VIRY.CZ

Dobrý den, nedávno sem na Notebook instaloval Windows 7 ultimate, vsechno bylo v poradku.. pak sem stahoval minaplikace na plochu ve kterem byli 2 trojske kone ktere jsem nasel dnes a odstranil, o vsem porad mi nejde spustit Windows Media Player a v miniaplikacich je porad virus ktery smazat nejde prosim moc o kontrolu :


Logfile of random's system information tool 1.08 (written by random/random)
Run by LeňuLka at 2010-09-27 14:23:05
Microsoft Windows 7 Ultimate
System drive C: has 200 GB (87%) free of 228 GB
Total RAM: 1977 MB (64% free)

HijackThis download failed

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-364375064-2871658783-4055262160-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-364375064-2871658783-4055262160-1000UA.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-06-19 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2DB66063-BB98-466A-AA0D-3E7ACF5ED853}]
WebTransBHO Class - C:\ProgramData\LangSoft\WebIE.dll [2010-09-23 798771]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{BFC32E1D-EE75-4A48-BC60-104E11EE2431} - WebTranslator - C:\ProgramData\LangSoft\WebIE.dll [2010-09-23 798771]
{E9FAB13D-4600-49E1-90D1-EE961C859D39} - HopSurf toolbar - C:\Program Files\Comodo\HopSurfToolbar\HopSurfToolbar_IE.dll [2010-09-27 1331392]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"PLFSetI"=C:\Windows\PLFSetI.exe [2008-07-29 200704]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2009-06-03 135168]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2009-06-03 166912]
"Persistence"=C:\Windows\system32\igfxpers.exe [2009-06-03 143872]
"COMODO Internet Security"=C:\Program Files\COMODO\COMODO Internet Security\cfp.exe [2010-04-09 2029456]
"Malwarebytes Anti-Malware (reboot)"=C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe [2010-04-29 1090952]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2009-07-14 1173504]
"RocketDock"=C:\Program Files\RocketDock\RocketDock.exe [2007-09-02 495616]
"Nektra OEAPI"= []
"OEXPRESS"= []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-06-09 976832]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-06-20 35760]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
C:\Users\LeňuLka\AppData\Local\Google\Update\GoogleUpdate.exe [2010-09-19 136176]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ]
C:\Program Files\ICQ6.5\ICQ.exe [2010-01-03 172792]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Malwarebytes' Anti-Malware]
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe [2010-04-29 437584]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files\Skype\Phone\Skype.exe [2010-09-01 14709640]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TrojanScanner]
C:\Program Files\Trojan Remover\Trjscan.exe /boot []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\uTorrent]
C:\Program Files\uTorrent\uTorrent.exe [2010-09-23 328568]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth.lnk]
C:\PROGRA~1\WIDCOMM\BLUETO~1\BTTray.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^LeňuLka^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.2.lnk]
C:\PROGRA~1\OPENOF~1.ORG\program\QUICKS~1.EXE [2010-06-07 1195520]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" C:\Windows\system32\guard32.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2009-06-03 215552]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CLPSLS]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\CLPSLS]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2010-09-27 14:23:05 ----D---- C:\rsit
2010-09-27 14:23:05 ----D---- C:\Program Files\trend micro
2010-09-27 14:00:47 ----A---- C:\Windows\ntbtlog.txt
2010-09-27 13:57:25 ----SHD---- C:\Config.Msi
2010-09-27 13:49:31 ----HD---- C:\VritualRoot
2010-09-27 13:45:13 ----D---- C:\ProgramData\COMODO
2010-09-27 13:41:17 ----D---- C:\Windows\pss
2010-09-27 13:21:03 ----D---- C:\ProgramData\TEMP
2010-09-27 12:57:12 ----D---- C:\Users\LeňuLka\AppData\Roaming\Malwarebytes
2010-09-27 12:57:06 ----A---- C:\Windows\system32\drivers\mbamswissarmy.sys
2010-09-27 12:57:05 ----D---- C:\ProgramData\Malwarebytes
2010-09-27 12:57:05 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2010-09-27 12:57:05 ----A---- C:\Windows\system32\drivers\mbam.sys
2010-09-27 12:56:19 ----D---- C:\Users\LeňuLka\AppData\Roaming\Comodo
2010-09-27 12:56:19 ----D---- C:\Program Files\Comodo
2010-09-27 12:55:55 ----D---- C:\ProgramData\Comodo Downloader
2010-09-27 12:55:42 ----D---- C:\Program Files\CCleaner
2010-09-24 15:00:01 ----D---- C:\Users\LeňuLka\AppData\Roaming\Media Player Classic
2010-09-23 21:41:22 ----A---- C:\Windows\WTRDCTM.INI
2010-09-23 21:37:54 ----D---- C:\TRANSLAT
2010-09-23 21:37:50 ----D---- C:\ProgramData\LangSoft
2010-09-23 21:37:26 ----D---- C:\Users\LeňuLka\AppData\Roaming\LangSoft
2010-09-23 21:04:39 ----D---- C:\Program Files\uTorrent
2010-09-23 21:03:25 ----D---- C:\Users\LeňuLka\AppData\Roaming\uTorrent
2010-09-21 05:29:15 ----A---- C:\Windows\system32\iertutil.dll
2010-09-20 09:54:32 ----D---- C:\Users\LeňuLka\AppData\Roaming\WinRAR
2010-09-20 09:52:34 ----D---- C:\Program Files\WinRAR
2010-09-20 08:37:50 ----D---- C:\Users\LeňuLka\AppData\Roaming\OpenOffice.org
2010-09-20 06:18:04 ----A---- C:\Windows\system32\TVWizudlg.exe
2010-09-20 06:18:04 ----A---- C:\Windows\system32\igfxtvcx.dll
2010-09-20 06:18:02 ----D---- C:\Windows\system32\Lang
2010-09-20 06:17:54 ----D---- C:\Program Files\Intel
2010-09-20 06:14:44 ----D---- C:\Windows\system32\Wat
2010-09-20 06:12:20 ----A---- C:\Windows\system32\msv1_0.dll
2010-09-20 06:10:55 ----A---- C:\Windows\system32\PresentationHostProxy.dll
2010-09-20 06:10:55 ----A---- C:\Windows\system32\PresentationHost.exe
2010-09-20 06:10:55 ----A---- C:\Windows\system32\netfxperf.dll
2010-09-20 06:10:55 ----A---- C:\Windows\system32\mscoree.dll
2010-09-20 06:10:55 ----A---- C:\Windows\system32\dfshim.dll
2010-09-20 06:06:15 ----A---- C:\Windows\system32\igxpun.exe
2010-09-20 06:04:16 ----A---- C:\Windows\system32\browserchoice.exe
2010-09-19 18:04:19 ----D---- C:\Program Files\OpenOffice.org 3
2010-09-19 17:55:41 ----A---- C:\Windows\UC.PIF
2010-09-19 17:55:41 ----A---- C:\Windows\RAR.PIF
2010-09-19 17:55:41 ----A---- C:\Windows\PKZIP.PIF
2010-09-19 17:55:41 ----A---- C:\Windows\PKUNZIP.PIF
2010-09-19 17:55:41 ----A---- C:\Windows\NOCLOSE.PIF
2010-09-19 17:55:41 ----A---- C:\Windows\LHA.PIF
2010-09-19 17:55:41 ----A---- C:\Windows\ARJ.PIF
2010-09-19 17:55:40 ----D---- C:\totalcmd
2010-09-19 17:47:32 ----D---- C:\Users\LeňuLka\AppData\Roaming\skypePM
2010-09-19 17:46:27 ----D---- C:\Program Files\Common Files\Skype
2010-09-19 17:46:24 ----RD---- C:\Program Files\Skype
2010-09-19 17:46:24 ----D---- C:\Users\LeňuLka\AppData\Roaming\Skype
2010-09-19 17:46:18 ----D---- C:\ProgramData\Skype
2010-09-19 17:44:03 ----D---- C:\Users\LeňuLka\AppData\Roaming\Macromedia
2010-09-19 17:42:51 ----D---- C:\ProgramData\ICQ
2010-09-19 17:40:07 ----D---- C:\Users\LeňuLka\AppData\Roaming\ICQ
2010-09-19 17:39:58 ----A---- C:\Windows\system32\drivers\tcpip.sys
2010-09-19 17:39:24 ----D---- C:\Program Files\ICQ6.5
2010-09-19 17:39:22 ----D---- C:\Windows\system32\Macromed
2010-09-19 17:39:20 ----A---- C:\Windows\system32\drivers\fvevol.sys
2010-09-19 17:39:18 ----A---- C:\Windows\system32\spoolsv.exe
2010-09-19 17:38:45 ----A---- C:\Windows\system32\ir32_32.dll
2010-09-19 17:38:45 ----A---- C:\Windows\system32\iccvid.dll
2010-09-19 17:38:43 ----A---- C:\Windows\system32\winlogon.exe
2010-09-19 17:38:43 ----A---- C:\Windows\explorer.exe
2010-09-19 17:38:40 ----A---- C:\Windows\system32\msasn1.dll
2010-09-19 17:38:35 ----A---- C:\Windows\system32\lsasrv.dll
2010-09-19 17:38:35 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2010-09-19 17:38:31 ----A---- C:\Windows\system32\rtutils.dll
2010-09-19 17:38:27 ----A---- C:\Windows\system32\inetcomm.dll
2010-09-19 17:38:25 ----A---- C:\Windows\system32\msxml3.dll
2010-09-19 17:38:22 ----A---- C:\Windows\system32\ntdll.dll
2010-09-19 17:38:08 ----A---- C:\Windows\system32\wmp.dll
2010-09-19 17:38:03 ----A---- C:\Windows\system32\drivers\dxgkrnl.sys
2010-09-19 17:38:03 ----A---- C:\Windows\system32\CertEnroll.dll
2010-09-19 17:38:01 ----A---- C:\Windows\system32\winresume.exe
2010-09-19 17:38:01 ----A---- C:\Windows\system32\winload.exe
2010-09-19 17:38:00 ----A---- C:\Windows\system32\wmploc.DLL
2010-09-19 17:37:38 ----A---- C:\Windows\system32\asycfilt.dll
2010-09-19 17:37:37 ----A---- C:\Windows\system32\drivers\srvnet.sys
2010-09-19 17:37:37 ----A---- C:\Windows\system32\drivers\srv2.sys
2010-09-19 17:37:37 ----A---- C:\Windows\system32\drivers\srv.sys
2010-09-19 17:37:34 ----A---- C:\Windows\system32\msdri.dll
2010-09-19 17:37:34 ----A---- C:\Windows\system32\CPFilters.dll
2010-09-19 17:37:33 ----A---- C:\Windows\system32\psisdecd.dll
2010-09-19 17:37:26 ----A---- C:\Windows\system32\kernel32.dll
2010-09-19 17:37:25 ----A---- C:\Windows\system32\apphelp.dll
2010-09-19 17:37:24 ----A---- C:\Windows\system32\t2embed.dll
2010-09-19 17:37:23 ----A---- C:\Windows\system32\jscript.dll
2010-09-19 17:37:21 ----A---- C:\Windows\system32\quartz.dll
2010-09-19 17:37:20 ----A---- C:\Windows\system32\msvidc32.dll
2010-09-19 17:37:20 ----A---- C:\Windows\system32\mciavi32.dll
2010-09-19 17:37:20 ----A---- C:\Windows\system32\avifil32.dll
2010-09-19 17:37:19 ----A---- C:\Windows\system32\tsbyuv.dll
2010-09-19 17:37:19 ----A---- C:\Windows\system32\msyuv.dll
2010-09-19 17:37:19 ----A---- C:\Windows\system32\msrle32.dll
2010-09-19 17:37:19 ----A---- C:\Windows\system32\iyuv_32.dll
2010-09-19 17:37:17 ----A---- C:\Windows\system32\ntoskrnl.exe
2010-09-19 17:37:17 ----A---- C:\Windows\system32\ntkrnlpa.exe
2010-09-19 17:37:13 ----A---- C:\Windows\system32\mshtml.dll
2010-09-19 17:37:12 ----A---- C:\Windows\system32\ieframe.dll
2010-09-19 17:37:11 ----A---- C:\Windows\system32\urlmon.dll
2010-09-19 17:37:11 ----A---- C:\Windows\system32\mstime.dll
2010-09-19 17:37:10 ----A---- C:\Windows\system32\iedkcs32.dll
2010-09-19 17:37:09 ----A---- C:\Windows\system32\wininet.dll
2010-09-19 17:37:09 ----A---- C:\Windows\system32\msfeedsbs.dll
2010-09-19 17:37:09 ----A---- C:\Windows\system32\jsproxy.dll
2010-09-19 17:37:09 ----A---- C:\Windows\system32\ieui.dll
2010-09-19 17:37:09 ----A---- C:\Windows\system32\iepeers.dll
2010-09-19 17:37:08 ----A---- C:\Windows\system32\msfeedssync.exe
2010-09-19 17:37:05 ----A---- C:\Windows\system32\shell32.dll
2010-09-19 17:36:57 ----A---- C:\Windows\system32\vbscript.dll
2010-09-19 17:36:52 ----A---- C:\Windows\system32\secproc_ssp_isv.dll
2010-09-19 17:36:52 ----A---- C:\Windows\system32\secproc_ssp.dll
2010-09-19 17:36:52 ----A---- C:\Windows\system32\secproc_isv.dll
2010-09-19 17:36:52 ----A---- C:\Windows\system32\secproc.dll
2010-09-19 17:36:52 ----A---- C:\Windows\system32\RMActivate_ssp_isv.exe
2010-09-19 17:36:52 ----A---- C:\Windows\system32\RMActivate_ssp.exe
2010-09-19 17:36:52 ----A---- C:\Windows\system32\RMActivate_isv.exe
2010-09-19 17:36:52 ----A---- C:\Windows\system32\RMActivate.exe
2010-09-19 17:35:42 ----D---- C:\Users\LeňuLka\AppData\Roaming\Mozilla
2010-09-19 17:35:37 ----D---- C:\Program Files\Mozilla Firefox 4.0 Beta 6
2010-09-19 17:35:21 ----A---- C:\Windows\system32\fontsub.dll
2010-09-19 17:35:21 ----A---- C:\Windows\system32\atmlib.dll
2010-09-19 17:35:21 ----A---- C:\Windows\system32\atmfd.dll
2010-09-19 17:35:19 ----A---- C:\Windows\system32\tzres.dll
2010-09-19 17:35:03 ----A---- C:\Windows\system32\schannel.dll
2010-09-19 17:35:02 ----A---- C:\Windows\system32\drivers\mrxsmb20.sys
2010-09-19 17:35:02 ----A---- C:\Windows\system32\drivers\mrxsmb10.sys
2010-09-19 17:35:02 ----A---- C:\Windows\system32\drivers\mrxsmb.sys
2010-09-19 17:34:59 ----A---- C:\Windows\system32\win32k.sys
2010-09-19 17:29:37 ----N---- C:\Windows\system32\MpSigStub.exe
2010-09-19 17:26:40 ----A---- C:\Windows\system32\wintrust.dll
2010-09-19 17:26:21 ----A---- C:\Windows\system32\cabview.dll
2010-09-19 11:42:08 ----A---- C:\Windows\system32\unrar.dll
2010-09-19 11:42:07 ----A---- C:\Windows\avisplitter.ini
2010-09-19 11:42:03 ----A---- C:\Windows\system32\yv12vfw.dll
2010-09-19 11:42:03 ----A---- C:\Windows\system32\xvidvfw.dll
2010-09-19 11:42:03 ----A---- C:\Windows\system32\xvidcore.dll
2010-09-19 11:42:03 ----A---- C:\Windows\system32\ff_vfw.dll.manifest
2010-09-19 11:42:03 ----A---- C:\Windows\system32\ff_vfw.dll
2010-09-19 11:42:01 ----D---- C:\Program Files\K-Lite Codec Pack
2010-09-19 10:01:35 ----A---- C:\Windows\USB_VIDEO_REG.exe
2010-09-19 10:01:35 ----A---- C:\Windows\PLFSetI.exe
2010-09-19 10:01:35 ----A---- C:\Windows\PidList.ini
2010-09-19 10:01:35 ----A---- C:\Windows\Image.dll
2010-09-19 10:01:35 ----A---- C:\Windows\Acer Crystal Eye webcam.EXE
2010-09-19 09:48:27 ----D---- C:\Program Files\Stardock
2010-09-19 09:38:52 ----D---- C:\Program Files\Google
2010-09-19 09:37:53 ----D---- C:\ProgramData\Alwil Software
2010-09-19 09:37:53 ----D---- C:\Program Files\Alwil Software
2010-09-19 09:36:20 ----D---- C:\Windows\system32\x64
2010-09-19 09:36:20 ----A---- C:\Windows\system32\vsnp2uvc.dll
2010-09-19 09:36:20 ----A---- C:\Windows\system32\snp2uvc.sys
2010-09-19 09:36:20 ----A---- C:\Windows\system32\sncduvc.sys
2010-09-19 09:36:20 ----A---- C:\Windows\system32\rsnp2uvc.dll
2010-09-19 09:36:20 ----A---- C:\Windows\system32\PLFSetL.exe
2010-09-19 09:36:20 ----A---- C:\Windows\system32\PidList.ini
2010-09-19 09:36:19 ----HD---- C:\Program Files\InstallShield Installation Information
2010-09-19 09:34:38 ----A---- C:\Windows\iun6002.exe
2010-09-19 09:33:47 ----D---- C:\Users\LeňuLka\AppData\Roaming\Adobe
2010-09-19 09:32:45 ----D---- C:\ProgramData\Adobe
2010-09-19 09:32:39 ----D---- C:\Program Files\Common Files\Adobe
2010-09-19 09:32:39 ----D---- C:\Program Files\Adobe
2010-09-19 09:32:06 ----SHD---- C:\Windows\Installer
2010-09-19 09:06:18 ----D---- C:\ProgramData\ashampoo
2010-09-19 09:06:14 ----D---- C:\Program Files\Ashampoo
2010-09-19 08:50:45 ----D---- C:\Program Files\RocketDock
2010-09-18 21:29:47 ----D---- C:\Users\LeňuLka\AppData\Roaming\GHISLER
2010-09-18 21:25:03 ----D---- C:\Windows\Panther
2010-09-18 21:14:32 ----A---- C:\Program Files\Acer Crystal Eye webcam.EXE
2010-09-18 21:12:03 ----D---- C:\Windows.old
2010-09-18 20:54:59 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-09-18 20:49:59 ----D---- C:\Users\LeňuLka\AppData\Roaming\Identities
2010-09-18 20:44:43 ----SD---- C:\Users\LeňuLka\AppData\Roaming\Microsoft
2010-09-18 20:44:43 ----D---- C:\Users\LeňuLka\AppData\Roaming\Media Center Programs
2010-09-18 20:43:50 ----SHD---- C:\Recovery
2010-09-18 20:43:50 ----SHD---- C:\ProgramData\Šablony
2010-09-18 20:43:50 ----SHD---- C:\ProgramData\Plocha
2010-09-18 20:43:50 ----SHD---- C:\ProgramData\Oblíbené položky
2010-09-18 20:43:50 ----SHD---- C:\ProgramData\Nabídka Start
2010-09-18 20:43:50 ----SHD---- C:\ProgramData\Dokumenty
2010-09-18 20:43:50 ----SHD---- C:\ProgramData\Data aplikací
2010-09-18 20:29:25 ----D---- C:\Windows\SoftwareDistribution
2010-09-18 20:25:53 ----D---- C:\Windows\Prefetch

======List of files/folders modified in the last 1 months======

2010-09-27 14:23:06 ----D---- C:\Windows\Temp
2010-09-27 14:23:05 ----RD---- C:\Program Files
2010-09-27 14:20:59 ----D---- C:\Windows\System32
2010-09-27 14:20:59 ----D---- C:\Windows\inf
2010-09-27 14:15:12 ----D---- C:\Windows\system32\config
2010-09-27 14:11:25 ----D---- C:\Windows
2010-09-27 14:11:23 ----D---- C:\Windows\system32\drivers
2010-09-27 14:11:14 ----SHD---- C:\System Volume Information
2010-09-27 14:06:01 ----D---- C:\Windows\system32\catroot2
2010-09-27 13:58:24 ----HD---- C:\ProgramData
2010-09-27 13:56:26 ----D---- C:\Windows\system32\DriverStore
2010-09-27 13:56:26 ----D---- C:\Windows\system32\catroot
2010-09-27 13:53:06 ----D---- C:\Windows\Logs
2010-09-27 13:47:18 ----D---- C:\Windows\system32\wdi
2010-09-27 13:44:53 ----RSD---- C:\Windows\assembly
2010-09-27 13:43:38 ----RSHD---- C:\RECYCLER
2010-09-27 13:11:52 ----D---- C:\Windows\debug
2010-09-27 12:21:23 ----D---- C:\Windows\twain_32
2010-09-25 08:34:03 ----D---- C:\Windows\system32\LogFiles
2010-09-23 20:16:34 ----D---- C:\Windows\system32\Tasks
2010-09-23 15:12:17 ----D---- C:\Windows\ModemLogs
2010-09-23 14:11:14 ----SD---- C:\Windows\system32\Microsoft
2010-09-22 20:16:32 ----D---- C:\Windows\system32\NDF
2010-09-22 19:53:11 ----D---- C:\Windows\rescache
2010-09-21 08:01:10 ----D---- C:\Windows\winsxs
2010-09-20 09:04:09 ----D---- C:\Windows\Microsoft.NET
2010-09-20 06:14:50 ----D---- C:\Windows\system32\cs-CZ
2010-09-20 06:14:49 ----D---- C:\Program Files\Windows Mail
2010-09-20 06:14:48 ----D---- C:\Windows\system32\Boot
2010-09-20 06:14:48 ----D---- C:\Windows\AppPatch
2010-09-20 06:14:48 ----D---- C:\Program Files\Windows Media Player
2010-09-20 06:14:46 ----D---- C:\Windows\ehome
2010-09-20 06:14:45 ----D---- C:\Windows\system32\migration
2010-09-20 06:14:45 ----D---- C:\Program Files\Internet Explorer
2010-09-19 18:04:51 ----RSD---- C:\Windows\Fonts
2010-09-19 17:46:27 ----D---- C:\Program Files\Common Files
2010-09-19 17:36:00 ----D---- C:\Windows\Tasks
2010-09-19 17:34:09 ----SD---- C:\ProgramData\Microsoft
2010-09-19 09:38:06 ----D---- C:\Program Files\Common Files\microsoft shared
2010-09-19 09:32:15 ----D---- C:\Windows\system32\restore
2010-09-19 08:50:20 ----D---- C:\Windows\system32\drivers\UMDF
2010-09-18 21:24:51 ----RASH---- C:\BOOTSECT.BAK
2010-09-18 21:24:49 ----SHD---- C:\Boot
2010-09-18 21:24:32 ----D---- C:\Windows\Setup
2010-09-18 20:54:43 ----D---- C:\Windows\system32\wbem
2010-09-18 20:49:55 ----SHD---- C:\$Recycle.Bin
2010-09-18 20:44:42 ----RD---- C:\Users
2010-09-18 20:43:50 ----D---- C:\Program Files\Windows NT
2010-09-18 20:35:35 ----D---- C:\Windows\system32\CodeIntegrity
2010-09-18 20:30:02 ----D---- C:\Windows\system32\sysprep
2010-09-18 20:26:58 ----D---- C:\Windows\CSC

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2009-07-14 173648]
R1 cmderd;COMODO Internet Security Eradication Driver; C:\Windows\System32\DRIVERS\cmderd.sys [2010-04-09 16744]
R1 cmdGuard;COMODO Internet Security Sandbox Driver; C:\Windows\System32\DRIVERS\cmdguard.sys [2010-04-09 218560]
R1 cmdHlp;COMODO Internet Security Helper Driver; C:\Windows\System32\DRIVERS\cmdhlp.sys [2010-04-09 30112]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2009-07-14 387584]
R1 inspect;COMODO Internet Security Firewall Driver; C:\Windows\system32\DRIVERS\inspect.sys [2010-04-09 74408]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R3 athr;Atheros – ovladač pro zařízení pro rozšiřitelnou bezdrátovou síť LAN; C:\Windows\system32\DRIVERS\athr.sys [2009-07-14 1096704]
R3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 34816]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2009-07-14 58880]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2009-06-03 5915648]
R3 L1C;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller (NDIS 6.20); C:\Windows\system32\DRIVERS\L1C62x86.sys [2009-07-14 50688]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 14336]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\DRIVERS\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 BTDriver;Bluetooth Virtual Communications Driver; C:\Windows\system32\DRIVERS\btport.sys []
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2009-07-14 392704]
S3 BTKRNL;Bluetooth Bus Enumerator; C:\Windows\system32\DRIVERS\btkrnl.sys []
S3 btwmodem;Bluetooth Modem; C:\Windows\system32\DRIVERS\btwmodem.sys [2006-01-17 30285]
S3 BTWUSB;WIDCOMM USB Bluetooth Driver; C:\Windows\System32\Drivers\btwusb.sys []
S3 pciide;pciide; C:\Windows\system32\DRIVERS\pciide.sys [2009-07-14 12368]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2009-07-14 133120]
S3 s3cap;s3cap; C:\Windows\system32\DRIVERS\vms3cap.sys [2009-07-14 5632]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\DRIVERS\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; C:\Windows\system32\DRIVERS\storvsc.sys [2009-07-14 28224]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\DRIVERS\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\DRIVERS\vmbus.sys [2009-07-14 175824]
S3 VMBusHID;VMBusHID; C:\Windows\system32\DRIVERS\VMBusHID.sys [2009-07-14 17920]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 CLPSLS;COMODO livePCsupport Service; C:\Program Files\COMODO\COMODO livePCsupport\CLPSLS.exe [2010-02-19 148744]
R2 cmdAgent;COMODO Internet Security Helper Service; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [2010-04-09 1769216]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-09-19 136176]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-09-20 1343400]

-----------------EOF-----------------

Dejte log z ComboFix.

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode, pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k nezadoucim kolizim s rezidentem antispyware

Zde :

ComboFix 10-09-26.04 - LeňuLka 27.09.2010 19:52:40.2.1 - x86
Microsoft Windows 7 Ultimate 6.1.7600.0.1250.420.1029.18.1977.1357 [GMT 2:00]
Spuštěný z: E:\ComboFix.exe
.

((((((((((((((((((((((((( Soubory vytvořené od 2010-08-27 do 2010-09-27 )))))))))))))))))))))))))))))))
.

2010-09-27 18:04 . 2010-09-27 18:04 -------- d-----w- c:\users\Default\AppData\Local\temp
2010-09-27 12:23 . 2010-09-27 12:23 -------- d-----w- C:\rsit
2010-09-27 12:23 . 2010-09-27 12:23 -------- d-----w- c:\program files\trend micro
2010-09-27 11:49 . 2010-09-27 11:49 -------- d-----w- C:\VritualRoot
2010-09-27 11:45 . 2010-09-27 11:45 -------- d-----w- c:\programdata\COMODO
2010-09-27 11:44 . 2010-09-27 17:56 353888 ----a-w- c:\windows\system32\drivers\sfi.dat
2010-09-27 10:57 . 2010-04-29 13:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-09-27 10:57 . 2010-09-27 10:57 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-09-27 10:57 . 2010-09-27 10:57 -------- d-----w- c:\programdata\Malwarebytes
2010-09-27 10:57 . 2010-04-29 13:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-09-27 10:56 . 2010-09-27 11:02 -------- d-----w- c:\program files\Comodo
2010-09-27 10:56 . 2010-09-27 10:56 5542592 ----a-w- c:\programdata\Comodo Downloader\hopsurf.exe
2010-09-27 10:55 . 2010-09-27 10:56 -------- d-----w- c:\programdata\Comodo Downloader
2010-09-27 10:55 . 2010-09-27 10:55 -------- d-----w- c:\program files\CCleaner
2010-09-23 19:38 . 2010-09-23 19:39 798771 ----a-w- c:\programdata\LangSoft\WebIE.dll
2010-09-23 19:38 . 2010-09-23 19:39 356352 ----a-w- c:\programdata\LangSoft\TrnOutl.dll
2010-09-23 19:38 . 2010-09-23 19:39 299008 ----a-w- c:\programdata\LangSoft\TrnWord.dll
2010-09-23 19:37 . 2010-09-23 19:41 -------- d-----w- C:\TRANSLAT
2010-09-23 19:37 . 2010-09-23 19:39 -------- d-----w- c:\programdata\LangSoft
2010-09-23 19:04 . 2010-09-23 19:04 -------- d-----w- c:\program files\uTorrent
2010-09-20 04:18 . 2009-06-03 08:26 398848 ----a-w- c:\windows\system32\TVWizudlg.exe
2010-09-20 04:18 . 2009-06-03 08:26 140288 ----a-w- c:\windows\system32\igfxtvcx.dll
2010-09-20 04:18 . 2010-09-20 04:18 -------- d-----w- c:\windows\system32\Lang
2010-09-20 04:17 . 2010-09-20 04:17 -------- d-----w- c:\program files\Intel
2010-09-20 04:14 . 2010-09-20 04:14 -------- d-----w- c:\windows\system32\Wat
2010-09-20 04:12 . 2009-09-10 05:52 257024 ----a-w- c:\windows\system32\msv1_0.dll
2010-09-20 04:10 . 2009-11-25 10:47 99176 ----a-w- c:\windows\system32\PresentationHostProxy.dll
2010-09-20 04:10 . 2009-11-25 10:47 49472 ----a-w- c:\windows\system32\netfxperf.dll
2010-09-20 04:10 . 2009-11-25 10:47 297808 ----a-w- c:\windows\system32\mscoree.dll
2010-09-20 04:10 . 2009-11-25 10:47 295264 ----a-w- c:\windows\system32\PresentationHost.exe
2010-09-20 04:10 . 2009-11-25 10:47 1130824 ----a-w- c:\windows\system32\dfshim.dll
2010-09-20 04:06 . 2009-06-03 16:19 997912 ----a-w- c:\windows\system32\igxpun.exe
2010-09-20 04:04 . 2010-02-11 07:10 293376 ----a-w- c:\windows\system32\browserchoice.exe
2010-09-19 16:04 . 2010-09-20 06:35 -------- d-----w- c:\program files\OpenOffice.org 3
2010-09-19 15:55 . 2010-07-07 05:55 545 ----a-w- c:\windows\UC.PIF
2010-09-19 15:55 . 2010-07-07 05:55 545 ----a-w- c:\windows\RAR.PIF
2010-09-19 15:55 . 2010-07-07 05:55 545 ----a-w- c:\windows\PKZIP.PIF
2010-09-19 15:55 . 2010-07-07 05:55 545 ----a-w- c:\windows\PKUNZIP.PIF
2010-09-19 15:55 . 2010-07-07 05:55 545 ----a-w- c:\windows\NOCLOSE.PIF
2010-09-19 15:55 . 2010-07-07 05:55 545 ----a-w- c:\windows\LHA.PIF
2010-09-19 15:55 . 2010-07-07 05:55 545 ----a-w- c:\windows\ARJ.PIF
2010-09-19 15:55 . 2010-09-27 11:49 -------- d-----w- C:\totalcmd
2010-09-19 15:46 . 2010-09-19 15:46 -------- d-----w- c:\program files\Common Files\Skype
2010-09-19 15:46 . 2010-09-27 11:58 -------- d-----r- c:\program files\Skype
2010-09-19 15:46 . 2010-09-19 15:46 -------- d-----w- c:\programdata\Skype
2010-09-19 15:42 . 2010-09-19 15:42 -------- d-----w- c:\programdata\ICQ
2010-09-19 15:39 . 2010-06-14 06:12 1286016 ----a-w- c:\windows\system32\drivers\tcpip.sys
2010-09-19 15:39 . 2010-09-19 15:43 -------- d-----w- c:\program files\ICQ6.5
2010-09-19 15:39 . 2010-09-19 15:39 -------- d-----w- c:\windows\system32\Macromed
2010-09-19 15:39 . 2009-09-26 05:58 194488 ----a-w- c:\windows\system32\drivers\fvevol.sys
2010-09-19 15:39 . 2010-08-21 05:32 316928 ----a-w- c:\windows\system32\spoolsv.exe
2010-09-19 15:37 . 2010-03-05 07:42 67584 ----a-w- c:\windows\system32\asycfilt.dll
2010-09-19 15:36 . 2010-03-08 21:33 427520 ----a-w- c:\windows\system32\vbscript.dll
2010-09-19 15:36 . 2010-01-18 23:29 85504 ----a-w- c:\windows\system32\secproc_ssp_isv.dll
2010-09-19 15:36 . 2010-01-18 23:29 85504 ----a-w- c:\windows\system32\secproc_ssp.dll
2010-09-19 15:36 . 2010-01-18 23:29 365568 ----a-w- c:\windows\system32\secproc_isv.dll
2010-09-19 15:36 . 2010-01-18 23:29 369152 ----a-w- c:\windows\system32\secproc.dll
2010-09-19 15:36 . 2010-01-18 23:28 324608 ----a-w- c:\windows\system32\RMActivate_isv.exe
2010-09-19 15:36 . 2010-01-18 23:28 277504 ----a-w- c:\windows\system32\RMActivate_ssp_isv.exe
2010-09-19 15:36 . 2010-01-18 23:28 320512 ----a-w- c:\windows\system32\RMActivate.exe
2010-09-19 15:36 . 2010-01-18 23:28 280064 ----a-w- c:\windows\system32\RMActivate_ssp.exe
2010-09-19 15:35 . 2010-09-19 15:35 -------- d-----w- c:\program files\Mozilla Firefox 4.0 Beta 6
2010-09-19 15:35 . 2010-05-27 07:24 34304 ----a-w- c:\windows\system32\atmlib.dll
2010-09-19 15:35 . 2010-05-27 03:49 293888 ----a-w- c:\windows\system32\atmfd.dll
2010-09-19 15:35 . 2009-10-19 14:10 70656 ----a-w- c:\windows\system32\fontsub.dll
2010-09-19 15:35 . 2010-04-23 07:13 2048 ----a-w- c:\windows\system32\tzres.dll
2010-09-19 15:35 . 2010-06-16 05:48 224256 ----a-w- c:\windows\system32\schannel.dll
2010-09-19 15:35 . 2010-02-27 07:32 221696 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2010-09-19 15:35 . 2010-02-27 07:32 95744 ----a-w- c:\windows\system32\drivers\mrxsmb20.sys
2010-09-19 15:35 . 2010-02-27 07:32 123392 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2010-09-19 15:34 . 2010-06-19 04:07 2326016 ----a-w- c:\windows\system32\win32k.sys
2010-09-19 15:29 . 2010-05-21 12:14 221568 ------w- c:\windows\system32\MpSigStub.exe
2010-09-19 15:26 . 2009-12-29 06:55 172032 ----a-w- c:\windows\system32\wintrust.dll
2010-09-19 15:26 . 2010-01-09 06:52 132608 ----a-w- c:\windows\system32\cabview.dll
2010-09-19 09:42 . 2010-03-15 09:31 165376 ----a-w- c:\windows\system32\unrar.dll
2010-09-19 09:42 . 2010-09-14 08:00 108032 ----a-w- c:\windows\system32\ff_vfw.dll
2010-09-19 09:42 . 2010-06-08 16:10 790528 ----a-w- c:\windows\system32\xvidcore.dll
2010-09-19 09:42 . 2010-06-08 16:10 134144 ----a-w- c:\windows\system32\xvidvfw.dll
2010-09-19 09:42 . 2004-01-25 16:18 217088 ----a-w- c:\windows\system32\yv12vfw.dll
2010-09-19 09:42 . 2010-09-19 09:42 -------- d-----w- c:\program files\K-Lite Codec Pack
2010-09-19 08:01 . 2009-05-27 08:54 1654784 ----a-w- c:\windows\Acer Crystal Eye webcam.EXE
2010-09-19 08:01 . 2009-05-27 08:48 8362 ----a-w- c:\windows\Suyin.reg
2010-09-19 08:01 . 2008-12-30 11:42 626688 ----a-w- c:\windows\Image.dll
2010-09-19 08:01 . 2008-07-29 17:29 200704 ----a-w- c:\windows\PLFSetI.exe
2010-09-19 08:01 . 2008-06-25 12:22 20480 ----a-w- c:\windows\USB_VIDEO_REG.exe
2010-09-19 07:48 . 2010-09-19 07:48 -------- d-----w- c:\program files\Stardock
2010-09-19 07:38 . 2010-09-19 07:38 -------- d-----w- c:\program files\Google
2010-09-19 07:37 . 2010-09-19 07:37 -------- d-----w- c:\programdata\Alwil Software
2010-09-19 07:37 . 2010-09-19 07:37 -------- d-----w- c:\program files\Alwil Software
2010-09-19 07:36 . 2010-09-19 07:55 -------- d-----w- c:\windows\system32\x64
2010-09-19 07:36 . 2007-08-13 12:54 1749376 ----a-w- c:\windows\system32\snp2uvc.sys
2010-09-19 07:36 . 2007-08-06 12:04 28032 ----a-w- c:\windows\system32\sncduvc.sys
2010-09-19 07:36 . 2007-07-05 10:35 94208 ----a-w- c:\windows\system32\PLFSetL.exe
2010-09-19 07:36 . 2007-04-02 10:40 172032 ----a-w- c:\windows\system32\rsnp2uvc.dll
2010-09-19 07:36 . 2006-11-07 07:17 286720 ----a-w- c:\windows\system32\vsnp2uvc.dll
2010-09-19 07:36 . 2010-09-27 11:02 -------- d--h--w- c:\program files\InstallShield Installation Information
2010-09-19 07:34 . 2010-09-19 07:34 737280 ----a-w- c:\windows\iun6002.exe
2010-09-19 07:32 . 2010-09-19 07:32 -------- d-----w- c:\program files\Common Files\Adobe
2010-09-19 07:32 . 2010-09-27 11:58 -------- d-sh--w- c:\windows\Installer
2010-09-19 07:06 . 2010-09-19 07:06 -------- d-----w- c:\programdata\ashampoo
2010-09-19 07:06 . 2010-09-19 07:06 -------- d-----w- c:\program files\Ashampoo
2010-09-19 06:50 . 2010-09-19 06:50 -------- d-----w- c:\program files\RocketDock
2010-09-18 19:25 . 2010-09-18 18:44 -------- d-----w- c:\windows\Panther
2010-09-18 19:14 . 2009-03-11 15:07 1380352 ----a-w- c:\program files\Acer Crystal Eye webcam.EXE
2010-09-18 19:12 . 2010-09-18 19:30 -------- d-----w- C:\Windows.old
2010-09-18 18:54 . 2010-09-27 17:52 -------- d-----w- c:\windows\system32\wbem\Performance
2010-09-18 18:44 . 2010-09-27 11:56 -------- d-----w- c:\users\LeňuLka

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-09-27 17:52 . 2009-07-14 08:44 622660 ----a-w- c:\windows\system32\perfh005.dat
2010-09-27 17:52 . 2009-07-14 08:44 118810 ----a-w- c:\windows\system32\perfc005.dat
2010-09-20 04:14 . 2009-07-14 02:37 -------- d-----w- c:\program files\Windows Mail
2010-09-19 15:47 . 2010-09-19 15:47 56 ---ha-w- c:\programdata\ezsidmv.dat
2010-09-19 06:50 . 2010-09-19 06:50 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdFs_01_09_00.Wdf
2010-09-18 18:43 . 2010-09-18 18:43 -------- d-sh--we c:\programdata\Plocha
2010-09-18 18:43 . 2010-09-18 18:43 -------- d-sh--we c:\programdata\Oblíbené položky
2010-09-18 18:43 . 2010-09-18 18:43 -------- d-sh--we c:\programdata\Šablony
2010-09-18 18:43 . 2010-09-18 18:43 -------- d-sh--we c:\programdata\Nabídka Start
2010-09-18 18:43 . 2010-09-18 18:43 -------- d-sh--we c:\programdata\Dokumenty
2010-09-18 18:43 . 2010-09-18 18:43 -------- d-sh--we c:\programdata\Data aplikací
2010-07-29 06:30 . 2010-09-19 15:38 197632 ----a-w- c:\windows\system32\ir32_32.dll
2010-07-29 06:30 . 2010-09-19 15:38 82944 ----a-w- c:\windows\system32\iccvid.dll
2010-06-30 06:25 . 2010-09-19 15:37 978432 ----a-w- c:\windows\system32\wininet.dll
2007-04-20 04:30 . 2010-09-18 19:14 222382 ----a-w- c:\program files\Acer Crystal Eye webcam.ico
2009-06-10 21:26 . 2009-07-14 02:04 9633792 --sha-r- c:\windows\Fonts\StaticCache.dat
2009-07-14 01:14 . 2009-07-13 23:42 396800 --sha-w- c:\windows\winsxs\x86_microsoft-windows-mail-app_31bf3856ad364e35_6.1.7600.16385_none_f12e83abb108c86c\WinMail.exe
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1173504]
"RocketDock"="c:\program files\RocketDock\RocketDock.exe" [2007-09-02 495616]
"RESTART_STICKY_NOTES"="c:\windows\system32\StikyNot.exe" [2009-07-14 354304]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PLFSetI"="c:\windows\PLFSetI.exe" [2008-07-29 200704]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2009-06-03 135168]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2009-06-03 166912]
"Persistence"="c:\windows\system32\igfxpers.exe" [2009-06-03 143872]
"COMODO Internet Security"="c:\program files\COMODO\COMODO Internet Security\cfp.exe" [2010-04-08 2029456]
"Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2010-04-29 1090952]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\System32\guard32.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CLPSLS]
@="Service"

[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
backup=c:\windows\pss\Bluetooth.lnk.CommonStartup
backupExtension=.CommonStartup

[HKLM\~\startupfolder\C:^Users^LeňuLka^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.2.lnk]
path=c:\users\LeňuLka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk
backup=c:\windows\pss\OpenOffice.org 3.2.lnk.Startup
backupExtension=.Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2010-06-09 08:06 976832 ----a-r- c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2010-06-20 02:04 35760 ----a-w- c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
2010-09-19 15:35 136176 ----atw- c:\users\LeňuLka\AppData\Local\Google\Update\GoogleUpdate.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ]
2010-01-03 15:30 172792 ----a-w- c:\program files\ICQ6.5\ICQ.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Malwarebytes' Anti-Malware]
2010-04-29 13:39 437584 ----a-w- c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
2010-09-01 14:39 14709640 ----a-r- c:\program files\Skype\Phone\Skype.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\uTorrent]
2010-09-23 19:04 328568 ----a-w- c:\program files\uTorrent\uTorrent.exe

R2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-09-19 136176]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2010-09-20 1343400]
S1 cmderd;COMODO Internet Security Eradication Driver;c:\windows\system32\DRIVERS\cmderd.sys [2010-04-08 16744]
S1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\system32\DRIVERS\cmdguard.sys [2010-04-08 218560]
S1 cmdHlp;COMODO Internet Security Helper Driver;c:\windows\system32\DRIVERS\cmdhlp.sys [2010-04-08 30112]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [2009-07-13 48128]
S2 CLPSLS;COMODO livePCsupport Service;c:\program files\COMODO\COMODO livePCsupport\CLPSLS.exe [2010-02-19 148744]
S3 L1C;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller (NDIS 6.20);c:\windows\system32\DRIVERS\L1C62x86.sys [2009-07-13 50688]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [2009-07-13 14336]

.
Obsah adresáře 'Naplánované úlohy'

2010-09-27 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-09-19 07:38]

2010-09-27 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-09-19 07:38]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.hopsurf.com
IE: Send to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: {{7E6A20FB-153F-402c-A84B-1A64E1955D3D} - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - c:\programdata\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748449} - {CC963627-B1DC-40E0-B52A-CF21EE748449} - c:\programdata\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748450} - {CC963627-B1DC-40E0-B52A-CF21EE748450} - c:\programdata\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748451} - {CC963627-B1DC-40E0-B52A-CF21EE748451} - c:\programdata\LangSoft\WebIE.dll
IE: {{CC963627-B1DC-40E0-B52A-CF21EE748452} - {CC963627-B1DC-40E0-B52A-CF21EE748452} - c:\programdata\LangSoft\WebIE.dll
FF - ProfilePath - c:\users\LeňuLka\AppData\Roaming\Mozilla\Firefox\Profiles\3t0xlau6.default\
FF - prefs.js: browser.startup.homepage - hxxp://start.icq.com/
FF - plugin: c:\program files\Google\Update\1.2.183.23\npGoogleOneClick8.dll
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

HKCU-Run-Nektra OEAPI - (no file)
HKCU-Run-OEXPRESS - (no file)
MSConfigStartUp-TrojanScanner - c:\program files\Trojan Remover\Trjscan.exe


.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(484)
c:\windows\System32\guard32.dll

- - - - - - - > 'lsass.exe'(544)
c:\windows\system32\guard32.dll
c:\windows\system32\EFSCORE.dll
.
Celkový čas: 2010-09-27 20:12:11
ComboFix-quarantined-files.txt 2010-09-27 18:12

Před spuštěním: Volných bajtů: 209 640 136 704
Po spuštění: Volných bajtů: 209 428 271 104

- - End Of File - - 90C098F55B4DE3629B604AEB12672225

V logu nic nebezpečného není vidět. Víte, v jakých souborech má být vir?

Trojske koňe byli ve stazenem soboru (gadgets.rar) ktery byl smazan ale nainstalovana miniaplikace je porad v pc a nejde odinstalovat nejde media player a vypnani nejde musim natvrdo tak uz nevim :/

Jak se ta aplikace jmenuje? Pokud to budu znát a najdu po ni stopy v logu, můžeme ji ComboFixem odstřelit.

Dobre

Jmenuje se ,,Anime PC Meter,,

V logu není vidět. Zkuste spustit regedit přes příkazový řádek, najděte všechny řetězce, které obsahují "Anime PC Meter" a smažte je. Možná pak ještě budete muset reinstalovat WMP.

Pred regedit nic nenaslo tak uz nevim

zb0ra píše:Pred regedit nic nenaslo tak uz nevim

V tom případě musí mít aplikace jiný název. V registry by se to muselo objevit.