Takže díky za posečkání. Je to zde:
Rkill:
Rkill 2.6.2 by Lawrence Abrams (Grinler)
http://www.bleepingcomputer.com/
Copyright 2008-2013 BleepingComputer.com
More Information about Rkill can be found at this link:
http://www.bleepingcomputer.com/forums/topic308364.html
Program started at: 10/22/2013 09:36:26 AM in x86 mode.
Windows Version: Microsoft Windows XP Service Pack 3
Checking for Windows services to stop:
* No malware services found to stop.
Checking for processes to terminate:
* C:\WINDOWS\OETRN.EXE (PID: 1768) [WD-HEUR]
1 proccess terminated!
Checking Registry for malware related settings:
* No issues found in the Registry.
Resetting .EXE, .COM, & .BAT associations in the Windows Registry.
Performing miscellaneous checks:
* Reparse Point/Junctions Found (Most likely legitimate)!
* C:\WINDOWS\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a => C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_4.0.0.0_x-ww_29b51492 [Dir]
* C:\WINDOWS\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Workflow.Compiler\v4.0_4.0.0.0__31bf3856ad364e35 => C:\WINDOWS\WinSxS\MSIL_Microsoft.Workflow.Compiler_31bf3856ad364e35_4.0.0.0_x-ww_97359ba5 [Dir]
Checking Windows Service Integrity:
* No issues found.
Searching for Missing Digital Signatures:
* C:\WINDOWS\System32\UxTheme.dll : 218624 : 04/25/2008 08:41 PM : e35fabbe7f63cb9ae2a06a449392e3f6 [NoSig]
+-> C:\WINDOWS\system32\dllcache\uxtheme.dll : 218624 : 04/25/2008 08:41 PM : e35fabbe7f63cb9ae2a06a449392e3f6 [Pos Repl]
Checking HOSTS File:
* Cannot edit the HOSTS file.
* Permissions Fixed. Administrators can now edit the HOSTS file.
* HOSTS file entries found:
127.0.0.1 localhost
Program finished at: 10/22/2013 09:37:55 AM
Execution time: 0 hours(s), 1 minute(s), and 28 seconds(s)
ComboFix:
ComboFix 13-10-21.01 - Josef 22.10.2013 10:20:01.1.1 - x86
Systém Microsoft Windows XP Professional 5.1.2600.3.1250.420.1029.18.2039.1314 [GMT 2:00]
Spuštěný z: c:\documents and settings\Josef\Plocha\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\Josef\Local Settings\Temporary Internet Files\SLOVA.WAV
c:\documents and settings\Josef\Local Settings\Temporary Internet Files\TRNCOM.INI
C:\END
c:\program files\Downloaded Installers
c:\program files\Downloaded Installers\{D54FE054-27F4-438F-BE9C-2092349BDB05}\setup.msi
c:\windows\iun6002.exe
c:\windows\msmqinst.log
c:\windows\system32\Cache
c:\windows\system32\Cache\272512937d9e61a4.fb
c:\windows\system32\Cache\287204568329e189.fb
c:\windows\system32\Cache\28bc8f716fd76a47.fb
c:\windows\system32\Cache\2c53092c95605355.fb
c:\windows\system32\Cache\3917078cb68ec657.fb
c:\windows\system32\Cache\590ba23ce359fd0c.fb
c:\windows\system32\Cache\610289e025a3ee9a.fb
c:\windows\system32\Cache\651c5d3cdbfb8bd1.fb
c:\windows\system32\Cache\6c59ac5e7e7a3ad0.fb
c:\windows\system32\Cache\a4a883d8c3e183b8.fb
c:\windows\system32\Cache\a8556537add6dfc5.fb
c:\windows\system32\Cache\ad10a52aff5e038d.fb
c:\windows\system32\Cache\c4d28dca2e7648be.fb
c:\windows\system32\Cache\d201ef9910cd39de.fb
c:\windows\system32\Cache\d2e94710a5708128.fb
c:\windows\system32\Cache\d79b9dfe81484ec4.fb
c:\windows\system32\Cache\e0de16f883bea794.fb
c:\windows\system32\office.exe
c:\windows\system32\skinboxer43.dll
c:\windows\system32\tempdir
c:\windows\system32\tempdir\tinypdf.dll
c:\windows\system32\tempdir\tinypdf.chm
c:\windows\system32\tempdir\tinypdf1.dll
c:\windows\system32\tempdir\tinypdf2.dll
c:\windows\XSxS
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-09-22 do 2013-10-22 )))))))))))))))))))))))))))))))
.
.
2013-10-21 11:14 . 2013-10-21 11:14 -------- d-----w- c:\documents and settings\Josef\Data aplikací\AVAST Software
2013-10-21 11:04 . 2013-10-21 11:04 -------- d-----w- c:\documents and settings\All Users\Data aplikací\AVAST Software
2013-10-18 15:09 . 2013-10-18 15:09 -------- d-----w- c:\program files\Common Files\Java
2013-10-18 15:08 . 2013-10-08 05:29 145408 ----a-w- c:\windows\system32\javacpl.cpl
2013-10-18 15:08 . 2013-10-08 05:50 94632 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2013-10-17 08:32 . 2013-10-17 08:32 -------- d-----w- c:\windows\system32\wbem\Repository
2013-10-16 17:55 . 2013-10-17 08:15 -------- d-----w- c:\program files\Audacity
2013-10-16 11:36 . 2013-10-16 11:36 -------- d-----w- c:\program files\Redsystem
2013-10-16 08:17 . 2013-10-17 08:54 -------- d-----w- c:\program files\HD Tune
2013-10-14 12:55 . 2013-10-14 12:59 -------- d-----w- c:\documents and settings\All Users\Data aplikací\Malwarebytes' Anti-Malware (portable)
2013-10-14 12:53 . 2013-10-14 12:53 47064 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2013-10-11 09:29 . 2013-10-11 09:29 -------- d-----w- c:\program files\Defraggler
2013-09-30 13:59 . 2001-03-28 14:38 69632 ----a-w- c:\windows\system32\GkSui18.EXE
2013-09-30 13:59 . 2013-09-30 13:59 -------- d-----w- c:\program files\RAM Defrag V2.55
2013-09-30 13:06 . 2013-09-30 13:06 -------- d-----w- c:\program files\Playlist Creator 3
2013-09-27 13:04 . 2013-09-27 13:06 -------- d-----w- c:\documents and settings\Josef\Data aplikací\DVDVideoSoft
2013-09-27 13:04 . 2013-09-27 13:05 -------- d-----w- c:\program files\Common Files\DVDVideoSoft
2013-09-27 13:04 . 2013-09-27 13:06 -------- d-----w- c:\program files\DVDVideoSoft
2013-09-27 12:55 . 2013-09-27 12:55 -------- d-----w- c:\program files\Bigasoft
2013-09-23 09:20 . 2013-10-04 09:37 -------- d-----w- c:\documents and settings\Josef\Data aplikací\Vso
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-10-21 11:08 . 2013-03-14 06:25 49944 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2013-10-21 11:08 . 2013-03-14 06:25 178304 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2013-10-21 11:08 . 2013-03-14 06:25 70384 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2013-10-21 11:08 . 2011-05-28 08:53 774392 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2013-10-21 11:08 . 2010-03-02 20:26 403440 ----a-w- c:\windows\system32\drivers\aswSP.sys
2013-10-21 11:08 . 2010-03-02 20:26 35656 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2013-10-21 11:08 . 2010-03-02 20:26 57672 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2013-10-21 11:08 . 2010-03-02 20:26 54832 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2013-10-21 11:08 . 2010-07-06 08:55 43152 ----a-w- c:\windows\avastSS.scr
2013-10-21 11:08 . 2010-03-02 20:25 269216 ----a-w- c:\windows\system32\aswBoot.exe
2013-10-09 09:57 . 2013-03-14 06:43 692616 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2013-10-09 09:57 . 2011-07-07 05:11 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2013-09-23 18:25 . 2008-04-14 06:52 920064 ----a-w- c:\windows\system32\wininet.dll
2013-09-23 18:25 . 2008-04-14 06:52 1469440 ------w- c:\windows\system32\inetcpl.cpl
2013-09-23 18:25 . 2008-04-14 06:51 43520 ----a-w- c:\windows\system32\licmgr10.dll
2013-09-23 18:25 . 2008-04-14 06:51 18944 ----a-w- c:\windows\system32\corpol.dll
2013-09-23 18:06 . 2008-04-14 05:50 385024 ----a-w- c:\windows\system32\html.iec
2013-08-29 07:01 . 2008-04-14 05:45 1878656 ----a-w- c:\windows\system32\win32k.sys
2013-08-09 01:56 . 2008-04-14 06:52 386560 ----a-w- c:\windows\system32\themeui.dll
2013-08-09 00:55 . 2008-04-13 22:15 144128 ----a-w- c:\windows\system32\drivers\usbport.sys
2013-08-09 00:55 . 2001-10-25 14:00 5376 ----a-w- c:\windows\system32\drivers\usbd.sys
2013-08-05 13:30 . 2008-04-14 06:51 1289216 ----a-w- c:\windows\system32\ole32.dll
2013-08-02 23:48 . 2006-10-18 20:47 1543680 ------w- c:\windows\system32\wmvdecod.dll
2009-02-16 09:29 . 2010-03-02 21:37 1767424 ----a-w- c:\program files\CrystalFree.exe
2008-11-19 10:37 . 2010-03-02 21:37 3400542 ----a-w- c:\program files\Crystal Player Professional 1.98.exe
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2013-10-21 11:08 321752 ----a-w- c:\program files\Alwil Software\Avast5\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"OEXPRESS"="c:\windows\OETRN.EXE" [2010-03-02 26624]
"SpybotSD TeaTimer"="c:\program files\Spybot - Search & Destroy\TeaTimer.exe" [2009-01-26 2144088]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"UnlockerAssistant"="c:\program files\Unlocker\UnlockerAssistant.exe" [2008-05-02 15872]
"RTHDCPL"="RTHDCPL.EXE" [2000-01-01 20064872]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2000-01-01 141848]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2000-01-01 166424]
"Persistence"="c:\windows\system32\igfxpers.exe" [2000-01-01 137752]
"OSSelectorReinstall"="c:\program files\Common Files\Acronis\AcronisDiskDirector\oss_reinstall.exe" [2005-11-09 1557560]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
"Malwarebytes' Anti-Malware"="c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe" [2011-12-24 460872]
"APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-21 59720]
"QuickTime Task"="c:\program files\QuickTime Alternative\qttask.exe" [2013-05-01 421888]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336]
"AvastUI.exe"="c:\program files\Alwil Software\Avast5\AvastUI.exe" [2013-10-21 3567800]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0OODBS
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^McAfee Security Scan Plus.lnk]
path=c:\documents and settings\All Users\Nabídka Start\Programy\Po spuštění\McAfee Security Scan Plus.lnk
backup=c:\windows\pss\McAfee Security Scan Plus.lnkCommon Startup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DW7]
2011-12-12 11:12 10448384 ----a-w- c:\program files\The Weather Channel\The Weather Channel App\TWCApp.exe
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\WINDOWS\\system32\\dxdiag.exe"=
"c:\\Program Files\\Lectra\\Kaledo Style V1R1c9\\bin\\KaledoStyle.exe"=
"c:\\Program Files\\ICQ7.4\\ICQ.exe"=
"c:\\Program Files\\Orbitdownloader\\orbitdm.exe"=
"c:\\Program Files\\Orbitdownloader\\orbitnet.exe"=
"d:\\Opera10Portable\\App\\Opera10\\opera.exe"=
"c:\\Program Files\\atube\\dtUser.exe"=
"c:\\Program Files\\Common Files\\Apple\\Apple Application Support\\WebKit2WebProcess.exe"=
"c:\\Program Files\\VSO\\VSO Downloader\\3\\VsoDownloader.exe"=
.
R0 aswRvrt;avast! Revert;c:\windows\system32\drivers\aswRvrt.sys [14.3.2013 8:25 49944]
R0 aswVmm;avast! VM Monitor;c:\windows\system32\drivers\aswVmm.sys [14.3.2013 8:25 178304]
R0 ElbyVCD;ElbyVCD;c:\windows\system32\drivers\ElbyVCD.sys [28.11.2002 12:43 22016]
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [28.5.2011 10:53 774392]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2.3.2010 22:26 403440]
R1 Eve;EVE Protocol Driver;c:\windows\system32\drivers\eve.sys [20.9.2013 16:32 33624]
R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [17.2.2010 20:25 12872]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [10.5.2010 20:41 67656]
R1 sp_rsdrv2;Spyware Terminator Driver 2;c:\windows\system32\drivers\sp_rsdrv2.sys [17.5.2010 13:05 142592]
R1 VBoxDrv;VirtualBox Service;c:\windows\system32\drivers\VBoxDrv.sys [14.1.2011 16:13 158736]
R1 VBoxUSBMon;VirtualBox USB Monitor Driver;c:\windows\system32\drivers\VBoxUSBMon.sys [14.1.2011 16:12 42960]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2.3.2010 22:26 35656]
R2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [14.3.2013 8:25 70384]
R2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [17.9.2012 12:02 652872]
R2 npf;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [16.7.2010 2:45 35088]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [17.9.2012 12:02 20464]
R3 pcouffin;VSO Software pcouffin;c:\windows\system32\drivers\pcouffin.sys [3.3.2010 13:42 47360]
R3 VBoxNetAdp;VirtualBox Host-Only Ethernet Adapter;c:\windows\system32\drivers\VBoxNetAdp.sys [22.12.2010 16:31 109328]
R3 VBoxNetFlt;VBoxNetFlt Service;c:\windows\system32\drivers\VBoxNetFlt.sys [22.12.2010 16:31 120208]
S2 esihdrv;esihdrv;\??\c:\docume~1\Josef\LOCALS~1\Temp\esihdrv.sys --> c:\docume~1\Josef\LOCALS~1\Temp\esihdrv.sys [?]
S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [26.1.2012 15:06 1691480]
S3 mbamchameleon;mbamchameleon;c:\windows\system32\drivers\mbamchameleon.sys [14.10.2013 14:53 47064]
S3 MEMSWEEP2;MEMSWEEP2;\??\c:\windows\system32\F5.tmp --> c:\windows\system32\F5.tmp [?]
S3 SWDUMon;SWDUMon;c:\windows\system32\drivers\SWDUMon.sys [26.1.2012 14:09 12984]
S3 VBoxUSB;VirtualBox USB;c:\windows\system32\drivers\VBoxUSB.sys [14.1.2011 16:13 31888]
S3 XLoader;PLEXTOR EZ-USB FX2 FIRMWARE LOADER (XLoader.sys);c:\windows\system32\drivers\XLoader.sys [21.1.2004 19:55 13696]
S4 freenet;Freenet background service;c:\program files\Freenet\bin\wrapper-windows-x86-32.exe [12.10.2010 2:11 241664]
S4 ICQ Service;ICQ Service;c:\program files\ICQ6Toolbar\ICQ Service.exe [22.4.2011 16:20 247096]
S4 Modaservice;Modaservice;c:\program files\Lectra\Modaservice\modaserv.exe [26.1.2011 15:12 162304]
S4 Update lucky leap;Update lucky leap;c:\program files\lucky leap\updateluckyleap.exe [30.8.2013 5:34 65312]
S4 Util lucky leap;Util lucky leap;c:\program files\lucky leap\bin\utilluckyleap.exe [3.10.2013 11:28 65312]
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
2009-08-20 12:24 451872 ----a-w- c:\program files\Common Files\LightScribe\LSRunOnce.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2013-10-22 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-03-14 09:57]
.
2013-10-21 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2011-06-01 15:57]
.
2013-10-22 c:\windows\Tasks\avast! Emergency Update.job
- c:\program files\Alwil Software\Avast5\AvastEmUpdate.exe [2012-07-03 11:08]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://eu.ask.com/web?l=dis&o=APN10147&gct=hp&apn_dtid=^YYYYYY^YY^CZ&apn_ptnrs=^A6E&apn_uid=0273394124564542&p2=^A6E^YYYYYY^YY^CZ
IE: Download with Xilisoft Download YouTube Video - c:\program files\Xilisoft\Download YouTube Video\upod_link.HTM
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: {{7E6A20FB-153F-402c-A84B-1A64E1955D3D} - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - c:\windows\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748449} - {CC963627-B1DC-40E0-B52A-CF21EE748450} - c:\windows\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748450} - {CC963627-B1DC-40E0-B52A-CF21EE748450} - c:\windows\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748451} - {CC963627-B1DC-40E0-B52A-CF21EE748451} - c:\windows\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748452} - {CC963627-B1DC-40E0-B52A-CF21EE748452} - c:\windows\WebIE.dll
TCP: DhcpNameServer = 192.168.2.1
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
Notify-WgaLogon - (no file)
AddRemove-Audio Recorder for Free - c:\progra~1\AUDIOR~1\UNWISE.EXE
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.net
Rootkit scan 2013-10-22 10:33
Windows 5.1.2600 Service Pack 3 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\System\ControlSet013\Services\MEMSWEEP2]
"ImagePath"="\??\c:\windows\system32\F5.tmp"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_11_9_900_117_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_11_9_900_117_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System*]
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
.
Celkový čas: 2013-10-22 10:39:08
ComboFix-quarantined-files.txt 2013-10-22 08:38
.
Před spuštěním: 8 366 411 776
Po spuštění: 8 583 254 016
.
WindowsXP-KB310994-SP2-Pro-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect
.
- - End Of File - - FA0D53BD0E066BE5BA2701F916C22618
413FC2A0C716421B3158746D63736515
Odinstalujte Spybot - Search & Destroy - program ma uz nejlepsi leta davno za sebou a posledni cca 3 roky neni schopen celit aktualnim hrozbam
Dík.