule.dat
c:\program files\Common Files\Symantec Shared\TParent.dat
c:\program files\Symantec
c:\program files\Symantec\S32EVNT1.DLL
c:\program files\Symantec\SYMEVENT.CAT
c:\program files\Symantec\SYMEVENT.INF
c:\program files\Symantec\SYMEVENT.SYS
c:\windows\Tasks\Extended Warranty.job

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-06-06 do 2010-07-06 )))))))))))))))))))))))))))))))
.

2010-07-05 08:21 . 2010-07-05 08:21 -------- d-----w- c:\documents and settings\standard\Application Data\Malwarebytes
2010-07-05 08:21 . 2010-04-29 13:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-07-05 08:21 . 2010-07-05 08:37 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-07-05 08:21 . 2010-07-05 08:21 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
2010-07-05 08:21 . 2010-04-29 13:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-07-05 08:00 . 2010-07-05 08:00 -------- d-----w- c:\program files\CCleaner
2010-06-23 11:26 . 2010-06-23 12:34 -------- d-----w- c:\program files\trend micro
2010-06-23 11:24 . 2009-11-24 22:49 48560 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2010-06-23 11:24 . 2009-11-24 22:48 23120 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2010-06-23 11:24 . 2009-11-24 22:47 27408 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2010-06-23 11:24 . 2009-11-24 22:51 93424 ----a-w- c:\windows\system32\drivers\aswmon.sys
2010-06-23 11:24 . 2009-11-24 22:50 94160 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2010-06-23 11:24 . 2009-11-24 22:50 114768 ----a-w- c:\windows\system32\drivers\aswSP.sys
2010-06-23 11:24 . 2009-11-24 22:50 20560 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2010-06-23 11:24 . 2009-11-24 22:47 97480 ----a-w- c:\windows\system32\AvastSS.scr
2010-06-23 11:23 . 2009-11-24 22:54 1280480 ------w- c:\windows\system32\aswBoot.exe

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-07-05 09:15 . 2010-07-05 09:13 7786 ----a-w- C:\UsbFix_Upload_Me_STANDARD.zip
2010-07-05 07:24 . 2008-03-29 19:58 -------- d-----w- c:\program files\LifeView DTV
2010-07-02 14:58 . 2007-02-08 17:03 -------- d-----w- c:\program files\Google
2010-07-02 14:57 . 2009-07-15 04:15 -------- d-----w- c:\program files\ICQ6Toolbar
2010-07-02 14:57 . 2010-01-16 14:35 -------- d-----w- c:\program files\Application Updater
2010-06-29 17:50 . 2010-03-26 17:03 439816 ----a-w- c:\documents and settings\standard\Application Data\Real\Update\setup3.10\setup.exe
2010-06-28 17:33 . 2007-06-19 13:06 -------- d-----w- c:\program files\Common Files\Macromedia
2010-06-26 13:51 . 2007-06-04 14:18 -------- d-----w- c:\documents and settings\standard\Application Data\ICQ
2010-06-17 19:12 . 2009-07-15 04:13 -------- d-----w- c:\program files\ICQ6.5
2010-05-13 07:14 . 2007-10-25 08:28 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help
2010-05-11 19:57 . 2006-12-24 21:03 -------- d-----w- c:\documents and settings\standard\Application Data\Skype
2010-04-14 07:12 . 2009-11-16 17:48 79488 ----a-w- c:\documents and settings\standard\Application Data\Sun\Java\jre1.6.0_17\gtapi.dll
2006-05-03 10:06 . 2008-09-02 11:43 163328 --sh--r- c:\windows\system32\flvDX.dll
2007-02-21 11:47 . 2008-09-02 11:43 31232 --sh--r- c:\windows\system32\msfDX.dll
2008-03-16 13:30 . 2010-01-09 19:11 216064 --sh--r- c:\windows\system32\nbDX.dll
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SmpcSys"="c:\apps\SMP\SmpSys.exe" [2005-12-08 975360]
"mRouterConfig"="c:\program files\Intuwave\Shared\mRouterRuntime\mRouterConfig.exe" [2006-03-02 290816]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PHIME2002ASync"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-10 455168]
"PHIME2002A"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-10 455168]
"ehTray"="c:\windows\ehome\ehtray.exe" [2005-08-05 64512]
"SMSERIAL"="sm56hlpr.exe" [2005-10-18 557056]
"RTHDCPL"="RTHDCPL.EXE" [2006-05-18 16207872]
"SkyTel"="SkyTel.EXE" [2006-05-16 2879488]
"ATICCC"="c:\program files\ATI Technologies\ATI.ACE\CLIStart.exe" [2006-05-10 90112]
"DetectorApp"="c:\program files\Sonic\DigitalMedia LE v7\MyDVD LE\DetectorApp.exe" [2005-10-20 102400]
"IMJPMIG8.1"="c:\windows\IME\imjp8_1\IMJPMIG.EXE" [2004-08-10 208952]
"mouseElf"="c:\progra~1\TWINTO~1\MouseElf.EXE" [2004-08-26 192512]
"Sony Ericsson PC Suite"="c:\program files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe" [2006-11-24 487424]
"DTVRemote"="c:\program files\LifeView DTV\RemoteControl.exe" [2004-12-02 36864]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2008-06-13 185896]
"PC Suite for Smartphones"="c:\program files\Sony Ericsson\Mobile4\Application Launcher\Application Launcher.exe" [2007-11-08 528384]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\All Users\Start Menu\Programs\Startup\
Adobe Gamma Loader.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2007-2-18 113664]
DSLMON.lnk - c:\program files\SAGEM\SAGEM F@st 800-840\dslmon.exe [2006-12-27 966756]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\WBSrv]
2007-03-05 14:36 140976 ----a-w- c:\progra~1\Stardock\OBJECT~1\WINDOW~1\WbSrv.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Authentication Packages REG_MULTI_SZ msv1_0 nwprovau

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\Intuwave\\Shared\\mRouterRuntime\\mRouterRuntime.exe"=
"c:\\Program Files\\BitLord\\BitLord.exe"=
"c:\\Program Files\\PES08\\Pro Evolution Soccer 2008\\PES2008.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\QIP Infium\\infium.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\Real\\RealPlayer\\realplay.exe"=
"c:\\Program Files\\Java\\jdk1.6.0_07\\jre\\bin\\java.exe"=
"c:\\Program Files\\ICQ6.5\\ICQ.exe"=
"c:\\Program Files\\Opera\\opera.exe"=
"c:\\APPS\\skype\\phone\\Skype.exe"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"9918:TCP"= 9918:TCP:BitComet 9918 TCP
"9918:UDP"= 9918:UDP:BitComet 9918 UDP

R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [23.6.2010 13:24 114768]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [23.6.2010 13:24 20560]
R3 genmcmnUSB;USB Scroll Mouse Driver;c:\windows\system32\drivers\gflmouhid.sys [25.12.2006 16:40 6656]
R3 LVHybrid;LVHybrid service;c:\windows\system32\drivers\LVHybrid.sys [29.3.2008 21:49 660736]
S4 sptd;sptd;c:\windows\system32\drivers\sptd.sys [30.12.2006 16:11 682232]
.
Obsah adresáře 'Naplánované úlohy'

2010-07-06 c:\windows\Tasks\Master CD_DVD Creator.job
- c:\apps\SMP\MCDCHECK.EXE [2005-11-08 14:26]

2010-07-06 c:\windows\Tasks\User_Feed_Synchronization-{AD4007AC-1D73-4F72-AD10-FDAD23C6E17E}.job
- c:\windows\system32\msfeedssync.exe [2007-08-13 02:31]
.
.
------- Doplňkový sken -------
.
uLocal Page =
uSearchMigratedDefaultUrl =
IE: Add to AMV Converter... - c:\program files\MP3 Player Utilities 4.15\AMVConverter\grab.html
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: MediaManager tool grab multimedia file - c:\program files\MP3 Player Utilities 4.15\MediaManager\grab.html
Trusted Zone: stahuj.cz
FF - ProfilePath - c:\documents and settings\standard\Application Data\Mozilla\Firefox\Profiles\bwgedfj5.default\
FF - prefs.js: browser.search.defaulturl -
FF - prefs.js: browser.startup.homepage - hxxp://www.google.cz/
FF - component: c:\documents and settings\standard\Application Data\Mozilla\Firefox\Profiles\bwgedfj5.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\frozen.dll
FF - component: c:\documents and settings\standard\Application Data\Mozilla\Firefox\Profiles\bwgedfj5.default\extensions\{32a1fd71-835e-4b11-8e54-886fda0b4c89}\components\qippipe.dll
FF - plugin: c:\documents and settings\standard\Application Data\Mozilla\Firefox\Profiles\bwgedfj5.default\extensions\firefox@tvunetworks.com\plugins\npTVUAx.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npmozax.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation", false);
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
.
.
------- Asociace souborů -------
.
.scr=AutoCADScriptFile
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-07-06 19:22
Windows 5.1.2600 Service Pack 3 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(1128)
c:\windows\system32\Ati2evxx.dll
c:\progra~1\Stardock\OBJECT~1\WINDOW~1\wbsrv.dll

- - - - - - - > 'explorer.exe'(2636)
c:\windows\system32\WININET.dll
c:\progra~1\WINDOW~3\wmpband.dll
c:\windows\system32\WhoRU.dll
c:\windows\system32\ieframe.dll
c:\program files\TwinTouch LuxeMate\emhook.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\program files\WinSCP\DragExt.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\windows\system32\Ati2evxx.exe
c:\program files\Alwil Software\Avast4\aswUpdSv.exe
c:\windows\system32\DRIVERS\CDANTSRV.EXE
c:\windows\eHome\ehRecvr.exe
c:\windows\eHome\ehSched.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
c:\program files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
c:\program files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe
c:\windows\ehome\mcrdsvc.exe
c:\windows\sm56hlpr.exe
c:\windows\RTHDCPL.EXE
c:\program files\ATI Technologies\ATI.ACE\CLI.EXE
c:\program files\Intuwave\Shared\mRouterRuntime\mRouterRuntime.exe
c:\program files\Real\RealPlayer\RealPlay.exe
c:\windows\system32\dllhost.exe
c:\program files\TwinTouch LuxeMate\EMouse.exe
c:\windows\system32\wscntfy.exe
c:\windows\eHome\ehmsas.exe
c:\program files\Common Files\Teleca Shared\Generic.exe
c:\program files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
c:\progra~1\Symbian\Shared\SYMBIA~1\SYMBIA~1.EXE
c:\progra~1\Symbian\Shared\SYMBIA~1\SCBAL.exe
c:\program files\ATI Technologies\ATI.ACE\cli.exe
c:\program files\ATI Technologies\ATI.ACE\cli.exe
.
**************************************************************************
.
Celkový čas: 2010-07-06 19:27:35 - počítač byl restartován
ComboFix-quarantined-files.txt 2010-07-06 17:27
ComboFix2.txt 2010-07-06 15:52
ComboFix3.txt 2010-07-05 09:21

Před spuštěním: 159 915 143 168 bytes free
Po spuštění: 159 886 893 056 bytes free

- - End Of File - - A92495242C57C790DFDFE2FA7CAED0D0

> Stáhni si a spusť program StartUpLite - http://www.malwarebytes.org/StartUpLite.exe
- Program vypíše seznam zbytečných programů spouštějících se při startu Windows
- K vypnutí spouštění těchto programů zaškrtni u příslušných řádků Disable a klikni na Continue.
Smažte cache Opery/Firefoxu bud ručně nebo ATF Cleanerem
http://www.slunecnice.cz/sw/atf-cleaner/
- v menu nahoře vyberte záložku Firefox / Opera a klikněte na ni
zatrhněte Select All a pak klikněte na Empty Selected

pozor - přijdete o všechna hesla uložená ve FF /Opere![saved paswords-nezafajknut]

- Na záložce main zaškrtněte select all.-empty selected.
sprav z malwarebytes UPLNY skan,nakolko doteraz si robil-len- Rychlý sken-akl nieco najde zmaz-log vloz sem.
sprav kontrolu s programom AVP-tool-bude to trvat dlhsie,,ale treba to spravit,log vloz sem-navod:
http://www.viry.cz/forum/viewtopic.php?f=29&t=58179
Po skene treba odinstalovat.

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Verze databáze: 4052

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

6.7.2010 20:52:08
mbam-log-2010-07-06 (20-52-08).txt

Typ skenu: Úplný sken (C:\|)
Skenované objekty: 240595
Uplynulý čas: 37 minuta(y), 1 sekunda(y)

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče registru: 0
Infikované hodnoty registru: 0
Infikované datové položky registru: 0
Infikované složky: 0
Infikované soubory: 2

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované hodnoty registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované datové položky registru:
(Žádné škodlivé položky nebyly zjištěny)

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
C:\Program Files\Aplikace\SmileyCentralPFSetup2.2.60.11-2.ZNfox000(2).exe (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\Aplikace\SmileyCentralPFSetup2.2.60.11-2.ZNfox000.exe (Adware.MyWebSearch) -> Quarantined and deleted successfully.

a co AVP-tool-??nasiel nieco??

Autoscan: completed 2 hours ago (events: 19, objects: 460958, time: 01:00:12)
9.7.2010 14:28:20 Task started
9.7.2010 14:33:15 Detected: Trojan.Win32.DelFiles.mj C:\Documents and Settings\standard\Desktop\T-Cleaner.exe
9.7.2010 14:33:18 Deleted: Trojan.Win32.DelFiles.mj C:\Documents and Settings\standard\Desktop\T-Cleaner.exe
9.7.2010 14:33:18 Deleted: Trojan.Win32.DelFiles.mj C:\Documents and Settings\standard\Desktop\T-Cleaner.exe
9.7.2010 14:55:56 Detected: not-a-virus:AdWare.Win32.Excite.a C:\Program Files\Aplikace\freeripmp3.exe/data0038/data0000.res/data0001.res
9.7.2010 14:56:07 Detected: not-a-virus:AdWare.Win32.MyWay.f C:\Program Files\Aplikace\freeripmp3.exe/data0038/data0000.res/data0005.res
9.7.2010 14:56:07 Detected: not-a-virus:AdWare.Win32.Excite.a C:\Program Files\Aplikace\freeripmp3.exe/data0038/#/data0001.res
9.7.2010 14:56:07 Detected: not-a-virus:AdWare.Win32.MyWay.f C:\Program Files\Aplikace\freeripmp3.exe/data0038/#/data0005.res
9.7.2010 14:56:07 Deleted: not-a-virus:AdWare.Win32.MyWay.f C:\Program Files\Aplikace\freeripmp3.exe
9.7.2010 15:11:51 Detected: not-a-virus:AdWare.Win32.Excite.a C:\System Volume Information\_restore{5FED904E-6E1E-4B49-8681-D5C017BB5784}\RP5\A0001638.exe/data0038/data0000.res/data0001.res
9.7.2010 15:11:52 Detected: Trojan.Win32.DelFiles.mj C:\System Volume Information\_restore{5FED904E-6E1E-4B49-8681-D5C017BB5784}\RP5\A0001637.exe
9.7.2010 15:11:58 Detected: not-a-virus:AdWare.Win32.MyWay.f C:\System Volume Information\_restore{5FED904E-6E1E-4B49-8681-D5C017BB5784}\RP5\A0001638.exe/data0038/data0000.res/data0005.res
9.7.2010 15:11:58 Detected: not-a-virus:AdWare.Win32.Excite.a C:\System Volume Information\_restore{5FED904E-6E1E-4B49-8681-D5C017BB5784}\RP5\A0001638.exe/data0038/#/data0001.res
9.7.2010 15:11:58 Detected: not-a-virus:AdWare.Win32.MyWay.f C:\System Volume Information\_restore{5FED904E-6E1E-4B49-8681-D5C017BB5784}\RP5\A0001638.exe/data0038/#/data0005.res
9.7.2010 15:11:58 Deleted: Trojan.Win32.DelFiles.mj C:\System Volume Information\_restore{5FED904E-6E1E-4B49-8681-D5C017BB5784}\RP5\A0001637.exe
9.7.2010 15:11:58 Deleted: not-a-virus:AdWare.Win32.MyWay.f C:\System Volume Information\_restore{5FED904E-6E1E-4B49-8681-D5C017BB5784}\RP5\A0001638.exe
9.7.2010 15:26:52 Processing error D:\VIDEO_TS\VTS_01_3.VOB Read error
9.7.2010 15:28:31 Processing error D:\VIDEO_TS\VTS_01_0.BUP Read error
9.7.2010 15:28:32 Task completed

ok,odinstaluj avptool podla navodu,,a napis ako sa chova pc,,

odinstalovaal jsem, ale nyní, možná už delší dobu se připojit nelze vůbec, píše to omezené nebo žádné připojení.

> Jestliže nepoužíváte pevnou IP adresu, proxy atd., v sekci Start - Nastavení - Ovládací panely - Síťová připojení - Připojení k místní síti - Vlastnosti - Protokol sítě Internet (TCP/IP) - Vlastnosti zvolíme Získat adresu IP ze serveru DHCP automaticky a Získat adresu serveru DNS automaticky. V opačném případě zadáme do volných řádků nastavení od poskytovatele internetu.

skontrolovat kable od modemu,po pc.

Takhle už to mám.

Takhle už to mám.

sice neviem ze naco myslis,,ale treba skontrolovat vsetko,,neviem ake pripojenie mas.router.modem,..atd,,
moze byt na pricine:
vadne kable
vadna sietovka
Router
Modem
atd,,

Zkusil jsem znova nainstalovat router s novým kabelem, běží to o poznání rychleji, ale zdaleka né tak jako notebooky přes wifi. Mám připojení O2 internet extra za 655kč, mělo by to být 4Mb/s a stahování 512kB/s.

nj,ale stale ti vypisuje chybu obmedzene alebo ziadne pripojenie?/ak nie tak sprav Test rychlosti pripojenia.

Ne, už to jde. Ale ta rychlost připojení je pouhých 115kb/s a stahování 14kB/s.