VIRY.CZ

Zdravím, prosím o pomoc, po zapnutí PC a "naběhnutí Windows" se objeví černá obrazovka s kurzorem se kterým je možno pohybovat. Počítač krom myši na nic nereaguje. To samé v nouzovém režimu. Jediné kam se dostanu je BIOS a Boot menu, ale tam nevím co dělat. Předcházelo tomu občasné vypadávání internetu a dnes se navíc vůbec nenačetl FB, ostatní stránky šly (na všech PC v domácnosti, připojené přes WiFi router, na všech PC Win Vista) Tak jsem provedl obnovu systému a od té doby černo Děkuji za všechny rady.

Zkuste ještě ve startovacím menu (přes F8) "Poslední známá funkční konfigurace". Pokud se nezadaří, budete muset provést opravu z instal. média.

To také nepomohlo. A v čem spočívá oprava z instal. média? Neztratí se data? V PC se zas tolik nevyznám.

Nabootujete z instalačky stejně jako při instalaci systému. Pak budete postupovat takřka stejně, jen s tím rozdílem, že až se podruhé objeví na dolní liště R-opravit, stiskněte klávesu R a dál se budete řídit pokyny na obrazovce. Instalátor přepíše původní soubory a registry, přičemž zachová původní nastavení. O data byste neměl přijít. Platí pro WinXP.

Velké díky Windows už naběhl a počítač lze normálně ovládat, jen se mi zdá, že pracuje velmi pomalu, proto bych ještě poprosil o kontrolu logu


Logfile of random's system information tool 1.08 (written by random/random)
Run by DYBS stavební firma at 2010-11-18 22:26:21
Microsoft® Windows Vista™ Home Premium Service Pack 2
System drive C: has 171 GB (36%) free of 477 GB
Total RAM: 3582 MB (70% free)

HijackThis download failed

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\RtlVistaStart.job
C:\Windows\tasks\User_Feed_Synchronization-{3F32738E-8FF8-4F2A-8E4F-C7828033D560}.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Podpora odkazu pro Adobe PDF Reader - c:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
Conduit Engine - C:\Program Files\ConduitEngine\ConduitEngine.dll [2010-10-10 3906656]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
uTorrentBar Toolbar - C:\Program Files\uTorrentBar\tbuTor.dll [2010-10-10 3906656]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-05-27 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{10EDB994-47F8-43F7-AE96-F2EA63E9F90F}
{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - uTorrentBar Toolbar - C:\Program Files\uTorrentBar\tbuTor.dll [2010-10-10 3906656]
{30F9B915-B755-4826-820B-08FBA6BD249D} - Conduit Engine - C:\Program Files\ConduitEngine\ConduitEngine.dll [2010-10-10 3906656]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"PC Suite for Smartphones"=C:\Program Files\Sony Ericsson\Mobile4\Application Launcher\Application Launcher.exe [2007-12-25 548864]
"Ai Gear Help"=C:\Program Files\ASUS\AI Gear\GearHelp.exe [2006-07-27 415744]
"avast5"=C:\Program Files\Alwil Software\Avast5\avastUI.exe [2010-09-07 2838912]
"SoundMAXPnP"=C:\Program Files\Analog Devices\Core\smax4pnp.exe [2006-12-18 868352]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-02-18 248040]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-19 125952]
"WMPNSCFG"=C:\Program Files\Windows Media Player\WMPNSCFG.exe [2008-01-19 202240]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
C:\Users\DYBS stavební firma\AppData\Local\Google\Update\GoogleUpdate.exe [2009-08-23 133104]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2006-01-12 155648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Adobe Reader Synchronizer.lnk]
C:\PROGRA~1\Adobe\READER~1.0\Reader\ADOBEC~1.EXE [2006-10-23 734872]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Logitech SetPoint.lnk - C:\Program Files\Logitech\SetPoint\SetPoint.exe
WDDMStatus.lnk - C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"= []

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=0
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.scr - open - "C:\Windows\system32\NOTEPAD.EXE" "%1"
.scr - install -
.scr - config -

======List of files/folders created in the last 3 months======

2010-11-18 22:26:22 ----D---- C:\Program Files\trend micro
2010-11-18 22:26:20 ----D---- C:\rsit
2010-11-18 22:16:17 ----ASH---- C:\hiberfil.sys
2010-11-05 18:22:36 ----D---- C:\Program Files\Conduit
2010-11-05 18:22:34 ----D---- C:\Program Files\ConduitEngine
2010-11-05 18:22:29 ----D---- C:\Program Files\uTorrentBar
2010-11-05 18:22:14 ----D---- C:\Program Files\uTorrent
2010-11-05 18:21:45 ----D---- C:\Users\DYBS stavební firma\AppData\Roaming\uTorrent
2010-11-03 22:46:06 ----D---- C:\Program Files\Miranda IM
2010-11-03 22:29:50 ----A---- C:\Windows\system32\wmp.dll
2010-11-03 22:29:49 ----A---- C:\Windows\system32\wmploc.DLL
2010-11-03 22:28:30 ----A---- C:\Windows\system32\srvsvc.dll
2010-11-03 22:28:30 ----A---- C:\Windows\system32\drivers\srv2.sys
2010-11-03 22:28:30 ----A---- C:\Windows\system32\drivers\srv.sys
2010-11-03 22:28:29 ----A---- C:\Windows\system32\netevent.dll
2010-11-03 22:28:29 ----A---- C:\Windows\system32\drivers\srvnet.sys
2010-11-03 22:28:17 ----A---- C:\Windows\system32\usp10.dll
2010-11-03 22:28:09 ----A---- C:\Windows\system32\tzres.dll
2010-11-03 22:26:57 ----A---- C:\Windows\system32\schannel.dll
2010-11-03 22:26:55 ----A---- C:\Windows\system32\iccvid.dll
2010-11-03 22:26:52 ----A---- C:\Windows\system32\ole32.dll
2010-11-03 22:26:26 ----A---- C:\Windows\system32\spoolsv.exe
2010-11-03 22:26:25 ----A---- C:\Windows\system32\t2embed.dll
2010-11-03 22:26:20 ----A---- C:\Windows\system32\gameux.dll
2010-11-03 22:26:17 ----A---- C:\Windows\system32\Apphlpdm.dll
2010-11-03 22:26:16 ----A---- C:\Windows\system32\GameUXLegacyGDFs.dll
2010-11-03 22:26:10 ----A---- C:\Windows\system32\MP4SDECD.DLL
2010-11-03 22:26:09 ----A---- C:\Windows\system32\mfc40.dll
2010-11-03 22:26:08 ----A---- C:\Windows\system32\mfc40u.dll
2010-11-03 22:26:04 ----A---- C:\Windows\system32\rtutils.dll
2010-11-03 22:26:01 ----A---- C:\Windows\system32\win32k.sys
2010-11-03 22:25:53 ----A---- C:\Windows\system32\msshsq.dll
2010-11-03 22:25:50 ----A---- C:\Windows\system32\ntkrnlpa.exe
2010-11-03 22:25:49 ----A---- C:\Windows\system32\ntoskrnl.exe
2010-11-03 22:25:48 ----A---- C:\Windows\system32\wmpmde.dll
2010-11-03 22:25:47 ----A---- C:\Windows\system32\msxml3.dll
2010-11-03 22:25:34 ----A---- C:\Windows\system32\drivers\tcpip.sys
2010-11-03 22:25:28 ----A---- C:\Windows\system32\inetcomm.dll
2010-11-03 22:25:25 ----A---- C:\Windows\system32\comctl32.dll
2010-11-03 22:25:10 ----A---- C:\Windows\system32\mshtml.dll
2010-11-03 22:25:09 ----A---- C:\Windows\system32\ieframe.dll
2010-11-03 22:25:08 ----A---- C:\Windows\system32\wininet.dll
2010-11-03 22:25:08 ----A---- C:\Windows\system32\urlmon.dll
2010-11-03 22:25:07 ----A---- C:\Windows\system32\mshtmled.dll
2010-11-03 22:25:07 ----A---- C:\Windows\system32\msfeeds.dll
2010-11-03 22:25:07 ----A---- C:\Windows\system32\iepeers.dll
2010-11-03 22:25:06 ----A---- C:\Windows\system32\ieencode.dll
2010-11-03 22:25:06 ----A---- C:\Windows\system32\ieapfltr.dll
2010-10-14 01:36:52 ----A---- C:\Windows\system32\xlive.dll
2010-10-14 01:36:50 ----A---- C:\Windows\system32\xlivefnt.dll
2010-10-14 01:36:44 ----A---- C:\Windows\system32\xlive.dll.cat

======List of files/folders modified in the last 3 months======

2010-11-18 22:26:22 ----RD---- C:\Program Files
2010-11-18 22:26:18 ----D---- C:\Windows\Temp
2010-11-18 22:15:05 ----D---- C:\Windows\system32\config
2010-11-18 22:14:59 ----SHD---- C:\Windows\Installer
2010-11-18 22:14:59 ----D---- C:\Windows\Tasks
2010-11-18 22:14:59 ----D---- C:\Windows\system32\Tasks
2010-11-18 22:14:59 ----D---- C:\Windows\system32\spool
2010-11-18 22:14:59 ----D---- C:\Windows\system32\Msdtc
2010-11-18 22:14:59 ----D---- C:\Windows\system32\CodeIntegrity
2010-11-18 22:14:59 ----D---- C:\Windows\system32\catroot2
2010-11-18 22:14:59 ----D---- C:\Windows\System32
2010-11-18 22:14:59 ----D---- C:\Windows\inf
2010-11-18 22:14:58 ----D---- C:\Windows
2010-11-18 22:14:56 ----D---- C:\Windows\system32\wbem
2010-11-18 22:14:56 ----D---- C:\Program Files\Microsoft Games for Windows - LIVE
2010-11-18 22:14:55 ----D---- C:\Windows\registration
2010-11-18 22:11:20 ----D---- C:\Windows\system32\LogFiles
2010-11-17 15:38:37 ----SHD---- C:\System Volume Information
2010-11-17 13:51:17 ----D---- C:\Windows\Debug
2010-11-17 13:45:51 ----A---- C:\Windows\system32\PerfStringBackup.INI
2010-11-17 13:36:53 ----D---- C:\Windows\Prefetch
2010-11-16 21:18:20 ----D---- C:\Program Files\Common Files\microsoft shared
2010-11-11 16:56:28 ----D---- C:\Windows\winsxs
2010-11-10 23:44:55 ----D---- C:\Windows\system32\catroot
2010-11-10 23:44:49 ----D---- C:\Program Files\Windows Mail
2010-11-10 23:42:47 ----A---- C:\Windows\system32\mrt.exe
2010-11-05 18:32:38 ----RD---- C:\Downloads
2010-11-05 18:17:28 ----D---- C:\Program Files\BitComet
2010-11-04 22:27:32 ----D---- C:\Windows\rescache
2010-11-04 22:21:28 ----D---- C:\Windows\Microsoft.NET
2010-11-04 22:21:22 ----RSD---- C:\Windows\assembly
2010-11-04 22:08:53 ----D---- C:\Windows\system32\cs-CZ
2010-11-04 22:08:53 ----D---- C:\Program Files\Windows Media Player
2010-11-04 22:08:52 ----D---- C:\Windows\system32\drivers
2010-11-04 22:08:49 ----D---- C:\Program Files\Movie Maker
2010-11-04 22:08:47 ----D---- C:\Windows\AppPatch
2010-11-03 23:23:28 ----D---- C:\Program Files\Microsoft Silverlight
2010-11-03 22:46:09 ----D---- C:\Users\DYBS stavební firma\AppData\Roaming\Miranda
2010-11-03 22:31:58 ----D---- C:\Program Files\Google
2010-10-19 11:41:44 ----N---- C:\Windows\system32\MpSigStub.exe
2010-09-07 17:11:54 ----A---- C:\Windows\system32\aswBoot.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 nvstor32;nvstor32; C:\Windows\system32\DRIVERS\nvstor32.sys [2007-08-09 110624]
R0 PxHelp20;PxHelp20; C:\Windows\System32\Drivers\PxHelp20.sys [2006-10-18 36624]
R0 SI3132;SiI-3132 SATALink Controller; C:\Windows\system32\DRIVERS\SI3132.sys [2007-10-03 80424]
R0 SiFilter;SATALink driver accelerator; C:\Windows\system32\DRIVERS\SiWinAcc.sys [2007-10-03 19240]
R0 SiRemFil;SATALink External Device Filter; C:\Windows\system32\DRIVERS\SiRemFil.sys [2007-10-03 15400]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2008-05-25 717296]
R1 AsIO;AsIO; C:\Windows\system32\drivers\AsIO.sys [2006-10-18 12664]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys [2010-09-07 23376]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2010-09-07 165584]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2010-09-07 46672]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2010-09-07 17744]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2010-09-07 50768]
R3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\ADIHdAud.sys [2007-01-16 316928]
R3 GEARAspiWDM;GEARAspiWDM; C:\Windows\System32\Drivers\GEARAspiWDM.sys [2008-01-29 16168]
R3 L8042Kbd;Logitech SetPoint Keyboard Driver; C:\Windows\system32\DRIVERS\L8042Kbd.sys [2004-12-10 13056]
R3 L8042mou;Logitech SetPoint PS/2 Mouse Filter Driver; C:\Windows\system32\DRIVERS\L8042mou.Sys [2004-12-10 52992]
R3 LMouKE;Logitech SetPoint Mouse Filter Driver; C:\Windows\system32\DRIVERS\LMouKE.Sys [2004-12-10 68992]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\Windows\system32\DRIVERS\ASACPI.sys [2006-10-18 7680]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvm60x32.sys [2006-11-02 429056]
R3 nvlddmkm;nvlddmkm; C:\Windows\system32\DRIVERS\nvlddmkm.sys [2010-04-03 11573800]
R3 RTL8187;Realtek RTL8187 Wireless 802.11g 54Mbps USB 2.0 Network Adapter; C:\Windows\system32\DRIVERS\RTL8187.sys [2007-03-13 216064]
R3 RtlProt;Realtke RtlProt WLAN Utility Protocol Driver; C:\Windows\system32\DRIVERS\rtlprot.sys [2007-03-09 15360]
R3 seehcri;Sony Ericsson seehcri Device Driver; C:\Windows\system32\DRIVERS\seehcri.sys [2010-03-17 27632]
R3 WsAudioDevice_383;WsAudioDevice_383; C:\Windows\system32\drivers\WsAudioDevice_383.sys [2008-11-19 16640]
R3 zebrceb;Sony Ericsson Cable Emulation Bus (WDM); C:\Windows\system32\DRIVERS\zebrceb.sys [2008-01-15 63360]
S3 ahhbt6fs;ahhbt6fs; C:\Windows\system32\drivers\ahhbt6fs.sys []
S3 catchme;catchme; \??\C:\Users\DYBSST~1\AppData\Local\Temp\catchme.sys []
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-19 5632]
S3 ENTECH;ENTECH; \??\C:\Windows\system32\DRIVERS\ENTECH.sys [2004-10-25 21664]
S3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2009-04-11 236544]
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-19 8192]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-19 5888]
S3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-19 5504]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-19 6016]
S3 nmwcd;Nokia USB Phone Parent; C:\Windows\system32\drivers\ccdcmb.sys [2009-02-09 17664]
S3 nmwcdc;Nokia USB Generic; C:\Windows\system32\drivers\ccdcmbo.sys [2009-02-09 22016]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfd.sys [2008-08-26 18816]
S3 SjyPkt;SjyPkt; \??\C:\Windows\System32\Drivers\SjyPkt.sys []
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerflt.sys [2009-02-09 7808]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-19 35328]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2009-04-11 27648]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltj.sys [2009-02-09 7808]
S3 WDC_SAM;WD SCSI Pass Thru driver; C:\Windows\system32\DRIVERS\wdcsam.sys [2009-02-13 11520]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2009-10-01 40448]
S3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-19 83328]
S3 zebrbus;Sony Ericsson Composite Device driver; C:\Windows\system32\DRIVERS\zebrbus.sys [2008-01-15 83200]
S3 zebrmdfl;Sony Ericsson Modem Filter; C:\Windows\system32\DRIVERS\zebrmdfl.sys [2008-01-15 14848]
S3 zebrmdm;Sony Ericsson Port (WDM); C:\Windows\system32\DRIVERS\zebrmdm.sys [2008-01-15 109568]
S3 zebrmdmc;Sony Ericsson mRouter Port (WDM); C:\Windows\system32\DRIVERS\zebrmdmc.sys [2008-01-15 109568]
S3 zebrsce;Sony Ericsson PC-Connect Port; C:\Windows\system32\DRIVERS\zebrsce.sys [2008-01-15 91264]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2008-02-18 110592]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2007-07-24 229376]
R2 DCSLoader;DCS Loader; C:\Windows\system32\spool\DRIVERS\W32X86\3\OPHALDCS.EXE [2004-03-01 24576]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2010-04-03 129640]
R2 WDDMService;WD SmartWare Drive Manager; C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe [2009-10-14 98304]
R2 WDSmartWareBackgroundService;WD SmartWare Background Service; C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe [2009-06-16 20480]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 1529728]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
R3 avast! Web Scanner;avast! Web Scanner; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2010-09-07 40384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-02-06 135664]
S3 Autodesk Licensing Service;Autodesk Licensing Service; C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe [2008-11-26 85096]
S3 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-19 21504]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [2005-11-14 69632]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2008-03-30 504104]
S3 MSCSPTISRV;MSCSPTISRV; C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe [2006-12-14 45056]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 PACSPTISVR;PACSPTISVR; C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe [2006-12-14 57344]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2009-03-04 621056]
S3 SonicStage Back-End Service;SonicStage Back-End Service; C:\Program Files\Common Files\Sony Shared\AVLib\SsBeSvc.exe [2007-02-05 112184]
S3 SPTISRV;Sony SPTI Service; C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe [2006-12-14 69632]
S3 SSScsiSV;SonicStage SCSI Service; C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe [2007-02-05 75320]
S4 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe [2006-12-23 262144]

-----------------EOF-----------------

Dejte log z ComboFix.

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode, pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k nezadoucim kolizim s rezidentem antispyware

ComboFix 10-11-19.04 - DYBS stavební firma 20.11.2010 17:01:45.2.2 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1250.420.1029.18.3582.2235 [GMT 1:00]
Spuštěný z: c:\downloads\Downloads\ComboFix.exe
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.

((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\users\DYBS stavební firma\AppData\Local\temp\kbpki\5ab08bc40213ec0fd754.dll
c:\users\DYBSST~1\AppData\Local\Temp\kbpki\5ab08bc40213ec0fd754.dll

.
((((((((((((((((((((((((( Soubory vytvořené od 2010-10-20 do 2010-11-20 )))))))))))))))))))))))))))))))
.

2010-11-20 16:07 . 2010-11-20 16:07 -------- d-----w- c:\users\Public\AppData\Local\temp
2010-11-20 16:07 . 2010-11-20 16:07 -------- d-----w- c:\users\Default\AppData\Local\temp
2010-11-19 20:46 . 2010-11-10 04:33 6273872 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{A8589AAC-3DC4-43F3-8AE8-95686FDBC140}\mpengine.dll
2010-11-18 21:26 . 2010-11-18 21:26 -------- d-----w- c:\program files\trend micro
2010-11-18 21:26 . 2010-11-18 21:26 -------- d-----w- C:\rsit
2010-11-10 21:20 . 2010-10-07 11:37 2409784 ----a-w- c:\program files\Windows Mail\OESpamFilter.dat
2010-11-05 17:22 . 2010-11-05 17:22 -------- d-----w- c:\program files\Conduit
2010-11-05 17:22 . 2010-11-05 17:22 -------- d-----w- c:\program files\uTorrent
2010-11-05 17:21 . 2010-11-18 21:14 -------- d-----w- c:\users\DYBS stavební firma\AppData\Roaming\uTorrent
2010-11-03 21:46 . 2010-11-03 21:46 -------- d-----w- c:\program files\Miranda IM
2010-11-03 21:29 . 2010-09-13 13:56 168960 ----a-w- c:\program files\Windows Media Player\wmplayer.exe
2010-11-03 21:29 . 2010-09-13 13:56 8147456 ----a-w- c:\windows\system32\wmploc.DLL
2010-11-03 21:28 . 2010-09-06 16:20 125952 ----a-w- c:\windows\system32\srvsvc.dll
2010-11-03 21:28 . 2010-09-06 13:45 304128 ----a-w- c:\windows\system32\drivers\srv.sys
2010-11-03 21:28 . 2010-09-06 13:45 145408 ----a-w- c:\windows\system32\drivers\srv2.sys
2010-11-03 21:28 . 2010-09-06 16:19 17920 ----a-w- c:\windows\system32\netevent.dll
2010-11-03 21:28 . 2010-09-06 13:45 102400 ----a-w- c:\windows\system32\drivers\srvnet.sys
2010-11-03 21:28 . 2010-04-16 16:46 502272 ----a-w- c:\windows\system32\usp10.dll
2010-11-03 21:28 . 2010-06-22 13:30 2048 ----a-w- c:\windows\system32\tzres.dll
2010-11-03 21:25 . 2010-05-04 19:13 231424 ----a-w- c:\windows\system32\msshsq.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-10-19 09:41 . 2009-10-02 17:56 222080 ------w- c:\windows\system32\MpSigStub.exe
2010-10-14 00:36 . 2010-10-14 00:36 15451288 ----a-w- c:\windows\system32\xlive.dll
2010-10-14 00:36 . 2010-10-14 00:36 13642904 ----a-w- c:\windows\system32\xlivefnt.dll
2010-09-07 16:12 . 2010-07-02 09:12 38848 ----a-w- c:\windows\avastSS.scr
2010-09-07 16:11 . 2010-02-07 21:25 167592 ----a-w- c:\windows\system32\aswBoot.exe
2010-09-07 15:52 . 2010-02-07 21:26 46672 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2010-09-07 15:52 . 2010-02-07 21:26 165584 ----a-w- c:\windows\system32\drivers\aswSP.sys
2010-09-07 15:47 . 2010-02-07 21:26 23376 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2010-09-07 15:47 . 2010-02-07 21:26 50768 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2010-09-07 15:47 . 2010-02-07 21:26 17744 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2010-08-26 16:33 . 2010-11-03 21:26 173056 ----a-w- c:\windows\apppatch\AcXtrnal.dll
2010-08-26 16:33 . 2010-11-03 21:26 458752 ----a-w- c:\windows\apppatch\AcSpecfc.dll
2010-08-26 16:33 . 2010-11-03 21:26 2159616 ----a-w- c:\windows\apppatch\AcGenral.dll
2010-08-26 16:33 . 2010-11-03 21:26 542720 ----a-w- c:\windows\apppatch\AcLayers.dll
.

(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}"= "c:\program files\uTorrentBar\tbuTor.dll" [2010-10-10 3906656]

[HKEY_CLASSES_ROOT\clsid\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
2010-10-10 14:51 3906656 ----a-w- c:\program files\ConduitEngine\ConduitEngine.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]
2010-10-10 14:51 3906656 ----a-w- c:\program files\uTorrentBar\tbuTor.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}"= "c:\program files\uTorrentBar\tbuTor.dll" [2010-10-10 3906656]
"{30F9B915-B755-4826-820B-08FBA6BD249D}"= "c:\program files\ConduitEngine\ConduitEngine.dll" [2010-10-10 3906656]

[HKEY_CLASSES_ROOT\clsid\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]

[HKEY_CLASSES_ROOT\clsid\{30f9b915-b755-4826-820b-08fba6bd249d}]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC}"= "c:\program files\uTorrentBar\tbuTor.dll" [2010-10-10 3906656]

[HKEY_CLASSES_ROOT\clsid\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-19 125952]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-19 202240]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PC Suite for Smartphones"="c:\program files\Sony Ericsson\Mobile4\Application Launcher\Application Launcher.exe" [2007-12-25 548864]
"Ai Gear Help"="c:\program files\ASUS\AI Gear\GearHelp.exe" [2006-07-27 415744]
"avast5"="c:\program files\Alwil Software\Avast5\avastUI.exe" [2010-09-07 2838912]
"SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2006-12-18 868352]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-02-18 248040]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Logitech SetPoint.lnk - c:\program files\Logitech\SetPoint\SetPoint.exe [2008-4-24 434176]
WDDMStatus.lnk - c:\program files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe [2009-10-14 2049344]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Adobe Reader Synchronizer.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Reader Synchronizer.lnk
backup=c:\windows\pss\Adobe Reader Synchronizer.lnk.CommonStartup
backupExtension=.CommonStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
2009-08-23 19:18 133104 ----atw- c:\users\DYBS stavební firma\AppData\Local\Google\Update\GoogleUpdate.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
2006-01-12 14:40 155648 ----a-w- c:\program files\Common Files\Ahead\Lib\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"AntiVirusOverride"=dword:00000001

R2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2010-02-06 135664]
R3 SjyPkt;SjyPkt;c:\windows\System32\Drivers\SjyPkt.sys [x]
R3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\DRIVERS\wdcsam.sys [2009-02-13 11520]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2008-05-25 717296]
S1 aswSP;aswSP; [x]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2010-09-07 50768]
S2 WDDMService;WD SmartWare Drive Manager;c:\program files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe [2009-10-14 98304]
S2 WDSmartWareBackgroundService;WD SmartWare Background Service;c:\program files\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe [2009-06-16 20480]
S3 RTL8187;Realtek RTL8187 Wireless 802.11g 54Mbps USB 2.0 Network Adapter;c:\windows\system32\DRIVERS\RTL8187.sys [2007-03-13 216064]
S3 RtlProt;Realtke RtlProt WLAN Utility Protocol Driver;c:\windows\system32\DRIVERS\rtlprot.sys [2007-03-09 15360]
S3 seehcri;Sony Ericsson seehcri Device Driver;c:\windows\system32\DRIVERS\seehcri.sys [2010-03-17 27632]
S3 WsAudioDevice_383;WsAudioDevice_383;c:\windows\system32\drivers\WsAudioDevice_383.sys [2008-11-19 16640]


[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
Obsah adresáře 'Naplánované úlohy'

2010-11-20 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-02-06 17:04]

2010-11-20 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-02-06 17:04]

2010-11-20 c:\windows\Tasks\RtlVistaStart.job
- c:\program files\ASUS WiFi-AP Solo\RtWLan.exe [2010-05-17 09:16]

2010-11-20 c:\windows\Tasks\User_Feed_Synchronization-{3F32738E-8FF8-4F2A-8E4F-C7828033D560}.job
- c:\windows\system32\msfeedssync.exe [2008-05-01 07:33]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
uInternet Settings,ProxyOverride = local
uInternet Settings,ProxyServer = 127.0.0.1:8080
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: E&xportovat do aplikace Microsoft Office Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
FF - ProfilePath - c:\users\DYBS stavební firma\AppData\Roaming\Mozilla\Firefox\Profiles\1bpua9q7.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.seznam.cz/
FF - component: c:\users\DYBS stavební firma\AppData\Roaming\Mozilla\Firefox\Profiles\1bpua9q7.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\components\FFExternalAlert.dll
FF - component: c:\users\DYBS stavební firma\AppData\Roaming\Mozilla\Firefox\Profiles\1bpua9q7.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\components\RadioWMPCore.dll
FF - plugin: c:\program files\Google\Google Earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\Google\Update\1.2.183.39\npGoogleOneClick8.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npdeployJava1.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- NASTAVENÍ FIREFOXU ----
c:\program files\Mozilla Firefox\defaults\pref\firefox-l10n.js - pref("browser.fixup.alternate.suffix", ".cz");
.
.
------- Asociace souborů -------
.
.scr=AutoCADScriptFile
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-11-20 17:09
Windows 6.0.6002 Service Pack 2 NTFS

skenování skrytých procesů ...

skenování skrytých položek 'Po spuštění' ...

skenování skrytých souborů ...

sken byl úspešně dokončen
skryté soubory: 0

**************************************************************************
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------

[HKEY_USERS\S-1-5-21-600134257-582757807-916437539-1000\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{A29D2B4D-BC6F-FA06-DE12-B546F0C35D95}*]
"pahfeflflbkjigohipailpllgngbjfid"=hex:69,61,6c,6f,6e,68,6d,6c,6b,64,62,6d,6f,
70,6e,70,6e,66,00,00
"oabgkfngfgaacadlfdancniooigpop"=hex:69,61,6c,6f,6e,68,6d,6c,6b,64,62,6d,6f,70,
6e,70,6e,66,00,00

[HKEY_USERS\S-1-5-21-600134257-582757807-916437539-1000\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
@Allowed: (Read) (RestrictedCode)
"??"=hex:5d,54,e6,ed,74,35,e2,6f,d6,e7,cd,a8,f1,50,11,42,4a,b2,e0,b7,c3,98,6b,
6d,fd,e4,27,b7,87,89,49,01,77,9f,2c,79,d3,93,d7,e6,88,1d,41,2e,8c,85,ab,7a,\
"??"=hex:35,fc,c6,3d,c9,02,ad,db,37,1f,61,de,0f,33,8f,50

[HKEY_USERS\S-1-5-21-600134257-582757807-916437539-1000\Software\SecuROM\License information*]
@Allowed: (Read) (RestrictedCode)
"datasecu"=hex:45,bd,ec,ac,a7,d4,0c,c2,0a,65,7a,99,f0,12,0b,85,2a,cc,fa,04,bc,
f2,dc,0f,f5,7c,93,04,4f,09,ba,18,52,6e,f7,ec,14,54,f4,a0,dc,eb,5d,36,bc,36,\
"rkeysecu"=hex:94,ed,81,1b,be,2d,c9,67,ab,39,6f,58,6f,64,c9,f9

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
--------------------- Knihovny navázané na běžící procesy ---------------------

- - - - - - - > 'Explorer.exe'(3732)
c:\program files\Nokia\Nokia PC Suite 7\PhoneBrowser.dll
c:\program files\Nokia\Nokia PC Suite 7\NGSCM.DLL
c:\program files\Nokia\Nokia PC Suite 7\Lang\PhoneBrowser_cze.nlr
c:\program files\Nokia\Nokia PC Suite 7\Resource\PhoneBrowser_Nokia.ngr
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\nvvsvc.exe
c:\windows\system32\nvvsvc.exe
c:\program files\Alwil Software\Avast5\AvastSvc.exe
c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\windows\system32\spool\DRIVERS\W32X86\3\OPHALDCS.EXE
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\program files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\windows\system32\conime.exe
c:\windows\system32\wbem\unsecapp.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\\?\c:\windows\system32\wbem\WMIADAP.EXE
.
**************************************************************************
.
Celkový čas: 2010-11-20 17:13:40 - počítač byl restartován
ComboFix-quarantined-files.txt 2010-11-20 16:13
ComboFix2.txt 2010-08-03 17:42

Před spuštěním: Volných bajtů: 184 251 957 248
Po spuštění: Volných bajtů: 183 980 343 296

Current=1 Default=1 Failed=0 LastKnownGood=11 Sets=1,2,3,4,5,6,7,8,9,11
- - End Of File - - 8AF6DF6BE18F95C55121D1FB23F45463

Ještě dočistíme. Přesuňte ComboFix na plochu. Otevřte poznámkový blok a zkopírujte do něj:

KillAll::

Collect::
c:\windows\System32\Drivers\SjyPkt.sys

Driver::
SjyPkt

Regnull::
[HKEY_USERS\S-1-5-21-600134257-582757807-916437539-1000\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{A29D2B4D-BC6F-FA06-DE12-B546F0C35D95}*]

Uložte na plochu jako CFScript.txt. Pak jej myší přetáhněte nad ikonu ComboFix a pusťte. CF se spustí a vykoná příkazy ze skriptu.

Děkuji za pomoc

Nemáte zač!