VIRY.CZ

ahoj mam problem, vcera vecer jsem se noramlne dival na film, a potom naraz se mi obevil nejaky antivirus privacy protection a zacal tam obevovat viry a trojaky a nejake downloadery, kdyz spustit net,hru proste cokoliv blokujemi to, tak sem spustil nouzovy rezim se siti a jestli by jste mi neproadily co mam delat? tu je log jak tu nekteri psali. diky predem

Logfile of random's system information tool 1.09 (written by random/random)
Run by Peta at 2011-11-12 07:58:10
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 774 GB (81%) free of 954 GB
Total RAM: 3326 MB (84% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 7:58:30, on 12.11.2011
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Safe mode with network support

Running processes:
C:\Windows\Explorer.EXE
C:\Windows\system32\ctfmon.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Users\Peta\Desktop\RSIT.exe
C:\Program Files\trend micro\Peta.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://free.avg.com/ww.homepage-tlbrf
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.explore.cm/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
R3 - URLSearchHook: SearchHook Class - {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - C:\Program Files\DeviceVM\Browser Configuration Utility\AddressBarSearch.dll
R3 - URLSearchHook: AF-HSS Toolbar - {f0381dbd-e018-4e07-ae40-d96ab15083f0} - C:\Program Files\AF-HSS\prxtbAF-0.dll
O1 - Hosts: ::1 localhost
O1 - Hosts: 94.228.209.244 www.google-analytics.com.
O1 - Hosts: 94.228.209.244 ad-emea.doubleclick.net.
O1 - Hosts: 94.228.209.244 www.statcounter.com.
O1 - Hosts: 178.250.45.15 www.google-analytics.com.
O1 - Hosts: 178.250.45.15 ad-emea.doubleclick.net.
O1 - Hosts: 178.250.45.15 www.statcounter.com.
O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll
O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll
O2 - BHO: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JSLoader BHO - {E887F06F-565D-42e5-AA80-63EB0D465202} - C:\ProgramData\Plugin\Plugin.dll
O2 - BHO: AF-HSS - {f0381dbd-e018-4e07-ae40-d96ab15083f0} - C:\Program Files\AF-HSS\prxtbAF-0.dll
O2 - BHO: Hotspot Shield Class - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - C:\Program Files\Hotspot Shield\HssIE\HssIE.dll
O3 - Toolbar: AVG Security Toolbar - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll
O3 - Toolbar: (no name) - {338B4DFE-2E2C-4338-9E41-E176D497299E} - (no file)
O3 - Toolbar: AF-HSS Toolbar - {f0381dbd-e018-4e07-ae40-d96ab15083f0} - C:\Program Files\AF-HSS\prxtbAF-0.dll
O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll
O4 - HKLM\..\Run: [BCU] "C:\Program Files\DeviceVM\Browser Configuration Utility\BCU.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [AVG9_TRAY] C:\PROGRA~1\AVG\AVG9\avgtray.exe
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKCU\..\Run: [windows_update.exe] C:\Users\Peta\Desktop
O4 - HKCU\..\Run: [office] c:\programdata\starter.exe "c:\programdata\group.exe"
O4 - HKCU\..\Run: [ICQ] "C:\Program Files\ICQ7.1\ICQ.exe" silent loginmode=4
O4 - HKCU\..\Run: [Privacy Protection] C:\Users\Peta\AppData\Roaming\privacy.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O20 - AppInit_DLLs: avgrsstx.dll
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: AppleChargerSrv - Unknown owner - C:\Windows\system32\AppleChargerSrv.exe
O23 - Service: AVG Security Toolbar Service - Unknown owner - C:\Program Files\AVG\AVG9\Toolbar\ToolbarBroker.exe
O23 - Service: AVG E-mail Scanner (avg9emc) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgemc.exe
O23 - Service: AVG WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgwdsvc.exe
O23 - Service: AVG Firewall (avgfws9) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgfws9.exe
O23 - Service: Browser Configuration Utility Service (BCUService) - DeviceVM, Inc. - C:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Hotspot Shield Service (hshld) - Unknown owner - C:\Program Files\Hotspot Shield\bin\openvpnas.exe
O23 - Service: Hotspot Shield Routing Service (HssSrv) - AnchorFree Inc. - C:\Program Files\Hotspot Shield\HssWPR\hsssrv.exe
O23 - Service: Hotspot Shield Tray Service (HssTrayService) - Unknown owner - C:\Program Files\Hotspot Shield\bin\HssTrayService.EXE
O23 - Service: Hotspot Shield Monitoring Service (HssWd) - Unknown owner - C:\Program Files\Hotspot Shield\bin\hsswd.exe
O23 - Service: ICQ Service - Unknown owner - C:\Program Files\ICQ6Toolbar\ICQ Service.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe

--
End of file - 8388 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\PC Optimizer Pro startups.job

=========Mozilla firefox=========

ProfilePath - C:\Users\Peta\AppData\Roaming\Mozilla\Firefox\Profiles\9jr87nvu.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://searchrise.com?hl=cs&fh="
prefs.js - "extensions.enabledItems" - "{3f963a5b-e555-4543-90e2-c3908898db71}:9.0.0.872, avg@igeared:6.103.018.001, DTToolbar@toolbarnet.com:1.1.2.0185, {800b5000-a755-47e1-992b-48a1c1357f07}:1.1.7, ffxtlbr@babylon.com:1.1.3, {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22, {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23, {75656794-AB59-4712-BFBC-5D816D56F3BC}:1.1.7, dma4as@mich:1.2, {82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}:5.3.0.7280, afurladvisor@anchorfree.com:1.0, engine@conduit.com:3.3.3.2, {f0381dbd-e018-4e07-ae40-d96ab15083f0}:3.3.3.2, survey-remover@gmx.com:2.0.2, {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}:3.2.5.2, {23fcfd51-4958-4f00-80a3-ae97e717ed8b}:2.1.2.126, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.13"
prefs.js - "keyword.URL" - "http://search.babylon.com/?babsrc=SP_ss ... D=17981&q="

"{3f963a5b-e555-4543-90e2-c3908898db71}"=C:\Program Files\AVG\AVG9\Firefox
"avg@igeared"=C:\Program Files\AVG\AVG9\Toolbar\Firefox\avg@igeared
"{23fcfd51-4958-4f00-80a3-ae97e717ed8b}"=C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0]
"Description"=DivX Plus Web Player
"Path"=C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0]
"Description"=DivX VOD Helper Plug-in
"Path"=C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll

C:\Program Files\Mozilla Firefox\extensions\
afurladvisor@anchorfree.com
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
{972ce4c6-7e08-4474-a285-3208198ce6fd}
{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files\Mozilla Firefox\plugins\
np-mswmp.dll
npdeployJava1.dll
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Program Files\Mozilla Firefox\searchplugins\
avg_igeared.xml
google.xml
heureka-cz.xml
jyxo-cz.xml
privatesearch.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Users\Peta\AppData\Roaming\Mozilla\Firefox\Profiles\9jr87nvu.default\extensions\
dma4as@mich
engine@conduit.com
survey-remover@gmx.com
{5e5ab302-7f65-44cd-8211-c1d4caaccea3}
{699661f3-1e3b-4129-831b-cd5660cdc72e}
{75656794-AB59-4712-BFBC-5D816D56F3BC}
{800b5000-a755-47e1-992b-48a1c1357f07}
{8445d605-e889-9c78-e3f4-c579193cb55f}
{f0381dbd-e018-4e07-ae40-d96ab15083f0}
{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}

C:\Users\Peta\AppData\Roaming\Mozilla\Firefox\Profiles\9jr87nvu.default\searchplugins\
conduit.xml
daemon-search.xml
icqplugin.xml
search.xml
searchrise.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
Conduit Engine - C:\Program Files\ConduitEngine\prxConduitEngine.dll [2011-01-17 175912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{326E768D-4182-46FD-9C16-1449A49795F4}]
DivX Plus Web Player HTML5 <video> - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll [2011-05-23 115072]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}]
AVG Safe Search - C:\Program Files\AVG\AVG9\avgssie.dll [2011-12-30 1623392]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C}]
AVG Security Toolbar BHO - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll [2011-07-26 2532680]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-10-10 3834016]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-11-24 41760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E887F06F-565D-42e5-AA80-63EB0D465202}]
Plugin - C:\ProgramData\Plugin\Plugin.dll [2011-06-29 266240]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{f0381dbd-e018-4e07-ae40-d96ab15083f0}]
AF-HSS Toolbar - C:\Program Files\AF-HSS\prxtbAF-0.dll [2011-01-17 175912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}]
Hotspot Shield Class - C:\Program Files\Hotspot Shield\HssIE\HssIE.dll [2011-06-20 233288]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{CCC7A320-B3CA-4199-B1A6-9F516DD69829} - AVG Security Toolbar - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll [2011-07-26 2532680]
{32099AAC-C132-4136-9E9A-4E364A424E17} - DAEMON Tools Toolbar - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll [2010-03-25 968000]
{855F3B16-6D32-4FE6-8A56-BBB695989046} - ICQToolBar - C:\Program Files\ICQ6Toolbar\ICQToolBar.dll [2010-09-06 1048888]
{338B4DFE-2E2C-4338-9E41-E176D497299E}
{f0381dbd-e018-4e07-ae40-d96ab15083f0} - AF-HSS Toolbar - C:\Program Files\AF-HSS\prxtbAF-0.dll [2011-01-17 175912]
{30F9B915-B755-4826-820B-08FBA6BD249D} - Conduit Engine - C:\Program Files\ConduitEngine\prxConduitEngine.dll [2011-01-17 175912]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"BCU"=C:\Program Files\DeviceVM\Browser Configuration Utility\BCU.exe [2009-10-15 375000]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-07-06 98304]
"AVG9_TRAY"=C:\PROGRA~1\AVG\AVG9\avgtray.exe [2011-09-14 2076512]
"ISUSScheduler"=C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe [2005-02-17 81920]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2010-05-14 248552]
"DivXUpdate"=C:\Program Files\DivX\DivX Update\DivXUpdate.exe [2011-03-21 1230704]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files\DAEMON Tools Lite\DTLite.exe [2010-04-01 357696]
"ISUSPM Startup"=C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe [2005-02-17 221184]
"windows_update.exe"=C:\Users\Peta\Desktop []
"office"=c:\programdata\starter.exe [2011-06-11 2515]
"ICQ"=C:\Program Files\ICQ7.1\ICQ.exe [2011-01-05 133432]
"Privacy Protection"=C:\Users\Peta\AppData\Roaming\privacy.exe [2011-11-12 822784]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="avgrsstx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"UACDisableNotify"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"VIDC.I420"=lvcodec2.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo"=vfwwdm32.dll
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"vidc.DIVX"=DivX.dll
"vidc.yv12"=DivX.dll
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux4"=wdmaud.drv
"VIDC.XFR1"=xfcodec.dll
"msacm.lhacm"=lhacm.acm
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"aux5"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2011-12-30 20:55:04 ----A---- C:\Windows\system32\XAudio2_7.dll
2011-12-30 20:55:04 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2011-12-30 20:55:04 ----A---- C:\Windows\system32\xactengine3_7.dll
2011-12-30 20:55:03 ----A---- C:\Windows\system32\D3DX9_43.dll
2011-12-30 20:55:03 ----A---- C:\Windows\system32\d3dx11_43.dll
2011-12-30 20:55:03 ----A---- C:\Windows\system32\d3dx10_43.dll
2011-12-30 20:55:03 ----A---- C:\Windows\system32\d3dcsx_43.dll
2011-12-30 20:55:03 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2011-12-30 20:55:02 ----A---- C:\Windows\system32\XAudio2_6.dll
2011-12-30 20:55:02 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2011-12-30 20:55:02 ----A---- C:\Windows\system32\xactengine3_6.dll
2011-12-30 20:55:02 ----A---- C:\Windows\system32\xactengine3_5.dll
2011-12-30 20:55:02 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2011-12-30 20:55:01 ----A---- C:\Windows\system32\d3dx11_42.dll
2011-12-30 20:55:01 ----A---- C:\Windows\system32\d3dx10_42.dll
2011-12-30 20:55:01 ----A---- C:\Windows\system32\d3dcsx_42.dll
2011-12-30 20:55:01 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2011-12-30 20:55:00 ----A---- C:\Windows\system32\D3DX9_42.dll
2011-12-30 20:54:58 ----A---- C:\Windows\system32\XAudio2_2.dll
2011-12-30 20:54:58 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2011-12-30 20:54:58 ----A---- C:\Windows\system32\xactengine3_2.dll
2011-12-30 20:54:58 ----A---- C:\Windows\system32\D3DX9_39.dll
2011-12-30 20:54:58 ----A---- C:\Windows\system32\d3dx10_39.dll
2011-12-30 20:54:58 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2011-12-30 20:54:54 ----A---- C:\Windows\system32\xactengine2_9.dll
2011-12-30 20:54:54 ----A---- C:\Windows\system32\d3dx9_35.dll
2011-12-30 20:54:54 ----A---- C:\Windows\system32\d3dx10_35.dll
2011-12-30 20:54:54 ----A---- C:\Windows\system32\D3DCompiler_35.dll
2011-12-30 20:54:48 ----A---- C:\Windows\system32\xinput1_3.dll
2011-12-30 20:54:48 ----A---- C:\Windows\system32\xactengine2_7.dll
2011-12-30 20:54:48 ----A---- C:\Windows\system32\d3dx10_33.dll
2011-12-30 20:54:47 ----A---- C:\Windows\system32\d3dx9_33.dll
2011-12-30 20:54:47 ----A---- C:\Windows\system32\D3DCompiler_33.dll
2011-12-30 20:54:46 ----A---- C:\Windows\system32\x3daudio1_1.dll
2011-12-30 20:54:45 ----A---- C:\Windows\system32\xinput1_2.dll
2011-12-30 20:54:45 ----A---- C:\Windows\system32\xinput1_1.dll
2011-12-30 20:54:45 ----A---- C:\Windows\system32\xactengine2_3.dll
2011-12-30 20:54:45 ----A---- C:\Windows\system32\xactengine2_1.dll
2011-12-30 20:54:42 ----A---- C:\Windows\system32\d3dx9_30.dll
2011-12-30 20:54:41 ----A---- C:\Windows\system32\d3dx9_27.dll
2011-12-30 20:49:51 ----D---- C:\Program Files\Activision
2011-12-30 15:11:55 ----A---- C:\Windows\system32\avgrsstx.dll
2011-11-12 07:58:10 ----D---- C:\rsit
2011-11-12 07:58:10 ----D---- C:\Program Files\trend micro
2011-11-12 07:53:04 ----A---- C:\Windows\ntbtlog.txt
2011-11-12 01:55:03 ----A---- C:\Windows\system32\shell32.dll
2011-11-12 01:41:30 ----A---- C:\Users\Peta\AppData\Roaming\privacy.exe
2011-11-11 14:53:06 ----A---- C:\Windows\system32\drivers\tcpip.sys
2011-11-11 14:53:05 ----A---- C:\Windows\system32\win32k.sys
2011-11-06 11:07:23 ----D---- C:\Program Files\Piranha Bytes
2011-11-01 21:58:18 ----D---- C:\Program Files\Microsoft Office
2011-11-01 21:57:55 ----D---- C:\Program Files\MSECache
2011-11-01 21:50:24 ----D---- C:\Program Files\Doc Convertor
2011-10-29 23:38:27 ----D---- C:\Program Files\Gothic III
2011-10-29 23:38:00 ----D---- C:\Users\Peta\AppData\Roaming\InstallShield
2011-10-29 14:52:01 ----SHD---- C:\Windows\system32\%APPDATA%
2011-10-13 21:36:08 ----A---- C:\Windows\system32\psisdecd.dll
2011-10-13 21:36:06 ----A---- C:\Windows\system32\oleaut32.dll
2011-10-13 21:36:06 ----A---- C:\Windows\system32\oleacc.dll
2011-10-13 21:36:02 ----A---- C:\Windows\system32\ieframe.dll
2011-10-13 21:36:01 ----A---- C:\Windows\system32\mshtml.dll
2011-10-13 21:36:00 ----A---- C:\Windows\system32\wininet.dll
2011-10-13 21:36:00 ----A---- C:\Windows\system32\urlmon.dll
2011-10-13 21:36:00 ----A---- C:\Windows\system32\url.dll
2011-10-13 21:36:00 ----A---- C:\Windows\system32\mshtmled.dll
2011-10-13 21:36:00 ----A---- C:\Windows\system32\msfeeds.dll
2011-10-13 21:36:00 ----A---- C:\Windows\system32\jsproxy.dll
2011-10-13 21:36:00 ----A---- C:\Windows\system32\ieui.dll
2011-10-13 21:36:00 ----A---- C:\Windows\system32\iertutil.dll

======List of files/folders modified in the last 1 month======

2011-11-12 07:58:14 ----D---- C:\Windows\Temp
2011-11-12 07:58:10 ----RD---- C:\Program Files
2011-11-12 07:57:48 ----D---- C:\Windows\System32
2011-11-12 07:57:48 ----D---- C:\Windows\inf
2011-11-12 07:57:48 ----A---- C:\Windows\system32\PerfStringBackup.INI
2011-11-12 07:53:04 ----SHD---- C:\Windows
2011-11-12 07:50:49 ----D---- C:\Windows\system32\drivers
2011-11-12 07:49:17 ----D---- C:\Users\Peta\AppData\Roaming\Skype
2011-11-12 07:46:41 ----D---- C:\Windows\SoftwareDistribution
2011-11-12 07:46:41 ----D---- C:\Windows\Logs
2011-11-12 07:21:49 ----D---- C:\Windows\system32\config
2011-11-12 07:14:52 ----SHD---- C:\System Volume Information
2011-11-12 07:11:12 ----D---- C:\Windows\Prefetch
2011-11-12 02:41:13 ----SHD---- C:\Recovery
2011-11-12 02:33:58 ----D---- C:\Windows\system32\catroot2
2011-11-12 02:14:45 ----D---- C:\Program Files\Electronic Arts
2011-11-12 02:06:14 ----D---- C:\Windows\system32\Tasks
2011-11-12 01:57:13 ----D---- C:\Windows\winsxs
2011-11-12 01:54:32 ----D---- C:\Windows\system32\catroot
2011-11-12 01:45:00 ----D---- C:\Program Files\Common Files\System
2011-11-12 00:49:21 ----D---- C:\Program Files\WoW WoTLK – kopie
2011-11-07 15:47:25 ----D---- C:\Users\Peta\AppData\Roaming\ICQ
2011-11-06 12:33:47 ----HD---- C:\Program Files\InstallShield Installation Information
2011-11-06 12:33:44 ----SHD---- C:\Windows\Installer
2011-11-01 22:07:20 ----SD---- C:\Users\Peta\AppData\Roaming\Microsoft
2011-11-01 22:06:39 ----D---- C:\Program Files\Common Files\microsoft shared
2011-10-29 18:01:33 ----D---- C:\Windows\system32\drivers\etc
2011-10-29 13:51:06 ----D---- C:\Windows\system32\drivers\Avg
2011-10-28 15:41:21 ----D---- C:\Program Files\ICQ6Toolbar
2011-10-28 02:00:26 ----D---- C:\Program Files\Internet Explorer
2011-10-22 14:51:31 ----D---- C:\Program Files\WoW TBC
2011-10-21 15:40:31 ----RD---- C:\Program Files\Skype
2011-10-15 17:39:58 ----D---- C:\Windows\system32\DriverStore
2011-10-15 17:19:44 ----D---- C:\Windows\Minidump
2011-10-15 17:19:44 ----D---- C:\Windows\debug
2011-10-14 22:23:52 ----RSD---- C:\Windows\assembly
2011-10-14 22:23:52 ----D---- C:\Windows\Microsoft.NET
2011-10-14 16:45:31 ----D---- C:\Windows\ehome
2011-10-14 16:45:30 ----D---- C:\Windows\system32\migration
2011-10-14 15:29:22 ----A---- C:\Windows\system32\MRT.exe
2011-10-14 15:26:05 ----D---- C:\Program Files\WoW WoTLK

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 AvgRkx86;avgrkx86.sys; C:\Windows\System32\Drivers\avgrkx86.sys [2011-12-30 52872]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 175360]
R1 Avgfwfd;AVG network filter service; C:\Windows\system32\DRIVERS\avgfwd6x.sys [2010-12-24 24856]
R1 AvgTdiX;AVG Network Redirector; C:\Windows\System32\Drivers\avgtdix.sys [2011-05-05 243152]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 388096]
R3 HssDrv;Hotspot Shield Helper Miniport; C:\Windows\system32\DRIVERS\HssDrv.sys [2010-09-22 37376]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt86win7.sys [2010-03-22 278560]
R3 taphss;Anchorfree HSS Adapter; C:\Windows\system32\DRIVERS\taphss.sys [2010-09-22 32768]
S0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2010-12-25 691696]
S1 AppleCharger;AppleCharger; C:\Windows\system32\DRIVERS\AppleCharger.sys [2010-04-27 19496]
S1 AvgLdx86;AVG AVI Loader Driver x86; C:\Windows\System32\Drivers\avgldx86.sys [2011-12-30 216400]
S1 AvgMfx86;AVG On-access Scanner Minifilter Driver x86; C:\Windows\System32\Drivers\avgmfx86.sys [2011-09-14 29712]
S2 5016;5016; \??\C:\Users\Peta\AppData\Local\Temp\5016.sys []
S2 5674;5674; \??\C:\Users\Peta\AppData\Local\Temp\5674.sys []
S2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2010-12-25 271360]
S2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2010-12-25 18048]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 6db0f2cd;6db0f2cd; C:\Windows\3455234157:2454654258.exe []
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;Ovladač filtru AMD portu AGP; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2010-07-07 5882368]
S3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2010-07-07 210944]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 gdrv;gdrv; \??\C:\Windows\gdrv.sys [2011-01-26 17488]
S3 GVTDrv;GVTDrv; \??\C:\Windows\system32\Drivers\GVTDrv.sys [2011-01-26 24944]
S3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys []
S3 k750bus;Sony Ericsson 750 driver (WDM); C:\Windows\system32\DRIVERS\k750bus.sys [2005-02-11 55216]
S3 LVRS;Logitech RightSound Filter Driver; C:\Windows\system32\DRIVERS\lvrs.sys [2008-07-26 627864]
S3 LVUSBSta;Logitech USB Monitor Filter; C:\Windows\system32\drivers\LVUSBSta.sys [2008-07-26 41752]
S3 pepifilter;Volume Adapter; C:\Windows\system32\DRIVERS\lv302af.sys [2008-07-26 13848]
S3 PID_PEPI;Logitech QuickCam IM(PID_PEPI); C:\Windows\system32\DRIVERS\LV302V32.SYS [2008-07-26 2570520]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 133632]
S3 RTHDMIAzAudService;Service for HDMI; C:\Windows\system32\drivers\RtHDMIV.sys [2010-05-24 204448]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 5632]
S3 sisagp;Filtr SIS sběrnice AGP; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 28032]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 viaagp;Filtr VIA sběrnice AGP; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 17920]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

S2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2010-07-07 176128]
S2 avg9emc;AVG E-mail Scanner; C:\Program Files\AVG\AVG9\avgemc.exe [2011-12-30 921952]
S2 avg9wd;AVG WatchDog; C:\Program Files\AVG\AVG9\avgwdsvc.exe [2011-12-30 308136]
S2 avgfws9;AVG Firewall; C:\Program Files\AVG\AVG9\avgfws9.exe [2011-12-30 2331544]
S2 BCUService;Browser Configuration Utility Service; C:\Program Files\DeviceVM\Browser Configuration Utility\BCUService.exe [2009-10-15 223464]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-04-22 135664]
S2 hshld;Hotspot Shield Service; C:\Program Files\Hotspot Shield\bin\openvpnas.exe [2011-10-06 288088]
S2 HssSrv;Hotspot Shield Routing Service; C:\Program Files\Hotspot Shield\HssWPR\hsssrv.exe [2011-05-27 363336]
S2 HssWd;Hotspot Shield Monitoring Service; C:\Program Files\Hotspot Shield\bin\hsswd.exe [2011-05-25 329544]
S2 ICQ Service;ICQ Service; C:\Program Files\ICQ6Toolbar\ICQ Service.exe [2010-09-06 247096]
S2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2011-06-04 90112]
S3 AppleChargerSrv;AppleChargerSrv; C:\Windows\system32\AppleChargerSrv.exe [2010-04-06 31272]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 AVG Security Toolbar Service;AVG Security Toolbar Service; C:\Program Files\AVG\AVG9\Toolbar\ToolbarBroker.exe [2011-07-26 1025352]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-04-22 135664]
S3 HssTrayService;Hotspot Shield Tray Service; C:\Program Files\Hotspot Shield\bin\HssTrayService.EXE [2011-10-06 77520]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-12-25 1343400]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; c:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; c:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; c:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

Dobré ránko přeji

Tak ho jdeme vyhnat, co vy na to?


Stáhněte program RogueKiller

• Spuste program
• Stiskněte klávesu 2 a enter
• Objeví se vám log a ten sem vložte
• Stějně tak opakujte s volbou 3 a 4 a vložte logy

Program nepoužívejte bez doporučení Rádce a pozorně se řiďte následujících pokynu,protože program netoleruje chyby a může dojít k úplnému poškození systému!!

• Stáhneme si Combofix
• Program uložíme nejlépe na Plochu
• Vypneme všechny rezidentní štíty.Jak antiviru,tak antispywaru a firewallu
• Vypneme všechny běžící aplikace (ICQ,prohlížeč,programy) a necháme pouze Combofix
• Spustíme Combofix.exe s administrátorským oprávněním
  U Windows XP se přihlásíme pod účtem správce
  Ve Windows 7 a Vista klikněte pravým tlačítkem myši na Combofix.exe a dejte ,,Spustit jako správce,,)
• Hned po startu programu na vás vyskočí licenční podmínky,tak potvrdíme tlačítkemANO
• Pokud vám Combofix nabídne instalaci Konzoly pro zotavení,tak souhlaste a nechte nainstalovat(zde je potřeba aktivní připojení na internet)
• Pokračujte dle pokynů programu a během skenování na nic neklikejte,na pc nepracujte(ICQ,jiné aplikace,internet..).Nechte počítač v klidu.
• Celý sken tvá mezi 5-15 min,ale pokud je v PC hodně havěti,tak se čas může lišit.
• Po skončení skenování(případném restartu počítače) se vám zobrazí log z Combofixu,který mi vložte sem(Kdyby se log nezobrazil,tak jej najdete zde: C:\ComboFix.txt
• (Pokud si nevíte rady s kterýmkoliv z výše uvedených kroků,tak se ptejte nebo mrkněte na detailnější návod včetně obrázků http://www.bleepingcomputer.com/combofi ... t-combofix )

diky, tady je ten roguekiller :

2:
RogueKiller V6.1.7 [11/05/2011] by Tigzy
mail: tigzyRK<at>gmail<dot>com
Feedback: http://www.geekstogo.com/forum/files/fi ... guekiller/
Blog: http://tigzyrk.blogspot.com

Operating System: Windows 7 (6.1.7601 Service Pack 1) 32 bits version
Started in : Safe mode with network support
User: Peta [Admin rights]
Mode: Remove -- Date : 11/12/2011 09:06:22

¤¤¤ Bad processes: 0 ¤¤¤

¤¤¤ Registry Entries: 4 ¤¤¤
[SUSP PATH] HKCU\[...]\Run : office (c:\programdata\starter.exe "c:\programdata\group.exe") -> DELETED
[SUSP PATH] HKCU\[...]\Run : Privacy Protection (C:\Users\Peta\AppData\Roaming\privacy.exe) -> DELETED
[HJ] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> REPLACED ()
[HJ] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED ()

¤¤¤ Particular Files / Folders: ¤¤¤

¤¤¤ Driver: [NOT LOADED] ¤¤¤

¤¤¤ Infection : ¤¤¤

¤¤¤ HOSTS File: ¤¤¤
127.0.0.1 localhost
::1 localhost
94.228.209.244 www.google-analytics.com.
94.228.209.244 ad-emea.doubleclick.net.
94.228.209.244 www.statcounter.com.
178.250.45.15 www.google-analytics.com.
178.250.45.15 ad-emea.doubleclick.net.
178.250.45.15 www.statcounter.com.


Finished : << RKreport[1].txt >>
RKreport[1].txt

3:
RogueKiller V6.1.7 [11/05/2011] by Tigzy
mail: tigzyRK<at>gmail<dot>com
Feedback: http://www.geekstogo.com/forum/files/fi ... guekiller/
Blog: http://tigzyrk.blogspot.com

Operating System: Windows 7 (6.1.7601 Service Pack 1) 32 bits version
Started in : Safe mode with network support
User: Peta [Admin rights]
Mode: HOSTSFix -- Date : 11/12/2011 09:07:53

¤¤¤ Bad processes: 0 ¤¤¤

¤¤¤ Driver: [NOT LOADED] ¤¤¤

¤¤¤ HOSTS File: ¤¤¤
127.0.0.1 localhost
::1 localhost
94.228.209.244 www.google-analytics.com.
94.228.209.244 ad-emea.doubleclick.net.
94.228.209.244 www.statcounter.com.
178.250.45.15 www.google-analytics.com.
178.250.45.15 ad-emea.doubleclick.net.
178.250.45.15 www.statcounter.com.


¤¤¤ Resetted HOSTS: ¤¤¤
127.0.0.1 localhost

Finished : << RKreport[2].txt >>
RKreport[1].txt ; RKreport[2].txt

4:
RogueKiller V6.1.7 [11/05/2011] by Tigzy
mail: tigzyRK<at>gmail<dot>com
Feedback: http://www.geekstogo.com/forum/files/fi ... guekiller/
Blog: http://tigzyrk.blogspot.com

Operating System: Windows 7 (6.1.7601 Service Pack 1) 32 bits version
Started in : Safe mode with network support
User: Peta [Admin rights]
Mode: ProxyFix -- Date : 11/12/2011 09:08:19

¤¤¤ Bad processes: 0 ¤¤¤

¤¤¤ Driver: [NOT LOADED] ¤¤¤

¤¤¤ Registry Entries: 0 ¤¤¤

Finished : << RKreport[3].txt >>
RKreport[1].txt ; RKreport[2].txt ; RKreport[3].txt


a ten combofix mam taky udelat jak jste psal ?

Ano pokračujte Combofixem

chodnik74 píše:Ano pokračujte Combofixem

moc ti dekuju zes mi pomohl, uz mi to ide a zadny blaster mi uz neukazuje dik mco tady je ten log z combofix:

ComboFix 11-11-12.02 - Peta 12.11.2011 9:47.1.4 - x86
Microsoft Windows 7 Professional 6.1.7601.1.1250.420.1029.18.3326.2674 [GMT 1:00]
Spuštěný z: c:\users\Peta\Desktop\ComboFix.exe
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\Bifrost
c:\program files\FunWebProducts
c:\program files\MyWebSearch
c:\program files\MyWebSearch\bar\1.bin\F3BKGERR.JPG
c:\program files\MyWebSearch\bar\1.bin\F3SPACER.WMV
c:\program files\MyWebSearch\bar\1.bin\F3WALLPP.DAT
c:\program files\MyWebSearch\bar\1.bin\FWPBUDDY.PNG
c:\program files\MyWebSearch\bar\1.bin\chrome\M3FFXTBR.JAR
c:\program files\MyWebSearch\bar\1.bin\INSTALL.RDF
c:\program files\MyWebSearch\bar\Avatar\COMMON.F3S
c:\program files\MyWebSearch\bar\Game\CHECKERS.F3S
c:\program files\MyWebSearch\bar\Game\CHESS.F3S
c:\program files\MyWebSearch\bar\Game\REVERSI.F3S
c:\program files\MyWebSearch\bar\IE9Mesg\COMMON.F3S
c:\program files\MyWebSearch\bar\Message\COMMON.F3S
c:\program files\MyWebSearch\bar\Notifier\COMMON.F3S
c:\program files\MyWebSearch\bar\Notifier\DOG.F3S
c:\program files\MyWebSearch\bar\Notifier\FISH.F3S
c:\program files\MyWebSearch\bar\Notifier\KUNGFU.F3S
c:\program files\MyWebSearch\bar\Notifier\LIFEGARD.F3S
c:\program files\MyWebSearch\bar\Notifier\MAID.F3S
c:\program files\MyWebSearch\bar\Notifier\MAILBOX.F3S
c:\program files\MyWebSearch\bar\Notifier\OPERA.F3S
c:\program files\MyWebSearch\bar\Notifier\ROBOT.F3S
c:\program files\MyWebSearch\bar\Notifier\SEDUCT.F3S
c:\program files\MyWebSearch\bar\Notifier\SURFER.F3S
c:\program files\MyWebSearch\bar\Overlay\COMMON.F3S
c:\program files\MyWebSearch\bar\Settings\s_pid.dat
c:\programdata\group.exe
c:\programdata\starter.exe
c:\users\Peta\AppData\Roaming\addons.dat
c:\users\Peta\AppData\Roaming\cglogs.dat
c:\users\Peta\AppData\Roaming\chrtmp
c:\users\Peta\AppData\Roaming\kernel33.dll
c:\users\Peta\AppData\Roaming\Local
c:\users\Peta\AppData\Roaming\logs.dat
c:\users\Peta\AppData\Roaming\mdrCkkXKlIUiQhT.txt
c:\users\Peta\AppData\Roaming\Peta3SQLite3.dll
c:\users\Peta\AppData\Roaming\Petalog.dat
c:\users\Peta\AppData\Roaming\privacy.exe
c:\users\Peta\AppData\Roaming\windows
c:\users\Peta\AppData\Roaming\winupdate
c:\users\Peta\community.exe
c:\users\Public\Documents\dll
C:\Win
c:\win\Hack Facebook.exe
c:\windows\$NtUninstallKB24706$
c:\windows\$NtUninstallKB24706$\1840313037\@
c:\windows\$NtUninstallKB24706$\1840313037\click.tlb
c:\windows\$NtUninstallKB24706$\1840313037\L\xadqgnnk
c:\windows\$NtUninstallKB24706$\1840313037\loader.tlb
c:\windows\$NtUninstallKB24706$\1840313037\U\@00000001
c:\windows\$NtUninstallKB24706$\1840313037\U\@000000c0
c:\windows\$NtUninstallKB24706$\1840313037\U\@000000cb
c:\windows\$NtUninstallKB24706$\1840313037\U\@000000cf
c:\windows\$NtUninstallKB24706$\1840313037\U\@80000000
c:\windows\$NtUninstallKB24706$\1840313037\U\@800000c0
c:\windows\$NtUninstallKB24706$\1840313037\U\@800000cb
c:\windows\$NtUninstallKB24706$\1840313037\U\@800000cf
c:\windows\$NtUninstallKB24706$\3195270028
c:\windows\3455234157
c:\windows\main
c:\windows\PCGWIN32.LI5
c:\windows\system32\
c:\windows\system32\bpk.dat
c:\windows\system32\c_80052.nls
c:\windows\system32\dt
c:\windows\system32\dt\2011-04-19_20-55-19-102430053
c:\windows\system32\dt\2011-04-19_21-00-19-102730059
c:\windows\system32\dt\2011-04-19_21-05-19-103030064
c:\windows\system32\dt\2011-04-19_21-10-19-103330070
c:\windows\system32\dt\2011-04-19_21-15-19-103630075
c:\windows\system32\dt\2011-04-19_21-20-19-103930081
c:\windows\system32\dt\2011-04-19_21-25-19-104230086
c:\windows\system32\dt\2011-04-19_21-30-19-104530092
c:\windows\system32\dt\2011-04-19_21-35-19-104830097
c:\windows\system32\dt\2011-04-19_21-40-19-105130103
c:\windows\system32\dt\2011-04-19_21-45-19-105430093
c:\windows\system32\dt\2011-04-19_21-50-19-105730098
c:\windows\system32\dt\2011-04-19_21-55-19-106030119
c:\windows\system32\dt\2011-04-19_22-00-19-106330172
c:\windows\system32\dt\2011-04-19_22-05-19-106630193
c:\windows\system32\dt\2011-04-19_22-10-19-106930198
c:\windows\system32\dt\2011-04-19_22-15-19-107230173
c:\windows\system32\dt\2011-04-19_22-20-19-107530147
c:\windows\system32\dt\2011-04-19_22-25-19-107830199
c:\windows\system32\dt\2011-04-19_22-30-19-108130205
c:\windows\system32\dt\2011-04-19_22-35-19-108430226
c:\windows\system32\dt\2011-04-19_22-40-19-108730154
c:\windows\system32\dt\2011-04-19_22-45-19-109030175
c:\windows\system32\dt\2011-04-19_22-50-19-109330227
c:\windows\system32\dt\2011-04-19_22-55-19-109630233
c:\windows\system32\dt\2011-04-19_23-00-19-109930207
c:\windows\system32\dt\2011-04-19_23-05-19-110230244
c:\windows\system32\dt\2011-04-19_23-10-19-110530233
c:\windows\system32\dt\2011-04-19_23-15-19-110830270
c:\windows\system32\dt\2011-04-19_23-20-19-111130245
c:\windows\system32\dt\2011-04-19_23-25-19-111430250
c:\windows\system32\dt\2011-04-19_23-30-19-111730224
c:\windows\system32\dt\2011-04-19_23-35-19-112030261
c:\windows\system32\dt\2011-04-19_23-40-19-112330251
c:\windows\system32\dt\2011-04-19_23-45-19-112630257
c:\windows\system32\dt\2011-04-19_23-50-19-112930231
c:\windows\system32\dt\2011-04-19_23-55-19-113230330
c:\windows\system32\dt\2011-04-20_00-00-19-113530242
c:\windows\system32\dt\2011-04-20_00-05-19-113830279
c:\windows\system32\dt\2011-04-20_00-10-19-114130284
c:\windows\system32\dt\2011-04-20_00-15-19-114430290
c:\windows\system32\dt\2011-04-20_00-20-19-114730280
c:\windows\system32\dt\2011-04-20_00-25-19-115030301
c:\windows\system32\dt\2011-04-20_00-30-19-115330291
c:\windows\system32\dt\2011-04-20_00-35-19-115630296
c:\windows\system32\dt\2011-04-20_00-40-19-115930364
c:\windows\system32\dt\2011-04-20_00-50-19-116530375
c:\windows\system32\dt\th_2011-04-19_20-55-19-102430053
c:\windows\system32\dt\th_2011-04-19_21-00-19-102730059
c:\windows\system32\dt\th_2011-04-19_21-05-19-103030064
c:\windows\system32\dt\th_2011-04-19_21-10-19-103330070
c:\windows\system32\dt\th_2011-04-19_21-15-19-103630075
c:\windows\system32\dt\th_2011-04-19_21-20-19-103930081
c:\windows\system32\dt\th_2011-04-19_21-25-19-104230086
c:\windows\system32\dt\th_2011-04-19_21-30-19-104530092
c:\windows\system32\dt\th_2011-04-19_21-35-19-104830097
c:\windows\system32\dt\th_2011-04-19_21-40-19-105130103
c:\windows\system32\dt\th_2011-04-19_21-45-19-105430093
c:\windows\system32\dt\th_2011-04-19_21-50-19-105730098
c:\windows\system32\dt\th_2011-04-19_21-55-19-106030119
c:\windows\system32\dt\th_2011-04-19_22-00-19-106330172
c:\windows\system32\dt\th_2011-04-19_22-05-19-106630193
c:\windows\system32\dt\th_2011-04-19_22-10-19-106930198
c:\windows\system32\dt\th_2011-04-19_22-15-19-107230173
c:\windows\system32\dt\th_2011-04-19_22-20-19-107530147
c:\windows\system32\dt\th_2011-04-19_22-25-19-107830199
c:\windows\system32\dt\th_2011-04-19_22-30-19-108130205
c:\windows\system32\dt\th_2011-04-19_22-35-19-108430226
c:\windows\system32\dt\th_2011-04-19_22-40-19-108730154
c:\windows\system32\dt\th_2011-04-19_22-45-19-109030175
c:\windows\system32\dt\th_2011-04-19_22-50-19-109330227
c:\windows\system32\dt\th_2011-04-19_22-55-19-109630233
c:\windows\system32\dt\th_2011-04-19_23-00-19-109930207
c:\windows\system32\dt\th_2011-04-19_23-05-19-110230244
c:\windows\system32\dt\th_2011-04-19_23-10-19-110530233
c:\windows\system32\dt\th_2011-04-19_23-15-19-110830270
c:\windows\system32\dt\th_2011-04-19_23-20-19-111130245
c:\windows\system32\dt\th_2011-04-19_23-25-19-111430250
c:\windows\system32\dt\th_2011-04-19_23-30-19-111730224
c:\windows\system32\dt\th_2011-04-19_23-35-19-112030261
c:\windows\system32\dt\th_2011-04-19_23-40-19-112330251
c:\windows\system32\dt\th_2011-04-19_23-45-19-112630257
c:\windows\system32\dt\th_2011-04-19_23-50-19-112930231
c:\windows\system32\dt\th_2011-04-19_23-55-19-113230330
c:\windows\system32\dt\th_2011-04-20_00-00-19-113530242
c:\windows\system32\dt\th_2011-04-20_00-05-19-113830279
c:\windows\system32\dt\th_2011-04-20_00-10-19-114130284
c:\windows\system32\dt\th_2011-04-20_00-15-19-114430290
c:\windows\system32\dt\th_2011-04-20_00-20-19-114730280
c:\windows\system32\dt\th_2011-04-20_00-25-19-115030301
c:\windows\system32\dt\th_2011-04-20_00-30-19-115330291
c:\windows\system32\dt\th_2011-04-20_00-35-19-115630296
c:\windows\system32\dt\th_2011-04-20_00-40-19-115930364
c:\windows\system32\dt\th_2011-04-20_00-50-19-116530375
c:\windows\system32\inst.dat
c:\windows\system32\install
c:\windows\system32\pk.bin
c:\windows\system32\web.dat
c:\windows\system32\WinDir
c:\windows\XSxS
C:\Windupdt
.
Nakažená kopie c:\windows\system32\drivers\serial.sys byla nalezena a vyléčena.
Obnovena kopie z - The cat found it
c:\windows\system32\atiesrxx.exe . . . je infikován!!
c:\windows\system32\atiesrxx.exe . . . was deleted!! You should re-install the program it pertains to
.
c:\program files\AVG\AVG9\avgwdsvc.exe . . . je infikován!!
c:\program files\AVG\AVG9\avgwdsvc.exe . . . was deleted!! You should re-install the program it pertains to
.
Nakažená kopie c:\program files\AVG\AVG9\avgfws9.exe byla nalezena a vyléčena.
Obnovena kopie z - c:\program files\AVG\AVG9\
.
Nakažená kopie c:\program files\DeviceVM\Browser Configuration Utility\BCUService.exe byla nalezena a vyléčena.
Obnovena kopie z - c:\program files\DeviceVM\Browser Configuration Utility\
.
c:\program files\Hotspot Shield\bin\openvpnas.exe . . . je infikován!!
c:\program files\Hotspot Shield\bin\openvpnas.exe . . . was deleted!! You should re-install the program it pertains to
.
Nakažená kopie c:\program files\Hotspot Shield\HssWPR\hsssrv.exe byla nalezena a vyléčena.
Obnovena kopie z - c:\program files\Hotspot Shield\HssWPR\
.
Nakažená kopie c:\program files\ICQ6Toolbar\ICQ Service.exe byla nalezena a vyléčena.
Obnovena kopie z - c:\program files\ICQ6Toolbar\
.
c:\windows\system32\PnkBstrA.exe . . . je infikován!!
c:\windows\system32\PnkBstrA.exe . . . was deleted!! You should re-install the program it pertains to
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_6db0f2cd
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-10-12 do 2011-11-12 )))))))))))))))))))))))))))))))
.
.
2011-12-30 20:31 . 2011-12-30 20:31 -------- d-----w- c:\users\Peta\AppData\Local\bizarre creations
2011-12-30 19:54 . 2008-07-31 09:41 238088 ----a-w- c:\windows\system32\xactengine3_2.dll
2011-12-30 19:49 . 2011-05-29 19:11 -------- d-----w- c:\program files\Activision
2011-12-30 14:11 . 2011-12-30 14:11 12536 ----a-w- c:\windows\system32\avgrsstx.dll
2011-11-12 08:56 . 2011-11-12 08:58 -------- d-----w- c:\users\Peta\AppData\Local\temp
2011-11-12 08:56 . 2011-11-12 08:56 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-11-12 08:48 . 2011-11-12 08:48 56200 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{9784464D-EB80-49F8-B77C-A83EB2FD336A}\offreg.dll
2011-11-12 08:39 . 2009-07-13 23:45 83456 ----a-w- c:\windows\system32\drivers\serial.sys
2011-11-12 08:06 . 2011-11-12 08:08 111872 ----a-w- c:\windows\system32\drivers\TrueSight.sys
2011-11-12 06:58 . 2011-11-12 06:58 -------- d-----w- C:\rsit
2011-11-12 06:58 . 2011-11-12 06:58 -------- d-----w- c:\program files\trend micro
2011-11-12 00:43 . 2011-10-07 03:48 6668624 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{9784464D-EB80-49F8-B77C-A83EB2FD336A}\mpengine.dll
2011-11-11 13:53 . 2011-10-01 04:37 708608 ----a-w- c:\program files\Common Files\System\wab32.dll
2011-11-11 13:53 . 2011-09-29 16:03 1290608 ----a-w- c:\windows\system32\drivers\tcpip.sys
2011-11-11 13:53 . 2011-09-29 03:37 2341888 ----a-w- c:\windows\system32\win32k.sys
2011-11-06 10:07 . 2011-11-06 11:33 -------- d-----w- c:\program files\Piranha Bytes
2011-11-01 20:57 . 2011-11-01 21:06 -------- d-----w- c:\program files\MSECache
2011-11-01 20:50 . 2011-11-01 20:50 -------- d-----w- c:\program files\Doc Convertor
2011-10-29 22:38 . 2011-10-29 23:15 -------- d-----w- c:\program files\Gothic III
2011-10-29 22:38 . 2011-10-29 22:38 -------- d-----w- c:\users\Peta\AppData\Roaming\InstallShield
2011-10-29 13:52 . 2011-10-29 13:52 -------- d-sh--w- c:\windows\system32\%APPDATA%
2011-10-27 17:39 . 2011-08-13 04:18 6144 ----a-w- c:\program files\Internet Explorer\iecompat.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-12-30 14:11 . 2010-12-24 21:18 216400 ----a-w- c:\windows\system32\drivers\avgldx86.sys
2011-12-30 14:11 . 2010-12-24 21:17 52872 ----a-w- c:\windows\system32\drivers\avgrkx86.sys
2011-09-14 13:32 . 2010-12-24 21:18 29712 ----a-w- c:\windows\system32\drivers\avgmfx86.sys
2011-09-08 20:45 . 2011-09-08 20:45 0 ----a-w- c:\windows\system32\ConduitEngine.tmp
2011-07-08 07:29 . 2011-08-15 20:48 142296 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{A3BC75A2-1F87-4686-AA43-5347D756017C}"= "c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll" [2011-07-26 2532680]
"{f0381dbd-e018-4e07-ae40-d96ab15083f0}"= "c:\program files\AF-HSS\prxtbAF-0.dll" [2011-01-17 175912]
.
[HKEY_CLASSES_ROOT\clsid\{a3bc75a2-1f87-4686-aa43-5347d756017c}]
.
[HKEY_CLASSES_ROOT\clsid\{f0381dbd-e018-4e07-ae40-d96ab15083f0}]
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
2011-01-17 14:54 175912 ----a-w- c:\program files\ConduitEngine\prxConduitEngine.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C}]
2011-07-26 08:15 2532680 ----a-w- c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{E887F06F-565D-42e5-AA80-63EB0D465202}]
2011-06-29 13:34 266240 ----a-w- c:\programdata\Plugin\Plugin.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{f0381dbd-e018-4e07-ae40-d96ab15083f0}]
2011-01-17 14:54 175912 ----a-w- c:\program files\AF-HSS\prxtbAF-0.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{CCC7A320-B3CA-4199-B1A6-9F516DD69829}"= "c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll" [2011-07-26 2532680]
"{f0381dbd-e018-4e07-ae40-d96ab15083f0}"= "c:\program files\AF-HSS\prxtbAF-0.dll" [2011-01-17 175912]
"{30F9B915-B755-4826-820B-08FBA6BD249D}"= "c:\program files\ConduitEngine\prxConduitEngine.dll" [2011-01-17 175912]
.
[HKEY_CLASSES_ROOT\clsid\{ccc7a320-b3ca-4199-b1a6-9f516dd69829}]
.
[HKEY_CLASSES_ROOT\clsid\{f0381dbd-e018-4e07-ae40-d96ab15083f0}]
.
[HKEY_CLASSES_ROOT\clsid\{30f9b915-b755-4826-820b-08fba6bd249d}]
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{CCC7A320-B3CA-4199-B1A6-9F516DD69829}"= "c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll" [2011-07-26 2532680]
"{F0381DBD-E018-4E07-AE40-D96AB15083F0}"= "c:\program files\AF-HSS\prxtbAF-0.dll" [2011-01-17 175912]
.
[HKEY_CLASSES_ROOT\clsid\{ccc7a320-b3ca-4199-b1a6-9f516dd69829}]
.
[HKEY_CLASSES_ROOT\clsid\{f0381dbd-e018-4e07-ae40-d96ab15083f0}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"windows_update.exe"="c:\users\Peta\Desktop" [X]
"DAEMON Tools Lite"="c:\program files\DAEMON Tools Lite\DTLite.exe" [2010-04-01 357696]
"ISUSPM Startup"="c:\progra~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe" [2005-02-17 221184]
"ICQ"="c:\program files\ICQ7.1\ICQ.exe" [2011-01-05 133432]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BCU"="c:\program files\DeviceVM\Browser Configuration Utility\BCU.exe" [2009-10-15 375000]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2010-07-06 98304]
"AVG9_TRAY"="c:\progra~1\AVG\AVG9\avgtray.exe" [2011-09-14 2076512]
"ISUSScheduler"="c:\program files\Common Files\InstallShield\UpdateService\issch.exe" [2005-02-17 81920]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2010-05-14 248552]
"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2011-03-21 1230704]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"UACDisableNotify"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\System32\avgrsstx.dll
.
R2 5016;5016;c:\users\Peta\AppData\Local\Temp\5016.sys [x]
R2 5674;5674;c:\users\Peta\AppData\Local\Temp\5674.sys [x]
R2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
R2 avg9emc;AVG E-mail Scanner;c:\program files\AVG\AVG9\avgemc.exe [2011-12-30 921952]
R2 avg9wd;AVG WatchDog;c:\program files\AVG\AVG9\avgwdsvc.exe [x]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 gupdate;Služba Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [2011-04-22 135664]
R2 hshld;Hotspot Shield Service;c:\program files\Hotspot Shield\bin\openvpnas.exe [x]
R2 HssWd;Hotspot Shield Monitoring Service;c:\program files\Hotspot Shield\bin\hsswd.exe [2011-05-25 329544]
R3 AppleChargerSrv;AppleChargerSrv;c:\windows\system32\AppleChargerSrv.exe [2010-04-06 31272]
R3 AVG Security Toolbar Service;AVG Security Toolbar Service;c:\program files\AVG\AVG9\Toolbar\ToolbarBroker.exe [2011-07-26 1025352]
R3 gupdatem;Služba Google Update (gupdatem);c:\program files\Google\Update\GoogleUpdate.exe [2011-04-22 135664]
R3 GVTDrv;GVTDrv;c:\windows\system32\Drivers\GVTDrv.sys [2011-01-26 24944]
R3 TrueSight;TrueSight;c:\windows\system32\drivers\TrueSight.sys [2011-11-12 111872]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2010-12-25 1343400]
S0 AvgRkx86;avgrkx86.sys;c:\windows\System32\Drivers\avgrkx86.sys [2011-12-30 52872]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2010-12-25 691696]
S1 AppleCharger;AppleCharger;c:\windows\system32\DRIVERS\AppleCharger.sys [2010-04-27 19496]
S1 Avgfwfd;AVG network filter service;c:\windows\system32\DRIVERS\avgfwd6x.sys [2010-12-24 24856]
S1 AvgLdx86;AVG AVI Loader Driver x86;c:\windows\System32\Drivers\avgldx86.sys [2011-12-30 216400]
S1 AvgTdiX;AVG Network Redirector;c:\windows\System32\Drivers\avgtdix.sys [2011-05-05 243152]
S2 avgfws9;AVG Firewall;c:\program files\AVG\AVG9\avgfws9.exe [2011-11-12 2331544]
S2 BCUService;Browser Configuration Utility Service;c:\program files\DeviceVM\Browser Configuration Utility\BCUService.exe [2011-11-12 223464]
S2 ICQ Service;ICQ Service;c:\program files\ICQ6Toolbar\ICQ Service.exe [2011-11-12 247096]
S3 amdkmdag;amdkmdag;c:\windows\system32\DRIVERS\atikmdag.sys [2010-07-07 5882368]
S3 amdkmdap;amdkmdap;c:\windows\system32\DRIVERS\atikmpag.sys [2010-07-07 210944]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [2010-03-22 278560]
.
.
Obsah adresáře 'Naplánované úlohy'
.
2011-11-12 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-04-22 19:09]
.
2011-11-12 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2011-04-22 19:09]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://free.avg.com/ww.homepage-tlbrf
mStart Page = hxxp://start.explore.cm/
TCP: DhcpNameServer = 192.168.2.1
Handler: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll
FF - ProfilePath - c:\users\Peta\AppData\Roaming\Mozilla\Firefox\Profiles\9jr87nvu.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT1750559&SearchSource=3&q={searchTerms}
FF - prefs.js: browser.search.selectedEngine - Searchrise
FF - prefs.js: browser.startup.homepage - hxxp://searchrise.com?hl=cs&fh=
FF - prefs.js: keyword.URL - hxxp://search.babylon.com/?babsrc=SP_ss&mntrId=364505fa0000000000006cf049d66c96&tlver=1.4.19.19&instlRef=sst&ss=1&affID=17981&q=
FF - prefs.js: network.proxy.type - 0
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\windows\system32\taskhost.exe
c:\program files\Hotspot Shield\HssWPR\hsssrv.exe
c:\windows\system32\taskhost.exe
c:\windows\system32\conhost.exe
c:\program files\Windows Media Player\wmpnetwk.exe
c:\windows\system32\sppsvc.exe
.
**************************************************************************
.
Celkový čas: 2011-11-12 10:01:17 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-11-12 09:01
.
Před spuštěním: Volných bajtů: 811 379 847 168
Po spuštění: Volných bajtů: 811 776 364 544
.
- - End Of File - - 58CAF2AD4472A2BC633C3D8136C736CD

Výborně, ale vypadá to, že je poškozený program AVG..

Trváte na antiviru od AVG? U nás ho moc nedoporučujeme. Důvody: Slabší detekce, vysoká zátěž systému a způsobuje dosti problémů.. Doporučuji výměnu za Avast, MSE nebo Aviru (anglická)

A dále bych přeinstaloval ovladače grafické karty...

Odinstalujte ICQ6Toolbar a ConduitEngine a všechny zbytečné toolbary


Otevřeme si Poznámkový blok

• (stiskneme klávesovou kombinaci WIN+R a napíšeme ,,notepad,, bez úvozovek a dáme enter)
• Vložíme do něj následující script:

  Kód: Vybrat vše

  
  KillAll::
  
  Registry::
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
  "{30F9B915-B755-4826-820B-08FBA6BD249D}"=-
  [-HKEY_CLASSES_ROOT\clsid\{30f9b915-b755-4826-820b-08fba6bd249d}]
  [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  "windows_update.exe"=-
  "DAEMON Tools Lite"=-
  "ISUSPM Startup"=-
  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
  "BCU"=-
  "StartCCC"=-
  "ISUSScheduler"=-
  "SunJavaUpdateSched"=-
  "DivXUpdate"=-
  
  File::
  c:\users\Peta\Desktop\windows_update.exe
  c:\users\Peta\AppData\Local\Temp\5016.sys
  c:\users\Peta\AppData\Local\Temp\5674.sys
  c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
  C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
  
  Driver::
  5016
  5674
  gupdate
  gupdatem
  ICQ Service
  
  Folder::
  c:\program files\ICQ6Toolbar\
  c:\program files\ConduitEngine\
  
  DDS::
  uStart Page = hxxp://free.avg.com/ww.homepage-tlbrf
  mStart Page = hxxp://start.explore.cm/
  
  Firefox::
  FF - ProfilePath - c:\users\Peta\AppData\Roaming\Mozilla\Firefox\Profiles\9jr87nvu.default\
  FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.as ... ource=3&q={searchTerms}
  FF - prefs.js: browser.search.selectedEngine - Searchrise
  FF - prefs.js: browser.startup.homepage - hxxp://searchrise.com?hl=cs&fh=
  FF - prefs.js: keyword.URL - hxxp://search.babylon.com/?babsrc=SP_ss ... D=17981&q=
  FF - prefs.js: network.proxy.type - 0
  
  RegLock::
  [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
  
  Reboot::
  

• Soubor uložíme na Plochu jako CFScript.txt
• Poté tento soubor uchopíme levým tlačítkem myši a přetáhneme na ikonu Combofixu a upustíme
  
  
• Poté Combofix provede všechny operace a udělá nový log,který sem vložte

Může se stát,že po aplikaci scriptu nenaběhne Windows běžným způsobem.V tomto případě restartujte počítač a při startu mačkejte F8 a zvolte možnost Poslední známá funkční konfigurace



Stáhněte si TDSSKiller

• Spuste program a klikněte na Start Scan
• Pokud program najde infikekci,tak ji bude lecit (Cure), povolte léčení kliknutím na tlačítko Continue
• Pokud program najde podezrely soubor (suspicious),bude ho chtít přeskočit (Skip), povolte přeskočení kliknutim na tlačítko Continue
• Po dokončení skenování bude možná potřeba restartovat počítač,ten povolíte programu kliknutím na tlačítko Reboot now
• Po restartování počítače na vás vyskočí log(pokud se tak nestane,tak ho najdete na disku,kde máte nainstalovaná systém s názvem TDSSKiller.xxxx_log.txt) a vložte mi sem jeho obsah
• Pokud nebude program požadovat restartování počítače,klikněte na tlačítko Close a následně na Report , čímž se Vám vytvoří log a jeho obsah mu sem vložte

udelal jsem to a po restartu se mi poskodil adapter a nejde mi internet, mam rourter a na notebooku mi to jde tak nevim co mam tet jako delat, rourter mam pripojeny k pc. obnoveni systemu sem skousel a nejde vyresit chyby taky nejde.

Mrkněte na disk C:\ bude tam log z Combofixu( Combofix1,2 dle spuštění ) vložte mi sem ten nejnovější

chodnik74 píše:Mrkněte na disk C:\ bude tam log z Combofixu( Combofix1,2 dle spuštění ) vložte mi sem ten nejnovější

ulozil jsem si ten log z combofixu na mobil a tet ho davam sem bo mi na pc nejde internet a jsem na notebooku, doufam ze to je on byl tam jen tenhle:

ComboFix 11-11-12.02 - Peta 12.11.2011 11:09:38.2.4 - x86
Microsoft Windows 7 Professional 6.1.7601.1.1250.420.1029.18.3326.2048 [GMT 1:00]
Spuštěný z: c:\users\Peta\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\Peta\Desktop\CFScript.txt.txt
FW: AVG Firewall *Enabled* {621CC794-9486-F902-D092-0484E8EA828B}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"c:\users\Peta\AppData\Local\Temp\5016.sys"
"c:\users\Peta\AppData\Local\Temp\5674.sys"
"c:\users\Peta\Desktop\windows_update.exe"
"c:\windows\Tasks\GoogleUpdateTaskMachineCore.job"
"c:\windows\Tasks\GoogleUpdateTaskMachineUA.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\ICQ6Toolbar
c:\program files\ICQ6Toolbar\config.xml
c:\program files\ICQ6Toolbar\Icons.bmp
c:\program files\ICQ6Toolbar\ICQ Service.exe
c:\program files\ICQ6Toolbar\icq6Toolbar.ico
c:\program files\ICQ6Toolbar\ICQToolBar.dll
c:\program files\ICQ6Toolbar\ICQUnToolbar.exe
c:\program files\ICQ6Toolbar\logo_small.gif
c:\program files\ICQ6Toolbar\ServiceStarter.exe
c:\program files\ICQ6Toolbar\short.wav
c:\program files\ICQ6Toolbar\Version.txt
c:\program files\ICQ6Toolbar\voucher.bmp
c:\program files\ICQ6Toolbar\voucher2.bmp
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
.
.
((((((((((((((((((((((((((((((((((((((( Ovladače/Služby )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_5016
-------\Legacy_5674
-------\Service_5016
-------\Service_5674
-------\Service_gupdate
-------\Service_gupdatem
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2011-10-12 do 2011-11-12 )))))))))))))))))))))))))))))))
.
.
2011-12-30 20:31 . 2011-12-30 20:31 -------- d-----w- c:\users\Peta\AppData\Local\bizarre creations
2011-12-30 19:54 . 2008-07-31 09:41 238088 ----a-w- c:\windows\system32\xactengine3_2.dll
2011-12-30 19:49 . 2011-05-29 19:11 -------- d-----w- c:\program files\Activision
2011-12-30 14:11 . 2011-12-30 14:11 12536 ----a-w- c:\windows\system32\avgrsstx.dll
2011-11-12 10:15 . 2011-11-12 10:19 -------- d-----w- c:\users\Peta\AppData\Local\temp
2011-11-12 10:15 . 2011-11-12 10:15 -------- d-----w- c:\users\Default\AppData\Local\temp
2011-11-12 09:45 . 2011-11-12 09:45 -------- d-----w- c:\programdata\MFAData
2011-11-12 09:30 . 2011-11-12 09:30 -------- d-----w- c:\users\Peta\AppData\Local\ElevatedDiagnostics
2011-11-12 08:48 . 2011-11-12 09:00 56200 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{9784464D-EB80-49F8-B77C-A83EB2FD336A}\offreg.dll
2011-11-12 08:39 . 2009-07-13 23:45 83456 ----a-w- c:\windows\system32\drivers\serial.sys
2011-11-12 08:06 . 2011-11-12 08:08 111872 ----a-w- c:\windows\system32\drivers\TrueSight.sys
2011-11-12 06:58 . 2011-11-12 06:58 -------- d-----w- C:\rsit
2011-11-12 06:58 . 2011-11-12 06:58 -------- d-----w- c:\program files\trend micro
2011-11-12 00:43 . 2011-10-07 03:48 6668624 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{9784464D-EB80-49F8-B77C-A83EB2FD336A}\mpengine.dll
2011-11-11 13:53 . 2011-10-01 04:37 708608 ----a-w- c:\program files\Common Files\System\wab32.dll
2011-11-11 13:53 . 2011-09-29 16:03 1290608 ----a-w- c:\windows\system32\drivers\tcpip.sys
2011-11-11 13:53 . 2011-09-29 03:37 2341888 ----a-w- c:\windows\system32\win32k.sys
2011-11-06 10:07 . 2011-11-06 11:33 -------- d-----w- c:\program files\Piranha Bytes
2011-11-01 20:57 . 2011-11-01 21:06 -------- d-----w- c:\program files\MSECache
2011-11-01 20:50 . 2011-11-01 20:50 -------- d-----w- c:\program files\Doc Convertor
2011-10-29 22:38 . 2011-10-29 23:15 -------- d-----w- c:\program files\Gothic III
2011-10-29 22:38 . 2011-10-29 22:38 -------- d-----w- c:\users\Peta\AppData\Roaming\InstallShield
2011-10-29 13:52 . 2011-10-29 13:52 -------- d-sh--w- c:\windows\system32\%APPDATA%
2011-10-27 17:39 . 2011-08-13 04:18 6144 ----a-w- c:\program files\Internet Explorer\iecompat.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-12-30 14:11 . 2010-12-24 21:18 216400 ----a-w- c:\windows\system32\drivers\avgldx86.sys
2011-12-30 14:11 . 2010-12-24 21:17 52872 ----a-w- c:\windows\system32\drivers\avgrkx86.sys
2011-09-14 13:32 . 2010-12-24 21:18 29712 ----a-w- c:\windows\system32\drivers\avgmfx86.sys
2011-09-08 20:45 . 2011-09-08 20:45 0 ----a-w- c:\windows\system32\ConduitEngine.tmp
2011-07-08 07:29 . 2011-08-15 20:48 142296 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{A3BC75A2-1F87-4686-AA43-5347D756017C}"= "c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll" [2011-07-26 2532680]
"{f0381dbd-e018-4e07-ae40-d96ab15083f0}"= "c:\program files\AF-HSS\prxtbAF-0.dll" [2011-01-17 175912]
.
[HKEY_CLASSES_ROOT\clsid\{a3bc75a2-1f87-4686-aa43-5347d756017c}]
.
[HKEY_CLASSES_ROOT\clsid\{f0381dbd-e018-4e07-ae40-d96ab15083f0}]
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A3BC75A2-1F87-4686-AA43-5347D756017C}]
2011-07-26 08:15 2532680 ----a-w- c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{E887F06F-565D-42e5-AA80-63EB0D465202}]
2011-06-29 13:34 266240 ----a-w- c:\programdata\Plugin\Plugin.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{f0381dbd-e018-4e07-ae40-d96ab15083f0}]
2011-01-17 14:54 175912 ----a-w- c:\program files\AF-HSS\prxtbAF-0.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{CCC7A320-B3CA-4199-B1A6-9F516DD69829}"= "c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll" [2011-07-26 2532680]
"{f0381dbd-e018-4e07-ae40-d96ab15083f0}"= "c:\program files\AF-HSS\prxtbAF-0.dll" [2011-01-17 175912]
.
[HKEY_CLASSES_ROOT\clsid\{ccc7a320-b3ca-4199-b1a6-9f516dd69829}]
.
[HKEY_CLASSES_ROOT\clsid\{f0381dbd-e018-4e07-ae40-d96ab15083f0}]
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{CCC7A320-B3CA-4199-B1A6-9F516DD69829}"= "c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll" [2011-07-26 2532680]
"{F0381DBD-E018-4E07-AE40-D96AB15083F0}"= "c:\program files\AF-HSS\prxtbAF-0.dll" [2011-01-17 175912]
.
[HKEY_CLASSES_ROOT\clsid\{ccc7a320-b3ca-4199-b1a6-9f516dd69829}]
.
[HKEY_CLASSES_ROOT\clsid\{f0381dbd-e018-4e07-ae40-d96ab15083f0}]
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ICQ"="c:\program files\ICQ7.1\ICQ.exe" [2011-01-05 133432]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AVG9_TRAY"="c:\progra~1\AVG\AVG9\avgtray.exe" [2011-09-14 2076512]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"UACDisableNotify"= 0 (0x0)
.
.
------- Doplňkový sken -------
.
TCP: DhcpNameServer = 192.168.2.1
Handler: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - c:\program files\AVG\AVG9\Toolbar\IEToolbar.dll
FF - ProfilePath - c:\users\Peta\AppData\Roaming\Mozilla\Firefox\Profiles\9jr87nvu.default\
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\system\ControlSet002\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files\AVG\AVG9\avgfws9.exe
c:\program files\DeviceVM\Browser Configuration Utility\BCUService.exe
c:\program files\Hotspot Shield\HssWPR\hsssrv.exe
c:\windows\system32\taskhost.exe
c:\program files\Google\Update\GoogleUpdate.exe
c:\windows\system32\taskhost.exe
c:\windows\system32\conhost.exe
c:\windows\System32\rundll32.exe
c:\windows\system32\sppsvc.exe
c:\program files\Windows Media Player\wmpnetwk.exe
.
**************************************************************************
.
Celkový čas: 2011-11-12 11:21:43 - počítač byl restartován
ComboFix-quarantined-files.txt 2011-11-12 10:21
ComboFix2.txt 2011-11-12 09:01
.
Před spuštěním: Volných bajtů: 813 861 191 680
Po spuštění: Volných bajtů: 813 734 977 536
.
- - End Of File - - 1FB2E760B5C1744DDD04353511C1959C

Použijeme WinSockFix , který nám opraví protokol, poté by měl jet internet, pokud ne, tak nastavte IP adresy internetu...

Tady je návod na nastavení IP

• Pokud nejede internet,zkuste zkontrolovat nastavení TCP/IP protokolu
• Jděte do Ovládací panely/Síťová připojení
• Tam uvidíme aktivní připojení,většinou Připojení k místní síti
• Klikneme na položku pravým tlačítkem a dáme Vlastnosti
• Najdeme položku Protokol sítě internet (TCP/IP) a klikneme na Vlastnosti
• Nyní zkontrolujeme,zda je vše vyplněné podle papírů,které vám dal váš poskytovatel internetu(pokud nemůžete najít nebo nevíte jaké údaje to jsou,tak mu zavolejte a zažádejte si o údaje)

chodnik74 píše:Použijeme WinSockFix , který nám opraví protokol, poté by měl jet internet, pokud ne, tak nastavte IP adresy internetu...

ok jdu nato a kdyz otevru na pc nejaky program tak to pise ze to je pripravene k odstraneny nejaky klic bo co coto je?

Jaký program máte namysli? není to zástupce?

chodnik74 píše:Jaký program máte namysli? není to zástupce?

to nevim ale prez spravce mi to jde inak tet se restartuje pc jak ste poradim tim programem

tak ten program taky nepomohl, internet porad nefunguje na modemu ukazuje ze ma fungovat a na pc to je pripojeno a tam na pc to pripojeno neni mam tam krizek, co tetka ?