VIRY.CZ

Ahoj.
Mam tu mensi problem. Stale se mi objevuje trojan ve slozce C:\windows\system32 s nazvem ntswrl32.dll. NOD ho sice vzdycky najde, ale on se zase obnovi. Bohuzel to, co ho obnovuje, uz nenajde (proskenoval jsem cele PC). Dale se obcas obejvi v C:\windows\temp soubor NOD**.tmp (misto ** je nejake cislo nebo pismeno). NOD32 to identifikuje jako Win32/Cakl.A trojský kůň

Zde vypsi z logu z RSIT:

Kód: Vybrat vše

Logfile of random's system information tool 1.08 (written by random/random)
Run by Beneš at 2010-10-16 21:33:00
Systém Microsoft Windows XP Professional Service Pack 2
System drive C: has 4 GB (7%) free of 50 GB
Total RAM: 1023 MB (50% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:33:06, on 16.10.2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
F:\PacSteamT\UnDead.Injector.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program files\Kdp\Kdp.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\MSI Afterburner\MSIAfterburner.exe
C:\WINDOWS\system32\scvhost.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DAEMON Tools Lite\DTLite.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\cFosSpeed\cfosspeed.exe
C:\Program Files\cFosSpeed\spd.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\MSI Afterburner\Bundle\OSDServer\RTSS.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Beneš\Plocha\RSIT.exe
C:\Program Files\trend micro\Beneš.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - (no file)
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,,F:\PacSteamT\UnDead.Injector.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [Email] c:\Program files\Kdp\Kdp.exe
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [cFosTASKTR] C:\WINDOWS\BOX_cFosTASK.exe
O4 - HKLM\..\Run: [MSIAfterburner] "C:\Program Files\MSI Afterburner\MSIAfterburner.exe" /s
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [scvhost] C:\WINDOWS\system32\scvhost.exe
O4 - HKLM\..\Run: [HKLM] C:\WINDOWS\system32\Config\svchost.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [HKCU] C:\WINDOWS\system32\Config\svchost.exe
O4 - HKLM\..\Policies\Explorer\Run: [Policies] C:\WINDOWS\system32\Config\svchost.exe
O4 - HKCU\..\Policies\Explorer\Run: [Policies] C:\WINDOWS\system32\Config\svchost.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Zástupce - cfosspeed.lnk = C:\Program Files\cFosSpeed\cfosspeed.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra button: Fiddler2 - {CF819DA3-9882-4944-ADF5-6EF17ECF3C6E} - "C:\Program Files\Fiddler2\Fiddler.exe" (file missing)
O9 - Extra 'Tools' menuitem: Fiddler2 - {CF819DA3-9882-4944-ADF5-6EF17ECF3C6E} - "C:\Program Files\Fiddler2\Fiddler.exe" (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1275243083187
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: cFosSpeed System Service (cFosSpeedS) - cFos Software GmbH - C:\Program Files\cFosSpeed\spd.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe
O23 - Service: PDAgent - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDAgent.exe
O23 - Service: PDEngine - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDEngine.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: RadClock - Unknown owner - C:\WINDOWS\system32\RadClock.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - StarWind Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
O23 - Service: TeamViewer 5 (TeamViewer5) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe

--
End of file - 6899 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\AppleSoftwareUpdate.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2010-06-19 75200]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-05-25 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-05-25 79648]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-04-06 102400]
"Email"=c:\Program files\Kdp\Kdp.exe [2000-12-02 566784]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2009-02-06 2021400]
"cFosTASKTR"=C:\WINDOWS\BOX_cFosTASK.exe [2010-05-01 407476]
"MSIAfterburner"=C:\Program Files\MSI Afterburner\MSIAfterburner.exe [2010-08-31 355640]
"KernelFaultCheck"=C:\WINDOWS\system32\dumprep 0 -k []
"scvhost"=C:\WINDOWS\system32\scvhost.exe [2008-10-26 2082816]
"HKLM"=C:\WINDOWS\system32\Config\svchost.exe [2005-11-09 1172472]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"Policies"=C:\WINDOWS\system32\Config\svchost.exe [2005-11-09 1172472]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2004-08-17 15360]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]
"HKCU"=C:\WINDOWS\system32\Config\svchost.exe [2005-11-09 1172472]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"Policies"=C:\WINDOWS\system32\Config\svchost.exe [2005-11-09 1172472]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acrobat Assistant 8.0]
C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe [2010-06-19 640440]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Acrobat Speed Launcher]
C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe [2010-06-19 38840]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2010-09-21 932288]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeBridge]
 []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS4ServiceManager]
C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [2008-08-14 611712]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AlcoholAutomount]
C:\Program Files\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [2010-08-20 33120]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUS SmartDoctor]
C:\Program Files\ASUS\SmartDoctor\SmartDoctor.exe [2010-04-02 1212416]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CanonMyPrinter]
C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2009-11-02 2508104]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cFosTASKTR]
C:\WINDOWS\BOX_cFosTASK.exe [2010-05-01 407476]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EvtMgr6]
C:\Program Files\Logitech\SetPointP\SetPoint.exe [2010-01-27 1312848]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ]
C:\Program Files\ICQ7.2\ICQ.exe [2010-08-22 133432]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files\QuickTime\QTTask.exe [2010-03-17 421888]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan]
C:\WINDOWS\SOUNDMAN.EXE [2006-08-02 577536]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
c:\program files\steam\steam.exe [2010-10-02 1242448]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-02-18 248040]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UnlockerAssistant]
C:\Program Files\Unlocker\UnlockerAssistant.exe [2008-05-02 15872]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WWebserver]
C:\WWebserver\wwebserver.exe -autostart []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Beneš^Nabídka Start^Programy^Po spuštění^ATI Tray Tools.lnk]
C:\Program Files\Radeon Omega Drivers\v4.8.442\ATI Tray Tools\atitray.exe  []

C:\Documents and Settings\Beneš\Nabídka Start\Programy\Po spuštění
Zástupce - cfosspeed.lnk - C:\Program Files\cFosSpeed\cfosspeed.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2010-04-07 159744]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\LBTWlgn]
c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll [2010-01-29 64592]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{35B2861B-2B26-4691-9FF0-09083722C736}"=C:\WINDOWS\system32\RadExe.dll [2005-04-27 200704]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\HLSW\hlsw.exe"="C:\Program Files\HLSW\hlsw.exe:*:Enabled:HLSW Application"
"D:\hry\COD2 jen MP\CoD2MP_s.exe"="D:\hry\COD2 jen MP\CoD2MP_s.exe:*:Enabled:CoD2MP_s"
"D:\hry\UT3\Binaries\UT3.exe"="D:\hry\UT3\Binaries\UT3.exe:*:Enabled:UT3"
"C:\Program Files\uTorrent\utorrent.exe"="C:\Program Files\uTorrent\utorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\ICQ7.2\ICQ.exe"="C:\Program Files\ICQ7.2\ICQ.exe:*:Enabled:ICQ7.2"
"C:\Program Files\ICQ7.2\aolload.exe"="C:\Program Files\ICQ7.2\aolload.exe:*:Enabled:aolload.exe"
"C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe"="C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe:*:Enabled:Adobe CSI CS4"
"C:\Program Files\TeamViewer\Version5\TeamViewer.exe"="C:\Program Files\TeamViewer\Version5\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application"
"C:\Program Files\Steam\Steam.exe"="C:\Program Files\Steam\Steam.exe:*:Enabled:Steam"
"C:\Program Files\Steam\steamapps\common\mafia ii - public demo\launcher.exe"="C:\Program Files\Steam\steamapps\common\mafia ii - public demo\launcher.exe:*:Enabled:Mafia II - Demo"
"C:\Documents and Settings\Beneš\Plocha\utorrent-setup\utorrent.exe"="C:\Documents and Settings\Beneš\Plocha\utorrent-setup\utorrent.exe:*:Enabled:µTorrent"
"C:\Program Files\Skype\App\Skype\Phone\Skype.exe"="C:\Program Files\Skype\App\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\WINDOWS\system32\scvhost.exe"="C:\WINDOWS\system32\scvhost.exe:*:Enabled:Dnode"
"F:\PacSteamT\SteamApps\common\luxor\Luxor.exe"="F:\PacSteamT\SteamApps\common\luxor\Luxor.exe:*:Enabled:Luxor"
"F:\PacSteamT\SteamApps\common\luxor 2\Luxor2.exe"="F:\PacSteamT\SteamApps\common\luxor 2\Luxor2.exe:*:Enabled:Luxor 2"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\ICQ7.2\ICQ.exe"="C:\Program Files\ICQ7.2\ICQ.exe:*:Enabled:ICQ7.2"
"C:\Program Files\ICQ7.2\aolload.exe"="C:\Program Files\ICQ7.2\aolload.exe:*:Enabled:aolload.exe"

======List of files/folders created in the last 1 months======

2010-10-16 21:33:01 ----D---- C:\Program Files\trend micro
2010-10-16 21:33:00 ----D---- C:\rsit
2010-10-16 21:14:51 ----A---- C:\WINDOWS\system32\ldapi32.exe
2010-10-16 20:39:39 ----RA---- C:\WINDOWS\system32\ntcvx32.dll
2010-10-16 20:35:10 ----D---- C:\Program Files\Unlocker
2010-10-16 20:13:53 ----D---- C:\Documents and Settings\All Users\Data aplikací\Nero
2010-10-16 16:51:14 ----D---- C:\Program Files\Alcohol Soft
2010-10-15 22:51:52 ----A---- C:\WINDOWS\system32\b-78880598.txt
2010-10-15 22:50:52 ----A---- C:\WINDOWS\system32\benik333-11240589.txt
2010-10-15 22:50:23 ----A---- C:\WINDOWS\system32\benik333-59801145.txt
2010-10-15 22:50:12 ----A---- C:\WINDOWS\system32\login.txt
2010-10-15 22:50:12 ----A---- C:\WINDOWS\system32\benik333-50345618.txt
2010-10-15 22:04:52 ----D---- C:\Program Files\Steam2
2010-10-15 21:31:30 ----D---- C:\Documents and Settings\All Users\Data aplikací\MumboJumbo
2010-10-15 21:17:01 ----A---- C:\Documents and Settings\Beneš\Data aplikací\Beneš3SQLite3.dll
2010-10-15 21:12:45 ----A---- C:\WINDOWS\system32\d3dx9.dll
2010-10-15 21:12:45 ----A---- C:\WINDOWS\system32\D3DX81ab.dll
2010-10-15 21:12:43 ----D---- C:\Program Files\Cheat Engine
2010-10-15 20:39:23 ----SH---- C:\WINDOWS\system32\scvhost.exe
2010-10-15 18:17:08 ----D---- C:\Program Files\Common Files\Thraex Software
2010-10-13 20:51:59 ----D---- C:\Program Files\Linearteam
2010-10-11 20:07:58 ----D---- C:\Documents and Settings\Beneš\Data aplikací\SkypePM
2010-10-11 18:19:27 ----D---- C:\Users
2010-10-11 17:26:44 ----D---- C:\WINDOWS\XSxS
2010-10-11 17:26:44 ----D---- C:\Program Files\Xenocode
2010-10-10 11:44:49 ----D---- C:\Documents and Settings\Beneš\Data aplikací\Skype
2010-10-10 11:44:47 ----D---- C:\Documents and Settings\Beneš\Data aplikací\SkypePM-BackupBySkypePortable
2010-10-03 19:59:26 ----D---- C:\Program Files\OpenAL
2010-10-03 19:59:26 ----A---- C:\WINDOWS\system32\wrap_oal.dll
2010-10-03 19:59:26 ----A---- C:\WINDOWS\system32\OpenAL32.dll
2010-10-03 19:59:05 ----D---- C:\Program Files\Common Files\Futuremark Shared
2010-10-03 19:57:27 ----D---- C:\Program Files\Futuremark
2010-10-03 18:50:33 ----D---- C:\Program Files\MSI Kombustor
2010-10-03 18:10:23 ----D---- C:\Program Files\MSI Afterburner
2010-10-03 00:31:16 ----A---- C:\WINDOWS\system32\drivers\EIO_XP.sys
2010-10-03 00:29:40 ----D---- C:\Program Files\ASUS
2010-10-03 00:29:38 ----A---- C:\WINDOWS\system32\drivers\EIO64_xp.sys
2010-10-02 23:53:15 ----D---- C:\Documents and Settings\Beneš\Data aplikací\FreeStone Group
2010-10-02 23:53:12 ----D---- C:\Program Files\Video Card Stability Test
2010-10-02 20:09:18 ----ASH---- C:\hiberfil.sys
2010-09-28 17:33:54 ----A---- C:\WINDOWS\system32\wdfcoinstaller01009.dll
2010-09-28 17:33:54 ----A---- C:\WINDOWS\system32\nmwcdcocls.dll
2010-09-28 17:33:54 ----A---- C:\WINDOWS\system32\drivers\ccdcmb.sys
2010-09-28 17:33:50 ----A---- C:\WINDOWS\system32\nmwcdcls.dll
2010-09-28 17:33:49 ----D---- C:\Program Files\Nokia
2010-09-28 17:07:32 ----A---- C:\WINDOWS\system32\drivers\s3017whnt.sys
2010-09-28 17:07:32 ----A---- C:\WINDOWS\system32\drivers\s3017wh.sys
2010-09-28 17:07:32 ----A---- C:\WINDOWS\system32\drivers\s3017obex.sys
2010-09-28 17:07:32 ----A---- C:\WINDOWS\system32\drivers\s3017mgmt.sys
2010-09-28 17:07:32 ----A---- C:\WINDOWS\system32\drivers\s3017mdm.sys
2010-09-28 17:07:32 ----A---- C:\WINDOWS\system32\drivers\s3017mdfl.sys
2010-09-28 17:07:32 ----A---- C:\WINDOWS\system32\drivers\s3017cmnt.sys
2010-09-28 17:07:32 ----A---- C:\WINDOWS\system32\drivers\s3017cm.sys
2010-09-28 17:07:32 ----A---- C:\WINDOWS\system32\drivers\s3017bus.sys
2010-09-24 20:17:18 ----D---- C:\Program Files\Valve

======List of files/folders modified in the last 1 months======

2010-10-16 21:33:01 ----RD---- C:\Program Files
2010-10-16 21:27:09 ----D---- C:\WINDOWS\Temp
2010-10-16 21:27:09 ----D---- C:\WINDOWS\system32
2010-10-16 21:24:08 ----D---- C:\Program Files\cFosSpeed
2010-10-16 21:23:54 ----D---- C:\WINDOWS
2010-10-16 21:13:45 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-10-16 21:12:50 ----SHD---- C:\WINDOWS\Installer
2010-10-16 21:01:43 ----HD---- C:\WINDOWS\inf
2010-10-16 21:01:41 ----D---- C:\WINDOWS\system32\CatRoot2
2010-10-16 20:38:35 ----SH---- C:\boot.ini
2010-10-16 20:38:35 ----A---- C:\WINDOWS\win.ini
2010-10-16 20:38:35 ----A---- C:\WINDOWS\system.ini
2010-10-16 20:30:18 ----D---- C:\Documents and Settings\Beneš\Data aplikací\uTorrent
2010-10-16 20:13:51 ----D---- C:\Program Files\Common Files
2010-10-16 19:39:42 ----D---- C:\WINDOWS\Prefetch
2010-10-16 18:12:55 ----RSHD---- C:\WINDOWS\system32\config
2010-10-16 16:49:59 ----D---- C:\Program Files\Microsoft Silverlight
2010-10-16 12:29:39 ----D---- C:\Documents and Settings\Beneš\Data aplikací\Vso
2010-10-15 23:32:44 ----D---- C:\Program Files\RelevantKnowledge
2010-10-15 22:00:14 ----D---- C:\Program Files\Steam
2010-10-15 17:34:33 ----D---- C:\Program Files\JDownloader
2010-10-15 16:58:14 ----D---- C:\Documents and Settings\Beneš\Data aplikací\HLSW
2010-10-15 14:58:02 ----D---- C:\WINDOWS\system32\Restore
2010-10-15 14:54:16 ----D---- C:\Program Files\Fraps
2010-10-14 16:15:01 ----A---- C:\WINDOWS\system32\PnkBstrB.exe
2010-10-14 16:14:41 ----A---- C:\WINDOWS\system32\PnkBstrA.exe
2010-10-12 23:32:49 ----D---- C:\Documents and Settings\Beneš\Data aplikací\MyPhoneExplorer
2010-10-04 20:45:24 ----D---- C:\WINDOWS\system32\DirectX
2010-10-04 20:42:49 ----RSD---- C:\WINDOWS\assembly
2010-10-04 20:41:39 ----D---- C:\WINDOWS\Logs
2010-10-03 21:20:08 ----D---- C:\WINDOWS\Minidump
2010-10-03 19:59:19 ----D---- C:\WINDOWS\WinSxS
2010-10-03 19:58:58 ----HD---- C:\Program Files\InstallShield Installation Information
2010-10-03 18:05:04 ----D---- C:\WINDOWS\system32\drivers
2010-10-03 17:32:21 ----D---- C:\Documents and Settings\Beneš\Data aplikací\ICQ
2010-10-03 00:29:23 ----D---- C:\Program Files\Common Files\InstallShield
2010-10-03 00:04:57 ----D---- C:\Program Files\ATI Technologies
2010-10-02 20:08:24 ----A---- C:\WINDOWS\ntbtlog.txt
2010-10-02 19:42:39 ----RSD---- C:\WINDOWS\Fonts
2010-10-02 17:47:36 ----D---- C:\Documents and Settings\Beneš\Data aplikací\TeamViewer
2010-10-01 16:53:44 ----D---- C:\utorrent
2010-09-28 17:34:03 ----DC---- C:\WINDOWS\system32\DRVSTORE
2010-09-24 20:17:57 ----D---- C:\hry
2010-09-18 23:02:43 ----D---- C:\Program Files\Mozilla Firefox

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 giveio;giveio; C:\WINDOWS\system32\giveio.sys [1996-04-03 5248]
R0 nv_agp;NVIDIA nForce AGP Bus Filter; C:\WINDOWS\system32\DRIVERS\nv_agp.sys [2004-04-02 21760]
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI VIA; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2004-08-04 61056]
R0 speedfan;speedfan; C:\WINDOWS\system32\speedfan.sys [2006-09-24 5248]
R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys [2010-10-16 436792]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
R1 AmdPPM;Ovladač procesoru HwPState AMD; C:\WINDOWS\system32\DRIVERS\AmdPPM.sys [2007-04-16 33792]
R1 ehdrv;ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [2009-02-06 106208]
R1 epfwtdir;epfwtdir; C:\WINDOWS\system32\DRIVERS\epfwtdir.sys [2009-02-06 93336]
R2 Aspi32;Aspi32; C:\WINDOWS\System32\drivers\aspi32.sys [2002-07-17 16877]
R2 DefragFS;DefragFS; C:\WINDOWS\system32\drivers\DefragFS.sys [2010-06-17 135184]
R2 eamon;eamon; C:\WINDOWS\system32\DRIVERS\eamon.sys [2009-02-06 113448]
R2 EIO_XP;EIO_XP; \??\C:\WINDOWS\system32\drivers\EIO_XP.sys []
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2006-08-18 4017536]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2010-04-07 4687872]
R3 cFosSpeed;cFosSpeed Miniport; C:\WINDOWS\system32\DRIVERS\cfosspeed.sys [2010-05-31 1079000]
R3 DKbFltr;Dritek HotKey Keyboard Filter Driver; C:\WINDOWS\system32\DRIVERS\DKbFltr.sys [2002-11-08 17071]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2001-08-17 9600]
R3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; C:\WINDOWS\system32\DRIVERS\LHidFilt.Sys [2009-11-10 35984]
R3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; C:\WINDOWS\system32\DRIVERS\LMouFilt.Sys [2009-11-10 37392]
R3 LUsbFilt;Logitech SetPoint KMDF USB Filter; C:\WINDOWS\System32\Drivers\LUsbFilt.Sys [2009-11-10 28560]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 pcouffin;VSO Software pcouffin; C:\WINDOWS\System32\Drivers\pcouffin.sys [2010-07-22 47360]
R3 RadProbe;Radeon Probe Driver; C:\WINDOWS\system32\DRIVERS\RadProbe.sys [2005-04-27 20428]
R3 RTCore32;RTCore32; \??\C:\Program Files\MSI Afterburner\RTCore32.sys []
R3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-04 20992]
R3 usbstor;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2004-08-04 26496]
R3 WDC_SAM;WD SCSI Pass Thru driver; C:\WINDOWS\system32\DRIVERS\wdcsam.sys [2009-02-13 11520]
R3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
S1 ATITool;ATITool Overclocking Utility; C:\WINDOWS\system32\DRIVERS\ATITool.sys [2007-08-08 28968]
S1 atitray;atitray; \??\C:\Program Files\Radeon Omega Drivers\v4.8.442\ATI Tray Tools\atitray.sys []
S3 a89b4e1n;a89b4e1n; C:\WINDOWS\system32\drivers\a89b4e1n.sys []
S3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2004-08-17 60800]
S3 aytn4wbx;aytn4wbx; C:\WINDOWS\system32\drivers\aytn4wbx.sys []
S3 cpuz130;cpuz130; \??\C:\DOCUME~1\BENE~1\LOCALS~1\Temp\cpuz130\cpuz_x32.sys []
S3 ggflt;SEMC USB Flash Driver Filter; C:\WINDOWS\system32\DRIVERS\ggflt.sys [2009-04-06 13224]
S3 ggsemc;SEMC USB Flash Driver; C:\WINDOWS\system32\DRIVERS\ggsemc.sys [2009-04-06 25512]
S3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2004-08-17 61824]
S3 nmwcd;Nokia USB Phone Parent; C:\WINDOWS\system32\drivers\ccdcmb.sys [2010-02-26 18176]
S3 s116bus;Sony Ericsson Device 116 driver (WDM); C:\WINDOWS\system32\DRIVERS\s116bus.sys [2007-04-03 83336]
S3 s116mdfl;Sony Ericsson Device 116 USB WMC Modem Filter; C:\WINDOWS\system32\DRIVERS\s116mdfl.sys [2007-04-03 15112]
S3 s116mdm;Sony Ericsson Device 116 USB WMC Modem Driver; C:\WINDOWS\system32\DRIVERS\s116mdm.sys [2007-04-03 108680]
S3 s116mgmt;Sony Ericsson Device 116  USB WMC Device Management Drivers (WDM); C:\WINDOWS\system32\DRIVERS\s116mgmt.sys [2007-04-03 100488]
S3 s116nd5;Sony Ericsson Device 116 USB Ethernet Emulation SEMC116 (NDIS); C:\WINDOWS\system32\DRIVERS\s116nd5.sys [2007-04-03 23176]
S3 s116obex;Sony Ericsson Device 116 USB WMC OBEX Interface; C:\WINDOWS\system32\DRIVERS\s116obex.sys [2007-04-03 98696]
S3 s116unic;Sony Ericsson Device 116 USB Ethernet Emulation SEMC116 (WDM); C:\WINDOWS\system32\DRIVERS\s116unic.sys [2007-04-03 99080]
S3 s3017bus;Sony Ericsson Device 3017 driver (WDM); C:\WINDOWS\system32\DRIVERS\s3017bus.sys [2007-12-10 83880]
S3 s3017mdfl;Sony Ericsson Device 3017 USB WMC Modem Filter; C:\WINDOWS\system32\DRIVERS\s3017mdfl.sys [2007-12-10 15016]
S3 s3017mdm;Sony Ericsson Device 3017 USB WMC Modem Driver; C:\WINDOWS\system32\DRIVERS\s3017mdm.sys [2007-12-10 110632]
S3 s3017mgmt;Sony Ericsson Device 3017 USB WMC Device Management Drivers (WDM); C:\WINDOWS\system32\DRIVERS\s3017mgmt.sys [2007-12-10 104616]
S3 s3017obex;Sony Ericsson Device 3017 USB WMC OBEX Interface; C:\WINDOWS\system32\DRIVERS\s3017obex.sys [2007-12-10 100648]
S3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2004-08-03 31616]
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2004-08-03 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2004-08-03 15104]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.ex [2010-04-07 602112]
R2 cFosSpeedS;cFosSpeed System Service; C:\Program Files\cFosSpeed\spd.exe [2010-05-31 314584]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2009-02-06 727720]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2004-08-17 14336]
S2 RadClock;RadClock; C:\WINDOWS\system32\RadClock.exe [2005-04-27 102400]
S2 StarWindServiceAE;StarWind AE Service; C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [2009-12-23 370688]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2009-02-06 20680]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2010-06-20 655624]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 idsvc;Služba Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2010-05-25 153376]
S3 LBTServ;Logitech Bluetooth Service; C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe [2010-01-29 292944]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 PDAgent;PDAgent; C:\Program Files\Raxco\PerfectDisk\PDAgent.exe [2010-08-10 1570056]
S3 PDEngine;PDEngine; C:\Program Files\Raxco\PerfectDisk\PDEngine.exe [2010-08-10 1475848]
S3 PnkBstrA;PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [2010-10-14 75064]
S3 TeamViewer5;TeamViewer 5; C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe [2010-07-06 173352]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\wmpnetwk.exe [2007-01-05 913920]
S4 GS In-Game Service;GS In-Game Service; C:\Program Files\GameTracker\GSInGameService.exe [2010-04-14 1648480]
S4 NetTcpPortSharing;Služba sdílení portů Net.Tcp; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

Nejlepsi by samozrejme bylo reinstalovat win, ale ted to jeste potrebuju nejakou dobu zachovat takhle

Diky Benik3

Ono toho tam bude víc. Dejte log z ComboFix.

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode, pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k nezadoucim kolizim s rezidentem antispyware

OK. Tak tady to je

Kód: Vybrat vše

ComboFix 10-10-16.01 - Beneš 16.10.2010  23:42:57.1.1 - x86
Systém Microsoft Windows XP Professional  5.1.2600.2.1250.420.1029.18.1023.678 [GMT 2:00]
Spuštěný z: c:\documents and settings\Beneš\Plocha\ComboFix.exe
AV: ESET NOD32 Antivirus 4.0 *On-access scanning disabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
 * Rezidentní štít AV je zapnutý

.

(((((((((((((((((((((((((((((((((((((((   Ostatní výmazy   )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\program files\FunWebProducts
c:\program files\MyWebSearch
c:\program files\MyWebSearch\bar\1.bin\MWSOEMON.EXE
c:\program files\MyWebSearch\bar\1.bin\MWSOESTB.DLL
c:\program files\MyWebSearch\bar\Settings\s_pid.dat
c:\program files\RelevantKnowledge
c:\program files\RelevantKnowledge\MSVCP71.DLL
c:\program files\RelevantKnowledge\MSVCR71.DLL
c:\windows\system32\config\svchost.exe
c:\windows\system32\f3PSSavr.scr
c:\windows\system32\ntcvx32.dll
c:\windows\system32\scvhost.exe

.
(((((((((((((((((((((((((   Soubory vytvořené od 2010-09-16 do 2010-10-16  )))))))))))))))))))))))))))))))
.

2010-10-16 21:11 . 2010-10-16 21:12    --------    d-----w-    c:\documents and settings\Beneš\Data aplikací\Nero
2010-10-16 21:02 . 2010-10-16 21:07    --------    d-----w-    c:\program files\Nero
2010-10-16 21:02 . 2010-10-16 21:08    --------    d-----w-    c:\program files\Common Files\Nero
2010-10-16 19:33 . 2010-10-16 19:33    --------    d-----w-    c:\program files\trend micro
2010-10-16 19:33 . 2010-10-16 19:33    --------    d-----w-    C:\rsit
2010-10-16 18:35 . 2010-10-16 19:20    --------    d-----w-    c:\program files\Unlocker
2010-10-16 18:13 . 2010-10-16 21:05    --------    d-----w-    c:\documents and settings\All Users\Data aplikací\Nero
2010-10-16 17:25 . 2010-10-16 17:32    --------    d-----w-    c:\documents and settings\Beneš\Local Settings\Data aplikací\NFS Underground 2
2010-10-16 14:51 . 2010-10-16 14:51    --------    d-----w-    c:\program files\Alcohol Soft
2010-10-15 20:04 . 2010-10-15 20:05    --------    d-----w-    c:\program files\Steam2
2010-10-15 19:31 . 2010-10-15 19:31    --------    d-----w-    c:\documents and settings\All Users\Data aplikací\MumboJumbo
2010-10-15 19:12 . 2009-11-03 12:07    679936    ----a-w-    c:\windows\system32\D3DX81ab.dll
2010-10-15 19:12 . 2009-11-03 12:07    1970176    ----a-w-    c:\windows\system32\d3dx9.dll
2010-10-15 19:12 . 2010-10-15 19:12    --------    d-----w-    c:\program files\Cheat Engine
2010-10-13 18:51 . 2010-10-13 18:51    --------    d-----w-    c:\program files\Linearteam
2010-10-11 16:19 . 2010-10-11 16:19    --------    d-----w-    C:\Users
2010-10-11 16:19 . 2010-10-11 16:19    --------    d-----w-    c:\documents and settings\Beneš\Impostazioni locali
2010-10-11 15:37 . 2010-10-11 15:37    --------    d-sh--w-    c:\documents and settings\LocalService\IETldCache
2010-10-11 15:26 . 2010-10-16 20:39    --------    d-----w-    c:\windows\XSxS
2010-10-11 15:26 . 2010-10-11 15:26    --------    d-----w-    c:\program files\Xenocode
2010-10-10 09:44 . 2010-10-10 09:44    --------    d-----w-    c:\documents and settings\Beneš\Data aplikací\Skype
2010-10-03 17:59 . 2010-10-03 17:59    444952    ----a-w-    c:\windows\system32\wrap_oal.dll
2010-10-03 17:59 . 2010-10-03 17:59    109080    ----a-w-    c:\windows\system32\OpenAL32.dll
2010-10-03 17:59 . 2010-10-03 17:59    --------    d-----w-    c:\program files\OpenAL
2010-10-03 17:59 . 2010-10-03 17:59    --------    d-----w-    c:\program files\Common Files\Futuremark Shared
2010-10-03 17:57 . 2010-10-03 17:57    --------    d-----w-    c:\program files\Futuremark
2010-10-03 16:50 . 2010-10-03 16:50    --------    d-----w-    c:\program files\MSI Kombustor
2010-10-03 16:10 . 2010-10-15 19:17    --------    d-----w-    c:\program files\MSI Afterburner
2010-10-02 22:31 . 2009-07-30 09:15    14336    ----a-w-    c:\windows\system32\drivers\EIO_XP.sys
2010-10-02 22:29 . 2010-10-02 22:29    --------    d-----w-    c:\program files\ASUS
2010-10-02 22:29 . 2010-10-02 22:29    14336    ----a-w-    c:\windows\system32\drivers\EIO64_xp.sys
2010-10-02 21:53 . 2010-10-02 21:53    --------    d-----w-    c:\documents and settings\Beneš\Data aplikací\FreeStone Group
2010-10-02 21:53 . 2010-10-02 21:53    --------    d-----w-    c:\program files\Video Card Stability Test
2010-09-28 15:33 . 2010-02-26 12:32    662016    ----a-w-    c:\windows\system32\nmwcdcocls.dll
2010-09-28 15:33 . 2010-02-26 12:32    18176    ----a-w-    c:\windows\system32\drivers\ccdcmb.sys
2010-09-28 15:33 . 2010-02-26 12:19    1461992    ----a-w-    c:\windows\system32\wdfcoinstaller01009.dll
2010-09-28 15:33 . 2010-02-26 12:32    92672    ----a-w-    c:\windows\system32\nmwcdcls.dll
2010-09-28 15:33 . 2010-09-28 15:33    --------    d-----w-    c:\program files\Nokia
2010-09-28 15:07 . 2007-12-10 05:22    12200    ----a-w-    c:\windows\system32\drivers\s3017whnt.sys
2010-09-28 15:07 . 2007-12-10 05:22    12200    ----a-w-    c:\windows\system32\drivers\s3017wh.sys
2010-09-28 15:07 . 2007-12-10 05:22    100648    ----a-w-    c:\windows\system32\drivers\s3017obex.sys
2010-09-28 15:07 . 2007-12-10 05:22    104616    ----a-w-    c:\windows\system32\drivers\s3017mgmt.sys
2010-09-28 15:07 . 2007-12-10 05:22    15016    ----a-w-    c:\windows\system32\drivers\s3017mdfl.sys
2010-09-28 15:07 . 2007-12-10 05:22    110632    ----a-w-    c:\windows\system32\drivers\s3017mdm.sys
2010-09-28 15:07 . 2007-12-10 05:22    12200    ----a-w-    c:\windows\system32\drivers\s3017cmnt.sys
2010-09-28 15:07 . 2007-12-10 05:22    12200    ----a-w-    c:\windows\system32\drivers\s3017cm.sys
2010-09-28 15:07 . 2007-12-10 05:22    83880    ----a-w-    c:\windows\system32\drivers\s3017bus.sys
2010-09-24 18:17 . 2010-09-24 18:17    --------    d-----w-    c:\program files\Valve
2010-09-24 18:17 . 2010-09-24 18:17    184452    ----a-w-    c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\iGdi.dll
2010-09-24 18:17 . 2003-09-03 00:28    724992    ----a-w-    c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\iKernel.dll
2010-09-24 18:17 . 2003-09-03 00:27    69715    ----a-w-    c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\ctor.dll
2010-09-24 18:17 . 2003-09-03 00:26    266240    ----a-w-    c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\iscript.dll
2010-09-24 18:17 . 2003-09-03 00:26    192512    ----a-w-    c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\iuser.dll
2010-09-24 18:17 . 2003-09-03 00:25    5632    ----a-w-    c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\DotNetInstaller.exe
2010-09-24 18:17 . 2010-09-24 18:17    311428    ----a-w-    c:\program files\Common Files\InstallShield\Professional\RunTime\09\00\Intel32\Setup.dll

.
((((((((((((((((((((((((((((((((((((((((   Find3M výpis   ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
.

------- Sigcheck -------

[-] 2010-09-13 . 1AB9333EC47BC064050A2BF554AE5A95 . 360320 . . [5.1.2600.3394] . . c:\windows\system32\drivers\tcpip.sys
[7] 2008-06-20 . AD978A1B783B5719720CFF204B666C8E . 361600 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3QFE\tcpip.sys
[7] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3GDR\tcpip.sys
[7] 2008-06-20 . 2A5554FC5B1E04E131230E3CE035C3F9 . 360320 . . [5.1.2600.3394] . . c:\windows\system32\dllcache\tcpip.sys
[7] 2008-06-20 . 744E57C99232201AE98C49168B918F48 . 360960 . . [5.1.2600.3394] . . c:\windows\$hf_mig$\KB951748\SP2QFE\tcpip.sys
[7] 2004-08-03 . 9F4B36614A0FC234525BA224957DE55C . 359040 . . [5.1.2600.2180] . . c:\windows\$NtUninstallKB951748$\tcpip.sys
.
((((((((((((((((((((((((((((((((((   Spouštěcí body v registru   )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny. 
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2010-04-01 357696]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-04-06 102400]
"Email"="c:\program files\Kdp\Kdp.exe" [2000-12-02 566784]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [2009-02-06 2021400]
"cFosTASKTR"="c:\windows\BOX_cFosTASK.exe" [2010-05-01 407476]
"MSIAfterburner"="c:\program files\MSI Afterburner\MSIAfterburner.exe" [2010-08-31 355640]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-17 15360]

c:\documents and settings\Beneç\Nabˇdka Start\Programy\Po spuçtŘnˇ\
Z stupce - cfosspeed.lnk - c:\program files\cFosSpeed\cfosspeed.exe [2010-5-25 801496]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{35B2861B-2B26-4691-9FF0-09083722C736}"= "c:\windows\system32\RadExe.dll" [2005-04-27 200704]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\LBTWlgn]
2010-01-29 21:17    64592    ----a-w-    c:\program files\Common Files\LogiShrd\Bluetooth\LBTWLgn.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute    REG_MULTI_SZ       PDBoot.exe\0autocheck autochk *

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"

[HKLM\~\startupfolder\C:^Documents and Settings^Beneš^Nabídka Start^Programy^Po spuštění^ATI Tray Tools.lnk]
path=c:\documents and settings\Beneš\Nabídka Start\Programy\Po spuštění\ATI Tray Tools.lnk
backup=c:\windows\pss\ATI Tray Tools.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acrobat Assistant 8.0]
2010-06-19 10:36    640440    ----a-w-    c:\program files\Adobe\Acrobat 9.0\Acrobat\acrotray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Acrobat Speed Launcher]
2010-06-19 17:04    38840    ----a-w-    c:\program files\Adobe\Acrobat 9.0\Acrobat\acrobat_sl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2010-09-21 18:37    932288    ----a-w-    c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS4ServiceManager]
2008-08-14 05:58    611712    ----a-w-    c:\program files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AlcoholAutomount]
2010-08-20 11:03    33120    ----a-w-    c:\program files\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUS SmartDoctor]
2010-04-02 09:10    1212416    ----a-w-    c:\program files\ASUS\SmartDoctor\SmartDoctor.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CanonMyPrinter]
2009-11-02 00:30    2508104    ----a-w-    c:\program files\Canon\MyPrinter\BJMYPRT.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cFosTASKTR]
2010-05-01 07:46    407476    ----a-w-    c:\windows\BOX_cFosTASK.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EvtMgr6]
2010-01-27 11:30    1312848    ----a-w-    c:\program files\Logitech\SetPointP\SetPoint.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ]
2010-08-22 11:02    133432    ----a-w-    c:\program files\ICQ7.2\ICQ.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2010-03-17 19:53    421888    ----a-w-    c:\program files\QuickTime\QTTask.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan]
2006-08-02 21:12    577536    ----a-w-    c:\windows\SOUNDMAN.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
2010-10-02 17:44    1242448    ----a-w-    c:\program files\Steam\Steam.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2010-02-18 09:43    248040    ----a-w-    c:\program files\Common Files\Java\Java Update\jusched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UnlockerAssistant]
2008-05-02 04:15    15872    ----a-w-    c:\program files\Unlocker\UnlockerAssistant.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\HLSW\\hlsw.exe"=
"d:\\hry\\COD2 jen MP\\CoD2MP_s.exe"=
"d:\\hry\\UT3\\Binaries\\UT3.exe"=
"c:\\Program Files\\uTorrent\\utorrent.exe"=
"c:\\Program Files\\ICQ7.2\\ICQ.exe"=
"c:\\Program Files\\ICQ7.2\\aolload.exe"=
"c:\\Program Files\\Common Files\\Adobe\\CS4ServiceManager\\CS4ServiceManager.exe"=
"c:\\Program Files\\TeamViewer\\Version5\\TeamViewer.exe"=
"c:\\Program Files\\Steam\\Steam.exe"=
"c:\\Program Files\\Steam\\steamapps\\common\\mafia ii - public demo\\launcher.exe"=
"c:\\Documents and Settings\\Beneš\\Plocha\\utorrent-setup\\utorrent.exe"=
"c:\\Program Files\\Skype\\App\\Skype\\Phone\\Skype.exe"=
"f:\\PacSteamT\\SteamApps\\common\\luxor\\Luxor.exe"=
"f:\\PacSteamT\\SteamApps\\common\\luxor 2\\Luxor2.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"5353:TCP"= 5353:TCP:Adobe CSI CS4

R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [6.2.2009 14:23 106208]
R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [6.2.2009 14:24 93336]
R2 ekrn;ESET Service;c:\program files\ESET\ESET NOD32 Antivirus\ekrn.exe [6.2.2009 14:23 727720]
R3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\drivers\wdcsam.sys [25.5.2010 14:56 11520]
S1 atitray;atitray;\??\c:\program files\Radeon Omega Drivers\v4.8.442\ATI Tray Tools\atitray.sys --> c:\program files\Radeon Omega Drivers\v4.8.442\ATI Tray Tools\atitray.sys [?]
S3 cpuz130;cpuz130;\??\c:\docume~1\BENE~1\LOCALS~1\Temp\cpuz130\cpuz_x32.sys --> c:\docume~1\BENE~1\LOCALS~1\Temp\cpuz130\cpuz_x32.sys [?]
S3 ggflt;SEMC USB Flash Driver Filter;c:\windows\system32\drivers\ggflt.sys [22.7.2010 22:35 13224]
S3 RTCore32;RTCore32;c:\program files\MSI Afterburner\RTCore32.sys [31.8.2010 5:04 12088]
S3 s3017bus;Sony Ericsson Device 3017 driver (WDM);c:\windows\system32\drivers\s3017bus.sys [28.9.2010 17:07 83880]
S3 s3017mdfl;Sony Ericsson Device 3017 USB WMC Modem Filter;c:\windows\system32\drivers\s3017mdfl.sys [28.9.2010 17:07 15016]
S3 s3017mdm;Sony Ericsson Device 3017 USB WMC Modem Driver;c:\windows\system32\drivers\s3017mdm.sys [28.9.2010 17:07 110632]
S3 s3017mgmt;Sony Ericsson Device 3017 USB WMC Device Management Drivers (WDM);c:\windows\system32\drivers\s3017mgmt.sys [28.9.2010 17:07 104616]
S3 s3017obex;Sony Ericsson Device 3017 USB WMC OBEX Interface;c:\windows\system32\drivers\s3017obex.sys [28.9.2010 17:07 100648]
S3 TeamViewer5;TeamViewer 5;c:\program files\TeamViewer\Version5\TeamViewer_Service.exe [6.7.2010 17:03 173352]
S4 GS In-Game Service;GS In-Game Service;c:\program files\GameTracker\GSInGameService.exe [22.7.2010 23:35 1648480]
S4 sptd;sptd;c:\windows\system32\drivers\sptd.sys [5.6.2010 18:20 436792]
.
Obsah adresáře 'Naplánované úlohy'

2010-05-25 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 10:34]
.
.
------- Doplňkový sken -------
.
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
FF - ProfilePath - c:\documents and settings\Beneš\Data aplikací\Mozilla\Firefox\Profiles\ef3xvmlu.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.cz
FF - plugin: c:\program files\Java\jre6\bin\new_plugin\npdeployJava1.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true); 
c:\program files\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true); 
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
c:\program files\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -

HKLM-Run-scvhost - c:\windows\system32\scvhost.exe
MSConfigStartUp-WWebserver - c:\wwebserver\wwebserver.exe
AddRemove-G-steam - f:\g-steam\Uninstall.exe
AddRemove-Heretic - c:\heretic\uninst.exe
AddRemove-IrfanView - c:\program files\IrfanView\iv_uninstall.exe
AddRemove-Steam App 10 - f:\pacsteamt\steam.exe
AddRemove-Steam App 15380 - f:\pacsteamt\steam.exe
AddRemove-Steam App 15920 - f:\pacsteamt\steam.exe
AddRemove-Steam App 15970 - f:\pacsteamt\steam.exe
AddRemove-Steam App 17300 - f:\pacsteamt\steam.exe
AddRemove-Steam App 2390 - f:\pacsteamt\steam.exe
AddRemove-Steam App 24810 - f:\pacsteamt\steam.exe
AddRemove-Steam App 40990 - f:\pacsteamt\steam.exe
AddRemove-Steam App 4500 - f:\pacsteamt\steam.exe
AddRemove-Steam App 500 - f:\pacsteamt\steam.exe
AddRemove-Steam App 50130 - f:\pacsteamt\steam.exe
AddRemove-Steam App 70 - f:\pacsteamt\steam.exe
AddRemove-Steam App 7940 - f:\pacsteamt\steam.exe
AddRemove-Steam App 8200 - f:\pacsteamt\steam.exe
AddRemove-WOLAPI - c:\westwood\Internet\UnstllAP.EXE


.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10h_ActiveX.exe,-101"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10h_ActiveX.exe"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"

[HKEY_LOCAL_MACHINE\software\Microsoft\ESENT\Process\S*  Ë*a*M* *h*Ä*c*k* *v*ë*r*s*i*O*n* *3*.*0* *b*y* *h*P*3*2*1*h*e*l*d*e*r*\DEBUG]
"Trace Level"=""
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'winlogon.exe'(792)
c:\windows\system32\Ati2evxx.dll
c:\windows\system32\atiadlxx.dll
c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll
.
Celkový čas: 2010-10-16  23:49:10
ComboFix-quarantined-files.txt  2010-10-16 21:49

Před spuštěním: 1 983 401 984
Po spuštění: 4 413 026 304

WindowsXP-KB310994-SP2-Pro-BootDisk-CSY.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect

- - End Of File - - CD4CDEF9EA136FA859377E624E4DA4B6

Vypada to, ze to ten vir smazalo, ale smazlo mi to i vse po spusteni :/

Mozna by nebylo od veci kdyztak obnovit bootovaci soubor, prootze podle logu z RSIT byl modifikovan. Stejne jako win.ini a system.ini. PC bylo nakazeno nejspise 15. nebo 16.

Několik infikovaných položek bylo smazáno. Pokud máte zálohu systému zapnutou, můžete obnovit systém před datum 15.10.

Obnova systemu me nenapadla. Ale co mam zkusenosti, tak jsem po ni mel v PC akorat bordel

V tom případě těžko něco obnovíte (pokud je obnova vypnutá). Po spuštění musíte obnovit ručně.

VIRY.CZ

Trojan ktery se sam obnovuje

Trojan ktery se sam obnovuje

Re: Trojan ktery se sam obnovuje

Re: Trojan ktery se sam obnovuje

Re: Trojan ktery se sam obnovuje

Re: Trojan ktery se sam obnovuje

Re: Trojan ktery se sam obnovuje