Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Kontrola LOGU

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
Dante
Návštěvník
Návštěvník
Příspěvky: 7
Registrován: 09 bře 2012 14:00

Kontrola LOGU

#1 Příspěvek od Dante »

Dobrý den, jde mi hrozně pomalu počítač. Prosím o kontrolu logu . Děkuji .
------------------------------------------
Logfile of random's system information tool 1.09 (written by random/random)
Run by Jonáš at 2012-03-09 14:01:20
WIN_VISTA Service Pack 2
System drive C: has 45 GB (29%) free of 153 GB
Total RAM: 2039 MB (45% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:01:49, on 9.3.2012
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe
C:\Program Files\Labtec\WebCam10\WebCam10.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Program Files\DivX\DivX Update\DivXUpdate.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\KWorld Multimedia\HyperMediaCenter\DTVR\Scheduled.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Users\Jonáš\AppData\Local\Google\Update\GoogleUpdate.exe
C:\Users\Jonáš\AppData\Local\Akamai\netsession_win.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Windows\ehome\ehmsas.exe
C:\ProgramData\Badoo\Badoo Desktop\1.6.48.1082\Badoo.Desktop.exe
C:\Program Files\KWorld Multimedia\TV Tuner Card Utilities\HMCP3XCtl.exe
C:\Program Files\Common Files\LogiShrd\LComMgr\LVComSX.exe
C:\Users\Jonáš\AppData\Local\Akamai\netsession_win.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\Macromed\Flash\FlashUtil11e_ActiveX.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Users\Jonáš\Desktop\RSIT.exe
C:\Program Files\trend micro\Jonáš.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local;127.0.0.1:9421;
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
O2 - BHO: Use the DivX Plus Web Player to watch web videos with less interruptions and smoother playback on supported sites - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Yontoo Layers - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Program Files\Yontoo Layers Runtime\YontooIEClient.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Labtec\WebCam10\WebCam10.exe" /hide
O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] "C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime Alternative\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKLM\..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
O4 - HKCU\..\Run: [Center Agent] C:\Program Files\KWorld Multimedia\HyperMediaCenter\DTVR\Scheduled.exe
O4 - HKCU\..\Run: [EPSON Stylus DX4400 Series] C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATICAE.EXE /FU "C:\Windows\TEMP\E_S5A0B.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [EPSON Stylus DX4400 Series (kopie 1)] C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATICAE.EXE /FU "C:\Windows\TEMP\E_S935B.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [Google Update] "C:\Users\Jonáš\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Akamai NetSession Interface] "C:\Users\Jonáš\AppData\Local\Akamai\netsession_win.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Badoo Desktop] C:\ProgramData\Badoo\Badoo Desktop\1.6.48.1082\Badoo.Desktop.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User '?')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User '?')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User '?')
O4 - HKUS\S-1-5-21-458586356-3566987795-1268713004-1000\..\Run: [Center Agent] C:\Program Files\KWorld Multimedia\HyperMediaCenter\DTVR\Scheduled.exe (User '?')
O4 - HKUS\S-1-5-21-458586356-3566987795-1268713004-1000\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe" (User '?')
O4 - HKUS\S-1-5-21-458586356-3566987795-1268713004-1000\..\Run: [Google Update] "C:\Users\Jonáš\AppData\Local\Google\Update\GoogleUpdate.exe" /c (User '?')
O4 - HKUS\S-1-5-21-458586356-3566987795-1268713004-1000\..\Run: [Akamai NetSession Interface] "C:\Users\Jonáš\AppData\Local\Akamai\netsession_win.exe" (User '?')
O4 - HKUS\S-1-5-21-458586356-3566987795-1268713004-1000\..\Run: [AdobeBridge] (User '?')
O4 - HKUS\S-1-5-21-458586356-3566987795-1268713004-1000\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized (User '?')
O4 - HKUS\S-1-5-21-458586356-3566987795-1268713004-1000\..\Run: [Badoo Desktop] C:\ProgramData\Badoo\Badoo Desktop\1.6.48.1082\Badoo.Desktop.exe (User '?')
O4 - S-1-5-21-458586356-3566987795-1268713004-1000 Startup: PowerReg Scheduler.exe (User '?')
O4 - Startup: PowerReg Scheduler.exe
O4 - Global Startup: Remote Control.lnk = C:\Program Files\KWorld Multimedia\TV Tuner Card Utilities\HMCP3XCtl.exe
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe (file missing)
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe (file missing)
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/pub/s ... wflash.cab
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: LVSrvLauncher - Labtec Inc. - C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe

--
End of file - 10258 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-458586356-3566987795-1268713004-1000Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-458586356-3566987795-1268713004-1000UA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\Jonáš\AppData\Roaming\Mozilla\Firefox\Profiles\rtf53o6i.default

prefs.js - "browser.startup.homepage" - "http://www.google.cz/"
prefs.js - "keyword.URL" - "http://search.babylon.com/?AF=109993&ba ... bafbaf1&q="

"{20a82645-c095-46ed-80e3-08825760534b}"=c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"wrc@avast.com"=C:\Program Files\Alwil Software\Avast5\WebRep\FF
"{23fcfd51-4958-4f00-80a3-ae97e717ed8b}"=C:\Program Files\DivX\DivX Plus Web Player\firefox\html5video
"{6904342A-8307-11DF-A508-4AE2DFD72085}"=C:\Program Files\DivX\DivX Plus Web Player\firefox\wpa


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\Windows\system32\Adobe\Director\np32dsw.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0]
"Description"=DivX Plus Web Player
"Path"=C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0]
"Description"=DivX VOD Helper Plug-in
"Path"=C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@nexon.net/NxGame]
"Description"=Nexon Game Controller
"Path"=C:\ProgramData\NexonUS\NGM\npNxGameUS.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@ngm.nexoneu.com/NxGame]
"Description"=Nexon Game Controller
"Path"=C:\ProgramData\NexonEU\NGM\npNxGameeu.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@pandonetworks.com/PandoWebPlugin]
"Description"=This plugin detects and launches Pando Media Booster
"Path"=C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nppl3260;version=6.0.12.69]
"Description"=RealPlayer(tm) LiveConnect-Enabled Plug-In
"Path"=C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.69]
"Description"=6.0.12.69
"Path"=C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=]
"Description"=
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=1.1.11]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

C:\Program Files\Mozilla Firefox\extensions\
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
nsIQTScriptablePlugin.xpt

C:\Program Files\Mozilla Firefox\plugins\
npdeployJava1.dll
nppdf32.dll

C:\Program Files\Mozilla Firefox\searchplugins\
babylon.xml
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Users\Jonáš\AppData\Roaming\Mozilla\Firefox\Profiles\rtf53o6i.default\extensions\
battlefieldplay4free@ea.com
cs@dictionaries.addons.mozilla.org
{77d2ed30-4cd2-11e0-b8af-0800200c9a66}
{7b1bf0b6-a1b9-42b0-b75d-252036438bdc}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-01-03 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{326E768D-4182-46FD-9C16-1449A49795F4}]
DivX Plus Web Player HTML5 <video> - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll [2011-02-08 3118976]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{593DDEC6-7468-4cdd-90E1-42DADAA222E9}]
DivX HiQ - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll [2011-02-08 3118976]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll [2012-03-07 1003704]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-10-10 3834016]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-10-18 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}]
Yontoo Layers - C:\Program Files\Yontoo Layers Runtime\YontooIEClient.dll [2011-06-21 787744]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll [2012-03-07 1003704]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"=C:\Program Files\Windows Defender\MSASCui.exe [2008-01-19 1008184]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2007-02-26 138008]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2007-02-26 154392]
"Persistence"=C:\Windows\system32\igfxpers.exe [2007-02-26 133912]
"LogitechCommunicationsManager"=C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe [2007-03-06 488984]
""= []
"LogitechQuickCamRibbon"=C:\Program Files\Labtec\WebCam10\WebCam10.exe [2007-03-06 1060376]
"avast5"=C:\Program Files\Alwil Software\Avast5\avastUI.exe [2012-03-07 4241512]
"AdobeAAMUpdater-1.0"=C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-12-23 500208]
"NeroFilterCheck"=C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2006-01-12 155648]
"QuickTime Task"=C:\Program Files\QuickTime Alternative\QTTask.exe [2010-11-29 421888]
"DivXUpdate"=C:\Program Files\DivX\DivX Update\DivXUpdate.exe [2011-03-21 1230704]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-01-03 843712]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2011-06-09 254696]
"LogMeIn Hamachi Ui"=C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe [2012-02-28 1987976]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2011-08-26 10828392]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Center Agent"=C:\Program Files\KWorld Multimedia\HyperMediaCenter\DTVR\Scheduled.exe [2007-01-19 864768]
"EPSON Stylus DX4400 Series"=C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATICAE.EXE [2007-03-01 180736]
"EPSON Stylus DX4400 Series (kopie 1)"=C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATICAE.EXE [2007-03-01 180736]
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-19 125952]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [2007-01-15 147456]
"Google Update"=C:\Users\Jonáš\AppData\Local\Google\Update\GoogleUpdate.exe [2011-01-23 136176]
"Akamai NetSession Interface"=C:\Users\Jonáš\AppData\Local\Akamai\netsession_win.exe [2012-02-02 3329824]
"AdobeBridge"= []
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2011-10-13 17351304]
"Badoo Desktop"=C:\ProgramData\Badoo\Badoo Desktop\1.6.48.1082\Badoo.Desktop.exe [2011-10-05 1051760]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Remote Control.lnk - C:\Program Files\KWorld Multimedia\TV Tuner Card Utilities\HMCP3XCtl.exe

C:\Users\Jonáš\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
PowerReg Scheduler.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2007-02-22 200704]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"VIDC.I420"=lvcodec2.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"MSVideo8"=VfWWDM32.dll
"MSVideo"=vfwwdm32.dll
"wave1"=wdmaud.drv
"mixer1"=wdmaud.drv
"vidc.mpng"=C:\Program Files\t@b\0.958\686\tabdec.dll
"vidc.mvjp"=C:\Program Files\t@b\0.958\686\tabdec.dll
"vidc.444p"=C:\Program Files\t@b\0.958\686\tabdec.dll
"VIDC.FPS1"=frapsvid.dll
"vidc.dvsd"=pdvcodec.dll
"VIDC.FFDS"=C:\PROGRA~1\COMBIN~1\Filters\FFDShow\ff_vfw.dll
"vidc.mjpg"=bdmjpeg.dll
"vidc.mpeg"=bdmpegv.dll
"msacm.bdmpeg"=bdmpega.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2012-03-08 14:04:42 ----D---- C:\Users\Jonáš\AppData\Roaming\Malwarebytes
2012-03-08 14:04:22 ----D---- C:\ProgramData\Malwarebytes
2012-03-08 14:04:20 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2012-03-08 12:37:34 ----ASH---- C:\hiberfil.sys
2012-03-07 08:39:55 ----D---- C:\rsit
2012-03-07 08:39:55 ----D---- C:\Program Files\trend micro
2012-03-06 22:47:22 ----D---- C:\Program Files\ESET
2012-03-06 22:44:02 ----A---- C:\Windows\ntbtlog.txt
2012-03-06 22:30:53 ----D---- C:\Windows\system32\RTCOM
2012-03-06 22:29:38 ----A---- C:\Windows\system32\WavesLib.dll
2012-03-06 22:29:38 ----A---- C:\Windows\system32\WavesGUILib.dll
2012-03-06 22:29:38 ----A---- C:\Windows\system32\tosade.dll
2012-03-06 22:29:37 ----A---- C:\Windows\system32\tadefxapo2.dll
2012-03-06 22:29:37 ----A---- C:\Windows\system32\tadefxapo.dll
2012-03-06 22:29:37 ----A---- C:\Windows\system32\SRSWOW.dll
2012-03-06 22:29:37 ----A---- C:\Windows\system32\SRSTSXT.dll
2012-03-06 22:29:37 ----A---- C:\Windows\system32\SRSTSHD.dll
2012-03-06 22:29:37 ----A---- C:\Windows\system32\SRSHP360.dll
2012-03-06 22:29:37 ----A---- C:\Windows\system32\SFNHK.dll
2012-03-06 22:29:36 ----A---- C:\Windows\system32\SFCOM.dll
2012-03-06 22:29:36 ----A---- C:\Windows\system32\SFAPO.dll
2012-03-06 22:29:36 ----A---- C:\Windows\system32\drivers\RTKVHDA.sys
2012-03-06 22:29:35 ----A---- C:\Windows\system32\RtkPgExt.dll
2012-03-06 22:29:35 ----A---- C:\Windows\system32\RtkCoInst.dll
2012-03-06 22:29:35 ----A---- C:\Windows\system32\RtkApoApi.dll
2012-03-06 22:29:34 ----A---- C:\Windows\system32\RtkAPO.dll
2012-03-06 22:29:34 ----A---- C:\Windows\system32\RTEEP32A.dll
2012-03-06 22:29:33 ----A---- C:\Windows\system32\RTEEL32A.dll
2012-03-06 22:29:33 ----A---- C:\Windows\system32\RTEEG32A.dll
2012-03-06 22:29:33 ----A---- C:\Windows\system32\RTEED32A.dll
2012-03-06 22:29:33 ----A---- C:\Windows\system32\RP3DHT32.dll
2012-03-06 22:29:33 ----A---- C:\Windows\system32\RP3DAA32.dll
2012-03-06 22:29:33 ----A---- C:\Windows\system32\RCoRes.dat
2012-03-06 22:29:33 ----A---- C:\Windows\system32\R4EEP32A.dll
2012-03-06 22:29:33 ----A---- C:\Windows\system32\R4EEL32A.dll
2012-03-06 22:29:33 ----A---- C:\Windows\system32\R4EEG32A.dll
2012-03-06 22:29:33 ----A---- C:\Windows\system32\R4EED32A.dll
2012-03-06 22:29:33 ----A---- C:\Windows\system32\R4EEA32A.dll
2012-03-06 22:29:32 ----A---- C:\Windows\system32\MaxxVolumeSDAPO.dll
2012-03-06 22:29:32 ----A---- C:\Windows\system32\MaxxAudioRealtek.dll
2012-03-06 22:29:32 ----A---- C:\Windows\system32\MaxxAudioEQ.dll
2012-03-06 22:29:32 ----A---- C:\Windows\system32\MaxxAudioAPO30.dll
2012-03-06 22:29:32 ----A---- C:\Windows\system32\MaxxAudioAPO20.dll
2012-03-06 22:29:32 ----A---- C:\Windows\system32\MaxxAudioAPO.dll
2012-03-06 22:29:32 ----A---- C:\Windows\system32\KAAPORT.dll
2012-03-06 22:29:28 ----A---- C:\Windows\system32\FMAPO.dll
2012-03-06 22:29:28 ----A---- C:\Windows\system32\DTSVoiceClarityDLL.dll
2012-03-06 22:29:28 ----A---- C:\Windows\system32\DTSU2PREC32.dll
2012-03-06 22:29:28 ----A---- C:\Windows\system32\DTSU2PLFX32.dll
2012-03-06 22:29:28 ----A---- C:\Windows\system32\DTSU2PGFX32.dll
2012-03-06 22:29:28 ----A---- C:\Windows\system32\DTSSymmetryDLL.dll
2012-03-06 22:29:28 ----A---- C:\Windows\system32\DTSS2SpeakerDLL.dll
2012-03-06 22:29:28 ----A---- C:\Windows\system32\DTSS2HeadphoneDLL.dll
2012-03-06 22:29:28 ----A---- C:\Windows\system32\DTSNeoPCDLL.dll
2012-03-06 22:29:28 ----A---- C:\Windows\system32\DTSLimiterDLL.dll
2012-03-06 22:29:28 ----A---- C:\Windows\system32\DTSLFXAPO.dll
2012-03-06 22:29:28 ----A---- C:\Windows\system32\DTSGFXAPONS.dll
2012-03-06 22:29:28 ----A---- C:\Windows\system32\DTSGFXAPO.dll
2012-03-06 22:29:27 ----A---- C:\Windows\system32\DTSGainCompensatorDLL.dll
2012-03-06 22:29:27 ----A---- C:\Windows\system32\DTSBoostDLL.dll
2012-03-06 22:29:27 ----A---- C:\Windows\system32\DTSBassEnhancementDLL.dll
2012-03-06 22:29:27 ----A---- C:\Windows\system32\AERTARen.dll
2012-03-06 22:29:27 ----A---- C:\Windows\system32\AERTACap.dll
2012-03-06 22:21:04 ----A---- C:\user.js
2012-03-06 22:21:01 ----D---- C:\Program Files\BabylonToolbar
2012-03-06 22:20:38 ----D---- C:\ProgramData\Babylon
2012-03-06 22:20:37 ----D---- C:\Users\Jonáš\AppData\Roaming\Babylon
2012-03-05 22:01:02 ----HD---- C:\Program Files\Temp
2012-03-05 19:33:38 ----D---- C:\ProgramData\NexonEU
2012-03-05 18:28:50 ----D---- C:\ProgramData\Nexon
2012-03-05 17:22:42 ----D---- C:\Program Files\BandiMPEG1
2012-03-05 17:11:28 ----D---- C:\Nexon
2012-03-05 17:07:21 ----D---- C:\ProgramData\NexonUS
2012-03-01 08:42:52 ----D---- C:\Program Files\LogMeIn Hamachi
2012-02-29 22:03:04 ----D---- C:\Program Files\MatroskaProp
2012-02-29 22:02:33 ----D---- C:\Program Files\Matroska Pack
2012-02-27 08:16:25 ----D---- C:\Program Files\Google
2012-02-21 15:34:16 ----A---- C:\Windows\system32\NVUNINST.EXE
2012-02-21 15:33:58 ----D---- C:\NVIDIA
2012-02-16 17:46:12 ----D---- C:\ProgramData\Badoo
2012-02-16 15:20:45 ----A---- C:\Windows\system32\mshtmled.dll
2012-02-16 15:20:44 ----A---- C:\Windows\system32\jscript.dll
2012-02-16 15:20:44 ----A---- C:\Windows\system32\iertutil.dll
2012-02-16 15:20:43 ----A---- C:\Windows\system32\jscript9.dll
2012-02-16 15:20:42 ----A---- C:\Windows\system32\wininet.dll
2012-02-16 15:20:42 ----A---- C:\Windows\system32\url.dll
2012-02-16 15:20:42 ----A---- C:\Windows\system32\ieui.dll
2012-02-16 15:20:41 ----A---- C:\Windows\system32\jsproxy.dll
2012-02-16 15:20:39 ----A---- C:\Windows\system32\mshtml.dll
2012-02-16 15:20:36 ----A---- C:\Windows\system32\ieframe.dll
2012-02-16 15:20:35 ----A---- C:\Windows\system32\urlmon.dll
2012-02-15 07:22:44 ----A---- C:\Windows\system32\win32k.sys
2012-02-15 07:22:43 ----A---- C:\Windows\system32\msvcrt.dll

======List of files/folders modified in the last 1 month======

2012-03-09 14:01:32 ----D---- C:\Windows\Prefetch
2012-03-09 14:01:28 ----D---- C:\Windows\Temp
2012-03-09 13:59:32 ----D---- C:\Users\Jonáš\AppData\Roaming\Skype
2012-03-09 12:05:27 ----D---- C:\Windows\inf
2012-03-09 12:05:27 ----AD---- C:\Windows\System32
2012-03-09 12:05:27 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-03-09 11:59:10 ----D---- C:\Program Files\Common Files\Akamai
2012-03-09 11:50:46 ----AD---- C:\Windows
2012-03-08 16:59:38 ----D---- C:\Windows\system32\drivers
2012-03-08 14:04:22 ----HD---- C:\ProgramData
2012-03-08 14:04:20 ----RD---- C:\Program Files
2012-03-07 01:15:14 ----A---- C:\Windows\system32\aswBoot.exe
2012-03-06 22:30:47 ----D---- C:\Windows\system32\catroot
2012-03-06 22:30:46 ----D---- C:\Windows\system32\catroot2
2012-03-06 22:30:04 ----A---- C:\Windows\DIFxAPI.dll
2012-03-06 22:29:25 ----HD---- C:\Program Files\InstallShield Installation Information
2012-03-06 21:26:31 ----D---- C:\Users\Jonáš\AppData\Roaming\uTorrent
2012-03-05 22:19:20 ----D---- C:\Program Files\Realtek
2012-03-05 20:09:17 ----SHD---- C:\System Volume Information
2012-03-05 16:40:56 ----D---- C:\ProgramData\PMB Files
2012-03-04 14:00:30 ----SHD---- C:\Windows\Installer
2012-02-28 21:34:11 ----D---- C:\Program Files\EA Games
2012-02-27 08:17:21 ----D---- C:\Windows\Tasks
2012-02-27 08:17:21 ----D---- C:\Windows\system32\Tasks
2012-02-26 21:43:40 ----A---- C:\Windows\system32\PnkBstrB.exe
2012-02-26 14:20:48 ----A---- C:\Windows\system32\PnkBstrA.exe
2012-02-23 11:07:29 ----RSD---- C:\Windows\assembly
2012-02-22 10:19:39 ----D---- C:\Program Files\Turbine
2012-02-21 15:16:01 ----D---- C:\Program Files\GameSpy Arcade
2012-02-21 15:15:15 ----RD---- C:\Users
2012-02-17 22:12:53 ----D---- C:\Program Files\Mozilla Firefox
2012-02-16 16:04:47 ----D---- C:\Windows\Microsoft.NET
2012-02-16 16:04:14 ----D---- C:\Windows\winsxs
2012-02-16 15:40:00 ----D---- C:\Windows\system32\migration
2012-02-16 15:40:00 ----D---- C:\Program Files\Internet Explorer
2012-02-16 15:22:15 ----A---- C:\Windows\system32\mrt.exe
2012-02-16 15:20:20 ----D---- C:\Program Files\Windows Mail
2012-02-15 17:53:00 ----D---- C:\Users\Jonáš\AppData\Roaming\Sony

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys [2012-03-07 35672]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2012-03-07 612184]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2012-03-07 337880]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2012-03-07 53848]
R1 ElbyCDIO;ElbyCDIO Driver; C:\Windows\System32\Drivers\ElbyCDIO.sys [2009-12-17 26024]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2012-03-07 20696]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2012-03-07 57688]
R3 3xHybrid;3xHybrid service; C:\Windows\system32\DRIVERS\3xHybrid.sys [2007-01-18 670592]
R3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-03-18 26176]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2007-02-22 1662464]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2011-08-30 3659240]
R3 LVUSBSta;Logitech USB Monitor Filter; C:\Windows\system32\drivers\LVUSBSta.sys [2007-03-06 41376]
R3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-19 5504]
R3 PID_0928;Logitech QuickCam Express(PID_0928); C:\Windows\system32\DRIVERS\LV561AV.SYS [2007-03-06 491168]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2007-01-15 70144]
R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-19 83328]
S2 adfs;adfs; C:\Windows\system32\drivers\adfs.sys []
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-19 5632]
S3 EagleNT;EagleNT; \??\C:\Windows\system32\drivers\EagleNT.sys []
S3 EagleXNt;EagleXNt; \??\C:\Windows\system32\drivers\EagleXNt.sys []
S3 GMSIPCI;GMSIPCI; \??\D:\INSTALL\GMSIPCI.SYS []
S3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2009-04-11 236544]
S3 ialm;ialm; C:\Windows\system32\DRIVERS\igdkmd32.sys [2007-02-22 1662464]
S3 LVcKap;Logitech AEC Driver; C:\Windows\system32\DRIVERS\LVcKap.sys [2007-03-06 1669664]
S3 LVMVDrv;Logitech Machine Vision Engine Loader; C:\Windows\system32\DRIVERS\LVMVDrv.sys [2007-03-06 2261792]
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-19 8192]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-19 5888]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-19 6016]
S3 Ph3xIB32;Philips 713x Inbox PCI TV Card; C:\Windows\system32\DRIVERS\Ph3xIB32.sys [2006-11-02 1083520]
S3 Revoflt;Revoflt; C:\Windows\system32\DRIVERS\revoflt.sys [2009-12-30 27192]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-19 35328]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2009-10-01 40448]
S3 XDva380;XDva380; \??\C:\Windows\system32\XDva380.sys []
S3 XDva383;XDva383; \??\C:\Windows\system32\XDva383.sys []
S3 XDva385;XDva385; \??\C:\Windows\system32\XDva385.sys []
S3 XDva390;XDva390; \??\C:\Windows\system32\XDva390.sys []
S3 XDva393;XDva393; \??\C:\Windows\system32\XDva393.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-01-03 63928]
R2 Akamai;Akamai NetSession Interface; C:\Windows\System32\svchost.exe [2008-01-19 21504]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2012-03-07 44768]
R2 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; C:\Program Files\LogMeIn Hamachi\hamachi-2.exe [2012-02-28 1373576]
R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2012-02-26 75136]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2012-02-27 136176]
S2 LVSrvLauncher;LVSrvLauncher; C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe [2007-03-06 105248]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2012-02-27 136176]
S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2007-01-15 774144]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe [2007-01-15 266240]
S3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2011-04-28 403240]
S3 WPFFontCache_v0400;@c:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S4 NetMsmqActivator;@c:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; c:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@c:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; c:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@c:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; c:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119515
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Kontrola LOGU

#2 Příspěvek od Rudy »

Zdravím!
Poprosím o log ComboFix.
Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Dante
Návštěvník
Návštěvník
Příspěvky: 7
Registrován: 09 bře 2012 14:00

Re: Kontrola LOGU

#3 Příspěvek od Dante »

Omlouvám se "Rudy", byl jsem delší dobu nemocen a mimo domov. PC je hrozně pomalé a nejde po vtrhnutí asi nějakého viru zvuk a někdy se hlásí hláška o zakoupení nějakého či co protivirového programu když najedu na internet. :shock: .dále je pořád v pravém dolním rohu psaná hláška "vystrahy zabezpečení systému - nejde zapnout ochrana proti MALWARE!!!!
Prosím o pomoc """"předem děkuji
:!: přidávám pro začátek log RZIT :!:
Logfile of random's system information tool 1.09 (written by random/random)
Run by Jonáš at 2012-03-21 20:36:01
WIN_VISTA Service Pack 2
System drive C: has 108 GB (70%) free of 153 GB
Total RAM: 2039 MB (48% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:36:17, on 21.3.2012
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe
C:\Program Files\Labtec\WebCam10\WebCam10.exe
C:\Program Files\DivX\DivX Update\DivXUpdate.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe
C:\Windows\System32\rundll32.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\KWorld Multimedia\HyperMediaCenter\DTVR\Scheduled.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\KWorld Multimedia\TV Tuner Card Utilities\HMCP3XCtl.exe
C:\Program Files\Common Files\LogiShrd\LComMgr\LVComSX.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Windows\system32\cmd.exe
C:\Users\Jonáš\AppData\Local\Akamai\netsession_win.exe
C:\Users\Jonáš\AppData\Local\Akamai\netsession_win.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Users\Jonáš\Desktop\RSIT.exe
C:\Program Files\trend micro\Jonáš.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local;127.0.0.1:9421;
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
O2 - BHO: Use the DivX Plus Web Player to watch web videos with less interruptions and smoother playback on supported sites - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Labtec\WebCam10\WebCam10.exe" /hide
O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] "C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime Alternative\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKLM\..\Run: [P17RunE] RunDll32 P17RunE.dll,RunDLLEntry
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKCU\..\Run: [Center Agent] C:\Program Files\KWorld Multimedia\HyperMediaCenter\DTVR\Scheduled.exe
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [Akamai NetSession Interface] "C:\Users\Jonáš\AppData\Local\Akamai\netsession_win.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKUS\S-1-5-21-458586356-3566987795-1268713004-1000\..\Run: [Center Agent] C:\Program Files\KWorld Multimedia\HyperMediaCenter\DTVR\Scheduled.exe (User '?')
O4 - HKUS\S-1-5-21-458586356-3566987795-1268713004-1000\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe (User '?')
O4 - HKUS\S-1-5-21-458586356-3566987795-1268713004-1000\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe" (User '?')
O4 - HKUS\S-1-5-21-458586356-3566987795-1268713004-1000\..\Run: [Akamai NetSession Interface] "C:\Users\Jonáš\AppData\Local\Akamai\netsession_win.exe" (User '?')
O4 - HKUS\S-1-5-21-458586356-3566987795-1268713004-1000\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized (User '?')
O4 - S-1-5-21-458586356-3566987795-1268713004-1000 Startup: PowerReg Scheduler.exe (User '?')
O4 - Startup: PowerReg Scheduler.exe
O4 - Global Startup: Remote Control.lnk = C:\Program Files\KWorld Multimedia\TV Tuner Card Utilities\HMCP3XCtl.exe
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe (file missing)
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe (file missing)
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/pub/s ... wflash.cab
O16 - DPF: {E705A591-DA3C-4228-B0D5-A356DBA42FBF} (Creative Software AutoUpdate 2) - http://ccfiles.creative.com/Web/softwar ... TSUEng.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://ccfiles.creative.com/Web/softwar ... /CTPID.cab
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: LVSrvLauncher - Labtec Inc. - C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe

--
End of file - 8617 bytes

======Scheduled tasks folder======

C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\Jonáš\AppData\Roaming\Mozilla\Firefox\Profiles\rtf53o6i.default

prefs.js - "browser.startup.homepage" - "http://www.google.cz/"
prefs.js - "keyword.URL" - "http://search.babylon.com/?AF=109993&ba ... bafbaf1&q="

"{20a82645-c095-46ed-80e3-08825760534b}"=c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"wrc@avast.com"=C:\Program Files\Alwil Software\Avast5\WebRep\FF
"{23fcfd51-4958-4f00-80a3-ae97e717ed8b}"=C:\Program Files\DivX\DivX Plus Web Player\firefox\html5video
"{6904342A-8307-11DF-A508-4AE2DFD72085}"=C:\Program Files\DivX\DivX Plus Web Player\firefox\wpa


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10.1 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\Windows\system32\Adobe\Director\np32dsw.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0]
"Description"=DivX Plus Web Player
"Path"=C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0]
"Description"=DivX VOD Helper Plug-in
"Path"=C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@nexon.net/NxGame]
"Description"=Nexon Game Controller
"Path"=C:\ProgramData\NexonUS\NGM\npNxGameUS.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@ngm.nexoneu.com/NxGame]
"Description"=Nexon Game Controller
"Path"=C:\ProgramData\NexonEU\NGM\npNxGameeu.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@pandonetworks.com/PandoWebPlugin]
"Description"=This plugin detects and launches Pando Media Booster
"Path"=C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nppl3260;version=6.0.12.69]
"Description"=RealPlayer(tm) LiveConnect-Enabled Plug-In
"Path"=C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.69]
"Description"=6.0.12.69
"Path"=C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=]
"Description"=
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.99\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=1.1.11]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

C:\Program Files\Mozilla Firefox\extensions\
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
nsIQTScriptablePlugin.xpt

C:\Program Files\Mozilla Firefox\plugins\
npdeployJava1.dll
nppdf32.dll

C:\Program Files\Mozilla Firefox\searchplugins\
babylon.xml
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Users\Jonáš\AppData\Roaming\Mozilla\Firefox\Profiles\rtf53o6i.default\extensions\
battlefieldplay4free@ea.com
cs@dictionaries.addons.mozilla.org
{77d2ed30-4cd2-11e0-b8af-0800200c9a66}
{7b1bf0b6-a1b9-42b0-b75d-252036438bdc}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-01-03 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{326E768D-4182-46FD-9C16-1449A49795F4}]
DivX Plus Web Player HTML5 <video> - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll [2011-02-08 3118976]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{593DDEC6-7468-4cdd-90E1-42DADAA222E9}]
DivX HiQ - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll [2011-02-08 3118976]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll [2012-03-07 1003704]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2011-10-10 3834016]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2011-10-18 42272]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll [2012-03-07 1003704]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2007-02-26 138008]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2007-02-26 154392]
"Persistence"=C:\Windows\system32\igfxpers.exe [2007-02-26 133912]
"LogitechCommunicationsManager"=C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe [2007-03-06 488984]
"LogitechQuickCamRibbon"=C:\Program Files\Labtec\WebCam10\WebCam10.exe [2007-03-06 1060376]
"AdobeAAMUpdater-1.0"=C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-12-23 500208]
"NeroFilterCheck"=C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [2006-01-12 155648]
"QuickTime Task"=C:\Program Files\QuickTime Alternative\QTTask.exe [2010-11-29 421888]
"DivXUpdate"=C:\Program Files\DivX\DivX Update\DivXUpdate.exe [2011-03-21 1230704]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-01-03 843712]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2011-06-09 254696]
"LogMeIn Hamachi Ui"=C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe [2012-02-28 1987976]
"P17RunE"=RunDll32 P17RunE.dll,RunDLLEntry []
"RtHDVCpl"=C:\Windows\RtHDVCpl.exe [2007-02-07 4374528]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Center Agent"=C:\Program Files\KWorld Multimedia\HyperMediaCenter\DTVR\Scheduled.exe [2007-01-19 864768]
"ehTray.exe"=C:\Windows\ehome\ehTray.exe [2008-01-19 125952]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"=C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [2007-01-15 147456]
"Akamai NetSession Interface"=C:\Users\Jonáš\AppData\Local\Akamai\netsession_win.exe [2012-02-02 3329824]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2011-10-13 17351304]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Remote Control.lnk - C:\Program Files\KWorld Multimedia\TV Tuner Card Utilities\HMCP3XCtl.exe

C:\Users\Jonáš\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
PowerReg Scheduler.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2007-02-22 200704]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfPf]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfRd]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfUsbccidDriver]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableUIADesktopToggle"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"VIDC.I420"=lvcodec2.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"MSVideo8"=VfWWDM32.dll
"MSVideo"=vfwwdm32.dll
"wave1"=wdmaud.drv
"mixer1"=wdmaud.drv
"vidc.mpng"=C:\Program Files\t@b\0.958\686\tabdec.dll
"vidc.mvjp"=C:\Program Files\t@b\0.958\686\tabdec.dll
"vidc.444p"=C:\Program Files\t@b\0.958\686\tabdec.dll
"VIDC.FPS1"=frapsvid.dll
"vidc.dvsd"=pdvcodec.dll
"VIDC.FFDS"=C:\PROGRA~1\COMBIN~1\Filters\FFDShow\ff_vfw.dll
"vidc.mjpg"=bdmjpeg.dll
"vidc.mpeg"=bdmpegv.dll
"msacm.bdmpeg"=bdmpega.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2012-03-18 19:28:15 ----D---- C:\32788R22FWJFW
2012-03-16 13:20:49 ----D---- C:\Windows\TEMP
2012-03-16 12:17:57 ----SHD---- C:\$RECYCLE.BIN
2012-03-16 12:17:46 ----A---- C:\ComboFix.txt
2012-03-16 12:10:57 ----D---- C:\ComboFix
2012-03-14 23:09:36 ----A---- C:\Windows\system32\SRSWOW.dll
2012-03-14 23:09:36 ----A---- C:\Windows\system32\SRSTSXT.dll
2012-03-14 23:09:36 ----A---- C:\Windows\RtlUpd.exe
2012-03-14 23:09:35 ----A---- C:\Windows\system32\RtkPgExt.dll
2012-03-14 23:09:34 ----A---- C:\Windows\system32\RtkCoInst.dll
2012-03-14 23:09:34 ----A---- C:\Windows\system32\RtkAPO.dll
2012-03-14 23:09:33 ----A---- C:\Windows\RtHDVCpl.exe
2012-03-14 23:09:30 ----A---- C:\Windows\system32\drivers\RTKVHDA.sys
2012-03-14 23:09:23 ----A---- C:\Windows\HideWin.exe
2012-03-14 22:20:42 ----D---- C:\Users\Jonáš\AppData\Roaming\Creative
2012-03-14 22:17:27 ----N---- C:\Windows\Ctregrun.exe
2012-03-14 22:15:24 ----D---- C:\Program Files\Common Files\Creative
2012-03-14 22:15:22 ----HD---- C:\Program Files\Creative Installation Information
2012-03-14 22:14:55 ----N---- C:\Windows\system32\AudioDrv.ini
2012-03-14 22:14:35 ----D---- C:\ProgramData\Creative
2012-03-14 22:14:17 ----A---- C:\Windows\system32\ctppld.dll
2012-03-14 22:14:16 ----A---- C:\Windows\system32\P17RunE.dll
2012-03-14 22:14:16 ----A---- C:\Windows\system32\P17res.dll
2012-03-14 22:14:16 ----A---- C:\Windows\system32\OemSpiE.dll
2012-03-14 22:14:16 ----A---- C:\Windows\system32\drivers\P17.sys
2012-03-14 22:14:16 ----A---- C:\Windows\P17EPLS.ini
2012-03-14 22:14:16 ----A---- C:\Windows\P17EP51.ini
2012-03-14 22:14:16 ----A---- C:\Windows\P17EP.ini
2012-03-14 22:14:08 ----D---- C:\Windows\system32\Data
2012-03-14 22:14:02 ----A---- C:\Windows\system32\CmdRtr.DLL
2012-03-14 22:14:02 ----A---- C:\Windows\system32\APOMngr.DLL
2012-03-14 22:13:24 ----D---- C:\Program Files\Creative
2012-03-12 15:47:39 ----D---- C:\Program Files\CrystalDiskInfo
2012-03-11 14:35:03 ----A---- C:\Windows\system32\TepeqAPO.dll
2012-03-11 14:35:02 ----A---- C:\Windows\system32\SFSS_APO.dll
2012-03-11 14:35:02 ----A---- C:\Windows\system32\SFNHK.dll
2012-03-11 14:35:02 ----A---- C:\Windows\system32\SFCOM.dll
2012-03-11 14:35:02 ----A---- C:\Windows\system32\SFAPO.dll
2012-03-11 14:34:58 ----A---- C:\Windows\system32\RtkCoLDR.dll
2012-03-11 14:34:58 ----A---- C:\Windows\system32\RtkCoInstII.dll
2012-03-11 14:34:58 ----A---- C:\Windows\system32\RtkApoApi.dll
2012-03-11 14:34:55 ----A---- C:\Windows\system32\RCoRes.dat
2012-03-11 14:34:55 ----A---- C:\Windows\system32\drivers\RTAIODAT.DAT
2012-03-11 14:34:54 ----A---- C:\Windows\system32\MaxxAudioRealtek2.dll
2012-03-11 10:24:05 ----A---- C:\TDSSKiller.2.7.20.0_11.03.2012_10.24.05_log.txt
2012-03-10 13:39:54 ----D---- C:\TEMP
2012-03-10 12:21:33 ----A---- C:\Windows\zip.exe
2012-03-10 12:21:33 ----A---- C:\Windows\SWSC.exe
2012-03-10 12:21:33 ----A---- C:\Windows\SWREG.exe
2012-03-10 12:21:33 ----A---- C:\Windows\sed.exe
2012-03-10 12:21:33 ----A---- C:\Windows\PEV.exe
2012-03-10 12:21:33 ----A---- C:\Windows\NIRCMD.exe
2012-03-10 12:21:33 ----A---- C:\Windows\MBR.exe
2012-03-10 12:21:33 ----A---- C:\Windows\grep.exe
2012-03-10 12:21:23 ----D---- C:\Windows\ERDNT
2012-03-10 12:21:17 ----D---- C:\Qoobox
2012-03-08 14:04:42 ----D---- C:\Users\Jonáš\AppData\Roaming\Malwarebytes
2012-03-08 14:04:22 ----D---- C:\ProgramData\Malwarebytes
2012-03-08 14:04:20 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2012-03-08 12:37:34 ----ASH---- C:\hiberfil.sys
2012-03-07 08:39:55 ----D---- C:\rsit
2012-03-07 08:39:55 ----D---- C:\Program Files\trend micro
2012-03-06 22:47:22 ----D---- C:\Program Files\ESET
2012-03-06 22:44:02 ----A---- C:\Windows\ntbtlog.txt
2012-03-06 22:30:53 ----D---- C:\Windows\system32\RTCOM
2012-03-06 22:29:38 ----A---- C:\Windows\system32\WavesLib.dll
2012-03-06 22:29:38 ----A---- C:\Windows\system32\WavesGUILib.dll
2012-03-06 22:29:38 ----A---- C:\Windows\system32\tosade.dll
2012-03-06 22:29:37 ----A---- C:\Windows\system32\tadefxapo2.dll
2012-03-06 22:29:37 ----A---- C:\Windows\system32\tadefxapo.dll
2012-03-06 22:29:37 ----A---- C:\Windows\system32\SRSTSHD.dll
2012-03-06 22:29:37 ----A---- C:\Windows\system32\SRSHP360.dll
2012-03-06 22:29:34 ----A---- C:\Windows\system32\RTEEP32A.dll
2012-03-06 22:29:33 ----A---- C:\Windows\system32\RTEEL32A.dll
2012-03-06 22:29:33 ----A---- C:\Windows\system32\RTEEG32A.dll
2012-03-06 22:29:33 ----A---- C:\Windows\system32\RTEED32A.dll
2012-03-06 22:29:33 ----A---- C:\Windows\system32\RP3DHT32.dll
2012-03-06 22:29:33 ----A---- C:\Windows\system32\RP3DAA32.dll
2012-03-06 22:29:33 ----A---- C:\Windows\system32\R4EEP32A.dll
2012-03-06 22:29:33 ----A---- C:\Windows\system32\R4EEL32A.dll
2012-03-06 22:29:33 ----A---- C:\Windows\system32\R4EEG32A.dll
2012-03-06 22:29:33 ----A---- C:\Windows\system32\R4EED32A.dll
2012-03-06 22:29:33 ----A---- C:\Windows\system32\R4EEA32A.dll
2012-03-06 22:29:32 ----A---- C:\Windows\system32\MaxxVolumeSDAPO.dll
2012-03-06 22:29:32 ----A---- C:\Windows\system32\MaxxAudioRealtek.dll
2012-03-06 22:29:32 ----A---- C:\Windows\system32\MaxxAudioEQ.dll
2012-03-06 22:29:32 ----A---- C:\Windows\system32\MaxxAudioAPO30.dll
2012-03-06 22:29:32 ----A---- C:\Windows\system32\MaxxAudioAPO20.dll
2012-03-06 22:29:32 ----A---- C:\Windows\system32\MaxxAudioAPO.dll
2012-03-06 22:29:32 ----A---- C:\Windows\system32\KAAPORT.dll
2012-03-06 22:29:28 ----A---- C:\Windows\system32\FMAPO.dll
2012-03-06 22:29:28 ----A---- C:\Windows\system32\DTSVoiceClarityDLL.dll
2012-03-06 22:29:28 ----A---- C:\Windows\system32\DTSU2PREC32.dll
2012-03-06 22:29:28 ----A---- C:\Windows\system32\DTSU2PLFX32.dll
2012-03-06 22:29:28 ----A---- C:\Windows\system32\DTSU2PGFX32.dll
2012-03-06 22:29:28 ----A---- C:\Windows\system32\DTSSymmetryDLL.dll
2012-03-06 22:29:28 ----A---- C:\Windows\system32\DTSS2SpeakerDLL.dll
2012-03-06 22:29:28 ----A---- C:\Windows\system32\DTSS2HeadphoneDLL.dll
2012-03-06 22:29:28 ----A---- C:\Windows\system32\DTSNeoPCDLL.dll
2012-03-06 22:29:28 ----A---- C:\Windows\system32\DTSLimiterDLL.dll
2012-03-06 22:29:28 ----A---- C:\Windows\system32\DTSLFXAPO.dll
2012-03-06 22:29:28 ----A---- C:\Windows\system32\DTSGFXAPONS.dll
2012-03-06 22:29:28 ----A---- C:\Windows\system32\DTSGFXAPO.dll
2012-03-06 22:29:27 ----A---- C:\Windows\system32\DTSGainCompensatorDLL.dll
2012-03-06 22:29:27 ----A---- C:\Windows\system32\DTSBoostDLL.dll
2012-03-06 22:29:27 ----A---- C:\Windows\system32\DTSBassEnhancementDLL.dll
2012-03-06 22:29:27 ----A---- C:\Windows\system32\AERTARen.dll
2012-03-06 22:29:27 ----A---- C:\Windows\system32\AERTACap.dll
2012-03-06 22:21:04 ----A---- C:\user.js
2012-03-06 22:21:01 ----D---- C:\Program Files\BabylonToolbar
2012-03-06 22:20:38 ----D---- C:\ProgramData\Babylon
2012-03-06 22:20:37 ----D---- C:\Users\Jonáš\AppData\Roaming\Babylon
2012-03-05 22:01:02 ----HD---- C:\Program Files\Temp
2012-03-05 19:33:38 ----D---- C:\ProgramData\NexonEU
2012-03-05 18:28:50 ----D---- C:\ProgramData\Nexon
2012-03-05 17:22:42 ----D---- C:\Program Files\BandiMPEG1
2012-03-05 17:11:28 ----D---- C:\Nexon
2012-03-05 17:07:21 ----D---- C:\ProgramData\NexonUS
2012-03-01 08:42:52 ----D---- C:\Program Files\LogMeIn Hamachi
2012-02-29 22:03:04 ----D---- C:\Program Files\MatroskaProp
2012-02-29 22:02:33 ----D---- C:\Program Files\Matroska Pack
2012-02-27 08:16:25 ----D---- C:\Program Files\Google

======List of files/folders modified in the last 1 month======

2012-03-21 20:36:16 ----D---- C:\Windows\Prefetch
2012-03-21 19:58:32 ----D---- C:\Users\Jonáš\AppData\Roaming\Skype
2012-03-21 10:02:24 ----SHD---- C:\System Volume Information
2012-03-21 07:54:36 ----D---- C:\Program Files\Common Files\Akamai
2012-03-19 16:16:18 ----AD---- C:\Windows\System32
2012-03-19 16:16:17 ----D---- C:\Windows\inf
2012-03-19 16:16:17 ----A---- C:\Windows\system32\PerfStringBackup.INI
2012-03-19 06:54:01 ----D---- C:\Program Files\Mozilla Firefox
2012-03-16 13:20:49 ----D---- C:\Windows
2012-03-16 12:15:18 ----A---- C:\Windows\system.ini
2012-03-16 12:15:10 ----D---- C:\Windows\system32\drivers\etc
2012-03-16 12:10:54 ----D---- C:\Windows\system32\drivers
2012-03-15 06:55:16 ----D---- C:\Windows\system32\catroot2
2012-03-14 23:09:47 ----D---- C:\Windows\system32\catroot
2012-03-14 23:09:39 ----A---- C:\Windows\DIFxAPI.dll
2012-03-14 23:09:27 ----D---- C:\Program Files\Realtek
2012-03-14 23:09:25 ----HD---- C:\Program Files\InstallShield Installation Information
2012-03-14 22:28:17 ----D---- C:\Windows\system32\Tasks
2012-03-14 22:23:06 ----SD---- C:\Windows\Downloaded Program Files
2012-03-14 22:15:24 ----D---- C:\Program Files\Common Files
2012-03-14 22:15:22 ----RD---- C:\Program Files
2012-03-14 22:14:58 ----RD---- C:\Users
2012-03-14 22:14:35 ----D---- C:\ProgramData
2012-03-14 20:10:06 ----D---- C:\Windows\AppPatch
2012-03-11 13:48:30 ----D---- C:\Users\Jonáš\AppData\Roaming\uTorrent
2012-03-10 12:41:36 ----D---- C:\Windows\Tasks
2012-03-07 01:15:14 ----A---- C:\Windows\system32\aswBoot.exe
2012-03-05 16:40:56 ----D---- C:\ProgramData\PMB Files
2012-03-04 14:00:30 ----SHD---- C:\Windows\Installer
2012-02-28 21:34:11 ----D---- C:\Program Files\EA Games
2012-02-26 21:43:40 ----A---- C:\Windows\system32\PnkBstrB.exe
2012-02-26 14:20:48 ----A---- C:\Windows\system32\PnkBstrA.exe
2012-02-23 11:07:29 ----RSD---- C:\Windows\assembly
2012-02-22 10:19:39 ----D---- C:\Program Files\Turbine

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr.sys [2012-03-07 35672]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2012-03-07 612184]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2012-03-07 337880]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2012-03-07 53848]
R1 ElbyCDIO;ElbyCDIO Driver; C:\Windows\System32\Drivers\ElbyCDIO.sys [2009-12-17 26024]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2012-03-07 20696]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2012-03-07 57688]
R3 3xHybrid;3xHybrid service; C:\Windows\system32\DRIVERS\3xHybrid.sys [2007-01-18 670592]
R3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2009-03-18 26176]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2007-02-22 1662464]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2007-02-07 1738656]
R3 LVUSBSta;Logitech USB Monitor Filter; C:\Windows\system32\drivers\LVUSBSta.sys [2007-03-06 41376]
R3 MSPQM;Server proxy správce kvality datových proudů Microsoft; C:\Windows\system32\drivers\MSPQM.sys [2008-01-19 5504]
R3 PID_0928;Logitech QuickCam Express(PID_0928); C:\Windows\system32\DRIVERS\LV561AV.SYS [2007-03-06 491168]
R3 RTL8169;Realtek 8169 NT Driver; C:\Windows\system32\DRIVERS\Rtlh86.sys [2007-01-15 70144]
R3 WUDFRd;WUDFRd; C:\Windows\system32\DRIVERS\WUDFRd.sys [2008-01-19 83328]
S2 adfs;adfs; C:\Windows\system32\drivers\adfs.sys []
S3 catchme;catchme; \??\C:\Users\JON~1\AppData\Local\Temp\catchme.sys []
S3 drmkaud;Dekodér zvuků DRM jádra společnosti Microsoft; C:\Windows\system32\drivers\drmkaud.sys [2008-01-19 5632]
S3 EagleNT;EagleNT; \??\C:\Windows\system32\drivers\EagleNT.sys []
S3 EagleXNt;EagleXNt; \??\C:\Windows\system32\drivers\EagleXNt.sys []
S3 GMSIPCI;GMSIPCI; \??\D:\INSTALL\GMSIPCI.SYS []
S3 HdAudAddService;Ovladač funkce Microsoft 1.1 UAA pro službu zvuku High Definition Audio; C:\Windows\system32\drivers\HdAudio.sys [2009-04-11 236544]
S3 ialm;ialm; C:\Windows\system32\DRIVERS\igdkmd32.sys [2007-02-22 1662464]
S3 LVcKap;Logitech AEC Driver; C:\Windows\system32\DRIVERS\LVcKap.sys [2007-03-06 1669664]
S3 LVMVDrv;Logitech Machine Vision Engine Loader; C:\Windows\system32\DRIVERS\LVMVDrv.sys [2007-03-06 2261792]
S3 MSKSSRV;Server proxy služby datových proudů Microsoft; C:\Windows\system32\drivers\MSKSSRV.sys [2008-01-19 8192]
S3 MSPCLOCK;Server proxy hodin datových proudů Microsoft; C:\Windows\system32\drivers\MSPCLOCK.sys [2008-01-19 5888]
S3 MSTEE;Konvertor jímka-jímka typu T datových proudů Microsoft; C:\Windows\system32\drivers\MSTEE.sys [2008-01-19 6016]
S3 P17;SB Live! 24-bit; C:\Windows\system32\drivers\P17.sys [2007-12-06 1136640]
S3 Ph3xIB32;Philips 713x Inbox PCI TV Card; C:\Windows\system32\DRIVERS\Ph3xIB32.sys [2006-11-02 1083520]
S3 Revoflt;Revoflt; C:\Windows\system32\DRIVERS\revoflt.sys [2009-12-30 27192]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2008-01-19 35328]
S3 WpdUsb;WpdUsb; C:\Windows\system32\DRIVERS\wpdusb.sys [2009-10-01 40448]
S3 XDva380;XDva380; \??\C:\Windows\system32\XDva380.sys []
S3 XDva383;XDva383; \??\C:\Windows\system32\XDva383.sys []
S3 XDva385;XDva385; \??\C:\Windows\system32\XDva385.sys []
S3 XDva390;XDva390; \??\C:\Windows\system32\XDva390.sys []
S3 XDva393;XDva393; \??\C:\Windows\system32\XDva393.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-01-03 63928]
R2 Akamai;Akamai NetSession Interface; C:\Windows\System32\svchost.exe [2008-01-19 21504]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2012-03-07 44768]
R2 FontCache;@%systemroot%\system32\FntCache.dll,-100; C:\Windows\system32\svchost.exe [2008-01-19 21504]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; C:\Program Files\LogMeIn Hamachi\hamachi-2.exe [2012-02-28 1373576]
R2 PnkBstrA;PnkBstrA; C:\Windows\system32\PnkBstrA.exe [2012-02-26 75136]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2012-02-27 136176]
S2 LVSrvLauncher;LVSrvLauncher; C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe [2007-03-06 105248]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2012-02-27 136176]
S3 NBService;NBService; C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe [2007-01-15 774144]
S3 NMIndexingService;NMIndexingService; C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe [2007-01-15 266240]
S3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2011-04-28 403240]
S3 WPFFontCache_v0400;@c:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe,-100; C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S4 NetMsmqActivator;@c:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; c:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@c:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; c:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@c:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; c:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119515
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Kontrola LOGU

#4 Příspěvek od Rudy »

Toto je log RSIT. Já ale potřebuji log ComboFix (link v mém předchozím postu). Pokud by nešel spustit normálně, spusťte v nouz. režimu.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Dante
Návštěvník
Návštěvník
Příspěvky: 7
Registrován: 09 bře 2012 14:00

Re: Kontrola LOGU

#5 Příspěvek od Dante »

ComboFix 12-03-21.02 - Jonáš 21.03.2012 23:51:40.6.2 - x86
Spuštěný z: c:\users\Jonáš\Desktop\ComboFix.exe
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-02-21 do 2012-03-21 )))))))))))))))))))))))))))))))
.
.
2012-03-21 23:03 . 2012-03-21 23:03 -------- d-----w- c:\users\Jonáš\AppData\Local\temp
2012-03-21 23:03 . 2012-03-21 23:03 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-03-19 05:54 . 2012-03-19 05:54 592824 ----a-w- c:\program files\Mozilla Firefox\gkmedias.dll
2012-03-19 05:54 . 2012-03-19 05:54 44472 ----a-w- c:\program files\Mozilla Firefox\mozglue.dll
2012-03-14 22:09 . 2007-01-16 02:39 1191936 ----a-w- c:\windows\RtlUpd.exe
2012-03-14 22:09 . 2006-12-13 02:30 339968 ----a-w- c:\windows\system32\SRSTSXT.dll
2012-03-14 22:09 . 2006-11-29 10:47 135168 ----a-w- c:\windows\system32\SRSWOW.dll
2012-03-14 22:09 . 2007-02-06 06:55 494080 ----a-w- c:\windows\system32\RtkPgExt.dll
2012-03-14 22:09 . 2007-02-06 10:29 1840640 ----a-w- c:\windows\system32\RtkAPO.dll
2012-03-14 22:09 . 2007-01-25 10:22 17920 ----a-w- c:\windows\system32\RtkCoInst.dll
2012-03-14 22:09 . 2007-02-07 05:53 4374528 ----a-w- c:\windows\RtHDVCpl.exe
2012-03-14 22:09 . 2007-02-07 08:33 1738656 ----a-w- c:\windows\system32\drivers\RTKVHDA.sys
2012-03-14 22:09 . 2007-01-29 07:34 532480 ----a-w- c:\windows\system32\RTSndMgr.cpl
2012-03-14 22:09 . 2012-03-14 22:09 319488 ----a-w- c:\windows\HideWin.exe
2012-03-14 21:20 . 2012-03-14 21:22 -------- d-----w- c:\users\Jonáš\AppData\Roaming\Creative
2012-03-14 21:17 . 2003-06-12 22:25 7062 ----a-w- c:\windows\system32\audiopid.vxd
2012-03-14 21:17 . 2000-05-22 08:58 647872 ------w- c:\windows\system32\Mscomct2.ocx
2012-03-12 14:47 . 2012-03-12 14:47 -------- d-----w- c:\program files\CrystalDiskInfo
2012-03-11 13:35 . 2011-10-18 14:57 58264 ----a-w- c:\windows\system32\TepeqAPO.dll
2012-03-11 13:35 . 2011-11-18 15:40 191080 ----a-w- c:\windows\system32\SFSS_APO.dll
2012-03-11 13:35 . 2011-09-02 13:21 214368 ----a-w- c:\windows\system32\SFNHK.dll
2012-03-11 13:35 . 2011-09-02 13:21 68960 ----a-w- c:\windows\system32\SFAPO.dll
2012-03-11 13:35 . 2011-09-02 13:21 74080 ----a-w- c:\windows\system32\SFCOM.dll
2012-03-11 13:34 . 2011-12-12 16:20 83560 ----a-w- c:\windows\system32\RtkCoInstII.dll
2012-03-11 13:34 . 2011-12-08 16:28 1378920 ----a-w- c:\windows\system32\RtkApoApi.dll
2012-03-11 13:34 . 2011-11-22 15:28 13416 ----a-w- c:\windows\system32\RtkCoLDR.dll
2012-03-11 13:34 . 2011-12-13 15:25 200468 ----a-w- c:\windows\system32\drivers\RTAIODAT.DAT
2012-03-11 13:34 . 2011-12-09 15:42 2684416 ----a-w- c:\windows\system32\RCoRes.dat
2012-03-11 13:34 . 2010-11-29 13:36 587096 ----a-w- c:\windows\system32\MaxxAudioRealtek2.dll
2012-03-10 12:39 . 2012-03-16 11:40 -------- d-----w- C:\TEMP
2012-03-08 13:04 . 2012-03-08 13:04 -------- d-----w- c:\users\Jonáš\AppData\Roaming\Malwarebytes
2012-03-08 13:04 . 2012-03-08 13:04 -------- d-----w- c:\programdata\Malwarebytes
2012-03-08 13:04 . 2012-03-08 15:59 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2012-03-07 07:39 . 2012-03-21 19:36 -------- d-----w- c:\program files\trend micro
2012-03-07 07:39 . 2012-03-07 07:40 -------- d-----w- C:\rsit
2012-03-06 21:47 . 2012-03-06 21:47 -------- d-----w- c:\program files\ESET
2012-03-06 21:30 . 2012-03-14 22:09 -------- d-----w- c:\windows\system32\RTCOM
2012-03-06 21:21 . 2012-03-06 21:21 237 ----a-w- C:\user.js
2012-03-06 21:21 . 2012-03-06 21:21 -------- d-----w- c:\program files\BabylonToolbar
2012-03-06 21:20 . 2012-03-06 21:20 -------- d-----w- c:\users\Jonáš\AppData\Local\Babylon
2012-03-06 21:20 . 2012-03-06 21:20 -------- d-----w- c:\programdata\Babylon
2012-03-06 21:20 . 2012-03-06 21:20 -------- d-----w- c:\users\Jonáš\AppData\Roaming\Babylon
2012-03-05 21:01 . 2012-03-14 20:53 -------- d--h--w- c:\program files\Temp
2012-03-05 17:28 . 2012-03-05 17:28 -------- d-----w- c:\programdata\Nexon
2012-03-05 16:22 . 2012-03-05 19:26 -------- d-----w- c:\program files\BandiMPEG1
2012-03-05 16:11 . 2012-03-06 18:58 -------- d-----w- C:\Nexon
2012-03-02 07:07 . 2012-02-08 06:03 6552120 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{DE4B8568-0CF6-4163-96AE-9B1AC36AFA13}\mpengine.dll
2012-03-01 07:42 . 2012-03-01 07:42 -------- d-----w- c:\program files\LogMeIn Hamachi
2012-02-29 21:03 . 2012-03-04 10:36 -------- d-----w- c:\program files\MatroskaProp
2012-02-29 21:02 . 2012-03-04 12:46 -------- d-----w- c:\program files\Matroska Pack
2012-02-27 07:16 . 2012-02-27 07:18 -------- d-----w- c:\program files\Google
2012-02-21 14:34 . 2006-10-22 14:06 208896 ----a-w- c:\windows\system32\NVUNINST.EXE
2012-02-21 14:33 . 2012-02-21 14:33 -------- d-----w- C:\NVIDIA
2012-02-21 14:15 . 2012-03-10 11:42 -------- d-----w- c:\users\Joná?
2012-02-21 14:04 . 2004-10-22 01:17 69715 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\ctor.dll
2012-02-21 14:04 . 2004-10-22 01:17 274432 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\iscript.dll
2012-02-21 14:04 . 2004-10-22 01:16 180224 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\iuser.dll
2012-02-21 14:04 . 2004-10-22 01:18 749568 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\iKernel.dll
2012-02-21 14:04 . 2004-10-22 01:16 5632 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\DotNetInstaller.exe
2012-02-21 14:04 . 2012-02-21 14:04 192644 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\iGdi.dll
2012-02-21 14:04 . 2012-02-21 14:04 323716 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\10\50\Intel32\setup.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-03-14 22:09 . 2010-10-13 07:55 319456 ----a-w- c:\windows\DIFxAPI.dll
2012-03-07 00:15 . 2010-10-14 13:49 41184 ----a-w- c:\windows\avastSS.scr
2012-03-07 00:15 . 2010-10-14 13:49 201352 ----a-w- c:\windows\system32\aswBoot.exe
2012-03-07 00:03 . 2011-04-25 07:45 612184 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2012-03-07 00:03 . 2010-10-14 13:50 337880 ----a-w- c:\windows\system32\drivers\aswSP.sys
2012-03-07 00:02 . 2010-10-14 13:50 35672 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2012-03-07 00:01 . 2010-10-14 13:50 53848 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2012-03-07 00:01 . 2010-10-14 13:50 57688 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2012-03-07 00:01 . 2010-10-14 13:50 20696 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2012-02-29 06:00 . 2011-06-14 13:14 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-02-26 20:44 . 2011-10-24 16:54 138264 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2012-02-26 20:43 . 2011-10-24 17:02 234768 ----a-w- c:\windows\system32\PnkBstrB.xtr
2012-02-26 20:43 . 2011-10-24 16:53 234768 ----a-w- c:\windows\system32\PnkBstrB.exe
2012-02-26 13:21 . 2011-10-24 16:54 138056 ----a-w- c:\users\Jonáš\AppData\Roaming\PnkBstrK.sys
2012-02-26 13:21 . 2011-10-24 16:54 138056 ----a-w- c:\users\Jonáš\AppData\Roaming\PnkBstrK.sys
2012-02-26 13:20 . 2011-10-24 16:53 75136 ----a-w- c:\windows\system32\PnkBstrA.exe
2012-01-29 04:10 . 2010-10-13 10:57 237072 ------w- c:\windows\system32\MpSigStub.exe
2012-01-12 19:52 . 2012-02-15 06:22 2044416 ----a-w- c:\windows\system32\win32k.sys
2010-12-12 18:25 . 2010-12-12 18:24 746343330 ---ha-w- c:\program files\S4League.exe.part
2012-03-19 05:54 . 2011-05-08 09:44 97208 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2012-03-07 00:15 123536 ----a-w- c:\program files\Alwil Software\Avast5\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Center Agent"="c:\program files\KWorld Multimedia\HyperMediaCenter\DTVR\Scheduled.exe" [2007-01-19 864768]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-19 125952]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2007-01-15 147456]
"Akamai NetSession Interface"="c:\users\Jonáš\AppData\Local\Akamai\netsession_win.exe" [2012-02-02 3329824]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2011-10-13 17351304]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2007-02-26 138008]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2007-02-26 154392]
"Persistence"="c:\windows\system32\igfxpers.exe" [2007-02-26 133912]
"LogitechCommunicationsManager"="c:\program files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe" [2007-03-06 488984]
"LogitechQuickCamRibbon"="c:\program files\Labtec\WebCam10\WebCam10.exe" [2007-03-06 1060376]
"AdobeAAMUpdater-1.0"="c:\program files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-12-23 500208]
"NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2006-01-12 155648]
"QuickTime Task"="c:\program files\QuickTime Alternative\QTTask.exe" [2010-11-29 421888]
"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2011-03-21 1230704]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696]
"LogMeIn Hamachi Ui"="c:\program files\LogMeIn Hamachi\hamachi-2-ui.exe" [2012-02-28 1987976]
"P17RunE"="P17RunE.dll" [2007-04-09 14848]
"RtHDVCpl"="RtHDVCpl.exe" [2007-02-07 4374528]
.
c:\users\Jonáš\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
PowerReg Scheduler.exe [2011-1-2 256000]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Remote Control.lnk - c:\program files\KWorld Multimedia\TV Tuner Card Utilities\HMCP3XCtl.exe [2010-10-13 77824]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-01-03 63928]
S3 3xHybrid;3xHybrid service;c:\windows\system32\DRIVERS\3xHybrid.sys [2007-01-18 670592]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
Akamai REG_MULTI_SZ Akamai
.
Obsah adresáře 'Naplánované úlohy'
.
2012-03-21 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-02-27 07:16]
.
2012-03-21 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-02-27 07:16]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
uInternet Settings,ProxyOverride = *.local;127.0.0.1:9421;
TCP: DhcpNameServer = 192.168.2.1
DPF: {E705A591-DA3C-4228-B0D5-A356DBA42FBF} - hxxp://ccfiles.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab
FF - ProfilePath - c:\users\Jonáš\AppData\Roaming\Mozilla\Firefox\Profiles\rtf53o6i.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.google.cz/
FF - prefs.js: keyword.URL - hxxp://search.babylon.com/?AF=109993&babsrc=adbartrp&mntrId=601403380000000000000019dbafbaf1&q=
FF - user.js: extensions.BabylonToolbar_i.babTrack - affID=109993
FF - user.js: extensions.BabylonToolbar_i.babExt -
FF - user.js: extensions.BabylonToolbar_i.srcExt - ss
FF - user.js: extensions.BabylonToolbar_i.id - 601403380000000000000019dbafbaf1
FF - user.js: extensions.BabylonToolbar_i.hardId - 601403380000000000000019dbafbaf1
FF - user.js: extensions.BabylonToolbar_i.instlDay - 15405
FF - user.js: extensions.BabylonToolbar_i.vrsn - 1.5.3.17
FF - user.js: extensions.BabylonToolbar_i.vrsni - 1.5.3.17
FF - user.js: extensions.BabylonToolbar_i.vrsnTs - 1.5.3.1722:20
FF - user.js: extensions.BabylonToolbar_i.prtnrId - babylon
FF - user.js: extensions.BabylonToolbar_i.prdct - BabylonToolbar
FF - user.js: extensions.BabylonToolbar_i.aflt - babsst
FF - user.js: extensions.BabylonToolbar_i.smplGrp - none
FF - user.js: extensions.BabylonToolbar_i.tlbrId - tb9
FF - user.js: extensions.BabylonToolbar_i.instlRef - sst
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-03-22 00:03
Windows 6.0.6002 Service Pack 2 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
.
C:\avast! sandbox
.
sken byl úspešně dokončen
skryté soubory: 1
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet010\Services\Akamai]
"ServiceDll"="c:\program files\common files\akamai/netsession_win_7de0ed9.dll"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.htm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.shtml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xht\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xhtml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
Celkový čas: 2012-03-22 00:07:13
ComboFix-quarantined-files.txt 2012-03-21 23:06
ComboFix2.txt 2012-03-16 11:17
ComboFix3.txt 2012-03-14 19:17
ComboFix4.txt 2012-03-13 14:04
ComboFix5.txt 2012-03-21 22:48
.
Před spuštěním: Volných bajtů: 113 065 037 824
Po spuštění: Volných bajtů: 113 070 874 624
.
- - End Of File - - 077B55CC44F765685FDDD9B7E39579A5
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119515
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Kontrola LOGU

#6 Příspěvek od Rudy »

Otevřte poznámkový blok a zkopírujte do něj:
KillAll::

Folder::
c:\programdata\Babylon
c:\program files\Google\Update

File::
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

Firefox::
FF - ProfilePath - c:\users\Jonáš\AppData\Roaming\Mozilla\Firefox\Profiles\rtf53o6i.default\
FF - prefs.js: keyword.URL - hxxp://search.babylon.com/?AF=109993&ba ... bafbaf1&q=
FF - user.js: extensions.BabylonToolbar_i.babTrack - affID=109993
FF - user.js: extensions.BabylonToolbar_i.babExt -
FF - user.js: extensions.BabylonToolbar_i.srcExt - ss
FF - user.js: extensions.BabylonToolbar_i.id - 601403380000000000000019dbafbaf1
FF - user.js: extensions.BabylonToolbar_i.hardId - 601403380000000000000019dbafbaf1
FF - user.js: extensions.BabylonToolbar_i.instlDay - 15405
FF - user.js: extensions.BabylonToolbar_i.vrsn - 1.5.3.17
FF - user.js: extensions.BabylonToolbar_i.vrsni - 1.5.3.17
FF - user.js: extensions.BabylonToolbar_i.vrsnTs - 1.5.3.1722:20
FF - user.js: extensions.BabylonToolbar_i.prtnrId - babylon
FF - user.js: extensions.BabylonToolbar_i.prdct - BabylonToolbar
FF - user.js: extensions.BabylonToolbar_i.aflt - babsst
FF - user.js: extensions.BabylonToolbar_i.smplGrp - none
FF - user.js: extensions.BabylonToolbar_i.tlbrId - tb9
FF - user.js: extensions.BabylonToolbar_i.instlRef - sst

RegLock::
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.htm\UserChoice]
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\UserChoice]
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.shtml\UserChoice]
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xht\UserChoice]
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xhtml\UserChoice]
Uložte na plochu jako CFScript.txt. Pak jej myší přetáhněte nad ikonu ComboFix a pusťte. CF se spustí a vykoná příkazy ze skriptu.

Obrázek
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Dante
Návštěvník
Návštěvník
Příspěvky: 7
Registrován: 09 bře 2012 14:00

Re: Kontrola LOGU

#7 Příspěvek od Dante »

ComboFix 12-03-21.02 - Jonáš 22.03.2012 18:22:35.7.2 - x86
Spuštěný z: c:\users\JonßÜ\Desktop\ComboFix.exe
Použité ovládací přepínače :: c:\users\JonßÜ\Desktop\CFScript.txt
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-02-22 do 2012-03-22 )))))))))))))))))))))))))))))))
.
.
2012-03-22 17:32 . 2012-03-22 17:33 -------- d-----w- c:\users\Jonáš\AppData\Local\temp
2012-03-22 17:32 . 2012-03-22 17:32 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-03-19 05:54 . 2012-03-19 05:54 592824 ----a-w- c:\program files\Mozilla Firefox\gkmedias.dll
2012-03-19 05:54 . 2012-03-19 05:54 44472 ----a-w- c:\program files\Mozilla Firefox\mozglue.dll
2012-03-14 22:09 . 2007-01-16 02:39 1191936 ----a-w- c:\windows\RtlUpd.exe
2012-03-14 22:09 . 2006-12-13 02:30 339968 ----a-w- c:\windows\system32\SRSTSXT.dll
2012-03-14 22:09 . 2006-11-29 10:47 135168 ----a-w- c:\windows\system32\SRSWOW.dll
2012-03-14 22:09 . 2007-02-06 06:55 494080 ----a-w- c:\windows\system32\RtkPgExt.dll
2012-03-14 22:09 . 2007-02-06 10:29 1840640 ----a-w- c:\windows\system32\RtkAPO.dll
2012-03-14 22:09 . 2007-01-25 10:22 17920 ----a-w- c:\windows\system32\RtkCoInst.dll
2012-03-14 22:09 . 2007-02-07 05:53 4374528 ----a-w- c:\windows\RtHDVCpl.exe
2012-03-14 22:09 . 2007-02-07 08:33 1738656 ----a-w- c:\windows\system32\drivers\RTKVHDA.sys
2012-03-14 22:09 . 2007-01-29 07:34 532480 ----a-w- c:\windows\system32\RTSndMgr.cpl
2012-03-14 22:09 . 2012-03-14 22:09 319488 ----a-w- c:\windows\HideWin.exe
2012-03-14 21:20 . 2012-03-14 21:22 -------- d-----w- c:\users\Jonáš\AppData\Roaming\Creative
2012-03-14 21:17 . 2003-06-12 22:25 7062 ----a-w- c:\windows\system32\audiopid.vxd
2012-03-14 21:17 . 2000-05-22 08:58 647872 ------w- c:\windows\system32\Mscomct2.ocx
2012-03-12 14:47 . 2012-03-12 14:47 -------- d-----w- c:\program files\CrystalDiskInfo
2012-03-11 13:35 . 2011-10-18 14:57 58264 ----a-w- c:\windows\system32\TepeqAPO.dll
2012-03-11 13:35 . 2011-11-18 15:40 191080 ----a-w- c:\windows\system32\SFSS_APO.dll
2012-03-11 13:35 . 2011-09-02 13:21 214368 ----a-w- c:\windows\system32\SFNHK.dll
2012-03-11 13:35 . 2011-09-02 13:21 68960 ----a-w- c:\windows\system32\SFAPO.dll
2012-03-11 13:35 . 2011-09-02 13:21 74080 ----a-w- c:\windows\system32\SFCOM.dll
2012-03-11 13:34 . 2011-12-12 16:20 83560 ----a-w- c:\windows\system32\RtkCoInstII.dll
2012-03-11 13:34 . 2011-12-08 16:28 1378920 ----a-w- c:\windows\system32\RtkApoApi.dll
2012-03-11 13:34 . 2011-11-22 15:28 13416 ----a-w- c:\windows\system32\RtkCoLDR.dll
2012-03-11 13:34 . 2011-12-13 15:25 200468 ----a-w- c:\windows\system32\drivers\RTAIODAT.DAT
2012-03-11 13:34 . 2011-12-09 15:42 2684416 ----a-w- c:\windows\system32\RCoRes.dat
2012-03-11 13:34 . 2010-11-29 13:36 587096 ----a-w- c:\windows\system32\MaxxAudioRealtek2.dll
2012-03-10 12:39 . 2012-03-16 11:40 -------- d-----w- C:\TEMP
2012-03-08 13:04 . 2012-03-08 13:04 -------- d-----w- c:\users\Jonáš\AppData\Roaming\Malwarebytes
2012-03-08 13:04 . 2012-03-08 13:04 -------- d-----w- c:\programdata\Malwarebytes
2012-03-08 13:04 . 2012-03-08 15:59 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2012-03-07 07:39 . 2012-03-21 19:36 -------- d-----w- c:\program files\trend micro
2012-03-07 07:39 . 2012-03-07 07:40 -------- d-----w- C:\rsit
2012-03-06 21:47 . 2012-03-06 21:47 -------- d-----w- c:\program files\ESET
2012-03-06 21:30 . 2012-03-14 22:09 -------- d-----w- c:\windows\system32\RTCOM
2012-03-06 21:21 . 2012-03-06 21:21 237 ----a-w- C:\user.js
2012-03-06 21:21 . 2012-03-06 21:21 -------- d-----w- c:\program files\BabylonToolbar
2012-03-06 21:20 . 2012-03-06 21:20 -------- d-----w- c:\users\Jonáš\AppData\Local\Babylon
2012-03-06 21:20 . 2012-03-06 21:20 -------- d-----w- c:\programdata\Babylon
2012-03-06 21:20 . 2012-03-06 21:20 -------- d-----w- c:\users\Jonáš\AppData\Roaming\Babylon
2012-03-05 21:01 . 2012-03-14 20:53 -------- d--h--w- c:\program files\Temp
2012-03-05 17:28 . 2012-03-05 17:28 -------- d-----w- c:\programdata\Nexon
2012-03-05 16:22 . 2012-03-05 19:26 -------- d-----w- c:\program files\BandiMPEG1
2012-03-05 16:11 . 2012-03-06 18:58 -------- d-----w- C:\Nexon
2012-03-02 07:07 . 2012-02-08 06:03 6552120 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{DE4B8568-0CF6-4163-96AE-9B1AC36AFA13}\mpengine.dll
2012-03-01 07:42 . 2012-03-01 07:42 -------- d-----w- c:\program files\LogMeIn Hamachi
2012-02-29 21:03 . 2012-03-04 10:36 -------- d-----w- c:\program files\MatroskaProp
2012-02-29 21:02 . 2012-03-04 12:46 -------- d-----w- c:\program files\Matroska Pack
2012-02-27 07:16 . 2012-02-27 07:18 -------- d-----w- c:\program files\Google
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-03-14 22:09 . 2010-10-13 07:55 319456 ----a-w- c:\windows\DIFxAPI.dll
2012-03-07 00:15 . 2010-10-14 13:49 41184 ----a-w- c:\windows\avastSS.scr
2012-03-07 00:15 . 2010-10-14 13:49 201352 ----a-w- c:\windows\system32\aswBoot.exe
2012-03-07 00:03 . 2011-04-25 07:45 612184 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2012-03-07 00:03 . 2010-10-14 13:50 337880 ----a-w- c:\windows\system32\drivers\aswSP.sys
2012-03-07 00:02 . 2010-10-14 13:50 35672 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2012-03-07 00:01 . 2010-10-14 13:50 53848 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2012-03-07 00:01 . 2010-10-14 13:50 57688 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2012-03-07 00:01 . 2010-10-14 13:50 20696 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2012-02-29 06:00 . 2011-06-14 13:14 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-02-26 20:44 . 2011-10-24 16:54 138264 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2012-02-26 20:43 . 2011-10-24 17:02 234768 ----a-w- c:\windows\system32\PnkBstrB.xtr
2012-02-26 20:43 . 2011-10-24 16:53 234768 ----a-w- c:\windows\system32\PnkBstrB.exe
2012-02-26 13:21 . 2011-10-24 16:54 138056 ----a-w- c:\users\Jonáš\AppData\Roaming\PnkBstrK.sys
2012-02-26 13:21 . 2011-10-24 16:54 138056 ----a-w- c:\users\Jonáš\AppData\Roaming\PnkBstrK.sys
2012-02-26 13:20 . 2011-10-24 16:53 75136 ----a-w- c:\windows\system32\PnkBstrA.exe
2012-01-29 04:10 . 2010-10-13 10:57 237072 ------w- c:\windows\system32\MpSigStub.exe
2012-01-12 19:52 . 2012-02-15 06:22 2044416 ----a-w- c:\windows\system32\win32k.sys
2010-12-12 18:25 . 2010-12-12 18:24 746343330 ---ha-w- c:\program files\S4League.exe.part
2012-03-19 05:54 . 2011-05-08 09:44 97208 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2012-03-07 00:15 123536 ----a-w- c:\program files\Alwil Software\Avast5\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Center Agent"="c:\program files\KWorld Multimedia\HyperMediaCenter\DTVR\Scheduled.exe" [2007-01-19 864768]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-19 125952]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2007-01-15 147456]
"Akamai NetSession Interface"="c:\users\Jonáš\AppData\Local\Akamai\netsession_win.exe" [2012-02-02 3329824]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2011-10-13 17351304]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2007-02-26 138008]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2007-02-26 154392]
"Persistence"="c:\windows\system32\igfxpers.exe" [2007-02-26 133912]
"LogitechCommunicationsManager"="c:\program files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe" [2007-03-06 488984]
"LogitechQuickCamRibbon"="c:\program files\Labtec\WebCam10\WebCam10.exe" [2007-03-06 1060376]
"AdobeAAMUpdater-1.0"="c:\program files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-12-23 500208]
"NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2006-01-12 155648]
"QuickTime Task"="c:\program files\QuickTime Alternative\QTTask.exe" [2010-11-29 421888]
"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2011-03-21 1230704]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696]
"LogMeIn Hamachi Ui"="c:\program files\LogMeIn Hamachi\hamachi-2-ui.exe" [2012-02-28 1987976]
"P17RunE"="P17RunE.dll" [2007-04-09 14848]
"RtHDVCpl"="RtHDVCpl.exe" [2007-02-07 4374528]
.
c:\users\Jonáš\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
PowerReg Scheduler.exe [2011-1-2 256000]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Remote Control.lnk - c:\program files\KWorld Multimedia\TV Tuner Card Utilities\HMCP3XCtl.exe [2010-10-13 77824]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-01-03 63928]
S3 3xHybrid;3xHybrid service;c:\windows\system32\DRIVERS\3xHybrid.sys [2007-01-18 670592]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
Akamai REG_MULTI_SZ Akamai
.
Obsah adresáře 'Naplánované úlohy'
.
2012-03-22 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-02-27 07:16]
.
2012-03-22 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-02-27 07:16]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
uInternet Settings,ProxyOverride = *.local;127.0.0.1:9421;
TCP: DhcpNameServer = 192.168.2.1
DPF: {E705A591-DA3C-4228-B0D5-A356DBA42FBF} - hxxp://ccfiles.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab
FF - ProfilePath - c:\users\Jonáš\AppData\Roaming\Mozilla\Firefox\Profiles\rtf53o6i.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.google.cz/
FF - prefs.js: keyword.URL - hxxp://search.babylon.com/?AF=109993&babsrc=adbartrp&mntrId=601403380000000000000019dbafbaf1&q=
FF - user.js: extensions.BabylonToolbar_i.babTrack - affID=109993
FF - user.js: extensions.BabylonToolbar_i.babExt -
FF - user.js: extensions.BabylonToolbar_i.srcExt - ss
FF - user.js: extensions.BabylonToolbar_i.id - 601403380000000000000019dbafbaf1
FF - user.js: extensions.BabylonToolbar_i.hardId - 601403380000000000000019dbafbaf1
FF - user.js: extensions.BabylonToolbar_i.instlDay - 15405
FF - user.js: extensions.BabylonToolbar_i.vrsn - 1.5.3.17
FF - user.js: extensions.BabylonToolbar_i.vrsni - 1.5.3.17
FF - user.js: extensions.BabylonToolbar_i.vrsnTs - 1.5.3.1722:20
FF - user.js: extensions.BabylonToolbar_i.prtnrId - babylon
FF - user.js: extensions.BabylonToolbar_i.prdct - BabylonToolbar
FF - user.js: extensions.BabylonToolbar_i.aflt - babsst
FF - user.js: extensions.BabylonToolbar_i.smplGrp - none
FF - user.js: extensions.BabylonToolbar_i.tlbrId - tb9
FF - user.js: extensions.BabylonToolbar_i.instlRef - sst
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-03-22 18:33
Windows 6.0.6002 Service Pack 2 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet010\Services\Akamai]
"ServiceDll"="c:\program files\common files\akamai/netsession_win_7de0ed9.dll"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.htm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.shtml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xht\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xhtml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
Celkový čas: 2012-03-22 18:35:57
ComboFix-quarantined-files.txt 2012-03-22 17:35
ComboFix2.txt 2012-03-21 23:07
ComboFix3.txt 2012-03-16 11:17
ComboFix4.txt 2012-03-14 19:17
ComboFix5.txt 2012-03-22 17:18
.
Před spuštěním: Volných bajtů: 113 780 084 736
Po spuštění: Volných bajtů: 113 744 400 384
.
- - End Of File - - 7F46A650999622D387CF21A3E9C12E88
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119515
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Kontrola LOGU

#8 Příspěvek od Rudy »

CF budete muset spustit ještě jednou. Název profilu má v sobě diakritiku, kterou CF není schopen načíst. Zkuste ComboFix.exe i CFScript.txt uložit na kořenový adresář C:\ a provést přesun souboru v průzkumníku Win. CF se sice spustil, ale nemazal.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Dante
Návštěvník
Návštěvník
Příspěvky: 7
Registrován: 09 bře 2012 14:00

Re: Kontrola LOGU

#9 Příspěvek od Dante »

ComboFix 12-03-21.02 - Jonáš 22.03.2012 19:12:12.8.2 - x86
Spuštěný z: c:\combofix\ComboFix.exe
Použité ovládací přepínače :: c:\combofix\CFScript.txt
* Vytvořen nový Bod Obnovení
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2012-02-22 do 2012-03-22 )))))))))))))))))))))))))))))))
.
.
2012-03-22 18:22 . 2012-03-22 18:23 -------- d-----w- c:\users\Jonáš\AppData\Local\temp
2012-03-22 18:22 . 2012-03-22 18:22 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-03-19 05:54 . 2012-03-19 05:54 592824 ----a-w- c:\program files\Mozilla Firefox\gkmedias.dll
2012-03-19 05:54 . 2012-03-19 05:54 44472 ----a-w- c:\program files\Mozilla Firefox\mozglue.dll
2012-03-14 22:09 . 2007-01-16 02:39 1191936 ----a-w- c:\windows\RtlUpd.exe
2012-03-14 22:09 . 2006-12-13 02:30 339968 ----a-w- c:\windows\system32\SRSTSXT.dll
2012-03-14 22:09 . 2006-11-29 10:47 135168 ----a-w- c:\windows\system32\SRSWOW.dll
2012-03-14 22:09 . 2007-02-06 06:55 494080 ----a-w- c:\windows\system32\RtkPgExt.dll
2012-03-14 22:09 . 2007-02-06 10:29 1840640 ----a-w- c:\windows\system32\RtkAPO.dll
2012-03-14 22:09 . 2007-01-25 10:22 17920 ----a-w- c:\windows\system32\RtkCoInst.dll
2012-03-14 22:09 . 2007-02-07 05:53 4374528 ----a-w- c:\windows\RtHDVCpl.exe
2012-03-14 22:09 . 2007-02-07 08:33 1738656 ----a-w- c:\windows\system32\drivers\RTKVHDA.sys
2012-03-14 22:09 . 2007-01-29 07:34 532480 ----a-w- c:\windows\system32\RTSndMgr.cpl
2012-03-14 22:09 . 2012-03-14 22:09 319488 ----a-w- c:\windows\HideWin.exe
2012-03-14 21:20 . 2012-03-14 21:22 -------- d-----w- c:\users\Jonáš\AppData\Roaming\Creative
2012-03-14 21:17 . 2003-06-12 22:25 7062 ----a-w- c:\windows\system32\audiopid.vxd
2012-03-14 21:17 . 2000-05-22 08:58 647872 ------w- c:\windows\system32\Mscomct2.ocx
2012-03-12 14:47 . 2012-03-12 14:47 -------- d-----w- c:\program files\CrystalDiskInfo
2012-03-11 13:35 . 2011-10-18 14:57 58264 ----a-w- c:\windows\system32\TepeqAPO.dll
2012-03-11 13:35 . 2011-11-18 15:40 191080 ----a-w- c:\windows\system32\SFSS_APO.dll
2012-03-11 13:35 . 2011-09-02 13:21 214368 ----a-w- c:\windows\system32\SFNHK.dll
2012-03-11 13:35 . 2011-09-02 13:21 68960 ----a-w- c:\windows\system32\SFAPO.dll
2012-03-11 13:35 . 2011-09-02 13:21 74080 ----a-w- c:\windows\system32\SFCOM.dll
2012-03-11 13:34 . 2011-12-12 16:20 83560 ----a-w- c:\windows\system32\RtkCoInstII.dll
2012-03-11 13:34 . 2011-12-08 16:28 1378920 ----a-w- c:\windows\system32\RtkApoApi.dll
2012-03-11 13:34 . 2011-11-22 15:28 13416 ----a-w- c:\windows\system32\RtkCoLDR.dll
2012-03-11 13:34 . 2011-12-13 15:25 200468 ----a-w- c:\windows\system32\drivers\RTAIODAT.DAT
2012-03-11 13:34 . 2011-12-09 15:42 2684416 ----a-w- c:\windows\system32\RCoRes.dat
2012-03-11 13:34 . 2010-11-29 13:36 587096 ----a-w- c:\windows\system32\MaxxAudioRealtek2.dll
2012-03-10 12:39 . 2012-03-16 11:40 -------- d-----w- C:\TEMP
2012-03-08 13:04 . 2012-03-08 13:04 -------- d-----w- c:\users\Jonáš\AppData\Roaming\Malwarebytes
2012-03-08 13:04 . 2012-03-08 13:04 -------- d-----w- c:\programdata\Malwarebytes
2012-03-08 13:04 . 2012-03-08 15:59 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2012-03-07 07:39 . 2012-03-21 19:36 -------- d-----w- c:\program files\trend micro
2012-03-07 07:39 . 2012-03-07 07:40 -------- d-----w- C:\rsit
2012-03-06 21:47 . 2012-03-06 21:47 -------- d-----w- c:\program files\ESET
2012-03-06 21:30 . 2012-03-14 22:09 -------- d-----w- c:\windows\system32\RTCOM
2012-03-06 21:21 . 2012-03-06 21:21 237 ----a-w- C:\user.js
2012-03-06 21:21 . 2012-03-06 21:21 -------- d-----w- c:\program files\BabylonToolbar
2012-03-06 21:20 . 2012-03-06 21:20 -------- d-----w- c:\users\Jonáš\AppData\Local\Babylon
2012-03-06 21:20 . 2012-03-06 21:20 -------- d-----w- c:\programdata\Babylon
2012-03-06 21:20 . 2012-03-06 21:20 -------- d-----w- c:\users\Jonáš\AppData\Roaming\Babylon
2012-03-05 21:01 . 2012-03-14 20:53 -------- d--h--w- c:\program files\Temp
2012-03-05 17:28 . 2012-03-05 17:28 -------- d-----w- c:\programdata\Nexon
2012-03-05 16:22 . 2012-03-05 19:26 -------- d-----w- c:\program files\BandiMPEG1
2012-03-05 16:11 . 2012-03-06 18:58 -------- d-----w- C:\Nexon
2012-03-02 07:07 . 2012-02-08 06:03 6552120 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{DE4B8568-0CF6-4163-96AE-9B1AC36AFA13}\mpengine.dll
2012-03-01 07:42 . 2012-03-01 07:42 -------- d-----w- c:\program files\LogMeIn Hamachi
2012-02-29 21:03 . 2012-03-04 10:36 -------- d-----w- c:\program files\MatroskaProp
2012-02-29 21:02 . 2012-03-04 12:46 -------- d-----w- c:\program files\Matroska Pack
2012-02-27 07:16 . 2012-02-27 07:18 -------- d-----w- c:\program files\Google
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-03-14 22:09 . 2010-10-13 07:55 319456 ----a-w- c:\windows\DIFxAPI.dll
2012-03-07 00:15 . 2010-10-14 13:49 41184 ----a-w- c:\windows\avastSS.scr
2012-03-07 00:15 . 2010-10-14 13:49 201352 ----a-w- c:\windows\system32\aswBoot.exe
2012-03-07 00:03 . 2011-04-25 07:45 612184 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2012-03-07 00:03 . 2010-10-14 13:50 337880 ----a-w- c:\windows\system32\drivers\aswSP.sys
2012-03-07 00:02 . 2010-10-14 13:50 35672 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2012-03-07 00:01 . 2010-10-14 13:50 53848 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2012-03-07 00:01 . 2010-10-14 13:50 57688 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2012-03-07 00:01 . 2010-10-14 13:50 20696 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2012-02-29 06:00 . 2011-06-14 13:14 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-02-26 20:44 . 2011-10-24 16:54 138264 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2012-02-26 20:43 . 2011-10-24 17:02 234768 ----a-w- c:\windows\system32\PnkBstrB.xtr
2012-02-26 20:43 . 2011-10-24 16:53 234768 ----a-w- c:\windows\system32\PnkBstrB.exe
2012-02-26 13:21 . 2011-10-24 16:54 138056 ----a-w- c:\users\Jonáš\AppData\Roaming\PnkBstrK.sys
2012-02-26 13:21 . 2011-10-24 16:54 138056 ----a-w- c:\users\Jonáš\AppData\Roaming\PnkBstrK.sys
2012-02-26 13:20 . 2011-10-24 16:53 75136 ----a-w- c:\windows\system32\PnkBstrA.exe
2012-01-29 04:10 . 2010-10-13 10:57 237072 ------w- c:\windows\system32\MpSigStub.exe
2012-01-12 19:52 . 2012-02-15 06:22 2044416 ----a-w- c:\windows\system32\win32k.sys
2010-12-12 18:25 . 2010-12-12 18:24 746343330 ---ha-w- c:\program files\S4League.exe.part
2012-03-19 05:54 . 2011-05-08 09:44 97208 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2012-03-07 00:15 123536 ----a-w- c:\program files\Alwil Software\Avast5\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Center Agent"="c:\program files\KWorld Multimedia\HyperMediaCenter\DTVR\Scheduled.exe" [2007-01-19 864768]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-19 125952]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe" [2007-01-15 147456]
"Akamai NetSession Interface"="c:\users\Jonáš\AppData\Local\Akamai\netsession_win.exe" [2012-02-02 3329824]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2011-10-13 17351304]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2007-02-26 138008]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2007-02-26 154392]
"Persistence"="c:\windows\system32\igfxpers.exe" [2007-02-26 133912]
"LogitechCommunicationsManager"="c:\program files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe" [2007-03-06 488984]
"LogitechQuickCamRibbon"="c:\program files\Labtec\WebCam10\WebCam10.exe" [2007-03-06 1060376]
"AdobeAAMUpdater-1.0"="c:\program files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2010-12-23 500208]
"NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2006-01-12 155648]
"QuickTime Task"="c:\program files\QuickTime Alternative\QTTask.exe" [2010-11-29 421888]
"DivXUpdate"="c:\program files\DivX\DivX Update\DivXUpdate.exe" [2011-03-21 1230704]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696]
"LogMeIn Hamachi Ui"="c:\program files\LogMeIn Hamachi\hamachi-2-ui.exe" [2012-02-28 1987976]
"P17RunE"="P17RunE.dll" [2007-04-09 14848]
"RtHDVCpl"="RtHDVCpl.exe" [2007-02-07 4374528]
.
c:\users\Jonáš\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
PowerReg Scheduler.exe [2011-1-2 256000]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Remote Control.lnk - c:\program files\KWorld Multimedia\TV Tuner Card Utilities\HMCP3XCtl.exe [2010-10-13 77824]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
.
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-01-03 63928]
S3 3xHybrid;3xHybrid service;c:\windows\system32\DRIVERS\3xHybrid.sys [2007-01-18 670592]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
Akamai REG_MULTI_SZ Akamai
.
Obsah adresáře 'Naplánované úlohy'
.
2012-03-22 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-02-27 07:16]
.
2012-03-22 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-02-27 07:16]
.
.
------- Doplňkový sken -------
.
uStart Page = hxxp://www.seznam.cz/
uInternet Settings,ProxyOverride = *.local;127.0.0.1:9421;
TCP: DhcpNameServer = 192.168.2.1
DPF: {E705A591-DA3C-4228-B0D5-A356DBA42FBF} - hxxp://ccfiles.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab
FF - ProfilePath - c:\users\Jonáš\AppData\Roaming\Mozilla\Firefox\Profiles\rtf53o6i.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.google.cz/
FF - prefs.js: keyword.URL - hxxp://search.babylon.com/?AF=109993&babsrc=adbartrp&mntrId=601403380000000000000019dbafbaf1&q=
FF - user.js: extensions.BabylonToolbar_i.babTrack - affID=109993
FF - user.js: extensions.BabylonToolbar_i.babExt -
FF - user.js: extensions.BabylonToolbar_i.srcExt - ss
FF - user.js: extensions.BabylonToolbar_i.id - 601403380000000000000019dbafbaf1
FF - user.js: extensions.BabylonToolbar_i.hardId - 601403380000000000000019dbafbaf1
FF - user.js: extensions.BabylonToolbar_i.instlDay - 15405
FF - user.js: extensions.BabylonToolbar_i.vrsn - 1.5.3.17
FF - user.js: extensions.BabylonToolbar_i.vrsni - 1.5.3.17
FF - user.js: extensions.BabylonToolbar_i.vrsnTs - 1.5.3.1722:20
FF - user.js: extensions.BabylonToolbar_i.prtnrId - babylon
FF - user.js: extensions.BabylonToolbar_i.prdct - BabylonToolbar
FF - user.js: extensions.BabylonToolbar_i.aflt - babsst
FF - user.js: extensions.BabylonToolbar_i.smplGrp - none
FF - user.js: extensions.BabylonToolbar_i.tlbrId - tb9
FF - user.js: extensions.BabylonToolbar_i.instlRef - sst
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-03-22 19:23
Windows 6.0.6002 Service Pack 2 NTFS
.
skenování skrytých procesů ...
.
skenování skrytých položek 'Po spuštění' ...
.
skenování skrytých souborů ...
.
sken byl úspešně dokončen
skryté soubory: 0
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet010\Services\Akamai]
"ServiceDll"="c:\program files\common files\akamai/netsession_win_7de0ed9.dll"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.htm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.shtml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xht\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xhtml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
Celkový čas: 2012-03-22 19:26:04
ComboFix-quarantined-files.txt 2012-03-22 18:26
ComboFix2.txt 2012-03-22 17:35
ComboFix3.txt 2012-03-21 23:07
ComboFix4.txt 2012-03-16 11:17
ComboFix5.txt 2012-03-22 18:10
.
Před spuštěním: Volných bajtů: 113 896 501 248
Po spuštění: Volných bajtů: 113 861 558 272
.
- - End Of File - - 37A0BE151B1827FB8D323AC03E3F9D62
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119515
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Kontrola LOGU

#10 Příspěvek od Rudy »

OK. Nastala nějaká změna?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Dante
Návštěvník
Návštěvník
Příspěvky: 7
Registrován: 09 bře 2012 14:00

Re: Kontrola LOGU

#11 Příspěvek od Dante »

dobrý večer, změna žádná, zvuk pořád nejde, v pravém dolním rohu pro rychlé spuštění je ikonka s křížkem a nápisem "STAV PŘIPOJENÍ NEZNÁMÝ - TŘÍDA NENÍ ZAREGISTROVÁNAů, dále výstražná ikona s nápisem "VÝSTRAHY ZAPEZPEČENÍ WINDOWS -NENÍ ZABEZPEČENO PROTI MALWARE". Jinak PC kromě těchto chyb,jak jsem popsal se zdá, že pracuje dobře, i s připojením na net...
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119515
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Kontrola LOGU

#12 Příspěvek od Rudy »

Pak nezbude, než oprava systému z instal.média.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Dante
Návštěvník
Návštěvník
Příspěvky: 7
Registrován: 09 bře 2012 14:00

Re: Kontrola LOGU

#13 Příspěvek od Dante »

prosím,mohl by jste mi napsat postup při reinstalaci operačního systému. Pokusil bych se to celé přeinstalovat sám z orig. disku.
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119515
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Kontrola LOGU

#14 Příspěvek od Rudy »

Nabootujete z instal. média a budete se řídit pokyny na obrazovce. Tam najdete veškeré pokyny. Měla by tam být rovněž možnost opravy systému.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Odpovědět

Zpět na „Řešení problémů, logy“